0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(r0, 0xa, &(0x7f00000002c0)) [ 62.972658][ T5872] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 62.975844][ T5891] FAULT_INJECTION: forcing a failure. [ 62.975844][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.980641][ T5872] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 63.001783][ T5891] CPU: 0 PID: 5891 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 63.010553][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.020664][ T5891] Call Trace: [ 63.023931][ T5891] dump_stack_lvl+0xd6/0x122 [ 63.028568][ T5891] dump_stack+0x11/0x1b [ 63.032728][ T5891] should_fail+0x23c/0x250 [ 63.037147][ T5891] should_fail_usercopy+0x16/0x20 [ 63.042163][ T5891] _copy_to_user+0x1c/0x90 [ 63.046639][ T5891] io_uring_create+0x1859/0x1bb0 [ 63.051562][ T5891] __x64_sys_io_uring_setup+0xf3/0x130 [ 63.057060][ T5891] do_syscall_64+0x44/0xa0 [ 63.061464][ T5891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.067346][ T5891] RIP: 0033:0x7f6e743e68d9 [ 63.071789][ T5891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.091504][ T5891] RSP: 002b:00007f6e7213d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 63.099899][ T5891] RAX: ffffffffffffffda RBX: 00007f6e744eb020 RCX: 00007f6e743e68d9 [ 63.107943][ T5891] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 63.116154][ T5891] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 07:41:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 9) [ 63.124105][ T5891] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 63.132073][ T5891] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 63.145105][ T22] audit: type=1326 audit(1633160508.326:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.182776][ T22] audit: type=1326 audit(1633160508.356:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.197522][ T5919] FAULT_INJECTION: forcing a failure. [ 63.197522][ T5919] name failslab, interval 1, probability 0, space 0, times 0 [ 63.207644][ T22] audit: type=1326 audit(1633160508.356:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.219751][ T5919] CPU: 1 PID: 5919 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 63.245442][ T22] audit: type=1326 audit(1633160508.356:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.252659][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.252671][ T5919] Call Trace: [ 63.252678][ T5919] dump_stack_lvl+0xd6/0x122 [ 63.278179][ T22] audit: type=1326 audit(1633160508.356:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.286991][ T5919] dump_stack+0x11/0x1b [ 63.287026][ T5919] should_fail+0x23c/0x250 [ 63.291118][ T22] audit: type=1326 audit(1633160508.356:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.294849][ T5919] ? kzalloc+0x30/0x30 [ 63.294871][ T5919] __should_failslab+0x81/0x90 [ 63.294889][ T5919] ? percpu_ref_init+0x96/0x250 [ 63.320172][ T22] audit: type=1326 audit(1633160508.356:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.323290][ T5919] should_failslab+0x5/0x20 [ 63.323315][ T5919] kmem_cache_alloc_trace+0x52/0x320 [ 63.328527][ T22] audit: type=1326 audit(1633160508.356:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5906 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.351986][ T5919] ? kzalloc+0x30/0x30 [ 63.352012][ T5919] percpu_ref_init+0x96/0x250 [ 63.367461][ T22] audit: type=1326 audit(1633160508.356:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5915 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.389929][ T5919] io_uring_create+0x16c8/0x1bb0 [ 63.389976][ T5919] __x64_sys_io_uring_setup+0xf3/0x130 [ 63.397251][ T22] audit: type=1326 audit(1633160508.356:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5915 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 63.399721][ T5919] do_syscall_64+0x44/0xa0 [ 63.496383][ T5919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.502326][ T5919] RIP: 0033:0x7f7506b248d9 [ 63.506853][ T5919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:41:48 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 11) 07:41:48 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r2}]) 07:41:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 10) 07:41:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 63.526488][ T5919] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 63.534910][ T5919] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 63.542940][ T5919] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 63.550977][ T5919] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 63.558932][ T5919] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 63.566880][ T5919] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 63.625501][ T5934] FAULT_INJECTION: forcing a failure. [ 63.625501][ T5934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.629438][ T5936] FAULT_INJECTION: forcing a failure. [ 63.629438][ T5936] name failslab, interval 1, probability 0, space 0, times 0 [ 63.638592][ T5934] CPU: 0 PID: 5934 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 63.638614][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.638624][ T5934] Call Trace: [ 63.673129][ T5934] dump_stack_lvl+0xd6/0x122 [ 63.677711][ T5934] dump_stack+0x11/0x1b [ 63.681847][ T5934] should_fail+0x23c/0x250 [ 63.686248][ T5934] should_fail_usercopy+0x16/0x20 [ 63.691319][ T5934] _copy_to_user+0x1c/0x90 [ 63.695718][ T5934] io_uring_create+0x1859/0x1bb0 [ 63.700646][ T5934] __x64_sys_io_uring_setup+0xf3/0x130 [ 63.706090][ T5934] do_syscall_64+0x44/0xa0 [ 63.710492][ T5934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.716422][ T5934] RIP: 0033:0x7f7506b248d9 [ 63.720821][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.740491][ T5934] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 63.748883][ T5934] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 63.756834][ T5934] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 63.764788][ T5934] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 63.772739][ T5934] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 63.780694][ T5934] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 63.788745][ T5936] CPU: 1 PID: 5936 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 63.797538][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.807631][ T5936] Call Trace: [ 63.810892][ T5936] dump_stack_lvl+0xd6/0x122 [ 63.815529][ T5936] dump_stack+0x11/0x1b [ 63.819685][ T5936] should_fail+0x23c/0x250 07:41:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000000c0)=0xc, 0x4) bind$inet6(r1, &(0x7f0000000500)={0xa, 0xe22, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) rmdir(&(0x7f0000000180)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') [ 63.824101][ T5936] ? sock_alloc_inode+0x23/0x90 [ 63.828964][ T5936] __should_failslab+0x81/0x90 [ 63.833732][ T5936] ? sockfs_init_fs_context+0x70/0x70 [ 63.839329][ T5936] should_failslab+0x5/0x20 [ 63.843834][ T5936] kmem_cache_alloc+0x4f/0x300 [ 63.848638][ T5936] ? sockfs_init_fs_context+0x70/0x70 [ 63.854078][ T5936] sock_alloc_inode+0x23/0x90 [ 63.859018][ T5936] ? sockfs_init_fs_context+0x70/0x70 [ 63.864439][ T5936] new_inode_pseudo+0x38/0x1c0 [ 63.869207][ T5936] __sock_create+0x122/0x4e0 07:41:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendfile(r1, r0, &(0x7f0000000000)=0x7, 0xff) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 63.873797][ T5936] ? should_fail+0xd6/0x250 [ 63.878374][ T5936] sock_create_kern+0x34/0x40 [ 63.883051][ T5936] io_uring_create+0x18a2/0x1bb0 [ 63.888103][ T5936] __x64_sys_io_uring_setup+0xf3/0x130 [ 63.893619][ T5936] do_syscall_64+0x44/0xa0 [ 63.898117][ T5936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.904027][ T5936] RIP: 0033:0x7f6e743e68d9 [ 63.908498][ T5936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.928122][ T5936] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 63.936576][ T5936] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 63.944526][ T5936] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 63.952634][ T5936] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 63.960782][ T5936] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 63.968753][ T5936] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:49 executing program 4: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000000c0), 0x6e, &(0x7f0000001300)=[{&(0x7f0000000140)=""/19, 0x13}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/46, 0x2e}, {&(0x7f0000001200)=""/204, 0xcc}], 0x4, &(0x7f0000001340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x2000) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000001480)='./file0\x00') fchdir(0xffffffffffffffff) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:49 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 11) [ 63.976823][ T5936] socket: no more sockets 07:41:49 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 64.019349][ T5957] FAULT_INJECTION: forcing a failure. [ 64.019349][ T5957] name failslab, interval 1, probability 0, space 0, times 0 [ 64.032088][ T5957] CPU: 1 PID: 5957 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 64.040769][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.050825][ T5957] Call Trace: [ 64.054160][ T5957] dump_stack_lvl+0xd6/0x122 [ 64.058925][ T5957] dump_stack+0x11/0x1b [ 64.063084][ T5957] should_fail+0x23c/0x250 [ 64.067575][ T5957] ? sock_alloc_inode+0x23/0x90 [ 64.072480][ T5957] __should_failslab+0x81/0x90 [ 64.077242][ T5957] ? sockfs_init_fs_context+0x70/0x70 [ 64.082636][ T5957] should_failslab+0x5/0x20 [ 64.087157][ T5957] kmem_cache_alloc+0x4f/0x300 [ 64.091926][ T5957] ? sockfs_init_fs_context+0x70/0x70 [ 64.097304][ T5957] sock_alloc_inode+0x23/0x90 [ 64.102079][ T5957] ? sockfs_init_fs_context+0x70/0x70 [ 64.107458][ T5957] new_inode_pseudo+0x38/0x1c0 [ 64.112287][ T5957] __sock_create+0x122/0x4e0 [ 64.116883][ T5957] ? should_fail+0xd6/0x250 [ 64.121389][ T5957] sock_create_kern+0x34/0x40 [ 64.126073][ T5957] io_uring_create+0x18a2/0x1bb0 [ 64.131028][ T5957] __x64_sys_io_uring_setup+0xf3/0x130 [ 64.136526][ T5957] do_syscall_64+0x44/0xa0 [ 64.140944][ T5957] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.146902][ T5957] RIP: 0033:0x7f7506b248d9 [ 64.151323][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 64.170922][ T5957] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 64.179314][ T5957] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 64.187264][ T5957] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 64.195216][ T5957] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 64.203173][ T5957] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 64.211228][ T5957] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 64.219236][ T5957] socket: no more sockets 07:41:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @remote, 0x80}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 07:41:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1e0, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e0}}, 0x80) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000400)={0x0, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r1) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:51 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 12) 07:41:51 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r2}]) 07:41:51 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 12) 07:41:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "2156816c73038c"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006cf000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0xea37000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000240)={0x0, 0x2, 'client0\x00', 0x7, "580a10da6ecde8b8", "ce2a652e9be6de9e65fa4176426b5f6606e5b59df627bed476be2ff9099cfe15"}) fremovexattr(0xffffffffffffffff, &(0x7f0000003840)=ANY=[@ANYBLOB="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"]) r20 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r20, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r6}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r10}], 0x0, "2156816c73038c"}) r24 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r24, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r24, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {r3}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {r14}], 0x1, "2156816c73038c"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:41:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'fdinfo\x00'}, {0x20, 'fdinfo\x00'}, {0x20, 'fdinfo\x00'}, {}, {0x20, 'fdinfo\x00'}, {0x20, 'fdinfo\x00'}, {}], 0xa, "ef5c9d1bbf"}, 0x3a) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 66.045134][ T5976] FAULT_INJECTION: forcing a failure. [ 66.045134][ T5976] name failslab, interval 1, probability 0, space 0, times 0 [ 66.057778][ T5976] CPU: 1 PID: 5976 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 66.066524][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.076669][ T5976] Call Trace: [ 66.079951][ T5976] dump_stack_lvl+0xd6/0x122 [ 66.084545][ T5976] dump_stack+0x11/0x1b [ 66.088748][ T5976] should_fail+0x23c/0x250 [ 66.093191][ T5976] ? security_inode_alloc+0x30/0x180 [ 66.098507][ T5976] __should_failslab+0x81/0x90 [ 66.098990][ C0] sd 0:0:1:0: tag#232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 66.103359][ T5976] should_failslab+0x5/0x20 [ 66.103383][ T5976] kmem_cache_alloc+0x4f/0x300 [ 66.113569][ C0] sd 0:0:1:0: tag#232 CDB: opcode=0xe5 (vendor) [ 66.118022][ T5976] security_inode_alloc+0x30/0x180 [ 66.122801][ C0] sd 0:0:1:0: tag#232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 66.129003][ T5976] inode_init_always+0x20b/0x430 [ 66.134113][ C0] sd 0:0:1:0: tag#232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 66.143002][ T5976] ? sockfs_init_fs_context+0x70/0x70 [ 66.147932][ C0] sd 0:0:1:0: tag#232 CDB[20]: ba [ 66.156838][ T5976] new_inode_pseudo+0x73/0x1c0 [ 66.172094][ T5976] __sock_create+0x122/0x4e0 [ 66.176728][ T5976] ? should_fail+0xd6/0x250 [ 66.179790][ T5990] FAULT_INJECTION: forcing a failure. [ 66.179790][ T5990] name failslab, interval 1, probability 0, space 0, times 0 [ 66.181298][ T5976] sock_create_kern+0x34/0x40 [ 66.181324][ T5976] io_uring_create+0x18a2/0x1bb0 [ 66.203511][ T5976] __x64_sys_io_uring_setup+0xf3/0x130 [ 66.208966][ T5976] do_syscall_64+0x44/0xa0 [ 66.213369][ T5976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.219447][ T5976] RIP: 0033:0x7f6e743e68d9 [ 66.223843][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.243630][ T5976] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 66.252036][ T5976] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 66.260081][ T5976] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 66.268037][ T5976] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 66.275991][ T5976] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 66.284178][ T5976] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 66.292316][ T5990] CPU: 0 PID: 5990 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 66.292368][ T5976] socket: no more sockets [ 66.300985][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.300996][ T5990] Call Trace: [ 66.301002][ T5990] dump_stack_lvl+0xd6/0x122 [ 66.323267][ T5990] dump_stack+0x11/0x1b [ 66.327428][ T5990] should_fail+0x23c/0x250 [ 66.331847][ T5990] ? security_inode_alloc+0x30/0x180 [ 66.337213][ T5990] __should_failslab+0x81/0x90 [ 66.342043][ T5990] should_failslab+0x5/0x20 [ 66.346555][ T5990] kmem_cache_alloc+0x4f/0x300 [ 66.351324][ T5990] security_inode_alloc+0x30/0x180 [ 66.356456][ T5990] inode_init_always+0x20b/0x430 [ 66.361404][ T5990] ? sockfs_init_fs_context+0x70/0x70 [ 66.366860][ T5990] new_inode_pseudo+0x73/0x1c0 [ 66.371641][ T5990] __sock_create+0x122/0x4e0 [ 66.376266][ T5990] ? should_fail+0xd6/0x250 [ 66.380776][ T5990] sock_create_kern+0x34/0x40 [ 66.385512][ T5990] io_uring_create+0x18a2/0x1bb0 [ 66.390454][ T5990] __x64_sys_io_uring_setup+0xf3/0x130 07:41:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001a40)={&(0x7f0000000000), 0xc, &(0x7f0000001a00)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0xfffffffffffffedc}]}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r5, @ANYRESDEC=r4], 0x58}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40400500}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8cbf, 0x78}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x1) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 66.391842][ T5998] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 66.395918][ T5990] do_syscall_64+0x44/0xa0 [ 66.395945][ T5990] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.395968][ T5990] RIP: 0033:0x7f7506b248d9 [ 66.395982][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.438366][ T5990] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:41:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 66.446771][ T5990] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 [ 66.454823][ T5990] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 66.462838][ T5990] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 66.470808][ T5990] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 66.478778][ T5990] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 66.486844][ T5990] socket: no more sockets 07:41:51 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 13) [ 66.508640][ T6011] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.519573][ T6011] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 66.534998][ C0] sd 0:0:1:0: tag#248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 66.543233][ T6011] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 07:41:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000040)='./file0\x00') 07:41:51 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 13) [ 66.544851][ C0] sd 0:0:1:0: tag#248 CDB: opcode=0xe5 (vendor) [ 66.544868][ C0] sd 0:0:1:0: tag#248 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 66.569409][ C0] sd 0:0:1:0: tag#248 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 66.578373][ C0] sd 0:0:1:0: tag#248 CDB[20]: ba 07:41:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:51 executing program 2: io_setup(0x3, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r1}]) [ 66.602212][ T6020] FAULT_INJECTION: forcing a failure. [ 66.602212][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 66.615358][ T6020] CPU: 1 PID: 6020 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 66.624225][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.634334][ T6020] Call Trace: [ 66.637611][ T6020] dump_stack_lvl+0xd6/0x122 [ 66.642221][ T6020] dump_stack+0x11/0x1b [ 66.646472][ T6020] should_fail+0x23c/0x250 07:41:51 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x84000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x280300, 0x0) sendto$inet(r2, &(0x7f0000000200)="80aee9ef1916647576e7fd8915cbb9186dd84e9042cf92d0bca5bf9f4c467bc44e524c300fcc3f1c7eb021d2069e30004f744d5c93528096a8de57aa8f18e9f68d97321f67e1401770a3e6e574872f1aee10dfad90f45d00759b844d4cbfcdb5ee622bd1588970b593e608a12673266ce5881d0189b541867ffba278aa0734162ba01a3313668b9fd9c7465602df1f756b4c865125f6d84f4bc85ce44ae988fbfb6642953431a7c4e1e41bf2d5d87f18478e4d", 0xb3, 0x800, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="84679d114ee128ccff9564", 0xb, 0x4000010, 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x4) signalfd(r1, &(0x7f0000000140)={[0x1b]}, 0x8) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) openat(0xffffffffffffffff, 0x0, 0x0, 0x56) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x12, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0xfffffffffffffe7e) socket$inet(0x2, 0x5, 0xffffffff) [ 66.650916][ T6020] ? sk_prot_alloc+0x41/0x190 [ 66.655594][ T6020] __should_failslab+0x81/0x90 [ 66.660459][ T6020] should_failslab+0x5/0x20 [ 66.664962][ T6020] kmem_cache_alloc+0x4f/0x300 [ 66.669739][ T6020] sk_prot_alloc+0x41/0x190 [ 66.674254][ T6020] sk_alloc+0x2e/0x220 [ 66.678373][ T6020] unix_create1+0xa2/0x3f0 [ 66.682874][ T6020] unix_create+0xfb/0x120 [ 66.687200][ T6020] __sock_create+0x2c7/0x4e0 [ 66.691793][ T6020] sock_create_kern+0x34/0x40 [ 66.696493][ T6020] io_uring_create+0x18a2/0x1bb0 07:41:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') [ 66.701464][ T6020] __x64_sys_io_uring_setup+0xf3/0x130 [ 66.706925][ T6020] do_syscall_64+0x44/0xa0 [ 66.711458][ T6020] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.717393][ T6020] RIP: 0033:0x7f6e743e68d9 [ 66.721803][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.741555][ T6020] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:41:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) socket(0x26, 0x800, 0xc758) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d0a0b49ff708800008003281202020100fec0ffff1100000036ede498534108e58342fa94a235a2a441f9", 0xfcae) 07:41:51 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0xf0ffffff2f0000, 0x2}) fchdir(r0) accept4(r0, 0x0, &(0x7f0000000200), 0x80800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendto(r0, &(0x7f0000000080)="33d15d5a5643705ac0b5e92f08ac974ffdaaddf9c70b66eb73517742b97cb338ec1b4e42d20ce94d115da37f6b993a70361b32d2f3e2d0d1b31cc56bdcd3786464b561bca0331cf0e0cd336bda3835de6c314f9a0c1c17f96131b831990aa9bc6d81d4cc5dbd0eef53f7f5a046252b13c548268d3ecbb6899e970bd3dd77d5dedf4ce0242babe43cd9f1", 0x8a, 0xe0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0x6a, @loopback, 0x6}}}, 0x80) [ 66.749969][ T6020] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 66.757942][ T6020] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 66.765941][ T6020] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 66.773934][ T6020] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 66.781908][ T6020] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 66.792044][ T6037] FAULT_INJECTION: forcing a failure. [ 66.792044][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 66.801447][ T6052] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 66.804684][ T6037] CPU: 1 PID: 6037 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 66.804705][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.804715][ T6037] Call Trace: [ 66.804721][ T6037] dump_stack_lvl+0xd6/0x122 [ 66.812889][ T6052] netlink: 2562 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.821541][ T6037] dump_stack+0x11/0x1b 07:41:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x96) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 07:41:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x40c0, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000040)) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x0, 0xffffffea, 0x1f}) unshare(0x4000900) [ 66.821582][ T6037] should_fail+0x23c/0x250 [ 66.857437][ T6037] ? sk_prot_alloc+0x41/0x190 [ 66.862113][ T6037] __should_failslab+0x81/0x90 [ 66.866941][ T6037] should_failslab+0x5/0x20 [ 66.871444][ T6037] kmem_cache_alloc+0x4f/0x300 [ 66.876209][ T6037] sk_prot_alloc+0x41/0x190 [ 66.880714][ T6037] sk_alloc+0x2e/0x220 [ 66.884784][ T6037] unix_create1+0xa2/0x3f0 [ 66.889278][ T6037] unix_create+0xfb/0x120 [ 66.893637][ T6037] __sock_create+0x2c7/0x4e0 [ 66.898231][ T6037] sock_create_kern+0x34/0x40 07:41:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x80000, &(0x7f00000000c0)='fdinfo\x00') [ 66.902978][ T6037] io_uring_create+0x18a2/0x1bb0 [ 66.907967][ T6037] __x64_sys_io_uring_setup+0xf3/0x130 [ 66.913432][ T6037] do_syscall_64+0x44/0xa0 [ 66.917857][ T6037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.923867][ T6037] RIP: 0033:0x7f7506b248d9 [ 66.928285][ T6037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:41:52 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 14) 07:41:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') fchdir(r0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x24000, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') [ 66.947893][ T6037] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 66.956364][ T6037] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 [ 66.964337][ T6037] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 66.972307][ T6037] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 66.980276][ T6037] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 66.988233][ T6037] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 14) 07:41:52 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 67.044462][ T6082] FAULT_INJECTION: forcing a failure. [ 67.044462][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 67.057166][ T6082] CPU: 1 PID: 6082 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 67.065936][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.075990][ T6082] Call Trace: [ 67.079253][ T6082] dump_stack_lvl+0xd6/0x122 [ 67.083832][ T6082] dump_stack+0x11/0x1b [ 67.087990][ T6082] should_fail+0x23c/0x250 [ 67.092409][ T6082] __should_failslab+0x81/0x90 [ 67.097158][ T6082] ? selinux_sk_alloc_security+0x61/0x120 [ 67.102874][ T6082] should_failslab+0x5/0x20 [ 67.107405][ T6082] kmem_cache_alloc_trace+0x52/0x320 [ 67.112671][ T6082] ? should_fail+0xd6/0x250 [ 67.117156][ T6082] selinux_sk_alloc_security+0x61/0x120 [ 67.122703][ T6082] security_sk_alloc+0x45/0x90 [ 67.127448][ T6082] sk_prot_alloc+0xd2/0x190 [ 67.132046][ T6082] sk_alloc+0x2e/0x220 [ 67.136110][ T6082] unix_create1+0xa2/0x3f0 [ 67.140114][ T6091] FAULT_INJECTION: forcing a failure. [ 67.140114][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 67.140549][ T6082] unix_create+0xfb/0x120 [ 67.157433][ T6082] __sock_create+0x2c7/0x4e0 [ 67.162093][ T6082] sock_create_kern+0x34/0x40 [ 67.166797][ T6082] io_uring_create+0x18a2/0x1bb0 [ 67.171726][ T6082] __x64_sys_io_uring_setup+0xf3/0x130 [ 67.177204][ T6082] do_syscall_64+0x44/0xa0 [ 67.181639][ T6082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.187521][ T6082] RIP: 0033:0x7f6e743e68d9 [ 67.191924][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 67.211519][ T6082] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 67.219985][ T6082] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 67.227943][ T6082] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 67.235898][ T6082] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 67.243887][ T6082] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 67.251906][ T6082] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 67.259867][ T6091] CPU: 0 PID: 6091 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 67.268541][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.278603][ T6091] Call Trace: [ 67.281893][ T6091] dump_stack_lvl+0xd6/0x122 [ 67.286472][ T6091] dump_stack+0x11/0x1b [ 67.290653][ T6091] should_fail+0x23c/0x250 [ 67.295103][ T6091] __should_failslab+0x81/0x90 [ 67.299900][ T6091] ? selinux_sk_alloc_security+0x61/0x120 [ 67.305632][ T6091] should_failslab+0x5/0x20 [ 67.310199][ T6091] kmem_cache_alloc_trace+0x52/0x320 [ 67.315478][ T6091] ? should_fail+0xd6/0x250 [ 67.319966][ T6091] selinux_sk_alloc_security+0x61/0x120 [ 67.325502][ T6091] security_sk_alloc+0x45/0x90 [ 67.330375][ T6091] sk_prot_alloc+0xd2/0x190 [ 67.334860][ T6091] sk_alloc+0x2e/0x220 [ 67.338908][ T6091] unix_create1+0xa2/0x3f0 [ 67.343378][ T6091] unix_create+0xfb/0x120 [ 67.347758][ T6091] __sock_create+0x2c7/0x4e0 [ 67.352434][ T6091] sock_create_kern+0x34/0x40 [ 67.357117][ T6091] io_uring_create+0x18a2/0x1bb0 [ 67.362104][ T6091] __x64_sys_io_uring_setup+0xf3/0x130 [ 67.367548][ T6091] do_syscall_64+0x44/0xa0 [ 67.372017][ T6091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.377922][ T6091] RIP: 0033:0x7f7506b248d9 [ 67.382320][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 67.401918][ T6091] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 67.410367][ T6091] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 [ 67.418396][ T6091] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 67.426348][ T6091] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 67.434320][ T6091] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 67.442292][ T6091] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:52 executing program 2: io_setup(0x3, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r1}]) 07:41:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 15) 07:41:52 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:52 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000dc0)=""/102400, 0xb}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000002c0)=""/73, 0x49}], 0x4, &(0x7f000001a100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000ff00000000effbc127ea82001269bf3021ef45000000000000000000f3a162400000000024ac6fa80900006e5a95280d101bac0c89821c0f342c91cfd871268076634bd318e5ae9ac463156563de3186d66180755c73699f358513394394553948e7d4362540586723f3b227e9d74e1ab495b8ad9ec07fce15efda216de55b2b886e6d3b2b572efef35f6bae6a9778882e0c596b3abd233cab9a64085ae2fb9555297c6ba1d49682ccf2c69f07ec5be676f8d21814e9b73724c764c407b6aab5b7f09491601b227a513050a997b2706348ee03cc529ae9e535", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1, &(0x7f0000019dc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001cf7ffffffffffff0000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x130}}, {{&(0x7f0000000780)=@abs, 0xfffffffffffffe62, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/120, 0x78}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000000d40)=""/69, 0x3c}], 0x5, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x3, &(0x7f0000000cc0)={0x0, 0x3938700}) r3 = syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r3) r4 = accept4$inet6(r1, &(0x7f0000000b00), &(0x7f0000019f40)=0x1c, 0x800) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000019f80)={0x1, {{0xa, 0x4e20, 0x3, @private1, 0x2}}, {{0xa, 0x4e20, 0x10000, @loopback, 0x7}}}, 0x108) rmdir(&(0x7f0000000180)='./file0\x00') sendfile(r2, 0xffffffffffffffff, &(0x7f0000000d00)=0x80000000, 0x7) r5 = open(&(0x7f000001a0c0)='./file1/file0\x00', 0x10b03, 0x4) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x74) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) poll(&(0x7f0000000380)=[{r4, 0x284}, {r4, 0xc2b2}, {r6, 0x1082}, {r5, 0x1210}], 0x4, 0xfffffff9) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/225, 0xe1}], 0x2, 0x1, 0x2) 07:41:52 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 15) [ 67.758902][ T6109] FAULT_INJECTION: forcing a failure. [ 67.758902][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 67.771635][ T6109] CPU: 0 PID: 6109 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 67.774867][ T6112] FAULT_INJECTION: forcing a failure. [ 67.774867][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 67.780310][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.803014][ T6109] Call Trace: [ 67.806283][ T6109] dump_stack_lvl+0xd6/0x122 [ 67.810901][ T6109] dump_stack+0x11/0x1b [ 67.815037][ T6109] should_fail+0x23c/0x250 [ 67.819436][ T6109] ? __d_alloc+0x36/0x370 [ 67.823775][ T6109] __should_failslab+0x81/0x90 [ 67.828538][ T6109] should_failslab+0x5/0x20 [ 67.833111][ T6109] kmem_cache_alloc+0x4f/0x300 [ 67.838140][ T6109] __d_alloc+0x36/0x370 [ 67.842281][ T6109] d_alloc_pseudo+0x1a/0x50 [ 67.846783][ T6109] alloc_file_pseudo+0x77/0x150 [ 67.851668][ T6109] anon_inode_getfile+0x9f/0x120 [ 67.856596][ T6109] io_uring_create+0x18f8/0x1bb0 [ 67.861552][ T6109] __x64_sys_io_uring_setup+0xf3/0x130 [ 67.866999][ T6109] do_syscall_64+0x44/0xa0 [ 67.871401][ T6109] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.877320][ T6109] RIP: 0033:0x7f7506b248d9 [ 67.881715][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 67.901367][ T6109] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 67.909766][ T6109] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 67.917719][ T6109] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 67.925683][ T6109] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 67.933636][ T6109] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 67.941586][ T6109] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 67.949640][ T6112] CPU: 1 PID: 6112 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 07:41:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 67.958377][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.968598][ T6112] Call Trace: [ 67.971866][ T6112] dump_stack_lvl+0xd6/0x122 [ 67.976469][ T6112] dump_stack+0x11/0x1b [ 67.980603][ T6112] should_fail+0x23c/0x250 [ 67.985019][ T6112] ? __d_alloc+0x36/0x370 [ 67.989353][ T6112] __should_failslab+0x81/0x90 [ 67.994112][ T6112] should_failslab+0x5/0x20 [ 67.998653][ T6112] kmem_cache_alloc+0x4f/0x300 [ 68.003421][ T6112] __d_alloc+0x36/0x370 [ 68.007756][ T6112] d_alloc_pseudo+0x1a/0x50 [ 68.012317][ T6112] alloc_file_pseudo+0x77/0x150 [ 68.017170][ T6112] anon_inode_getfile+0x9f/0x120 [ 68.022168][ T6112] io_uring_create+0x18f8/0x1bb0 [ 68.027209][ T6112] __x64_sys_io_uring_setup+0xf3/0x130 [ 68.032672][ T6112] do_syscall_64+0x44/0xa0 [ 68.037076][ T6112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.043105][ T6112] RIP: 0033:0x7f6e743e68d9 [ 68.047589][ T6112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.067456][ T6112] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 68.075852][ T6112] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 68.083877][ T6112] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 68.091842][ T6112] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 68.099834][ T6112] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 68.107793][ T6112] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 16) 07:41:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 16) 07:41:53 executing program 2: io_setup(0x3, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r1}]) [ 68.329509][ T6132] FAULT_INJECTION: forcing a failure. [ 68.329509][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 68.342164][ T6132] CPU: 1 PID: 6132 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 68.350836][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.361130][ T6132] Call Trace: [ 68.364406][ T6132] dump_stack_lvl+0xd6/0x122 [ 68.369003][ T6132] dump_stack+0x11/0x1b [ 68.373167][ T6132] should_fail+0x23c/0x250 [ 68.377590][ T6132] ? __alloc_file+0x2e/0x1a0 [ 68.382252][ T6132] __should_failslab+0x81/0x90 [ 68.387022][ T6132] should_failslab+0x5/0x20 [ 68.391542][ T6132] kmem_cache_alloc+0x4f/0x300 [ 68.393852][ T6139] FAULT_INJECTION: forcing a failure. [ 68.393852][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 68.396310][ T6132] __alloc_file+0x2e/0x1a0 [ 68.413296][ T6132] alloc_empty_file+0xcd/0x1c0 [ 68.418163][ T6132] alloc_file+0x3a/0x280 [ 68.422397][ T6132] alloc_file_pseudo+0xfa/0x150 [ 68.427234][ T6132] anon_inode_getfile+0x9f/0x120 [ 68.432156][ T6132] io_uring_create+0x18f8/0x1bb0 [ 68.437081][ T6132] __x64_sys_io_uring_setup+0xf3/0x130 [ 68.442524][ T6132] do_syscall_64+0x44/0xa0 [ 68.446973][ T6132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.452885][ T6132] RIP: 0033:0x7f6e743e68d9 [ 68.457278][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.476999][ T6132] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 68.485392][ T6132] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 68.493370][ T6132] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 68.501320][ T6132] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 68.509270][ T6132] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 68.517308][ T6132] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 68.525274][ T6139] CPU: 0 PID: 6139 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 68.534014][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.544166][ T6139] Call Trace: [ 68.547461][ T6139] dump_stack_lvl+0xd6/0x122 [ 68.552076][ T6139] dump_stack+0x11/0x1b [ 68.556235][ T6139] should_fail+0x23c/0x250 [ 68.560719][ T6139] ? __alloc_file+0x2e/0x1a0 [ 68.565360][ T6139] __should_failslab+0x81/0x90 [ 68.570302][ T6139] should_failslab+0x5/0x20 [ 68.574812][ T6139] kmem_cache_alloc+0x4f/0x300 [ 68.579583][ T6139] __alloc_file+0x2e/0x1a0 [ 68.584267][ T6139] alloc_empty_file+0xcd/0x1c0 [ 68.589072][ T6139] alloc_file+0x3a/0x280 [ 68.593338][ T6139] alloc_file_pseudo+0xfa/0x150 [ 68.598272][ T6139] anon_inode_getfile+0x9f/0x120 [ 68.603225][ T6139] io_uring_create+0x18f8/0x1bb0 [ 68.608170][ T6139] __x64_sys_io_uring_setup+0xf3/0x130 [ 68.613642][ T6139] do_syscall_64+0x44/0xa0 [ 68.618144][ T6139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.624078][ T6139] RIP: 0033:0x7f7506b248d9 [ 68.628491][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.648170][ T6139] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 68.656584][ T6139] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 [ 68.664560][ T6139] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 68.672538][ T6139] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 07:41:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000080)={0x1, 0x2, 0x1000, 0x30, &(0x7f0000000000)="67d502b7a30514cc53d493021d779eb76aa3937aea8bb84bbb53d9f0c247bf76e3383811938a8ecc36d54c80fcd5a5b6", 0x11, 0x0, &(0x7f0000000040)="bbd06f8e3547c46858107efa49f0b60fd0"}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r1) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 68.680574][ T6139] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 68.688549][ T6139] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:53 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:53 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x0, 0x0) 07:41:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 17) 07:41:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 68.793041][ T6158] FAULT_INJECTION: forcing a failure. [ 68.793041][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 68.805668][ T6158] CPU: 0 PID: 6158 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 68.814398][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.824496][ T6158] Call Trace: [ 68.827775][ T6158] dump_stack_lvl+0xd6/0x122 [ 68.832378][ T6158] dump_stack+0x11/0x1b [ 68.836977][ T6158] should_fail+0x23c/0x250 [ 68.841490][ T6158] ? security_file_alloc+0x30/0x190 [ 68.846695][ T6158] __should_failslab+0x81/0x90 [ 68.851621][ T6158] should_failslab+0x5/0x20 [ 68.856136][ T6158] kmem_cache_alloc+0x4f/0x300 [ 68.860955][ T6158] security_file_alloc+0x30/0x190 [ 68.865988][ T6158] __alloc_file+0x83/0x1a0 [ 68.870473][ T6158] alloc_empty_file+0xcd/0x1c0 [ 68.875261][ T6158] alloc_file+0x3a/0x280 [ 68.879592][ T6158] alloc_file_pseudo+0xfa/0x150 [ 68.884457][ T6158] anon_inode_getfile+0x9f/0x120 07:41:53 executing program 4: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') rmdir(&(0x7f0000000180)='./file0\x00') [ 68.889414][ T6158] io_uring_create+0x18f8/0x1bb0 [ 68.894359][ T6158] __x64_sys_io_uring_setup+0xf3/0x130 [ 68.899822][ T6158] do_syscall_64+0x44/0xa0 [ 68.904276][ T6158] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.910528][ T6158] RIP: 0033:0x7f7506b248d9 [ 68.914946][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.934555][ T6158] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:41:54 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 17) [ 68.943067][ T6158] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 68.951038][ T6158] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 68.959088][ T6158] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 68.967061][ T6158] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 68.975046][ T6158] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8, 0x8001}) 07:41:54 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x0, 0x0) [ 69.045990][ T6176] FAULT_INJECTION: forcing a failure. [ 69.045990][ T6176] name failslab, interval 1, probability 0, space 0, times 0 [ 69.058679][ T6176] CPU: 1 PID: 6176 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 69.067346][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.077403][ T6176] Call Trace: [ 69.080677][ T6176] dump_stack_lvl+0xd6/0x122 [ 69.085281][ T6176] dump_stack+0x11/0x1b [ 69.089521][ T6176] should_fail+0x23c/0x250 [ 69.093943][ T6176] ? security_file_alloc+0x30/0x190 [ 69.099181][ T6176] __should_failslab+0x81/0x90 [ 69.103946][ T6176] should_failslab+0x5/0x20 [ 69.108456][ T6176] kmem_cache_alloc+0x4f/0x300 [ 69.113215][ T6176] security_file_alloc+0x30/0x190 [ 69.118243][ T6176] __alloc_file+0x83/0x1a0 [ 69.122663][ T6176] alloc_empty_file+0xcd/0x1c0 [ 69.127439][ T6176] alloc_file+0x3a/0x280 [ 69.131689][ T6176] alloc_file_pseudo+0xfa/0x150 [ 69.136626][ T6176] anon_inode_getfile+0x9f/0x120 [ 69.141642][ T6176] io_uring_create+0x18f8/0x1bb0 [ 69.146584][ T6176] __x64_sys_io_uring_setup+0xf3/0x130 [ 69.152042][ T6176] do_syscall_64+0x44/0xa0 [ 69.156464][ T6176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.162363][ T6176] RIP: 0033:0x7f6e743e68d9 [ 69.166781][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.186389][ T6176] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:41:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000840)={0x2, r1}) fchdir(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = gettid() tkill(r3, 0x34) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3, 0x0, 0x3, 0x1, 0x8000, 0x443}, 0x20) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3}) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 18) [ 69.194799][ T6176] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 69.202777][ T6176] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 69.210752][ T6176] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 69.218724][ T6176] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 69.226735][ T6176] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 69.245208][ T6188] FAULT_INJECTION: forcing a failure. [ 69.245208][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 69.257925][ T6188] CPU: 1 PID: 6188 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 69.266605][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.276723][ T6188] Call Trace: [ 69.280001][ T6188] dump_stack_lvl+0xd6/0x122 [ 69.284598][ T6188] dump_stack+0x11/0x1b [ 69.288761][ T6188] should_fail+0x23c/0x250 [ 69.293181][ T6188] __should_failslab+0x81/0x90 [ 69.297987][ T6188] ? io_uring_alloc_task_context+0x49/0x2d0 [ 69.303954][ T6188] should_failslab+0x5/0x20 [ 69.308547][ T6188] kmem_cache_alloc_trace+0x52/0x320 [ 69.313848][ T6188] io_uring_alloc_task_context+0x49/0x2d0 [ 69.319581][ T6188] ? alloc_fd+0x388/0x3e0 [ 69.323950][ T6188] io_uring_add_tctx_node+0x66/0x200 [ 69.329243][ T6188] io_uring_create+0x19f2/0x1bb0 [ 69.334190][ T6188] __x64_sys_io_uring_setup+0xf3/0x130 [ 69.339738][ T6188] do_syscall_64+0x44/0xa0 [ 69.344211][ T6188] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.350193][ T6188] RIP: 0033:0x7f7506b248d9 [ 69.354667][ T6188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.374278][ T6188] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 69.382695][ T6188] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 07:41:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') io_setup(0xca4, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) io_submit(r1, 0x2, &(0x7f00000008c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000000c0)="130bd4ed9f7485cca4", 0x9}]) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x80) r8 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x1) r9 = inotify_init() io_submit(r1, 0x5, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0xbc36, r4, &(0x7f0000000080)="5a6a0c5f09b57457f126f9431628e2089fc3c4a86f9f3688aa97e6b89a9c982aeb44cb6ab1a129cf482e488f562f0fc2ac4e11790759db6311375dc1b47d448ef3156c9a2d5462db219b1b321d2299f8ef3435ba89d548abba39ad3fe33303c5e6d3c31171bd7465e6615098ee1be75e6e29caec55fd7467418fc037fc0b8551b551bf3a65f980d8ef3a", 0x8a, 0x9, 0x0, 0x3, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x63d5, r0, &(0x7f0000000200)="306339510d6e6764b7f0adf30faa563861c5a2f074d9f545da254437269201bd8ca70b47a69e05a8e6d362ca848cc31d40a2e7c94968096b3fec59f6bbf030f4fc7cb079d2291bbed8e46bbdb7756dd4b2b1365c60575a973cf44ed5522764ff3d0cdb1e567acc98eab5c8cc457d09e7214705a28115f9fe1c", 0x79, 0x4, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000300)="ead2586bc74321160e4eb1a248c0fca50d0d00d54318845fe37ea2a76fbbb64c33ef7a5eb7cbf3ac25be0e578a8bd7a25902ea07018176a74182e341c323ffb99ea6601dccd2c34df2790bd7eac2d672cdc65d846af6061e14c07d5afdd278a2dec37cf6c2c047ec36a0e0e63d131fc366a3bc6ab67c2df0517a5b8cc4949760069e1562246576975e3e8d0c893c6c5c8d5c0b8e8a0202f3608c78a5e87395bc692264ec5a372111cc269ffc1019dcebc12d602f7af6c7f494f5a217e95f35613696b7c3fe18219edd7359eca4aff4d8c71d4715ccdb750dbfd2", 0xda, 0x9, 0x0, 0x1, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x3, r7, &(0x7f0000000480)="7640eb083e4c14e7e70486e0cb166b98dfaf74a4d2604cfd70a945c0b47bf6417bfca751c277b1de77973b2b7d6efaced0e8d59300d908deeccbd3e43a804def342a1cbe664912597ee66555bea939c1fc496ef454b64347c54dca5d8ac5ef33c6ff302d1a3f702bf1af48907e09830e404bdc036053982b64930534fe1c5e95e308b6a0070473548ad1ca90145f113e5b061885fac32f571a17b68fe9395d868be2c8b293468ab0727527530f148ffc815086cf89bdb7221e8242fb05200f0913f231c1482fa5100a55b1e0f85387004341326e98a3ec07e5f5b8572936d9461f8d7584829c586213923c3c3f46", 0xee, 0x20, 0x0, 0x1, r8}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x100, r9, &(0x7f0000000600)="ba5271f1fb83d6dc8043768507a2bdf9e44d69343a0cb4e0bd22089eae212ad750ec469523e2dc7a6330be26fd23540d50febf", 0x33, 0x7, 0x0, 0x1, r0}]) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r10 = getpgrp(0xffffffffffffffff) syz_open_procfs(r10, &(0x7f0000000000)='net/protocols\x00') 07:41:54 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 69.390671][ T6188] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 69.398656][ T6188] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 69.406631][ T6188] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 69.414791][ T6188] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:54 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 18) 07:41:54 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x0, 0x0) 07:41:54 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x10, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="00104000f60500000001a04e94ac6823eb000276a0c363e6d5f19a48a80f3d79d5e73c0a199e4abfbede673ec4ddba1def184b3b92d833960cfe3a111fd4d1ef2f4632bffc5b2e252f164f8d1ea64d16e20adf2f0a978a8a48beae2db131d4839805d6eb374462137404000000000000002111b7ef963e0e8a294abcb49740d80cd61254e47de9d66e22e355dbf4bcdf1e7afb8af149826e9713cf10df375dc04512e1a82e19e1efe00614cd66a7db699d0b709099bc51aed2e19a9c7fc3b8f6a38575d39f6b4c5a"]) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/132, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) [ 69.529555][ T6205] FAULT_INJECTION: forcing a failure. [ 69.529555][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 69.542244][ T6205] CPU: 1 PID: 6205 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 69.550918][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.561092][ T6205] Call Trace: [ 69.564369][ T6205] dump_stack_lvl+0xd6/0x122 [ 69.568997][ T6205] dump_stack+0x11/0x1b [ 69.573158][ T6205] should_fail+0x23c/0x250 [ 69.577578][ T6205] __should_failslab+0x81/0x90 [ 69.582501][ T6205] ? io_uring_alloc_task_context+0x49/0x2d0 [ 69.588406][ T6205] should_failslab+0x5/0x20 [ 69.592922][ T6205] kmem_cache_alloc_trace+0x52/0x320 [ 69.598230][ T6205] io_uring_alloc_task_context+0x49/0x2d0 [ 69.603964][ T6205] ? alloc_fd+0x388/0x3e0 [ 69.608296][ T6205] io_uring_add_tctx_node+0x66/0x200 [ 69.613646][ T6205] io_uring_create+0x19f2/0x1bb0 [ 69.618602][ T6205] __x64_sys_io_uring_setup+0xf3/0x130 [ 69.624072][ T6205] do_syscall_64+0x44/0xa0 [ 69.628498][ T6205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.634409][ T6205] RIP: 0033:0x7f6e743e68d9 [ 69.638825][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.658471][ T6205] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 69.666888][ T6205] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 07:41:54 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x10, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:54 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 07:41:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x80) 07:41:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 19) [ 69.674866][ T6205] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 69.682843][ T6205] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 69.690951][ T6205] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 69.698931][ T6205] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 69.770179][ T6227] FAULT_INJECTION: forcing a failure. [ 69.770179][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 69.782836][ T6227] CPU: 1 PID: 6227 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 69.791539][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.801591][ T6227] Call Trace: [ 69.804917][ T6227] dump_stack_lvl+0xd6/0x122 [ 69.809529][ T6227] dump_stack+0x11/0x1b [ 69.813718][ T6227] should_fail+0x23c/0x250 [ 69.818126][ T6227] __should_failslab+0x81/0x90 [ 69.822891][ T6227] ? io_uring_alloc_task_context+0xea/0x2d0 [ 69.829028][ T6227] should_failslab+0x5/0x20 [ 69.833531][ T6227] kmem_cache_alloc_trace+0x52/0x320 [ 69.838866][ T6227] io_uring_alloc_task_context+0xea/0x2d0 [ 69.844680][ T6227] io_uring_add_tctx_node+0x66/0x200 [ 69.849976][ T6227] io_uring_create+0x19f2/0x1bb0 [ 69.855010][ T6227] __x64_sys_io_uring_setup+0xf3/0x130 [ 69.860548][ T6227] do_syscall_64+0x44/0xa0 [ 69.864976][ T6227] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.870963][ T6227] RIP: 0033:0x7f7506b248d9 [ 69.875374][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.895046][ T6227] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 69.903457][ T6227] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 69.908746][ T22] kauditd_printk_skb: 23 callbacks suppressed [ 69.908757][ T22] audit: type=1400 audit(1633160514.967:98): avc: denied { execute } for pid=6243 comm="syz-executor.4" path="/proc/6243/fdinfo" dev="proc" ino=19843 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 69.911473][ T6227] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 69.911488][ T6227] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 69.957636][ T6227] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 07:41:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x3ec1b000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) rmdir(&(0x7f0000000180)='./file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0xa1) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) 07:41:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x32055000) 07:41:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x57}, 0x1, 0x0, 0x0, 0x10}, 0x40850) fchdir(r1) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 69.965693][ T6227] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:55 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 19) 07:41:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x10, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:55 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 20) 07:41:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x9, &(0x7f00000005c0)=[{&(0x7f0000000080)="d414c6394104386f94784f1b40ab8c0930d4499fdb228b92407f491e24527921b570661bf45fba5d6248f2d1baf8885293fd074d09b6ef3f8a3ec9871746614d9ed2fc72645943062ea5e2f69778085b5bd82364c51e3196dac9a2e07f8c1467a06ef7cfd405d1e2593928884336284cfaf03c225739acacdb32c4189771c16bbc78830a037df6c5352331670e7e600eac466a121d108ec3aaed684cad821e3c76f02d419a77f09698f8298e7105f1fd7565b47b7f6b74c3dbf1160871c91f", 0xbf, 0x100}, {&(0x7f0000000140)="c8c27c7f155d66", 0x7, 0x3f}, {&(0x7f0000000200)="4bf622d3c99b88b88425696ca1d2c0b3213ea1e5ad04c6690f93ca1c80fe3590375c9f7b985e0ad3ab4ed6870f8cf36bc4684343ab90e70e90cdd3100df3c81a9d3fb608fce4434efcd92f333e1a025d8a888d50a791ce4215b4d3e31e54b8835ff5d44951018e3db1c8fd171778d35e61de8858b4c32d249623a582615db6c79cf81ce14a73e0", 0x87, 0x40}, {&(0x7f00000002c0)="6ccde4f36b2363ef72", 0x9, 0x40}, {&(0x7f0000000300)="b52afc84419d87349567c953239d79da67c2376464c7306155b8e866eaad71847ab5a976ef391725c255969645eb205f", 0x30, 0x9}, {&(0x7f0000000340)="1704dd7fff514c043914", 0xa, 0x1}, {&(0x7f0000000380)="d6d77efe08e2fbc65814ecbfdd1a7d0dd3aaee9cc1a9feb2efe64365097b212db8055d0ae0aa55d50ba0f0b5564074b28c2e4be64717c4f725a3d72455261a67d979aa05450a01d32c7c823df05479d428bc8324843e81fcdf3e62bf11f33100f1f2d787d81841a731303f38d066bc1731fdf7db99e2302e16dc47379f23f74cff9d93", 0x83, 0x9a}, {&(0x7f0000000440)="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", 0xff, 0x4}, {&(0x7f0000000540)="9cc8723b83bb00f657a1d2df8d1382d0e9d6721c4f7fb1db3a076a13cf0d6c6ada4fb46a8af5f51041d12578ea53956970d4bd54ec1607939915265acd33bcc3c09d0db96bdc9e5370b1c2899e98a79917f217f58c649b164236bd482640af3517c8f309116f35c5850e01ead58de95dbf97d198ed99b6ab2a6f211c55b588b6", 0x80, 0xfff}], 0x20800, &(0x7f0000000780)={[{@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0xffff}}, {}, {@nodots}], [{@fsname={'fsname', 0x3d, 'fdinfo\x00'}}]}) openat(r1, &(0x7f0000000740)='./file0\x00', 0x189001, 0x85) 07:41:55 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 70.091738][ T6264] FAULT_INJECTION: forcing a failure. [ 70.091738][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 70.093214][ T6269] loop4: detected capacity change from 0 to 15 [ 70.104389][ T6264] CPU: 1 PID: 6264 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 70.119195][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.129251][ T6264] Call Trace: [ 70.132534][ T6264] dump_stack_lvl+0xd6/0x122 [ 70.137130][ T6264] dump_stack+0x11/0x1b [ 70.141285][ T6264] should_fail+0x23c/0x250 [ 70.145727][ T6264] __should_failslab+0x81/0x90 [ 70.150499][ T6264] ? io_uring_alloc_task_context+0xea/0x2d0 [ 70.156398][ T6264] should_failslab+0x5/0x20 [ 70.161044][ T6264] kmem_cache_alloc_trace+0x52/0x320 [ 70.166383][ T6264] io_uring_alloc_task_context+0xea/0x2d0 [ 70.172161][ T6264] io_uring_add_tctx_node+0x66/0x200 [ 70.175372][ T6275] FAULT_INJECTION: forcing a failure. [ 70.175372][ T6275] name failslab, interval 1, probability 0, space 0, times 0 [ 70.177456][ T6264] io_uring_create+0x19f2/0x1bb0 [ 70.177484][ T6264] __x64_sys_io_uring_setup+0xf3/0x130 [ 70.177510][ T6264] do_syscall_64+0x44/0xa0 [ 70.177533][ T6264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.210730][ T6264] RIP: 0033:0x7f6e743e68d9 [ 70.215137][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:41:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 70.234723][ T6264] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 70.243119][ T6264] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 70.251073][ T6264] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 70.259026][ T6264] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 70.266980][ T6264] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 70.274934][ T6264] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 70.282932][ T6275] CPU: 0 PID: 6275 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 70.291614][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.301671][ T6275] Call Trace: [ 70.304940][ T6275] dump_stack_lvl+0xd6/0x122 [ 70.309519][ T6275] dump_stack+0x11/0x1b [ 70.313657][ T6275] should_fail+0x23c/0x250 [ 70.318075][ T6275] ? io_wq_create+0x7b/0x6f0 [ 70.322731][ T6275] __should_failslab+0x81/0x90 [ 70.327477][ T6275] should_failslab+0x5/0x20 [ 70.332046][ T6275] __kmalloc+0x6f/0x350 [ 70.336198][ T6275] ? should_fail+0xd6/0x250 [ 70.340701][ T6275] io_wq_create+0x7b/0x6f0 [ 70.345180][ T6275] ? kmem_cache_alloc_trace+0x221/0x320 [ 70.350711][ T6275] ? io_uring_alloc_task_context+0xea/0x2d0 [ 70.356672][ T6275] io_uring_alloc_task_context+0x192/0x2d0 [ 70.362539][ T6275] ? io_wq_free_work+0xd0/0xd0 [ 70.367290][ T6275] ? tctx_task_work+0x4d0/0x4d0 [ 70.372202][ T6275] io_uring_add_tctx_node+0x66/0x200 [ 70.377476][ T6275] io_uring_create+0x19f2/0x1bb0 [ 70.382401][ T6275] __x64_sys_io_uring_setup+0xf3/0x130 [ 70.387844][ T6275] do_syscall_64+0x44/0xa0 [ 70.392296][ T6275] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.398179][ T6275] RIP: 0033:0x7f7506b248d9 [ 70.402677][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 70.422318][ T6275] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 70.430739][ T6275] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 07:41:55 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 21) [ 70.438785][ T6275] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 70.446762][ T6275] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 70.454717][ T6275] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 70.462668][ T6275] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:55 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 07:41:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 70.504345][ T6277] loop4: detected capacity change from 0 to 15 07:41:55 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 20) [ 70.546096][ T6287] FAULT_INJECTION: forcing a failure. [ 70.546096][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 70.558742][ T6287] CPU: 0 PID: 6287 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 70.567581][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.577637][ T6287] Call Trace: [ 70.580923][ T6287] dump_stack_lvl+0xd6/0x122 [ 70.585546][ T6287] dump_stack+0x11/0x1b [ 70.589719][ T6287] should_fail+0x23c/0x250 [ 70.594222][ T6287] __should_failslab+0x81/0x90 [ 70.598992][ T6287] should_failslab+0x5/0x20 [ 70.603501][ T6287] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 70.609228][ T6287] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 70.616124][ T6287] ? io_wq_create+0x217/0x6f0 [ 70.620872][ T6287] io_wq_create+0x217/0x6f0 [ 70.625410][ T6287] io_uring_alloc_task_context+0x192/0x2d0 [ 70.631294][ T6287] ? io_wq_free_work+0xd0/0xd0 [ 70.636070][ T6287] ? tctx_task_work+0x4d0/0x4d0 [ 70.640932][ T6287] io_uring_add_tctx_node+0x66/0x200 [ 70.646226][ T6287] io_uring_create+0x19f2/0x1bb0 [ 70.651176][ T6287] __x64_sys_io_uring_setup+0xf3/0x130 [ 70.656643][ T6287] do_syscall_64+0x44/0xa0 [ 70.661201][ T6287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.667110][ T6287] RIP: 0033:0x7f7506b248d9 [ 70.671520][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:41:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x8000000000000000) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x1, 0xf, 0x3, 0x2, r2}) 07:41:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 70.691218][ T6287] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 70.699666][ T6287] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 70.707702][ T6287] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 70.715671][ T6287] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 70.723650][ T6287] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 70.731623][ T6287] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 70.766957][ T6295] FAULT_INJECTION: forcing a failure. [ 70.766957][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 70.779600][ T6295] CPU: 1 PID: 6295 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 70.788292][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.798357][ T6295] Call Trace: [ 70.801669][ T6295] dump_stack_lvl+0xd6/0x122 [ 70.806268][ T6295] dump_stack+0x11/0x1b [ 70.810449][ T6295] should_fail+0x23c/0x250 [ 70.814873][ T6295] ? io_wq_create+0x7b/0x6f0 [ 70.819471][ T6295] __should_failslab+0x81/0x90 [ 70.824239][ T6295] should_failslab+0x5/0x20 [ 70.828798][ T6295] __kmalloc+0x6f/0x350 [ 70.832959][ T6295] ? should_fail+0xd6/0x250 [ 70.837469][ T6295] io_wq_create+0x7b/0x6f0 [ 70.841937][ T6295] ? kmem_cache_alloc_trace+0x221/0x320 [ 70.847490][ T6295] ? io_uring_alloc_task_context+0xea/0x2d0 [ 70.853402][ T6295] io_uring_alloc_task_context+0x192/0x2d0 [ 70.859226][ T6295] ? io_wq_free_work+0xd0/0xd0 [ 70.864233][ T6295] ? tctx_task_work+0x4d0/0x4d0 [ 70.869212][ T6295] io_uring_add_tctx_node+0x66/0x200 [ 70.874507][ T6295] io_uring_create+0x19f2/0x1bb0 [ 70.879482][ T6295] __x64_sys_io_uring_setup+0xf3/0x130 [ 70.885137][ T6295] do_syscall_64+0x44/0xa0 [ 70.889608][ T6295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.895524][ T6295] RIP: 0033:0x7f6e743e68d9 [ 70.899943][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 70.920335][ T6295] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 70.928751][ T6295] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 70.936814][ T6295] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 70.944886][ T6295] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 70.953034][ T6295] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 70.961004][ T6295] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:56 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 22) 07:41:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netfilter\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="00000ffffffff00041658621285456d74684e60613c473ca02000000000000003e0a24226a19c63900"]) fcntl$notify(r1, 0x402, 0x80000000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0xc9, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000a27b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d010051f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa8d092eea1be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee6c4252493d2834faafc1"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r2, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone(0xc000000, &(0x7f0000000080)="ca8e83b48f038c365891a9f6d772cafaea8386e3eaa24d804b", &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="9d7dff93d98d44406771c37f5d238e44b3c701545d7785ed0249950ff82f59918bdcdfb27a4c322a2ca5f31521aa6efe0b1db32db91982f12a74ed74afbaa0336d088e2e7aa45c83e107181c9022c003f4d5421e6ee027a05c51f6be83670e6370007cec848d0305ee1cc4f0ac26232aaaf23118ec0900eb334938a96dc1a321385a7b8b78f6af48b6d4b0eac7e832ccaa4fcead1d55b8709e4bc52ece") tkill(r3, 0x3a) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:56 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) [ 71.106755][ T6318] FAULT_INJECTION: forcing a failure. [ 71.106755][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 71.119487][ T6318] CPU: 1 PID: 6318 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 71.128159][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.138297][ T6318] Call Trace: [ 71.141580][ T6318] dump_stack_lvl+0xd6/0x122 [ 71.146196][ T6318] dump_stack+0x11/0x1b [ 71.150396][ T6318] should_fail+0x23c/0x250 [ 71.154824][ T6318] __should_failslab+0x81/0x90 [ 71.159724][ T6318] ? io_uring_add_tctx_node+0xdc/0x200 [ 71.165235][ T6318] should_failslab+0x5/0x20 [ 71.169818][ T6318] kmem_cache_alloc_trace+0x52/0x320 [ 71.175111][ T6318] ? xa_load+0x249/0x260 [ 71.179362][ T6318] io_uring_add_tctx_node+0xdc/0x200 [ 71.184658][ T6318] io_uring_create+0x19f2/0x1bb0 [ 71.189607][ T6318] __x64_sys_io_uring_setup+0xf3/0x130 [ 71.195394][ T6318] do_syscall_64+0x44/0xa0 [ 71.199823][ T6318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.205739][ T6318] RIP: 0033:0x7f7506b248d9 [ 71.210151][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.229756][ T6318] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 71.238175][ T6318] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 71.246135][ T6318] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 07:41:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000b, 0x80010, r0, 0xb1f6a000) preadv(r0, &(0x7f0000001840)=[{0x0}], 0x1, 0xd9d, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r1, 0x406000) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x103) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000655c0)={0xfffffffffffffffe, [], 0x40, "8b695f2a4a1d67"}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) sendfile(r0, r2, 0x0, 0x400) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000000)={&(0x7f00000001c0)=""/255, 0xff}) ftruncate(r2, 0x2008001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000018c0)={{}, r3, 0x6, @inherit={0x70, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, @subvolid}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r4, 0x9, 0x4}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 07:41:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x4, 0xffffffff, 0x81, 0xd1, 0x8]}, &(0x7f0000000140)=0x54) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) 07:41:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 21) 07:41:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 71.254100][ T6318] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 71.262080][ T6318] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 71.270050][ T6318] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 71.318760][ T6331] FAULT_INJECTION: forcing a failure. [ 71.318760][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 71.331428][ T6331] CPU: 1 PID: 6331 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 71.340096][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.350152][ T6331] Call Trace: [ 71.353431][ T6331] dump_stack_lvl+0xd6/0x122 [ 71.358027][ T6331] dump_stack+0x11/0x1b [ 71.362196][ T6331] should_fail+0x23c/0x250 [ 71.366611][ T6331] __should_failslab+0x81/0x90 [ 71.371373][ T6331] should_failslab+0x5/0x20 [ 71.376020][ T6331] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 71.381757][ T6331] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 71.388702][ T6331] ? io_wq_create+0x217/0x6f0 [ 71.393599][ T6331] io_wq_create+0x217/0x6f0 [ 71.398272][ T6331] io_uring_alloc_task_context+0x192/0x2d0 [ 71.404299][ T6331] ? io_wq_free_work+0xd0/0xd0 [ 71.409082][ T6331] ? tctx_task_work+0x4d0/0x4d0 [ 71.413976][ T6331] io_uring_add_tctx_node+0x66/0x200 [ 71.418269][ T6346] FAULT_INJECTION: forcing a failure. [ 71.418269][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 71.419432][ T6331] io_uring_create+0x19f2/0x1bb0 [ 71.436981][ T6331] __x64_sys_io_uring_setup+0xf3/0x130 [ 71.442444][ T6331] do_syscall_64+0x44/0xa0 [ 71.446884][ T6331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.452904][ T6331] RIP: 0033:0x7f6e743e68d9 [ 71.457303][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.477024][ T6331] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 71.485430][ T6331] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 71.493386][ T6331] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 71.501407][ T6331] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 71.509382][ T6331] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 07:41:56 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 23) 07:41:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0xfe, 0x2, 0x4, 0x0, 0x7fffffff, 0x204, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1f, 0x1}, 0x41020, 0xffffffffffffc889, 0x3, 0x8, 0x100000000, 0x200, 0x1, 0x0, 0x7, 0x0, 0x1f}, 0xffffffffffffffff, 0x8, r0, 0xb) rmdir(&(0x7f0000000180)='./file0\x00') [ 71.517337][ T6331] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 71.525303][ T6346] CPU: 0 PID: 6346 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 71.533989][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.544115][ T6346] Call Trace: [ 71.547395][ T6346] dump_stack_lvl+0xd6/0x122 [ 71.552040][ T6346] dump_stack+0x11/0x1b [ 71.556190][ T6346] should_fail+0x23c/0x250 [ 71.560603][ T6346] ? xas_create+0x96b/0xb30 [ 71.565098][ T6346] __should_failslab+0x81/0x90 [ 71.569861][ T6346] should_failslab+0x5/0x20 [ 71.574362][ T6346] kmem_cache_alloc+0x4f/0x300 [ 71.579272][ T6346] xas_create+0x96b/0xb30 [ 71.583597][ T6346] xas_store+0x70/0xca0 [ 71.587745][ T6346] ? io_wq_create+0x217/0x6f0 [ 71.592447][ T6346] ? io_wq_create+0x4fc/0x6f0 [ 71.597174][ T6346] __xa_store+0xdb/0x330 [ 71.601540][ T6346] xa_store+0x30/0x70 [ 71.605528][ T6346] io_uring_add_tctx_node+0x111/0x200 [ 71.610902][ T6346] io_uring_create+0x19f2/0x1bb0 07:41:56 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 71.615887][ T6346] __x64_sys_io_uring_setup+0xf3/0x130 [ 71.621881][ T6346] do_syscall_64+0x44/0xa0 [ 71.626299][ T6346] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.632323][ T6346] RIP: 0033:0x7f7506b248d9 [ 71.636823][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.656526][ T6346] RSP: 002b:00007f750487b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:41:56 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000080)=""/231, 0xe7, 0x400) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fchdir(r1) 07:41:56 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) [ 71.664934][ T6346] RAX: ffffffffffffffda RBX: 00007f7506c29020 RCX: 00007f7506b248d9 [ 71.672990][ T6346] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 71.680962][ T6346] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 71.688928][ T6346] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 71.696984][ T6346] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 22) 07:41:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x2c2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x6}}, {@cache_fscache}, {@noextend}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x66, 0x33, 0x38, 0x62, 0x39, 0x32, 0x66], 0x2d, [0x34, 0x34, 0x62, 0x5b], 0x2d, [0x62, 0x30, 0x66, 0x36], 0x2d, [0x6d, 0x39, 0x30, 0x32], 0x2d, [0x36, 0x33, 0x31, 0x37, 0x61, 0x64, 0x62, 0x66]}}}, {@smackfshat={'smackfshat', 0x3d, '].'}}]}}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fchdir(r0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, 0xffffffffffffffff}) rmdir(&(0x7f0000000180)='./file0\x00') [ 71.724890][ T6346] ref_ctr increment failed for inode: 0x3734 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:41:57 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 24) 07:41:57 executing program 0: r0 = syz_io_uring_setup(0x3808, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x18}, 0xd2b) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 71.790216][ T6366] FAULT_INJECTION: forcing a failure. [ 71.790216][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 71.802851][ T6366] CPU: 0 PID: 6366 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 71.811527][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.821843][ T6366] Call Trace: [ 71.825206][ T6366] dump_stack_lvl+0xd6/0x122 [ 71.829799][ T6366] dump_stack+0x11/0x1b [ 71.833954][ T6366] should_fail+0x23c/0x250 [ 71.838459][ T6366] __should_failslab+0x81/0x90 [ 71.843449][ T6366] ? io_uring_add_tctx_node+0xdc/0x200 [ 71.848922][ T6366] should_failslab+0x5/0x20 [ 71.853436][ T6366] kmem_cache_alloc_trace+0x52/0x320 [ 71.858723][ T6366] ? xa_load+0x249/0x260 [ 71.863019][ T6366] io_uring_add_tctx_node+0xdc/0x200 [ 71.868397][ T6366] io_uring_create+0x19f2/0x1bb0 [ 71.873419][ T6366] __x64_sys_io_uring_setup+0xf3/0x130 [ 71.879199][ T6366] do_syscall_64+0x44/0xa0 [ 71.883624][ T6366] entry_SYSCALL_64_after_hwframe+0x44/0xae 07:41:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "d94a2b41c84bc52bf183497b97474c16"}, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) [ 71.889531][ T6366] RIP: 0033:0x7f6e743e68d9 [ 71.894011][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.913708][ T6366] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 71.922145][ T6366] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 71.930116][ T6366] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 07:41:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0xf8, 0x464, 0x300, 0x70bd27, 0x25dfdbff, "cf1e56ebd97f3de89ed649bcd138f70099a0812784066882947836ca5f53dd45f0fbf217ede10189c8571307dbc472c95b3366da2fd61f8dc7d60f3fd9467c58b572dae84b75ba8e8423a36a30bd513c0dff038d526b339d57e8e92e4af9f5e6ddd3932e9a882edbb5456cea6ca35008e3df9a64d73ce1cb354e2f7b781aa14eeae4a470be52c0dd445089d044f9d369336fd6675181deb6f847bb502064434e764a8c916f74e4487af480bd8d8fe5552fc17f4f669800d4c2aa6cef856c15d1014d1ffbcfbb86a7f26f8360a8a0a9e993eb2d95010c6953d99c469b18571de19942948bcddfcc", ["", "", "", "", "", "", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000810}, 0x20014000) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000130073"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}}, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchdir(r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7cc75de3a2ed45c7}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc5aaaec06908b38"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6fe664134a69e6bb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="525184ff9ae9b1c9c9d5038eb7c0a529b12f9545bf1e6681d3f297e6e7e736d6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3f}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3fd914f878be129"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="20bca92a92bcfc3038161b8f15eacd996db29e81da76f3d513a9daffc3bf3a4f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc1}, 0x4000810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001a40)={&(0x7f0000000000), 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0x4}]}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4014000) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 71.938088][ T6366] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 71.938104][ T6366] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 71.938121][ T6366] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 71.948445][ T6382] FAULT_INJECTION: forcing a failure. [ 71.948445][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 71.948468][ T6382] CPU: 0 PID: 6382 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 71.948563][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.948572][ T6382] Call Trace: [ 71.948579][ T6382] dump_stack_lvl+0xd6/0x122 [ 72.010080][ T6395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6395 comm=syz-executor.4 [ 72.012125][ T6382] dump_stack+0x11/0x1b [ 72.012150][ T6382] should_fail+0x23c/0x250 [ 72.026505][ T6395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6395 comm=syz-executor.4 07:41:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) dup(r1) rmdir(&(0x7f0000000180)='./file0\x00') [ 72.028957][ T6382] ? xas_create+0x96b/0xb30 [ 72.039084][ T6400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6400 comm=syz-executor.4 [ 72.046016][ T6382] __should_failslab+0x81/0x90 [ 72.046042][ T6382] should_failslab+0x5/0x20 [ 72.052673][ T6400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6400 comm=syz-executor.4 [ 72.063207][ T6382] kmem_cache_alloc+0x4f/0x300 [ 72.063255][ T6382] ? xas_create+0x96b/0xb30 [ 72.063274][ T6382] xas_create+0x96b/0xb30 07:41:57 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 23) 07:41:57 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) [ 72.063304][ T6382] xas_store+0x70/0xca0 [ 72.102868][ T6382] ? io_wq_create+0x217/0x6f0 [ 72.102914][ T6382] ? io_wq_create+0x4fc/0x6f0 [ 72.102934][ T6382] __xa_store+0xdb/0x330 [ 72.102954][ T6382] xa_store+0x30/0x70 07:41:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/78, 0x4e}, {&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000300)=""/237, 0xed}, {&(0x7f0000000400)=""/69, 0x45}], 0x5, 0x81e, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r4 = dup3(r0, r0, 0x80000) r5 = syz_open_dev$vcsa(&(0x7f0000000740), 0x1, 0x0) r6 = socket(0x1, 0x800, 0xff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/timers\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc0c5}, 0x50) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 72.103054][ T6382] io_uring_add_tctx_node+0x111/0x200 [ 72.103077][ T6382] io_uring_create+0x19f2/0x1bb0 [ 72.103099][ T6382] __x64_sys_io_uring_setup+0xf3/0x130 [ 72.103117][ T6382] do_syscall_64+0x44/0xa0 [ 72.103139][ T6382] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.103229][ T6382] RIP: 0033:0x7f7506b248d9 07:41:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff48, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0xf0, 0xa9, 0x8e, 0x0, 0x200, 0x88001, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x38}, 0x4080, 0x7, 0x643, 0x8, 0x800, 0x1ff, 0x5c, 0x0, 0x60, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 72.103242][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.103257][ T6382] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 72.103275][ T6382] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 72.103287][ T6382] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 72.103298][ T6382] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 07:41:57 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_setup(0xf15, &(0x7f0000000140)={0x0, 0xe6eb, 0x4, 0x1, 0x24a, 0x0, r0}, &(0x7f00000dc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000400), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f00000017c0)=""/160, 0xa0}, {&(0x7f0000001880)=""/190, 0xbe}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/83, 0x53}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/186, 0xba}], 0x7, &(0x7f0000002cc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}], 0x2, 0x40000001, &(0x7f0000002ec0)={r5, r6+10000000}) r8 = syz_io_uring_setup(0xccd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x350}, &(0x7f000014c000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000004380)={0xc64e, 0x8, 0x6, 0xfffffffffffffd71, 0x890000, 0x9, 0x7, 0x1c0000000000}, &(0x7f00000043c0)={0x0, 0x401, 0x4, 0x1, 0x48000000000000, 0x8, 0xd8da, 0x8000}, &(0x7f0000004400)={0x2, 0x2173aa35, 0x40, 0x3, 0x8, 0x5, 0xffffffff00000000, 0x7}, &(0x7f0000004440)={0x77359400}, &(0x7f00000044c0)={&(0x7f0000004480)={[0x1f]}, 0x8}) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000004340)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r7, 0x0, &(0x7f0000004300)={&(0x7f0000002f00)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xde25}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f80)="c9ec5f7f15722141f800209245e8cc17c4701f2596623c846caf9030501ccf426ebf40f69bbd075ebd020f1fa94603ed259e673cfcef254923696d182aeb9c4b9d48c65f8de7a93364834f91b80ef1a3f1f45f6a662784a3575a8df2e9d22d730b460da0cdb973c0419e426e2a542f80530d85519fdad2ed0c770d458bf35f301a4f0b66e3", 0x85}], 0x1, &(0x7f0000003080)=[{0x90, 0x117, 0x20, "b1561ffc1bd3a4662424f24b890302d97ac43869259c5e630a6b6658b06f297426503231eec378f137e045fd9f55528f03f2051d81ce5a9bf5214afef02a863470c87759f253ef2b802f36ff801276e4845055fd59e89fcbb0a6fd1e0a985dac652570857142bba8e897b8844ebf5b7a3832e7f1d8e68b80525230"}, {0x30, 0x3a, 0xaf7, "69c6e578e1dda6e49ab8c380bf53695500a0e341012349c37aaad0362c9c"}, {0x80, 0x103, 0x4, "1285657b19149512626d0781f0c763e01130a1c1b1ed111fab83fd03ae5cf47ec0c09b3ca82ed35b5fba90c92f299ca2cd0a3e86fd628cf44e6f269279153164b367102f17ad55cb660473ad2d956f62f244bdbe46c89c24fe358f37a97267c78b12e54d79702b39d34e"}, {0x108, 0x1, 0xe7b, "b33a5d4966d1d0c74f643bedc73c30393d06e93fdb667213860eb066d5d6a8ba9c3cd7783914a129992fdfa08163049671f172a310c51bc8c0e05e27dbca2167d7590aef616a37b3a9740e11f9dc67392f8b4e6412e5c1e037c201dce5465ba8305f2e7726ad24254dd825a3e99624c7a2b183d24d3ca3b6f1512f4a937b606566579745108349128a80e1f07d62bd057599e10ab4f9f28aa19a633271ebdd03f2d06d4f477853327199c1d17f5708789bc274ce828ae1fd4407ec395f23772efdfe887020375fd469fc880d81353a515d4c31e0522d53d9b1349885c580b6035011f6f4f5fc499b772142955a5532f0d980"}, {0x18, 0x10f, 0x7, "63140b00c23cd9"}, {0x1010, 0x114, 0x800, "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"}], 0x1270}, 0x0, 0x881, 0x1, {0x0, r11}}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x7149, 0x0, 0x0, 0x0, 0x0) [ 72.103310][ T6382] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 72.103320][ T6382] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 72.191544][ T6414] FAULT_INJECTION: forcing a failure. [ 72.191544][ T6414] name failslab, interval 1, probability 0, space 0, times 0 [ 72.203931][ T6382] ref_ctr increment failed for inode: 0x373b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da [ 72.212688][ T6414] CPU: 1 PID: 6414 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 07:41:57 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 25) 07:41:57 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r2}]) 07:41:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 72.293786][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.293800][ T6414] Call Trace: [ 72.293807][ T6414] dump_stack_lvl+0xd6/0x122 [ 72.293832][ T6414] dump_stack+0x11/0x1b [ 72.293850][ T6414] should_fail+0x23c/0x250 [ 72.293869][ T6414] ? xas_create+0x96b/0xb30 [ 72.293965][ T6414] __should_failslab+0x81/0x90 [ 72.293987][ T6414] should_failslab+0x5/0x20 [ 72.294008][ T6414] kmem_cache_alloc+0x4f/0x300 [ 72.294026][ T6414] xas_create+0x96b/0xb30 [ 72.294048][ T6414] xas_store+0x70/0xca0 [ 72.294125][ T6414] ? io_wq_create+0x217/0x6f0 07:41:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 72.294186][ T6414] ? io_wq_create+0x4fc/0x6f0 [ 72.294208][ T6414] __xa_store+0xdb/0x330 [ 72.294236][ T6414] xa_store+0x30/0x70 [ 72.294257][ T6414] io_uring_add_tctx_node+0x111/0x200 [ 72.294282][ T6414] io_uring_create+0x19f2/0x1bb0 [ 72.294310][ T6414] __x64_sys_io_uring_setup+0xf3/0x130 [ 72.294399][ T6414] do_syscall_64+0x44/0xa0 [ 72.294424][ T6414] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.294451][ T6414] RIP: 0033:0x7f6e743e68d9 [ 72.294466][ T6414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.294499][ T6414] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 72.294517][ T6414] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 72.294530][ T6414] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 72.294603][ T6414] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 72.294614][ T6414] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 72.294625][ T6414] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 72.371980][ T6442] FAULT_INJECTION: forcing a failure. [ 72.371980][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 72.376673][ T6414] ref_ctr increment failed for inode: 0x370c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 72.380879][ T6442] CPU: 1 PID: 6442 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 07:41:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') syz_open_dev$vcsu(&(0x7f0000000000), 0x15e, 0x4d00) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 72.380900][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.553494][ T6442] Call Trace: [ 72.556770][ T6442] dump_stack_lvl+0xd6/0x122 [ 72.561425][ T6442] dump_stack+0x11/0x1b [ 72.565707][ T6442] should_fail+0x23c/0x250 [ 72.570131][ T6442] ? xas_create+0x96b/0xb30 [ 72.574684][ T6442] __should_failslab+0x81/0x90 [ 72.579468][ T6442] should_failslab+0x5/0x20 [ 72.584015][ T6442] kmem_cache_alloc+0x4f/0x300 [ 72.588867][ T6442] ? xas_create+0x96b/0xb30 [ 72.593690][ T6442] xas_create+0x96b/0xb30 07:41:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') write(0xffffffffffffffff, &(0x7f0000000000)="98d933546f79e30f554a2ab53be4374549a659861f880a3119fe288ba333b519fba1cb73df79b1e21a32408d5e94ecc5a0f947a61e0010785b55144bd238655137b1689c3ca3de89d5", 0x49) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 72.598024][ T6442] xas_store+0x70/0xca0 [ 72.602181][ T6442] ? io_wq_create+0x217/0x6f0 [ 72.606865][ T6442] ? io_wq_create+0x4fc/0x6f0 [ 72.611549][ T6442] __xa_store+0xdb/0x330 [ 72.615793][ T6442] xa_store+0x30/0x70 [ 72.619895][ T6442] io_uring_add_tctx_node+0x111/0x200 [ 72.625284][ T6442] io_uring_create+0x19f2/0x1bb0 [ 72.630229][ T6442] __x64_sys_io_uring_setup+0xf3/0x130 [ 72.635708][ T6442] do_syscall_64+0x44/0xa0 [ 72.640194][ T6442] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.646153][ T6442] RIP: 0033:0x7f7506b248d9 [ 72.650662][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.670277][ T6442] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 72.678690][ T6442] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 72.686663][ T6442] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 07:41:57 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 24) 07:41:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x10001) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:57 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r2}]) [ 72.694744][ T6442] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 72.702732][ T6442] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 72.710927][ T6442] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 72.727928][ T6442] ref_ctr increment failed for inode: 0x373b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:41:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:57 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 26) 07:41:57 executing program 4: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x52}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x74}}, 0xc881) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000300)={0xbb64, 0x9f, "05d28cb6255b2e9a956a981b48fa0029b3077905d8c21aaa89d4596952f1b2a060b10019d1c47f885ffb857bd6fca1cb4bb4bd6dce04e4f7db17a1fba05e24104baad32ec6c2a96a69caf8394487487070f909869a725dee88e052feeac403ef4b218263610458fddb7cafcc2f1ca8a49ea593f1a72f4d95e32e022faa15fc428d99f4113deab5c1bdc2a6a890ef7c331727ea17ad6c4bc6e241a4b8983ded"}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/133) pread64(r0, &(0x7f0000000000)=""/75, 0x4b, 0x5) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 72.831176][ T6468] FAULT_INJECTION: forcing a failure. [ 72.831176][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 72.842504][ T6474] FAULT_INJECTION: forcing a failure. [ 72.842504][ T6474] name failslab, interval 1, probability 0, space 0, times 0 [ 72.843848][ T6468] CPU: 0 PID: 6468 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 72.865035][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.875086][ T6468] Call Trace: [ 72.878348][ T6468] dump_stack_lvl+0xd6/0x122 [ 72.882948][ T6468] dump_stack+0x11/0x1b [ 72.887086][ T6468] should_fail+0x23c/0x250 [ 72.891482][ T6468] ? xas_create+0x96b/0xb30 [ 72.895967][ T6468] __should_failslab+0x81/0x90 [ 72.900790][ T6468] should_failslab+0x5/0x20 [ 72.905359][ T6468] kmem_cache_alloc+0x4f/0x300 [ 72.910341][ T6468] ? xas_create+0x96b/0xb30 [ 72.914883][ T6468] xas_create+0x96b/0xb30 [ 72.919250][ T6468] xas_store+0x70/0xca0 [ 72.923440][ T6468] ? io_wq_create+0x217/0x6f0 [ 72.928251][ T6468] ? io_wq_create+0x4fc/0x6f0 [ 72.932970][ T6468] __xa_store+0xdb/0x330 [ 72.937461][ T6468] xa_store+0x30/0x70 [ 72.941430][ T6468] io_uring_add_tctx_node+0x111/0x200 [ 72.946823][ T6468] io_uring_create+0x19f2/0x1bb0 [ 72.951759][ T6468] __x64_sys_io_uring_setup+0xf3/0x130 [ 72.957236][ T6468] do_syscall_64+0x44/0xa0 [ 72.961700][ T6468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.967581][ T6468] RIP: 0033:0x7f6e743e68d9 [ 72.972013][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.991607][ T6468] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 73.000013][ T6468] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 73.007973][ T6468] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 73.015925][ T6468] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 73.024399][ T6468] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 73.032359][ T6468] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 73.040318][ T6474] CPU: 1 PID: 6474 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 73.049080][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.059245][ T6474] Call Trace: [ 73.062519][ T6474] dump_stack_lvl+0xd6/0x122 [ 73.067206][ T6474] dump_stack+0x11/0x1b [ 73.071370][ T6474] should_fail+0x23c/0x250 [ 73.075793][ T6474] ? xas_create+0x96b/0xb30 [ 73.080351][ T6474] __should_failslab+0x81/0x90 [ 73.085211][ T6474] should_failslab+0x5/0x20 [ 73.089739][ T6474] kmem_cache_alloc+0x4f/0x300 [ 73.094513][ T6474] ? xas_create+0x96b/0xb30 [ 73.099048][ T6474] xas_create+0x96b/0xb30 [ 73.103385][ T6474] xas_store+0x70/0xca0 [ 73.107597][ T6474] ? io_wq_create+0x217/0x6f0 [ 73.112345][ T6474] ? io_wq_create+0x4fc/0x6f0 [ 73.117121][ T6474] __xa_store+0xdb/0x330 [ 73.121385][ T6474] xa_store+0x30/0x70 [ 73.125474][ T6474] io_uring_add_tctx_node+0x111/0x200 [ 73.130879][ T6474] io_uring_create+0x19f2/0x1bb0 [ 73.135957][ T6474] __x64_sys_io_uring_setup+0xf3/0x130 [ 73.141549][ T6474] do_syscall_64+0x44/0xa0 [ 73.145980][ T6474] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.151892][ T6474] RIP: 0033:0x7f7506b248d9 [ 73.156311][ T6474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.165047][ T6468] ref_ctr increment failed for inode: 0x3735 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000093e67e82 [ 73.175918][ T6474] RSP: 002b:00007f750489c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 73.175939][ T6474] RAX: ffffffffffffffda RBX: 00007f7506c28f60 RCX: 00007f7506b248d9 [ 73.175949][ T6474] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 73.175962][ T6474] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 73.219806][ T6474] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 73.227777][ T6474] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:58 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r2}]) 07:41:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:58 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 25) 07:41:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 73.367409][ T6495] FAULT_INJECTION: forcing a failure. [ 73.367409][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 73.380107][ T6495] CPU: 1 PID: 6495 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 73.388791][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.398941][ T6495] Call Trace: [ 73.402284][ T6495] dump_stack_lvl+0xd6/0x122 [ 73.406920][ T6495] dump_stack+0x11/0x1b [ 73.411140][ T6495] should_fail+0x23c/0x250 07:41:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00000ffffffff0000700"/32]) ppoll(&(0x7f00000026c0)=[{0xffffffffffffffff, 0x8244}, {0xffffffffffffffff, 0x8188}, {0xffffffffffffffff, 0x8400}, {r0, 0x9eb61c469518ef67}, {r1, 0x1031}, {r2, 0xc100}], 0x20000000000000ab, &(0x7f0000002700), &(0x7f0000002740)={[0x7]}, 0x8) preadv(r0, &(0x7f0000002280)=[{&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002200)=""/74, 0x4a}], 0x3, 0x5, 0x98ab) r3 = accept4$packet(r2, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0xffffffffffffffc7, 0x800) writev(r3, &(0x7f0000001f40)=[{&(0x7f00000009c0)="1a2144f01e8dfb73ec31f79421ddef1af2a718a727c4aef2e41b66f4ff7e145271ac6b8931eaa22b7ff0fcf498aea50f1bc74cba221fda5ff8b1f81c84b01fc8e2a74c2998a8046a34f87d87245cf7b7a5c4e22bf44970896672eb5e60e7112c5544e3f3ae84bd141622b0706600e532d642d584d12c88bb2d8c2b2c813eea7ca773f247feff1b8cf119796873f78d", 0x8f}, {&(0x7f0000000a80)="930fb429c6b1c05144b572b77d3ab9e2618a0a0d27df6ea05b99dbd064fa865c7bb9bfed7c79d066cf5bf26a4446329f4ed348d76b4b8f3c7132f585abee3beb7499c8017b743cecb54049d5fa0e2b5a850f4e89e572a7457d56598db95c75695f70224f7a3167751607b5ee95ce150d2995aec2efc0e2699acfe3b4f87244bb8896197ef36682feab1b50661a5a17563229c9092c940f9256cc268ffe0ca30012d4ccababed57f4f965cc8cc145f79e31", 0xb1}, {&(0x7f0000000440)="1d83c8d742f7305897a441be45a873b58a14826de2599ceb2e569a9bb8b687", 0x1f}, {&(0x7f0000000b40)="94cdbd2725854c8f07b443a04889ff07a2ebb84fc2a3465e9dbdc853adef", 0x1e}, {&(0x7f0000000b80)="83d675631723d1337c4cd1fd99ddd124c063bd11b797c77318a907bc45103f3c6b678be436213747be2913a1aa43224f802bc31ef8e2ff8919009f7ed3930bcb1859028239362c671eb848e95f0ccfa9e9d4e79484f5977295430a0915222dc668922df11a77dd76bb0b63034a44873c96c419b2f4fcf3c60144706c1b17a3705b8a1b541769e286e51f32d80529e39fa43114b34ba9eb670fce8e", 0x9b}, {&(0x7f0000000c40)="64f9b3777e14b3761193c6909941d9aa41889e7ff173b3d0978c8be7b9132d1e8db2f46898e5487bc615baa65ac2b284c09960d82b6c35e7b2c585af63366e2877457a0104368b0521feb343e07a36e9733afbc2bca63ad8be3b723d748bebb57ff89fe050fd68b26225e977ea73884e02ab939f5b2583df06787fa6e57a020312caa247881a086f3c8b56439d502cce77b128c9c772f662777b2ab1d7975fbe5a44fff192c4042ab9415e9ed2cc068fc197f644db416db5dd9f5a66b74804ecfee8225248de21272f4905a5f833cfc7e27f0a1e04e56e5431c0d84615702a2ab227982fa0e916", 0xe7}, {&(0x7f0000000d40)="42bb045ee994e70a3fb77c85985e9b82d5b8670a4451b82011d627995e39e4d6dca9978ff3812351aef4c0540fc2a26c19d5df23274b528606f5d97f2c0f4500ebfc09088e5e8503c9fc1d867b1690d4", 0x50}, {&(0x7f0000000dc0)="1cb173662a332fbcdf64a82b6d4e1bc8e129d4ab75f195526a51e61c7731dc0deaa7caf80591c7e84ba5477bbf4e47092037d90c73f104acddbfadaa0057683c0a910b17daee8bd0b3bd2720c5bd27199a04168680", 0x55}, {&(0x7f0000000e40)="74485f0ad7440cca94df4b63446e4fef4dbe86692bbecbfa6196666146fd4fb4350a62c8760ab24cc1d6002a456e6ca8f2653ee85aec2b635025d611bf4ce063ff75e99b48f20d613e440e044de695023a06a69befe9ebe7bfb44d7a32535c4e98cc16789c50e23ad8f2f46000644239b5bbc5c5ba3b1ea2c71714faa2f5f86bac8ff5ac7a1ae6b2adb120478ce4dbe5dbcced395e787cd92a67ae87e84a1fa7cd7c20d547455c69242032cee18de45034f05e9c76f372295a4595120b5c47e20788500f3b3cdc93d5c88ece5eec6faa05e06379e307ca1ee694e8539785823a9b1c3cd307a6075b363ec48c00db89eaf45886c265a7b12bee8f51a477b219f7069b6feda674215d87c37b5c0081b1326f7a695dbd1a2586007d52855e062bf529257dc2db693356e516165e00264e4d1ce86d88b1eef525d410d9acbee4ca922cd16bb66800d1a6665438a0b306d5fa6c6eb174f18b905e8e0dbbc02c17ae08f99d7d21c6a0c083467e0e917924e52052c28657d73b22ae4167b38c56443f83a66a99641f20f366a6b316fd1df43dd68cd4be3eb21f131a8174949f51aae8c0542ffdad12a48dec045419d62017ea09bdbdff70180349ba52b9073d0e98096ae9938be1722f5b7c6dabfeb623e184e141406d26ebe4d36c8656ecdf7c52acc4b9c883cf92b9e7ee4631e66e598c5e0267ab613dbe03b010e995c4c755fdf810660ae95b02b6fccddc61f57cd8a76ef85baec6dd3bc23d03875c6ef04d96d31b845597e08f99280f2ecb75581625ef769a70a03c102372538dbf22895004d22b0dc9936ee01a2a00b6e027b49a4ab47d4f54f230748f196caa7cdab84eafea4943cc7989b8fd56243dd970ff2e7b06fbc77f06a9e0919b221aaddf558fc9d81b2bb58bfd628987e4854192f8fbc3ed32e8e453f4514b84438c7dc4d54afe573d4c766f0731bf81515f9078e286e7ad23c7facbed96fd8c4da151ce4c297c6582d6d3359cc1fa3d21ac471907a150d1be26ae58461d90d1229381a6a0ab1b4c317037ece841d296801ea79d78c458388891a601e1470f921156f4b9cfb979332c7e8781a9821a6cd5301b64a5543a4d2d00c5a75f4e74df5712727301d9208a7681abbe0219175612cc152acddcbd40d9fce7cf7ae85ab80ea3161e0cdd99608a92d644a7e2177ea992524b2364d9efc783948cf9159145198f08859f66b441ba18be4199a596eda12f25d9da3affe25ac4ac2a36a4de8357a1905fce06597130214441e21213e88038300ce07bdd16f403983e3ceb58af5cf45fed51ddc5551903549bbbf522f1ea98c41e78db1ff9c4acfdea6093c11e0f5e1a50a5f934efa7c0451b928e5781d3ccafe348700f9cb8455c2b0cd7e4a87e8960d3704ce1d37729c013776610f677d6a97ec494e8f2d9052f759f0855ed18f5b347ef23ac198cb88e531386d5fc976570cad9e7a383f1e97ef799acccd5bf8e3858723d5ea436c08ca61a8faaf14c03102897e25d02cbb6efd2a9e6ed84dd69b8f5a7208982faa280b66233d048fe408a8578993c9cc736f41303ab9327683e5619a0215de955d16def8eaf125e227a85855d46d5ac9d69df9c7c5ce29974fd9e1626710e1b66b05b8db9cfccedb22217e876f4f5d00ca1c28052058567753f5bb95de54e0824bd97061e561658663c1b13879b9243a56df685104b0f8f9c67727d6c27c6693c902587a35ee9e55ce9cf197f210030b626c6eefb2329799b81ac047212482ac86ed0598e965fc82ec01b59cf333913bc5b7db464c3eb5483f59a7ec8c2ec253e4f7537a75e89a74ca96e95cdd6d0d0e086847cea1113239de834bcf4564c2659c41f1ab993eaee8106a83ffac20e1ccbe419d2c4aa60cd85cea9b0d3b32f8e7302a3d7147c7c6ea3840731b900581113a0a461fe71c6e19ef3f9593ff2cc681b4fb79e961d18685784a2fb6eda6e8bea1a79cd3e038e697194ee865e7dd04b2e4927e1b594b2f5658a286bf3e4b1e7184e7fd5761388db91c84124c50f558063e3e56a636a842ef9c88b7f1e36d4158cb84a901caf9c2fe86fc1ba7a3bdd4c5c64ae8f2aa638b0bec1404db76c0a202de8ba5b2b81e24187ec489d1fd9923051fb68a9010f0baab2cb8e8d8050283d2d60ac0d44e646bbbc8dad6d369489521610f739aa87b5d5ec4713125ae8bbb0d13c3ad6ca687d990566f9138f02c5779125a2160a4193e7ef4ccb7c2d03f3056cb5f02cf29d3c6977e2da188cdb9685468bf89139d4a1d8a32f4d6d45bca50994a27842df696a956356ccf6546619e5caa2f4b8e8d36d5d460ebed340e375be529947504b63f3d7f790dd1538cc7fa54c76c1935ce8f4db6c82bc8569bb7f9c021d1cd1c8a3188f5f1e7fcf8c7c66ab8a9804e208465b871b1b4ebabd01ac1db658f7e816f691ec6d4fe12ca07c202ae7f9a7d83f2e0ebeaa6ef41f0150e87ab53b002aeb0d40adae5dd867bec58771d08875732bf76e94649ed4be9215a99fd2147bbbae867781e90e85eb72ce594dfbc567cb645b3facf8d8a03508c8d72ec00d960784b916513d5fc47f3a2052f740f6c3dd34b44ed982d58079348f327c9e58149e3933bb2e689c513e8e762dbb733d0e7ec251656a29933ba94cc6ef52e1c4405c54242824cd3dae163031e2e3590ada1fa16811b63ed2ec9acd2437fa6c4e1edec9fbf70b457bcbb2298d09ce8271b400e4355175dd9fcfd7d747e94a896548853dbcb679a916339038984af29fa6f4304d4411bc14674f39d0e48e7a4c2ef90353ce27fa7a14758dac8a6ac86c6df68d062e5fe971104b50070f070b4560c7e5dcce97805298f4529cd29b17c4dd1db5bf9e03a637d6c9cb4b70ad9fbf505eec87b3d2ff5da6c39acee7950d82b77edf2532b57049758da32247e4e6054555837a008a271bba931a71e51534926e9cc0aebc69d5137dad7ceb44417fdffb52ee5e16f5d5c5ca72a052c7c08477070115ae45dd6dfaf629d28fb7b35b1c204a5364080d21f7d600723ed6180663d9fdeae409f9156ce05008feebe1b42093e0a4881e02161d38e57b9c939cc81f0e6428205de3e75811f7f9b61c937683729da69d209ec957b7b85cb36dcd30d682f7815adf9459a8f784784cdea2df9517e8d39ab7da7412e15da3a0e9ca581c41e6e2d6c12c6e0938e8b6702148bc62b3be41f0f90656794e25841c86b4548107f323ced0a904020f1e5d0e1c6e9e34e0aee558d72e63c4b7a65548b21c3738c4326732e23aee1bab60819c7a044b6579a094d6b71f22c02ba12e1f4371cbe0ac1d94b189be349510d9946a5a5fcb6f929988ceee691732ebe46b4173b61208556e7de6cdab59749a8905b5fc679298f3c2af9b25c6c77b7fe19ca1e804ae2083ebaeaea3b506fa980c093b1604d913f9e081a4fa5a3675315f8a2950e222abe3711558d6f785eb9eb11a0bcf0f3b2034ad9d5cdb8b4b83a950866fe4d707b392f160f8028bc75d93610522a2c0aef417df4ba583036197560db4aa2fc2fbe96f378a3cab6e1846fe7b2bc8d7e436a73b1fb0ddcecc71e9d5eb11447aefcb2e16b3a376426ee3f54926fdcb06d13eb9c98d31df844a531a36a056f6590f0d442911fb2a699443ca13f0763ad62d686632c786355addb50390390c0b064271b85b07a6c236a090330c7ba83d274eb72ca792fa62490a11cd8a637666067124a88d485826d295a1eefcb730dcef1375636642f530b9cc08ff383557ed4a09e94a16d3e8e25095103c092303e385ce0af3760666ae39cbd0c08db27dee514a9747afba8f3e0dcf6eb422ad4bcf6bd0c21dfdd2d02b4eabbd4f5e3e04e2cb53874221495be339488642ad7cdf3e2340f327fde556680624829e5e069fdb3ba82487f101c3559f997041e75f0b9f8ce3e28fca14bfa83fc28c512c7a18be659f03450b643f0dc1b52483e1cea12ed7f0723eccbd50c4150cc69baea6d96a9836a8c0b04be71073ddf34a9fafed359838a5252dfdacb304dea72427b79160042f49aa4d149e4762c9e7eeeb47aa2d54c3a524779df89fc98c1adf5890982ff17bcfbe20ca60ca0c4e0c21ebe87192d4a5a6045672a130543559589452ffe2f8274b3995cd74d86ba7e8b460b9d1d1f2956f63eaaba99f0273563bde3743465551aeb6110ab8f06d6e61e199211dd84e1cba29e138897da8250259988defbe857ed9188c7ab89dd6a82058d864f400495eec7a05d1e480a900c40524491dc743d1617712ac94fa1e0c1e1bab6741b5df14bc1e6873a5beb0d60ea1a172895c82ae8ec500df6d95a0c4ae2a024785e7cda0c038f2a9c01b990c38ced4683d8606dea4042f2cb6534fdd6959fdb3c87c2b472abf9ffcf16b14d575495753591cf79422155db73a57221d25a6a0537f68443ad685c9fef26c14d4b2bcd9fd8b251c1ff2bbd71a143a0eac826405555b9e012f35994c51a9e4155f6943c142decaa2e2e9d015529d0bc498ff6d480a8cd60f618e7d001c03cfb621aa78ed6cc5d814634eca6a906edf3f93a662b786756a950c7d55480b6d02fa7f3beb440f88244972c44772395e5b134913ff10c86aded2fbe1405a82ab716adfa7588d30513e0933a9034dedb33516ba3dcd29282ca3964dc5d77e795bcec5eeccacce28559200765c6cd9f7b1b38d1e8a304eed41f42c45cc8b97d00bbb415e140d680629513b54e3e1814e8cf9631f4fe54bb3a661c6fa06a2ea8595bc78d27cc75f9c8e042550cf1cc16352900484175da963f3e5ffd923ec291d5f791aae6e5220b811e4084880e2e9090cb3213957948b7b2b63168f5ebe7928de2946d448300adec0f4d4a9f0e6e433621dc208aa08f2af777703470816cdc105a1e96bbc2724d96a9105590bdb919f6466989e0f95bf9899199cb987c6686230376c5a72fff34fb567e664cb9d1fa8d67a5007a027d3b5a25cc9f0761bba136ab3906ca1a7510fab63061d34770ecf5b1718529308115e0143d4789693aef78cb5a96df51b056c6f82f44403d7e23769c83c26d066cdec00a4aebaa03ea4627559d9907823be3eacc672065e5905506de26362b6ed715d0773af27cfe8b266cf36fa2725742f687be9322771194e7e80b3c897ed272fa1526e18e16e388f672103671226b9cf32c075948e9f23cb96b3003ec9d87199a5a0df85c880728ba924a5c059082bfcc9013141ba948eea2f7c2e07b02e45e4d35bec3cfe688fe3d59e77f23751025b4bcb6f0b255c65ce081927be0f115d7aa442aeccdcded5d9840b783a4b5be8934bbdb6398e755fe17c9c3fe4eebe77554fedb6961bfe17efc98debdaba4a6269b280443fb3c08c6d571e2f4c90daeab2dee5bbc4949b3593119e1238c3cb8174d63716a6234300241cd7cc4950cfada27ad7048e729a4ce3503963487812147555104a167301137803be88a2ec8f89ec281d7ec15346b9dcb1c1d8c10bba441dc39b11a6582b1dd6669ce5f038f54e9c5c0b1136f8fff092aa4c45a29543bb50843352e5754d472f401bae21f24274a61026edbb611937f3d652f55e52d64178c3f6db3468aa01c018a388c50f3f53dfa32ac82c485c7e1380ebf40083778ee272d7803c0b1b2af33566a3fc0a94fa654e31cb492e1186832d8233d52d6132158c894af74cbec8dfe5372cb291dfe664beaed445974cef87bfa6e3142c1fc9561643c1608702e24b51e64ff384c23c11e129848c48ca8e4e73f8089b09b7ffc31c6feb15d06f2dd4f77736b047598b190ef0d3d02eeaac6255534327bb4fc2fc57e1bd695a0fba", 0x1000}, {&(0x7f0000001e40)="8a6ae89fe5ca18b2da3b8d8ebb26e2b74ff54394e198988b239cf6cb548837c8da2a5413cca21f06708a3decd915631c4552e653fabb0bde00563ad0e127fb73896c72fb11a75129e20c86b3f1aaa59af43f9a1600b252d798f31aba1f8861b8b557153f489e7f36a60304515d678f4e9db0ea836fbc5a8d5df09d61abfd9433b48cedaba62f35e0f061ab43aa911438cdb522c3642c25c4c559e851dc1d362ec0fdae9efad7b56b0e1377bf4a71048bf786babddcaf65f0f08eda25371e03edae934272039cb10280c0", 0xca}], 0xa) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000022c0)={0x8, 0xfffff90e}) sendto(r0, &(0x7f0000002000)="a9e9ae9896679ab717ac6631a306cb3cc8f4a649b1df70b1820c30ecd6d7c42961468dcb28ff943832e632a511e90e78d96772fe", 0x34, 0x8080, &(0x7f0000002040)=@nl=@unspec, 0x80) r4 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000940)=ANY=[@ANYBLOB="0c000fd2fffff06409f83d00000080000000000001000000000000000000"]) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000003c0)=@ieee802154, 0x80, &(0x7f0000000140)}, 0x3f}, {{&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000780), 0x10000000000002ff, &(0x7f0000002780)=""/102400, 0x8}, 0x89}], 0x2, 0x40000000, &(0x7f00000008c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'vlan0\x00', 0x2}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) writev(r5, &(0x7f0000000980)=[{&(0x7f0000002300)="3cc429753a26e59e9db6e38dfdb5bfb71369fa037bcd2dec2101cb72869e8f35eccd69acde54dca5ee8b38bd3f1af22404ffbd8e742157dc266e3aa11db5fcbe59e87e27862b8d684ea375a44e88d4b06cdda995a6a372bef396412f7ebc32f23ddb64ad5bfff21be5e6f1007944bc4445b87d35e8612d7c9b5f37b5bb1d080700a40abdeca36caba3e0c324102be300aa76a8e02e64575fd213dee1079e29e4d644e9bd76911ae883a33945266cbc60c8b98d711e44c9a1539b6add134ba27c2427fb0a2a82fdc70e12d65359f29a554f3165d84df135d0977708f8bf619a56a7134fe9adabcfea7b", 0xe9}, {&(0x7f0000002400)="3f1b0d058c0c979e5a7c155cf76d0e3e6d2d565c4594a234f3aa6667a415df0fedb1e9976aacb11dfedc5f5863955d0e617ef57102d496e6b68d3189f95297d7b225c8576136b465ab69651e7f83c808a69a87c056f7d3e436c8e75f6290dbc00fbeb2af96aaacd2d4a8", 0x6a}], 0x2) [ 73.415571][ T6495] ? xas_create+0x96b/0xb30 [ 73.420090][ T6495] __should_failslab+0x81/0x90 [ 73.424861][ T6495] should_failslab+0x5/0x20 [ 73.429440][ T6495] kmem_cache_alloc+0x4f/0x300 [ 73.434207][ T6495] ? xas_create+0x96b/0xb30 [ 73.438745][ T6495] xas_create+0x96b/0xb30 [ 73.443081][ T6495] xas_store+0x70/0xca0 [ 73.447250][ T6495] ? io_wq_create+0x217/0x6f0 [ 73.451932][ T6495] ? io_wq_create+0x4fc/0x6f0 [ 73.456664][ T6495] __xa_store+0xdb/0x330 [ 73.460921][ T6495] xa_store+0x30/0x70 [ 73.464917][ T6495] io_uring_add_tctx_node+0x111/0x200 [ 73.470307][ T6495] io_uring_create+0x19f2/0x1bb0 [ 73.475334][ T6495] __x64_sys_io_uring_setup+0xf3/0x130 [ 73.480807][ T6495] do_syscall_64+0x44/0xa0 [ 73.485237][ T6495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.491150][ T6495] RIP: 0033:0x7f6e743e68d9 [ 73.495566][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.515186][ T6495] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 73.523657][ T6495] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 73.531648][ T6495] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 73.539663][ T6495] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 73.547639][ T6495] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 73.555681][ T6495] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:58 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x3, r2}]) 07:41:58 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) fstat(r0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fchdir(r1) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 07:41:58 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:41:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'macsec0\x00', 0x4}, 0x18) 07:41:58 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:41:58 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, 0x0, 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 73.763139][ T6495] ref_ctr increment failed for inode: 0x3729 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 07:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 26) 07:41:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, 0x0, 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:59 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_matches\x00') fchdir(r1) rmdir(&(0x7f0000000180)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) [ 73.807917][ T6534] ref_ctr increment failed for inode: 0x372f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 73.867804][ T6545] FAULT_INJECTION: forcing a failure. [ 73.867804][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 73.880509][ T6545] CPU: 0 PID: 6545 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 73.889305][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.899416][ T6545] Call Trace: [ 73.902691][ T6545] dump_stack_lvl+0xd6/0x122 [ 73.907415][ T6545] dump_stack+0x11/0x1b [ 73.911574][ T6545] should_fail+0x23c/0x250 [ 73.915996][ T6545] ? xas_create+0x96b/0xb30 [ 73.920513][ T6545] __should_failslab+0x81/0x90 [ 73.925292][ T6545] should_failslab+0x5/0x20 [ 73.929824][ T6545] kmem_cache_alloc+0x4f/0x300 [ 73.934595][ T6545] ? xas_create+0x96b/0xb30 [ 73.939108][ T6545] xas_create+0x96b/0xb30 [ 73.943450][ T6545] xas_store+0x70/0xca0 [ 73.947698][ T6545] ? io_wq_create+0x217/0x6f0 [ 73.952394][ T6545] ? io_wq_create+0x4fc/0x6f0 [ 73.957214][ T6545] __xa_store+0xdb/0x330 [ 73.961487][ T6545] xa_store+0x30/0x70 07:41:59 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:41:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00000fc549cd1dfffffff0000200000000000000006b00"/32]) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/189, 0xbd}], 0x1, 0x7f, 0x6) fchdir(r0) r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) ftruncate(r2, 0x7f) rmdir(&(0x7f0000000180)='./file0\x00') [ 73.965557][ T6545] io_uring_add_tctx_node+0x111/0x200 [ 73.970944][ T6545] io_uring_create+0x19f2/0x1bb0 [ 73.975888][ T6545] __x64_sys_io_uring_setup+0xf3/0x130 [ 73.981354][ T6545] do_syscall_64+0x44/0xa0 [ 73.985793][ T6545] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.991702][ T6545] RIP: 0033:0x7f6e743e68d9 [ 73.996137][ T6545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:41:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000000)="70f058646115d807805aab3ebb71fe5173ae639f3770507a7b63164c68b6dbbb141cb23dc5f50193423d76fc26717d1f916562959bc64e3f5adfe764bd8c5d9c84c70691f4285ce476603e765843e71024bccaab9643972fb3985103d80b5a52dbe6093b181fd9087fc99a4350c946bed664ff95dbf66b215c1f9ba1ab0a9ddb2ce804b05cdacfe3", 0x88, 0xa74f, &(0x7f0000000100)={r1, r2+10000000}) 07:41:59 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) [ 74.015769][ T6545] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 74.024186][ T6545] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 74.032171][ T6545] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 74.040153][ T6545] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 74.048124][ T6545] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 74.056095][ T6545] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 07:41:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, 0x0, 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000340)=""/235, 0xeb}], 0x5, 0x2, 0x401) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 27) [ 74.087690][ T6545] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 74.108921][ T6562] ref_ctr increment failed for inode: 0x3742 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 07:41:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:59 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:41:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0xee00) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0xee00) setresuid(r5, r1, r7) setresuid(0xffffffffffffffff, r1, 0xee00) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r8) rmdir(&(0x7f0000000180)='./file0\x00') [ 74.174308][ T6579] FAULT_INJECTION: forcing a failure. [ 74.174308][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 74.186956][ T6579] CPU: 0 PID: 6579 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 74.195707][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.205783][ T6579] Call Trace: [ 74.209081][ T6579] dump_stack_lvl+0xd6/0x122 [ 74.213683][ T6579] dump_stack+0x11/0x1b [ 74.217853][ T6579] should_fail+0x23c/0x250 [ 74.222358][ T6579] ? xas_create+0x96b/0xb30 [ 74.226901][ T6579] __should_failslab+0x81/0x90 [ 74.228038][ T6585] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d [ 74.231671][ T6579] should_failslab+0x5/0x20 [ 74.247792][ T6579] kmem_cache_alloc+0x4f/0x300 [ 74.252568][ T6579] ? xas_create+0x96b/0xb30 [ 74.257080][ T6579] xas_create+0x96b/0xb30 [ 74.261456][ T6579] xas_store+0x70/0xca0 [ 74.265622][ T6579] ? io_wq_create+0x217/0x6f0 [ 74.270368][ T6579] ? io_wq_create+0x4fc/0x6f0 [ 74.275067][ T6579] __xa_store+0xdb/0x330 [ 74.279381][ T6579] xa_store+0x30/0x70 [ 74.283374][ T6579] io_uring_add_tctx_node+0x111/0x200 [ 74.288872][ T6579] io_uring_create+0x19f2/0x1bb0 [ 74.293824][ T6579] __x64_sys_io_uring_setup+0xf3/0x130 [ 74.299315][ T6579] do_syscall_64+0x44/0xa0 [ 74.303747][ T6579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.309684][ T6579] RIP: 0033:0x7f6e743e68d9 [ 74.314106][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 74.333721][ T6579] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 74.342170][ T6579] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 74.350143][ T6579] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 74.358110][ T6579] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 74.366079][ T6579] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 07:41:59 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 07:41:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 74.374050][ T6579] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 74.383694][ T6585] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d [ 74.410236][ T6579] ref_ctr increment failed for inode: 0x3743 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 28) 07:41:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x200080c0) rmdir(&(0x7f0000000180)='./file0\x00') 07:41:59 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 74.423569][ T6596] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d 07:41:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 74.500105][ T6611] ref_ctr increment failed for inode: 0x373e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c [ 74.522016][ T6610] FAULT_INJECTION: forcing a failure. [ 74.522016][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 74.534707][ T6610] CPU: 1 PID: 6610 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 74.543439][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.553502][ T6610] Call Trace: [ 74.556783][ T6610] dump_stack_lvl+0xd6/0x122 [ 74.561415][ T6610] dump_stack+0x11/0x1b [ 74.565653][ T6610] should_fail+0x23c/0x250 [ 74.570112][ T6610] ? xas_create+0x96b/0xb30 [ 74.574709][ T6610] __should_failslab+0x81/0x90 [ 74.579487][ T6610] should_failslab+0x5/0x20 [ 74.584007][ T6610] kmem_cache_alloc+0x4f/0x300 [ 74.588859][ T6610] ? xas_create+0x96b/0xb30 [ 74.593381][ T6610] xas_create+0x96b/0xb30 [ 74.597778][ T6610] xas_store+0x70/0xca0 [ 74.601945][ T6610] ? io_wq_create+0x217/0x6f0 [ 74.606631][ T6610] ? io_wq_create+0x4fc/0x6f0 [ 74.611333][ T6610] __xa_store+0xdb/0x330 [ 74.615592][ T6610] xa_store+0x30/0x70 [ 74.619637][ T6610] io_uring_add_tctx_node+0x111/0x200 [ 74.625095][ T6610] io_uring_create+0x19f2/0x1bb0 [ 74.630117][ T6610] __x64_sys_io_uring_setup+0xf3/0x130 [ 74.635581][ T6610] do_syscall_64+0x44/0xa0 [ 74.640007][ T6610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.645978][ T6610] RIP: 0033:0x7f6e743e68d9 [ 74.650421][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 74.670053][ T6610] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 74.678539][ T6610] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 74.686607][ T6610] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 74.694580][ T6610] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 74.702555][ T6610] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 74.710528][ T6610] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 74.726101][ T6611] ref_ctr increment failed for inode: 0x373e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c 07:41:59 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 07:41:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x168, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ZONE={0x6}, @CTA_LABELS_MASK={0xc, 0x17, [0x81, 0x7fffffff]}, @CTA_TUPLE_ORIG={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc84acaab04dc1af6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000800}, 0x48c0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) write(r1, &(0x7f0000000040)="ada2f61c", 0x4) rmdir(&(0x7f0000000180)='./file0\x00') mknodat(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 07:41:59 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) 07:41:59 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 74.741089][ T6624] ref_ctr increment failed for inode: 0x373e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c [ 74.754942][ T6624] ref_ctr increment failed for inode: 0x373e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c [ 74.767828][ T6610] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006bcc5534 07:42:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 29) 07:42:00 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) 07:42:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x5, &(0x7f0000001380)=[{&(0x7f0000000080)="10e502", 0x3, 0x1}, {&(0x7f00000000c0)="56ec367b77f4f21daf15d71f02c0797bbe76a18631d7cd22830113898a9f7c6a915fb5c4f5a04689eacef0801ba0f942ad04f0ff79595cdc9da1e49af3f3d7675b52a949607c6e063e6d13f66826e045f1fbf773a66169f9a0d44f968670b9d180d0ec430c47d5e745565d13bbe19feec86baba0", 0x74}, {&(0x7f0000000200)="8a4d8aa3bb373000da7caf5b8a59ce929f1546a11f8bf55145733f1af7923c8bbfc64a845f86fedd820d7c8f307ca153a38218ce59959084a7a08fde49251e6eba339fa774e12fd9c30c6efd29f2c2", 0x4f, 0x7fff}, {&(0x7f0000000280)="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", 0x1000, 0x100}, {&(0x7f0000001280)="be792ef956798cd9f98fd4afadc4179a02cc170cb9ee8158d160da4c746babef138d436bf79f1f5b44dc21129f4fd04b22b4b715d40f2bf696c172785264209ffd348c4e3a36ce7faf5a76ee64e98dd4670f70bd32cba31f37dac8b4bde5bfa5cbeb2e9af5bbcce95f864e633c2a380b51a5ab27f0b13023dcad327473aa1c6ef71c32102bdcdf5becae309ac9f1b39e2ebda3933ad9454f67606c48810ebdb962bad0e1abe4af0258ccfa4650389c901eb9e517b950c2eb13ad3c0832c3056ca002454a7d2557548aa69e0f321082cc699af926cf4cdf869ff55fd5", 0xdc, 0xffffffffffffff01}], 0x40002, &(0x7f0000000140)={[{@dots}, {@fat=@sys_immutable}, {@nodots}, {}], [{@dont_hash}]}) fcntl$setownex(r1, 0xf, &(0x7f0000001400)={0x0, 0xffffffffffffffff}) rmdir(&(0x7f0000000180)='./file0\x00') 07:42:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 74.896456][ T6640] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d [ 74.917091][ T6652] loop4: detected capacity change from 0 to 16383 [ 74.927242][ T6644] FAULT_INJECTION: forcing a failure. [ 74.927242][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 74.939902][ T6644] CPU: 1 PID: 6644 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 74.948580][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.958635][ T6644] Call Trace: [ 74.961955][ T6644] dump_stack_lvl+0xd6/0x122 [ 74.966554][ T6644] dump_stack+0x11/0x1b [ 74.970719][ T6644] should_fail+0x23c/0x250 [ 74.975137][ T6644] ? xas_create+0x96b/0xb30 [ 74.979742][ T6644] __should_failslab+0x81/0x90 [ 74.984582][ T6644] should_failslab+0x5/0x20 [ 74.989108][ T6644] kmem_cache_alloc+0x4f/0x300 [ 74.993934][ T6644] ? xas_create+0x96b/0xb30 [ 74.998486][ T6644] xas_create+0x96b/0xb30 [ 75.002868][ T6644] xas_store+0x70/0xca0 [ 75.007036][ T6644] ? io_wq_create+0x217/0x6f0 [ 75.011792][ T6644] ? io_wq_create+0x4fc/0x6f0 [ 75.016480][ T6644] __xa_store+0xdb/0x330 [ 75.020745][ T6644] xa_store+0x30/0x70 [ 75.024891][ T6644] io_uring_add_tctx_node+0x111/0x200 [ 75.030324][ T6644] io_uring_create+0x19f2/0x1bb0 [ 75.035277][ T6644] __x64_sys_io_uring_setup+0xf3/0x130 [ 75.040749][ T6644] do_syscall_64+0x44/0xa0 [ 75.045238][ T6644] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.051199][ T6644] RIP: 0033:0x7f6e743e68d9 [ 75.055683][ T6644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 75.075298][ T6644] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 75.083775][ T6644] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 75.091759][ T6644] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 75.099731][ T6644] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 75.107711][ T6644] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 75.115759][ T6644] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 75.125301][ T6640] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d 07:42:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, &(0x7f0000000140)) [ 75.144166][ T6661] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d [ 75.172736][ T6644] ref_ctr increment failed for inode: 0x3729 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007263fbb9 [ 75.191450][ T6658] loop4: detected capacity change from 0 to 16383 07:42:00 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) 07:42:00 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000200)={0x0, 0x7, 0xffffffff, 0x1}) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:42:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 30) 07:42:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="d2735b1a6d2f256ff1f54a57880b07ca7510751472a50b63834ab25cfa231d8263d8bc4c2a46acd1e3054fa5a10f8c7efaf5b9ccd9d1d63afbb657f059ff85c3ac76366b0bc7bb60988d70daf30b632db3a15a1a845b49acfcf2d0f93c72c236ffa3719cf24a8a8b67f1eb5a78b299aa8be32d0e3e629a65d9ee7b24844870274dae1c6a71f0e8e2d9aaa52643eb51f2caeb43673db04ef129b9aaf73aaf56faefa7390974438c35f64ead186ca9aec970eb6043e9e4343ee15f14af7230333ef70cf3038fd525c3") fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 75.242627][ T6672] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 75.276614][ T6682] FAULT_INJECTION: forcing a failure. [ 75.276614][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 75.289296][ T6682] CPU: 1 PID: 6682 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 75.298046][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.308265][ T6682] Call Trace: [ 75.311548][ T6682] dump_stack_lvl+0xd6/0x122 [ 75.316203][ T6682] dump_stack+0x11/0x1b [ 75.320437][ T6682] should_fail+0x23c/0x250 [ 75.324860][ T6682] ? xas_create+0x96b/0xb30 [ 75.329404][ T6682] __should_failslab+0x81/0x90 [ 75.334214][ T6682] should_failslab+0x5/0x20 [ 75.338873][ T6682] kmem_cache_alloc+0x4f/0x300 [ 75.343734][ T6682] ? xas_create+0x96b/0xb30 [ 75.348240][ T6682] xas_create+0x96b/0xb30 [ 75.352697][ T6682] xas_store+0x70/0xca0 [ 75.356854][ T6682] ? io_wq_create+0x217/0x6f0 [ 75.361576][ T6682] ? io_wq_create+0x4fc/0x6f0 [ 75.366245][ T6682] __xa_store+0xdb/0x330 [ 75.370549][ T6682] xa_store+0x30/0x70 [ 75.374516][ T6682] io_uring_add_tctx_node+0x111/0x200 [ 75.379876][ T6682] io_uring_create+0x19f2/0x1bb0 [ 75.384795][ T6682] __x64_sys_io_uring_setup+0xf3/0x130 [ 75.390238][ T6682] do_syscall_64+0x44/0xa0 [ 75.394640][ T6682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.400522][ T6682] RIP: 0033:0x7f6e743e68d9 [ 75.404920][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 75.424775][ T6682] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 75.433180][ T6682] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 07:42:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002c40), 0x541000, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x1c, 0x0, 0x808, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002e40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x125441) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a31ac383cd0d1f846a1f5d7a313759eb780e6684cd5a4b2e3162f42c57ada86a48cb3333fa0fc0cfc1a8c42fb4ba5b256df9a4342433a75ad45997e672e8b228ef0251ef129c0101f0d83f11c141425ec777b1954151e0302331f314458fd9b4bb67d64eea450327fb128b4e288e6413ac66eec7fa7963da3de738553cc0a591700040000000000000a2733e2939ec0e53b35bd506ddefc699a963bcdbbe2b8b47b6bb2250ba7e2f6af166973dada8b834d7daaf15526c740e6151593a08222f3f03d0329bac0978d333d20655e6ae66fbfbdb495d843159ecf2aa86d6aabde389c6f9b"], 0xe6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x81}, {0x6}]}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002b00)={{{@in6, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000002d80)=0xe8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000100)=""/37, 0x25}], 0x3, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x12100) r5 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x8, 0x0) sendmmsg(r5, &(0x7f0000005800)=[{{&(0x7f0000000600)=@l2={0x1f, 0x4}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="97ae37ffdecaad146ec656542a8f5620e2b486d25f92a7c61c698b610f034cebdc4dda79c2182521f574ac3a7323ca78a1a1f291a4bd7d5595b00e720f3fc1aeb222b177d971ab27f04e3b480b5e1f0a46f9848a4ef2e32972759a24f0028fc7a7c23a1928a05ac06030b1f0676279f9c7800bb173811b5f9a7e3c8090f07861b41cf811f87bd765170ecd05891af481788b710b62f84c00755036ca3e652e6926c06d47ebcb1ff4a23275d053a34a6af683e4279b1d2f27452e3980f6201a7008e7b937903a1f9dadd4a5e04b0b3ed334351fefdb588b4d448d8a274aeb1cd70eb14e4b32e63a875b22", 0xea}, {&(0x7f00000007c0)}, {&(0x7f0000002e80)="d73f614530bf7f0c6b97f9933a7fe5beb4834c8a540468de562922f0c11cfcb46a7e1784d4827d902a9e081bcf0416fbac95e8c5735c9ea4e0a9ab86ac", 0x3d}, {&(0x7f0000000800)="ca77911dbdfc8ed3678ef21469fe455968c7bfe4ba64ce9c6219a22b862364ae252e3c058cf774ae5b0f7f7fa109fa6bc0c35d732f9e2563da9a2a7cadd643c98d15aeb9c1bfddfe9ed3b504bd71bb90403fdf6c1a80324e69c1b21e142eb15d9de9d9487ed6784000ae499ac06cd2a9fde43e961709da43af8cbaaaa519f1b2b7a46b5e9d119360dab7480870d6c63d5b34870de15bb5bd5b824e9edf60068a30c6", 0xa2}, {&(0x7f00000008c0)="d34fbd6dd77d134bf6ea766fa4d0b328", 0x10}, {&(0x7f0000000780)="a7964e0793d500000000000000040000000000", 0x13}], 0x6}}, {{&(0x7f00000009c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)="7014205079d81e6f4ea872299d4dbdf487e4c10fcd6fcc4f898fe9753802540c11b9808293d89a9c501ef3d195aa0b5815129fed6dc9636d105fc82cb94703ecdcf33780d3aebea601eac0456cd717d01c6db54bf253521a02e7afc74988830efb5c5c2d1ad0390ce374b164a90ef829dd204696bc05d66441cc66fb3980f9c21f17688f70d2e7e1d2734b0e292788e95d3233d1832a98d5c8ff7834c15ed5dc637f4e60b3ba2afd688e3bf655f9e07618a2816e8c88fb334cb84ab0aaac35e09874f1be93fef7d2f4908ba8b06ae9cf8ebd67e6fa8efcba4f3c9803df8e57c2baa629d794cae7", 0xe7}, {&(0x7f0000000b40)="3adc062d40786302e0b033ab75d47b5085f465885c84afbb8540ea22d4ca94866de6bb2b115edef4f848eb970845b47de1f320be672efd6e9df99f088e6afd5e35cac04441274047d96f5eeb63e8e0dea81b1b80c6e366c760eb1f5404eac83290f92db44741c41c557cb0932ecb1199e3547febbdd6859fba40a0f6bb31702b0a9f89668438787a73e0029c4eca36817ccd34ae24f3d673080c0918a47b45ea78eca8ee369b8d96a8864c6d61ba4861656077276de15224f1178be8f83537e1a1a3bae5c2830291bc54edab", 0xcc}, {&(0x7f0000000c40)="770eba985ef44b37dc00f49d2bad5e0ee6e3c65d81f0ff6eae23ab7f53dcf670c746906521267910ce9cd3007bc14b2411eeb6170e40b45fa48072556b42273a1516d59d7200ea75474177c73d85b884070b30997e790e3b", 0x58}, {&(0x7f0000000cc0)="ddfbb634a44bcf765691f24fb9127b0529464cc5a037cc80d280c4f25ec30bec0973584bd7d4db4816b62fb897e5188c9832f264370a05cb483709c1fb60c6b79ff54658e2df9a18c0219bb856e56cce54ce037d7383c281a13ce044ba46ae88af6d4645c15aa043a2de7296f1f9fc07b89d389fe82a5311783f063a05766076d66d86b4da0d173134acda138fc4167c350b1463a409a6d2388ef88a4e0770e46bde02fa1de7a9eb2c3ef3bee05fbfd62526b7124d0adcb8c99088d16b7e72bcf97490ef2b74e21d4756440f16d63e937e6634af69bcd66fb8ed0b83ab439f20fd995189", 0xe4}], 0x4, &(0x7f0000000e00)=[{0x80, 0x198, 0x5, "cf7de9188df6b6cd00c270d271ceb8b5ddce5e12832d12b9e2d5cdaac430f37fe14061810d20f8769426019c01393aab0f29427f99879b9fb6f0adbf1811b0e276562f92ba78954b370d076db5bdfe6a54a5bcb87c80a1b0da74bfdbdf50c55644d27f7aac4e2d58665c14"}, {0xa0, 0x100, 0x80000000, "3ed743a4f6246187e305b3ddca685af31c85197d90456e923f236d0166617fcadb574fe76b0644e57bed9f2fe440c71063d725fc885d26bdf5657d2a094811da2710732627863251b0766c38533fc17274f0ee94cad81066ee835f44748b7cd59eefd5d9a3608b0c7df2d1a6bf5c8a01e0217d10cf1c4d9726cf5da79d5a2b09f5ce896bec400095d76fed35f003f2df"}, {0x108, 0x113, 0x80000000, "8deb54f8ae217eb854951537cdcdccc1a6d9920cbfcb3e720bc159a007b9724fa9f4f9f1557125adf0ef51b94fdea2231afaf10bf818e7d42ee64e547641a4dafcef5c88bdc58b75c0ed98e8cdb4f80ca2647eac90a86426aec71ce83622398c2854569eb322b5efc6d5496304fcc9a2be4549c1e88aae17803f3a18b79c9d98f557008de581bd23825c8ea69b001ecdc71d017411333a2e8283c765813443849cb3959614e04aa9bf0aff639e391fc4d991f87e206dd1cdc76a2910c4476865355bf85fab13d918e7dc51506d2889d5a5ea61e95b52cae3f0d49537e6908195bc3c91961543c686b7a154dc90b01d651881c60a0c"}, {0x60, 0x88, 0x1, "4c06c82919976fa6ccfd7dfa355295349f68ecc2a8ad538f3d220cbf72dc6c7bdce4a3ff3a58f9416e35fb487a8685a2c7a29c9ce5ff94c5717a47ac8a65b5efcaf19242debcc3f2a0043ea4f3135129"}, {0x1010, 0x11, 0x7fffffff, "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"}, {0xf8, 0x84, 0x3, "dfa2a108ee8b6082978100a9d7fc073ea4837a3c23e52fba2f95df6847cd8c3078177537534e834b23e67c299ac0f9fa10fc5308e66855ff3914dffe607698bf7aa31bacab3858a07e46f793ad2fdebf1c49d737a3a3a976c90a0b5d7066905013404141aae332fba6ca81b63acab938a82dc8df912678f24c27714c60fb04584edca11a3cdb527dd4f238e5ef252a433a1425dd38abe7fff0b100a50b774cd59b3c9c14f9b24f3970f9c582c775a9b414d527cb536a49994d310984d9c1d03f45db9aa95472f54af7d7a6a3ef0fd711b8aee70b1b33ccd4e54022565aaff92f50f2a3b1ceeb"}, {0x90, 0x29, 0x77, "5b080e270edabb62ea9694fd9ee4d43e68e6123fc671f03f712259128915bf066fa92991b35e3627cc367b2a1dab93928531a78b748b071f71340d73bd05e0d78d4d462050ab0082d71ce1c4a29931ea69083818db05f58c8d7a25502c28fb31e4980b30f8a15807ddbdb8067c7d546350220b1bc92b152b2078"}, {0x61, 0x104, 0x7, "639f6e05daa72907478f224c6ba003436c0865c4f2fcfdb173894d8e6cf95d7efe9ac5eef2caa79abb2e28eaf07e18cbb2625a67a954e39bbfcd2aaf2f447548de89eae13a943401837596e34905eaf1ec7c19d6687398bf942c7e6e686a7f912a5acf2a85cbd40b2bfcd04f388eb85a1ab83acb4b8942c9d1394ba3764769094b8b"}], 0x14b8}}, {{&(0x7f00000022c0)=@pptp={0x18, 0x2, {0x83, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002340)="73c0c26d82b71a58b94f48e62a34912bdbf0bef92153e19b99f683313718408dfddaecd9a0cfeac1bf03aaf837454789cc48f8b504fb63a5d46064ad42", 0x3d}, {&(0x7f0000002380)="9b54e95c79dab9790edf9ebe6d07240b30cfc9042070f88dc879a201dfdac4f7ab00f890863551c54b5f0a7e72ed05f49cd9837e45ffe218a64a1c989f9ba0231843e22a33d4f6027d81e764256895bc2c17a4fa39a451fefc4591599b22a967b60505608e94288e95bd6eb8d80fe433ae000e6b59127671efa90aa11b044e6caab13e75756f7ddd3e14ee65376478f10d70cd98aa43bcfc661d93b41aaaf517453f22ad87e476b84bcbb9dfd7c2d61764", 0xb1}, {&(0x7f0000002700)="9d2896a27945503f52c3280351ae48b68dffbd4aa223c5692109a928834f5b6bc1f5ac644f90f5ecd6390ca3e48ad7c9155420b681d918d98ce61170deef7d9da88b094243f452b4080246727f3fc254be1222717f8fc34f43d67920956f93", 0x5f}], 0x3, &(0x7f0000002500)=[{0x100, 0x10f, 0x1, "d638ad4a01acebfea16e385a05e1a33e927dc22ec1c551537f7cb38061c2fa7db010cb8c2033c3a7cdf3b4805f42bc4a2e4c336cedd108730d74de4ab9c2e52748899245d44aa0554d6f16542826e50a69568299b0f1b9abe88e319d33a641f5f2c0ca2595da115eaee548440c95fbccfdaa1679b3eae5a4d9e0623415eb7a5bff399108c2ba972b0b857fc245b1456e2a132c9faf291aa6336234ba5d96e48fbd04a41370742c64268ad486c4ab78e89291bc78f1aac6bbf92ddcbac93d5401bdc3d54186d7bf1ebb7ab7aa44379fb4d91058ceaf3a6ebba46463ceafe3a92993f3e4119554ce007f9f33573f1f94"}], 0x100}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002600)="142d64d70b282c14ece057dc15085de4d2ce33e5484472f2f69fdfe9f78c8fe59aa26e30d88779e802bb8f18324dacef80c9fb4bb6c1fa0a2d0bf233b40b2e31f49328540f6e3631fb97a5a6a726ece5fbb0a6317a7c0356e992af2c69f98bd29dc442572c49", 0x66}, {&(0x7f0000002ec0)="26dd9bf08bd45ffc51c4295b7b3691d07fc47437bfac3d3b242df64d81e96824d9def7307e0c7c316bcd08fe48f8f141031f5539dde307be002984a7a82829fbb64bceb8a7542e45e6885e0b7218ee0c96f3fa16171a84601e3605428f23f26e5cb75e0701395530beb521319254abd7ae229a6807913decf552d3d525adc28a77c16261f4cf86fa06279b7b2739e614f17f89301b7bb40f9a1e40d2635b5a90cedc22075786b90837f2cdf914d255983c3bc29e0bb5c23363c31fbb825016d68176a9fe4cad456774bb48bdbf98eac6f2392dc0", 0xd4}, {&(0x7f0000002780)="33741baf54b9086d8a6ccd47f1c72ea0b184567898e6e756c76b2af7e933406cd0facfb6124197b277d968e7d9b3fb37be9c66b190864fbcef12b95a5e1f4c9ab04fd041dddcddf98b4d2fd53fc3e0e001e3f121abcee02b246e082a2a9c6cde84a47942e74902bbd6694ba8e87eb22da7134d989bfcd14f0e0620a151525846e8f0cf1790a8a5bf2f0288b3c43cacf496becc1c4e879bb9ee3b5a617481b4233bd497958465a8402632ae5c2c70c94cd51800d853976a5e08f8a2d58e00a4f8a0a03989d03685cfcba3ae842d448cefe073c0a915582706d378606ede7f483080c43120aab3dd10a99af9ff98df92", 0xef}, {&(0x7f0000002880)="1e3ed766c788b58a5b8601ccfbe8b3231920ab8b6e7c93ef852c12d153abbd34f4bbe2abf82701f5e62510612e42ce155b62a1c5fbd4371f4840ff4617133a04e017fa85338d5156c26074699995da2dcd3e", 0x52}, {&(0x7f0000002680)="51787f2aeca70a0ecd63ac9b8702d7e60a047e81e4e16ef4d4732a38018fe100dcc3ca15af511782688f2bd6f4beea9feb4d8595b4a2735050f2ea6a79e27648a575eba2102d25b25497ad192b93c73a763ef476c073717ae819c4b41a9d37efc092cc328be081fde58f08dd95de", 0x6e}, {&(0x7f0000002980)="434588e73a0f78874cfe9da8807cc0661553c65b7ce22fe9df29ff44fbe9249166be9dc59b47c9ec0d17790338394b96638ad6686f18d579ef35e662b3ff5fb4becc356106291d7e81d326f3638429510077ecbc7bd052f6eedbbf9547e572826e1379b6488d866345dc74c61e3e0689f6dd17ed7c961a377ac1e35476731a941072e1e64cb4084b76fe249c9a4b9b0a0ec7ffc1ad22ae000a96758afed1f33544b1acebaafefa42417e5bef400b447077d2c573ac0f0fa659caa2d0e87738c747eec2ffe3918453635ee2e835559c16c4b66d6f689dab0eec589bfa00313237b82f46002f7abf62a467", 0xea}], 0x6, &(0x7f0000006000)=ANY=[@ANYBLOB="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"], 0x1598}}, {{&(0x7f0000004000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x80, &(0x7f0000005300)=[{&(0x7f0000004080)="597372a4ab9eeeeff7c289b54e3d59af08fcb1cb4c", 0x15}, {&(0x7f00000040c0)}, {&(0x7f0000004100)="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", 0x1000}, {&(0x7f0000005100)="8745c80eaaaeb9bda63bd8e57d9cdeea633f2ab70de8ea7c7e98a174bf8ba6dfaa247da1d35833f93770b330907a44a7829e4055efe8f03574b1c0262f9ae0df7194ae7a33ad110d4e5ac2eea64da3720625152519fbd25187b9476d6cc6e7ce4c55286408d2dd191d3fa2d5dcfc4cab72ea3dda95494d6fcac431687130e2ba712d9b8ee4154d78942630978b58aa694d63fbfe0856db52ac9838b29f8cf236de2c0bb0a70477f5f3ceae6a93f9e526b1f1f5bd939850b08ee8774f2e8f35d6b3888e1d3e5660d8229f015abd9942", 0xcf}, {&(0x7f0000005200)="2dc96e7ee1565f6b8fb0076289699059e8be53ca500297a35b22722d8cfcf51d8c440f234ce55dee5feeeee25fef857f6c142a74e8ed773348459e0f36e591ddcc2fa0e374e0523cdf9d224114bb0c3130282682c4a6d55401bf9cbba9d817f43be871e87670dec19af589af1d8ab6e6da449d8cb340d0b039636d39056eb8108f200c9cc5b537b4c488c7a2f926b29dbf70dd5a8048162049ae253e81642f06dd8b5f7577d8fcd7bea19338fed07db436fb4f4b919b4978bc34a59f1b28c5f5aaf88d40b4b11ed40dcf521b5f706d423161c77483e354bf01c3e83d8cc8649cb03fdfb73514663b0715f6aa419fcbac2bcbebeae96d07956b90", 0xfa}], 0x5, &(0x7f0000005380)=[{0x38, 0x0, 0x1000, "834f8c47744fb3f070c4276e72e9defddb2eef57021e2bdb8147b93fd1d7165fa0"}, {0x38, 0x113, 0x4, "1fa5ac23aa5f2f0af3e9b1dbe79ae6578ff479612bd20cd4c89abb0874fc0ba62446d671032faf"}, {0x70, 0x84, 0x5, "dc0df6fdc88eaf239634fe75a30fe3e25778412d5e9ec5238dacfe73ecb1e6380da39c0756a2a9098db4801e39cec55a6bf1109a4224a58d5d65dd55cc59c7d7fee0b894083acc1e2b88aca7b0e3926eaf49af074e1bd8e080"}, {0x20, 0x117, 0x0, "9eecce857f8cbd736f"}, {0x30, 0x109, 0x1, "f58d659683684a5d99c60a9d9b2c6e89d00bd91e8c01b812bdd0525308"}, {0x48, 0x10d, 0x80000001, "59b33139fdddc0b3aa7268bb257fde47ab0d0a21abaddcf9f695d84bb2f8c6a0791b0a21909c682025352e29dc8286beae33a08680f2996e"}, {0xc0, 0x11, 0xd2, "8e2373d8ee65e0a6723ff826f14730b1937abbe86c4f41a794e9d1e27becfd83b266210a913838e3bdd67c937c4250f08068186ff51bab18b4c14285c75cc94045d72f1c41feb5a80d18139d6199d4af41ece2a565d88e9a6a80b0bf1d43a6aca8d0aebd8439609a8e95057b4f1d6eac53e27830c4e3a43620c494199959024c70e3a591fd396296674902a7b1988051b6876d0b26d4f3379d4c947c7b6b5486b7d0688a56171c3f0355f345a5"}, {0x48, 0x114, 0x7, "3bdffc17602d8a96cc2a12a9a41c0f13d268c004d70ca6d4a22cee6ea37ddcdc6f6813b4b3c093f8c9e217f1fec83c6963d709ac"}, {0xf0, 0x114, 0x8, "f5e989d2de69bc3abbd3156ea89b779ddb0d3af04f8fe9f13506e042fab444c7efa0ff3e0d08f2596a2b20c4b5fe0b75b3c4915b85599609ea5ee661af414ffae83a570e9858c44dbb142806e008a1b7884d7a5928758aace6017563ef365e2634e76684f4b3faf5f18e4d116cbfef7a2d734aa3de7cbb6641897d1dab005d8cd69c4f58ce47f7c9a9fa7ba351aa06e0e87ad9349568a4fd7bb17b8d9e42435621c60f95da36b38de9a624eebedd0fb52f61a7b8bc866241d6d6459752128d2fe374821c58224c0d7cdcc296bef0851eca36bce887adfbf29b"}, {0xe8, 0x6, 0x9, "f15a520f9605aaa5cb0ff355a100e740530a1233542069087a6d48e5ce0815d3977c790a0e261d7e8cadbaf28f98437810a5224be9381940d775f8726108bb638de639057836427062db056b499cdc0d7d1f3683056907f24baa70201e6981ea1bde83fceeb4ae87d3a20f26cc703f572fc12284939099d6c825c406db59a67d1ba44125a222c8cc552c3ebbd5083375c1f8a863c43be33fb69195c5b95a25d561c43a1a997be3bcc19f228c002e9a761a2f01c6bcf752bdba83420cc9d428a978984d6199e711d06343e843c9cc28687ca3a5e8827f1645"}], 0x458}}], 0x5, 0x800) sendmmsg(r1, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 75.441133][ T6682] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 75.449086][ T6682] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 75.457081][ T6682] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 75.465033][ T6682] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 75.474052][ T6672] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:00 executing program 0: unshare(0x6c060280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x4, 0x0, 0xffffffff}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x4000400) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmmsg$inet(r0, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x8010) 07:42:00 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fchdir(r0) 07:42:00 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 31) 07:42:00 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) [ 75.486442][ T6694] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 75.498486][ T6682] ref_ctr increment failed for inode: 0x3733 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 75.525213][ T6693] ref_ctr increment failed for inode: 0x374a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c 07:42:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = syz_mount_image$nfs4(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0xff, 0x3, &(0x7f0000000580)=[{&(0x7f0000000280)="f828be393b0780567d623efc4d676bacd9b062412bd8f204e60b69618cb653d6160977fb2e283595bd02235e4972edcf9bd4eef759e63cdeb613a63caf3e93bff6f026cf635241fffa77d5f9ce92e48e01668b1e2a9610391304ff432196f3eed78daa063c2e50c7ba482bc1d465e9742cd65aa929877cb45785e30fdb190c9e8ac1af0652e1568d0dbc2b695435485755371144e03603adab3432c32a1614cc51dedd1ce65eec0ccfd6c24191125c9248bf3eafe3d7528d0058f1f2e3278ba570e9084591f1c4377caa785ba231c7090318082f74414675e8", 0xd9, 0x1}, {&(0x7f0000001bc0)="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", 0x18b, 0x6}, {&(0x7f0000000480)="7a3430d01545f8984ad4f525294ab597e69a148c51898c57d8ab5603f4dc99e073de36b21776a4f30c59fc8b341c129e8002f7b9eabd184c5837db7526c62335062755068808e271929b77df2f38960ef3586ba23406d92423d261c7db0366be620c0477412844987485ee34c359817d0c8a6349df02e08bccdacce9974d8587c012fc9e7005d9741f073e99287a77e29bc06c161efa017c3a4c5255ef58c3ecbcee340afb4b4feac49930d30872d2b24c904c9e7e02f8e7dc638ce68b310b51e9395623176521658790e0374d372d2f68aa416902b0581b93", 0xd9}], 0x800410, &(0x7f0000000600)=ANY=[@ANYBLOB="232a2c6664696e666f002c6664696e666f002c6664696e666f002c6664696e666f002c7375626a5f757365723d6664696e666f002c726f6f74636f6e745b78743d7379478dc609ce7361646d5f06006673757569643d34643061613337632d353838342d646400352d0361e7302d1932320062"]) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000680)={0x0, 0x0, 0xffff, 0x1}) r2 = accept4$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000ac0)=0x1c, 0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000bc0)={{r2}, 0x0, 0xc, @inherit={0x90, &(0x7f0000000b00)={0x678d0fdbc10f8070, 0x9, 0x3, 0x1ff, {0x8, 0xfff, 0x3, 0x7}, [0x4, 0x9, 0x5, 0x7, 0xffffffff80000000, 0x40, 0x3, 0x20, 0x62]}}, @subvolid=0x80000000}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf257600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580077000000000000000c005800300000000000000c0058005f000000000000000c00580077000000000000000c00580013000000000000000c00580050000000000000000c0058001c000000000000000c0058005000"/108], 0x88}, 0x1, 0x0, 0x0, 0x24040080}, 0x80) rmdir(&(0x7f0000000180)='./file0\x00') 07:42:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 1) [ 75.614642][ T6712] ref_ctr increment failed for inode: 0x370c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000009340dda7 [ 75.636313][ T6709] FAULT_INJECTION: forcing a failure. [ 75.636313][ T6709] name failslab, interval 1, probability 0, space 0, times 0 [ 75.649045][ T6709] CPU: 1 PID: 6709 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 75.657717][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.667776][ T6709] Call Trace: [ 75.671048][ T6709] dump_stack_lvl+0xd6/0x122 [ 75.675675][ T6709] dump_stack+0x11/0x1b [ 75.679823][ T6709] should_fail+0x23c/0x250 [ 75.684261][ T6709] ? xas_create+0x96b/0xb30 [ 75.688762][ T6709] __should_failslab+0x81/0x90 [ 75.693519][ T6709] should_failslab+0x5/0x20 [ 75.698072][ T6709] kmem_cache_alloc+0x4f/0x300 [ 75.702823][ T6709] ? xas_create+0x96b/0xb30 [ 75.707324][ T6709] xas_create+0x96b/0xb30 [ 75.711727][ T6709] xas_store+0x70/0xca0 [ 75.715886][ T6709] ? io_wq_create+0x217/0x6f0 [ 75.720582][ T6709] ? io_wq_create+0x4fc/0x6f0 [ 75.725263][ T6709] __xa_store+0xdb/0x330 [ 75.729528][ T6709] xa_store+0x30/0x70 [ 75.733523][ T6709] io_uring_add_tctx_node+0x111/0x200 [ 75.738949][ T6709] io_uring_create+0x19f2/0x1bb0 [ 75.743875][ T6709] __x64_sys_io_uring_setup+0xf3/0x130 [ 75.749326][ T6709] do_syscall_64+0x44/0xa0 [ 75.753725][ T6709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.759672][ T6709] RIP: 0033:0x7f6e743e68d9 [ 75.764074][ T6709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 75.783689][ T6709] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 75.792102][ T6709] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 75.800068][ T6709] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 75.808043][ T6709] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 75.816008][ T6709] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 75.824072][ T6709] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 75.832725][ T6724] ref_ctr increment failed for inode: 0x374a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 75.838378][ T6709] ref_ctr increment failed for inode: 0x3746 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d [ 75.856693][ T6729] FAULT_INJECTION: forcing a failure. [ 75.856693][ T6729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.869819][ T6729] CPU: 1 PID: 6729 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 75.878491][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.888546][ T6729] Call Trace: [ 75.891943][ T6729] dump_stack_lvl+0xd6/0x122 [ 75.896675][ T6729] dump_stack+0x11/0x1b [ 75.900889][ T6729] should_fail+0x23c/0x250 [ 75.905360][ T6729] should_fail_usercopy+0x16/0x20 [ 75.910381][ T6729] _copy_from_user+0x1c/0xd0 [ 75.915146][ T6729] __x64_sys_io_uring_setup+0x5d/0x130 [ 75.920611][ T6729] do_syscall_64+0x44/0xa0 [ 75.925033][ T6729] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.931029][ T6729] RIP: 0033:0x7fd63c5f78d9 [ 75.935435][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 75.955042][ T6729] RSP: 002b:00007fd63a32d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:42:01 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000e7861b"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000180)=""/171) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80000001) 07:42:01 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:01 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 2) [ 75.963452][ T6729] RAX: ffffffffffffffda RBX: 00007fd63c6fc0e0 RCX: 00007fd63c5f78d9 [ 75.971412][ T6729] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 75.979379][ T6729] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 75.987386][ T6729] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 75.995349][ T6729] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:01 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 32) [ 76.080765][ T6752] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b82a6454 07:42:01 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 76.139533][ T6758] FAULT_INJECTION: forcing a failure. [ 76.139533][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 76.152211][ T6758] CPU: 0 PID: 6758 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 76.161059][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.171221][ T6758] Call Trace: [ 76.171391][ T6754] FAULT_INJECTION: forcing a failure. [ 76.171391][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 76.174496][ T6758] dump_stack_lvl+0xd6/0x122 [ 76.174524][ T6758] dump_stack+0x11/0x1b [ 76.174541][ T6758] should_fail+0x23c/0x250 [ 76.174557][ T6758] ? xas_create+0x96b/0xb30 [ 76.174597][ T6758] __should_failslab+0x81/0x90 [ 76.209468][ T6758] should_failslab+0x5/0x20 [ 76.213987][ T6758] kmem_cache_alloc+0x4f/0x300 [ 76.218853][ T6758] ? xas_create+0x96b/0xb30 [ 76.223338][ T6758] xas_create+0x96b/0xb30 [ 76.227737][ T6758] xas_store+0x70/0xca0 [ 76.231876][ T6758] ? io_wq_create+0x217/0x6f0 [ 76.236580][ T6758] ? io_wq_create+0x4fc/0x6f0 [ 76.241243][ T6758] __xa_store+0xdb/0x330 [ 76.245524][ T6758] xa_store+0x30/0x70 [ 76.249519][ T6758] io_uring_add_tctx_node+0x111/0x200 [ 76.254951][ T6758] io_uring_create+0x19f2/0x1bb0 [ 76.259877][ T6758] __x64_sys_io_uring_setup+0xf3/0x130 [ 76.265353][ T6758] do_syscall_64+0x44/0xa0 [ 76.269759][ T6758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.275702][ T6758] RIP: 0033:0x7f6e743e68d9 [ 76.280096][ T6758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.299770][ T6758] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 76.308163][ T6758] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 76.316188][ T6758] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 76.324143][ T6758] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 76.332146][ T6758] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 76.340121][ T6758] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 76.348081][ T6754] CPU: 1 PID: 6754 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 76.356758][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.366962][ T6754] Call Trace: [ 76.370225][ T6754] dump_stack_lvl+0xd6/0x122 [ 76.374803][ T6754] dump_stack+0x11/0x1b [ 76.378979][ T6754] should_fail+0x23c/0x250 [ 76.383524][ T6754] __should_failslab+0x81/0x90 [ 76.388272][ T6754] ? io_uring_create+0x126/0x1bb0 [ 76.393279][ T6754] should_failslab+0x5/0x20 [ 76.397767][ T6754] kmem_cache_alloc_trace+0x52/0x320 [ 76.403100][ T6754] ? get_pid_task+0x8b/0xc0 [ 76.407585][ T6754] io_uring_create+0x126/0x1bb0 [ 76.412465][ T6754] ? vfs_write+0x61a/0x900 [ 76.416862][ T6754] ? should_fail+0xd6/0x250 [ 76.421428][ T6754] __x64_sys_io_uring_setup+0xf3/0x130 [ 76.426873][ T6754] do_syscall_64+0x44/0xa0 [ 76.431328][ T6754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.437208][ T6754] RIP: 0033:0x7fd63c5f78d9 [ 76.441601][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.461190][ T6754] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 76.469651][ T6754] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 76.477601][ T6754] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 76.485563][ T6754] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 76.493515][ T6754] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 76.501478][ T6754] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 76.522229][ T6752] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b82a6454 07:42:01 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:01 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 3) [ 76.538697][ T6766] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b82a6454 [ 76.576768][ T6758] ref_ctr increment failed for inode: 0x3744 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe [ 76.613316][ T6771] FAULT_INJECTION: forcing a failure. [ 76.613316][ T6771] name failslab, interval 1, probability 0, space 0, times 0 [ 76.626056][ T6771] CPU: 1 PID: 6771 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 76.634806][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.644931][ T6771] Call Trace: [ 76.648207][ T6771] dump_stack_lvl+0xd6/0x122 [ 76.652817][ T6771] dump_stack+0x11/0x1b [ 76.656994][ T6771] should_fail+0x23c/0x250 [ 76.661417][ T6771] ? io_uring_create+0x193/0x1bb0 [ 76.666475][ T6771] __should_failslab+0x81/0x90 [ 76.671240][ T6771] should_failslab+0x5/0x20 [ 76.675724][ T6771] __kmalloc+0x6f/0x350 [ 76.679928][ T6771] ? kmem_cache_alloc_trace+0x221/0x320 [ 76.685451][ T6771] ? io_uring_create+0x126/0x1bb0 [ 76.690495][ T6771] io_uring_create+0x193/0x1bb0 [ 76.695328][ T6771] ? vfs_write+0x61a/0x900 [ 76.699743][ T6771] __x64_sys_io_uring_setup+0xf3/0x130 07:42:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = pidfd_getfd(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1dc, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24040011}, 0x84) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) rmdir(&(0x7f0000000180)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r5 = socket(0x2, 0x803, 0x9) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000180)) r6 = accept4(r5, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00082dbd7000fddbdf2513000000fd251c8d026865a7052d1d4b2e89c858314cdf60b1ea9440db8112dac0af5b27b015446d687c774cdbf6eebd83a7871f9367b062345223b32a2472f9eb7768bb2f95914ba2681cb868c6cc4e7bec2f98df0ef52b79c7bca52ffb3bffeed3b35cd5d275a4180611db23c1d59f0a5bb46f55b75d9d745b74d472b6b37cad323834334924903918e355712a01ae45de8a9619161bd0d592362529c97a0c17f627be100befdd2ba3c5ed2a0470ec19d198a44e056ae787ee5298b2484c04920c2a6a000e5f35fc5a5106712781bed7af5231fa43bf1c46973aee21d6efed0668c14697e0cb212ab10cc11770ffc1887389c5747f917454a8a15dea29388c054ec3ba9ae4c62b0435d53821aa637a985e6755d05b6a91d263275994aa97e2b8adc4d7c70c784d5ac12e1b68fc1c2a27bf614a2bd427"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x9b0950e4f4a7c23f, 0xffff, 0x25dfdbff}, 0x14}}, 0x0) 07:42:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 33) 07:42:01 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 76.703667][ T6779] ref_ctr increment failed for inode: 0x371e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 76.705198][ T6771] do_syscall_64+0x44/0xa0 [ 76.705226][ T6771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.727129][ T6771] RIP: 0033:0x7fd63c5f78d9 [ 76.731608][ T6771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.751211][ T6771] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:42:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/94, 0x5e}, {&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000200)=""/147, 0x93}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x6, 0x1, 0xc05f) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 76.759635][ T6771] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 76.767601][ T6771] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 76.775620][ T6771] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 76.783602][ T6771] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 76.791576][ T6771] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 76.807241][ T6785] FAULT_INJECTION: forcing a failure. [ 76.807241][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 76.820527][ T6785] CPU: 1 PID: 6785 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 76.829202][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.839257][ T6785] Call Trace: [ 76.842533][ T6785] dump_stack_lvl+0xd6/0x122 [ 76.847197][ T6785] dump_stack+0x11/0x1b [ 76.851346][ T6785] should_fail+0x23c/0x250 [ 76.855762][ T6785] ? xas_create+0x96b/0xb30 [ 76.860300][ T6785] __should_failslab+0x81/0x90 [ 76.865154][ T6785] should_failslab+0x5/0x20 [ 76.869648][ T6785] kmem_cache_alloc+0x4f/0x300 [ 76.874424][ T6785] ? xas_create+0x96b/0xb30 [ 76.878968][ T6785] xas_create+0x96b/0xb30 [ 76.883283][ T6785] xas_store+0x70/0xca0 [ 76.887441][ T6785] ? io_wq_create+0x217/0x6f0 [ 76.892142][ T6785] ? io_wq_create+0x4fc/0x6f0 [ 76.896813][ T6785] __xa_store+0xdb/0x330 [ 76.901097][ T6785] xa_store+0x30/0x70 [ 76.905116][ T6785] io_uring_add_tctx_node+0x111/0x200 [ 76.910553][ T6785] io_uring_create+0x19f2/0x1bb0 [ 76.915509][ T6785] __x64_sys_io_uring_setup+0xf3/0x130 [ 76.920979][ T6785] do_syscall_64+0x44/0xa0 [ 76.925403][ T6785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.931335][ T6785] RIP: 0033:0x7f6e743e68d9 [ 76.935726][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.955415][ T6785] RSP: 002b:00007f6e7215e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 76.963808][ T6785] RAX: ffffffffffffffda RBX: 00007f6e744eaf60 RCX: 00007f6e743e68d9 [ 76.973892][ T6785] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 76.981943][ T6785] RBP: 0000000020000240 R08: 0000000020000140 R09: 0000000020000140 [ 76.989999][ T6785] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000140 [ 76.997958][ T6785] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 77.011160][ T6785] ref_ctr increment failed for inode: 0x374b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000d661270d 07:42:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 4) 07:42:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:42:02 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:02 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:02 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 34) [ 77.134761][ T6812] ref_ctr increment failed for inode: 0x3735 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c [ 77.148521][ T6812] ref_ctr increment failed for inode: 0x3735 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c [ 77.163022][ T6818] ref_ctr increment failed for inode: 0x374c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 77.176020][ T6820] FAULT_INJECTION: forcing a failure. [ 77.176020][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 77.188653][ T6820] CPU: 0 PID: 6820 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 77.192314][ T6817] FAULT_INJECTION: forcing a failure. [ 77.192314][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 77.197328][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.197342][ T6820] Call Trace: [ 77.197349][ T6820] dump_stack_lvl+0xd6/0x122 [ 77.197374][ T6820] dump_stack+0x11/0x1b [ 77.232181][ T6820] should_fail+0x23c/0x250 [ 77.236686][ T6820] ? vm_area_dup+0x44/0x130 [ 77.241169][ T6820] __should_failslab+0x81/0x90 [ 77.245914][ T6820] should_failslab+0x5/0x20 [ 77.250405][ T6820] kmem_cache_alloc+0x4f/0x300 [ 77.255240][ T6820] vm_area_dup+0x44/0x130 [ 77.259548][ T6820] ? kmem_cache_alloc+0x20d/0x300 [ 77.264640][ T6820] ? xas_create+0x96b/0xb30 [ 77.269129][ T6820] ? xas_create+0xae3/0xb30 [ 77.273706][ T6820] __split_vma+0x82/0x320 [ 77.278020][ T6820] ? vmacache_find+0x2df/0x320 [ 77.282779][ T6820] __do_munmap+0x27c/0x1340 [ 77.287281][ T6820] ? __xas_nomem+0xfc/0x270 [ 77.291771][ T6820] mmap_region+0x58a/0x1260 [ 77.296261][ T6820] ? selinux_mmap_addr+0x94/0xa0 [ 77.301235][ T6820] ? security_mmap_addr+0x78/0x90 [ 77.306286][ T6820] do_mmap+0x781/0xc20 [ 77.310340][ T6820] vm_mmap_pgoff+0x117/0x1f0 [ 77.314920][ T6820] ksys_mmap_pgoff+0x284/0x350 [ 77.319791][ T6820] ? exit_to_user_mode_prepare+0x65/0x190 [ 77.325497][ T6820] do_syscall_64+0x44/0xa0 [ 77.329905][ T6820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.335785][ T6820] RIP: 0033:0x7f6e743e6922 [ 77.340243][ T6820] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 77.360005][ T6820] RSP: 002b:00007f6e7215e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 77.368489][ T6820] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e743e6922 [ 77.376448][ T6820] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 07:42:02 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 77.384403][ T6820] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 77.392441][ T6820] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 77.400397][ T6820] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 77.408484][ T6817] CPU: 1 PID: 6817 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 77.417157][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.427206][ T6817] Call Trace: [ 77.430483][ T6817] dump_stack_lvl+0xd6/0x122 07:42:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') fcntl$setpipe(r0, 0x407, 0xfffffffffffffff9) fcntl$notify(r0, 0x402, 0x80000001) [ 77.435147][ T6817] dump_stack+0x11/0x1b [ 77.439306][ T6817] should_fail+0x23c/0x250 [ 77.443730][ T6817] __should_failslab+0x81/0x90 [ 77.448503][ T6817] ? io_uring_create+0x1e4/0x1bb0 [ 77.453533][ T6817] should_failslab+0x5/0x20 [ 77.458036][ T6817] kmem_cache_alloc_trace+0x52/0x320 [ 77.463327][ T6817] ? io_uring_create+0x193/0x1bb0 [ 77.468370][ T6817] io_uring_create+0x1e4/0x1bb0 [ 77.473233][ T6817] ? vfs_write+0x61a/0x900 [ 77.477755][ T6817] __x64_sys_io_uring_setup+0xf3/0x130 07:42:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8297, 0x103003) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x1000000, 0x10010, r1, 0xc83b000) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') [ 77.483332][ T6817] do_syscall_64+0x44/0xa0 [ 77.487816][ T6817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.493773][ T6817] RIP: 0033:0x7fd63c5f78d9 [ 77.498180][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 77.517854][ T6817] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 77.526311][ T6817] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 07:42:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 35) 07:42:02 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 77.534300][ T6817] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 77.542252][ T6817] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 77.550204][ T6817] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 77.558466][ T6817] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:02 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000200)=""/134, 0x86}], 0x2, 0x5b01, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@obj_user}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}]}}) fcntl$setstatus(r0, 0x4, 0x44000) 07:42:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 5) [ 77.606970][ T6830] ref_ctr increment failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe [ 77.623152][ T6826] ref_ctr decrement failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe [ 77.654431][ T6826] ref_ctr decrement failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe [ 77.674038][ T6860] FAULT_INJECTION: forcing a failure. [ 77.674038][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 77.686697][ T6860] CPU: 1 PID: 6860 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 77.687732][ T6854] FAULT_INJECTION: forcing a failure. [ 77.687732][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 77.695366][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.695380][ T6860] Call Trace: [ 77.695388][ T6860] dump_stack_lvl+0xd6/0x122 [ 77.695412][ T6860] dump_stack+0x11/0x1b [ 77.695429][ T6860] should_fail+0x23c/0x250 [ 77.734382][ T6860] ? io_uring_create+0x1bb0/0x1bb0 [ 77.739531][ T6860] __should_failslab+0x81/0x90 [ 77.744279][ T6860] ? percpu_ref_init+0x96/0x250 [ 77.749166][ T6860] should_failslab+0x5/0x20 [ 77.753667][ T6860] kmem_cache_alloc_trace+0x52/0x320 [ 77.758975][ T6860] ? io_uring_create+0x1bb0/0x1bb0 [ 77.764156][ T6860] percpu_ref_init+0x96/0x250 [ 77.768817][ T6860] io_uring_create+0x22b/0x1bb0 [ 77.773667][ T6860] ? vfs_write+0x61a/0x900 [ 77.778070][ T6860] ? tick_program_event+0x78/0xc0 [ 77.783084][ T6860] __x64_sys_io_uring_setup+0xf3/0x130 [ 77.788606][ T6860] do_syscall_64+0x44/0xa0 [ 77.793011][ T6860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.798890][ T6860] RIP: 0033:0x7fd63c5f78d9 [ 77.803288][ T6860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 77.822978][ T6860] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 77.831424][ T6860] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 77.839381][ T6860] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 77.847344][ T6860] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 77.855350][ T6860] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 77.863308][ T6860] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 77.871266][ T6854] CPU: 0 PID: 6854 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 77.879941][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.890003][ T6854] Call Trace: [ 77.893274][ T6854] dump_stack_lvl+0xd6/0x122 [ 77.897869][ T6854] dump_stack+0x11/0x1b [ 77.902032][ T6854] should_fail+0x23c/0x250 [ 77.906455][ T6854] ? __anon_vma_prepare+0x41/0x2d0 [ 77.911568][ T6854] __should_failslab+0x81/0x90 [ 77.916339][ T6854] should_failslab+0x5/0x20 [ 77.920850][ T6854] kmem_cache_alloc+0x4f/0x300 [ 77.925609][ T6854] ? unlock_page_memcg+0xc3/0xe0 [ 77.927930][ T6864] ref_ctr increment failed for inode: 0x373f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006bcc5534 [ 77.930582][ T6854] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 77.930609][ T6854] __anon_vma_prepare+0x41/0x2d0 [ 77.930626][ T6854] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 77.930648][ T6854] do_cow_fault+0x478/0x560 [ 77.930666][ T6854] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 77.930686][ T6854] handle_mm_fault+0x9aa/0x1580 [ 77.973120][ T6854] ? follow_page_mask+0x42b/0x10b0 [ 77.978233][ T6854] __get_user_pages+0x381/0xc50 [ 77.983085][ T6854] __get_user_pages_remote+0x17f/0x610 [ 77.988544][ T6854] get_user_pages_remote+0x6f/0xa0 [ 77.993705][ T6854] __update_ref_ctr+0x94/0x240 [ 77.998474][ T6854] update_ref_ctr+0x36f/0x610 [ 78.003149][ T6854] uprobe_write_opcode+0x3e9/0x990 [ 78.008332][ T6854] set_swbp+0x26/0x30 [ 78.012316][ T6854] install_breakpoint+0x3bd/0x4d0 [ 78.017347][ T6854] uprobe_mmap+0x80c/0xcd0 [ 78.021784][ T6854] ? __vma_link_rb+0x3c2/0x3e0 [ 78.026557][ T6854] __vma_adjust+0x118d/0x1a70 [ 78.031239][ T6854] __split_vma+0x24b/0x320 [ 78.035658][ T6854] __do_munmap+0x27c/0x1340 [ 78.040190][ T6854] ? __xas_nomem+0xfc/0x270 [ 78.044712][ T6854] mmap_region+0x58a/0x1260 [ 78.049215][ T6854] ? selinux_mmap_addr+0x94/0xa0 [ 78.053485][ T6882] loop4: detected capacity change from 0 to 256 [ 78.054158][ T6854] ? security_mmap_addr+0x78/0x90 [ 78.054250][ T6854] do_mmap+0x781/0xc20 [ 78.069444][ T6854] vm_mmap_pgoff+0x117/0x1f0 [ 78.074041][ T6854] ksys_mmap_pgoff+0x284/0x350 [ 78.078843][ T6854] ? exit_to_user_mode_prepare+0x65/0x190 [ 78.084589][ T6854] do_syscall_64+0x44/0xa0 [ 78.089004][ T6854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.094896][ T6854] RIP: 0033:0x7f6e743e6922 [ 78.099300][ T6854] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 78.118888][ T6854] RSP: 002b:00007f6e7215e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 78.127289][ T6854] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e743e6922 [ 78.135247][ T6854] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 78.143211][ T6854] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 78.151165][ T6854] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 07:42:03 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') r2 = eventfd(0x4a79) r3 = getpgrp(0x0) recvmmsg$unix(r0, &(0x7f00000074c0)=[{{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002040)=""/208, 0xd0}, {&(0x7f0000002140)=""/186, 0xba}, {&(0x7f0000002200)=""/48, 0x30}, {&(0x7f0000002240)=""/228, 0xe4}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x5}}, {{&(0x7f00000033c0), 0x6e, &(0x7f0000003580)=[{&(0x7f0000003440)=""/12, 0xc}, {&(0x7f0000003480)=""/225, 0xe1}], 0x2, &(0x7f00000035c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000003800)=[{&(0x7f00000036c0)=""/191, 0xbf}, {&(0x7f0000003780)=""/105, 0x69}], 0x2, &(0x7f0000003840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003880), 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003900)=""/202, 0xca}, {&(0x7f0000003a00)}, {&(0x7f0000003a40)=""/135, 0x87}, {&(0x7f0000003b00)=""/31, 0x1f}, {&(0x7f0000003b40)=""/30, 0x1e}, {&(0x7f0000003b80)=""/95, 0x5f}, {&(0x7f0000003c00)=""/183, 0xb7}, {&(0x7f0000003cc0)=""/41, 0x29}], 0x8, &(0x7f0000003d80)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f0000005200)=[{&(0x7f0000003f00)=""/51, 0x33}, {&(0x7f0000003f40)=""/74, 0x4a}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/92, 0x5c}, {&(0x7f0000005040)=""/240, 0xf0}, {&(0x7f0000005140)=""/154, 0x9a}], 0x6, &(0x7f0000005280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005300)=""/252, 0xfc}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/137, 0x89}, {&(0x7f00000064c0)=""/210, 0xd2}, {&(0x7f00000065c0)=""/225, 0xe1}], 0x5, &(0x7f0000006740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000067c0)=@abs, 0x6e, &(0x7f0000006b00)=[{&(0x7f0000006840)=""/163, 0xa3}, {&(0x7f0000006900)=""/144, 0x90}, {&(0x7f00000069c0)=""/156, 0x9c}, {&(0x7f0000006a80)=""/126, 0x7e}], 0x4, &(0x7f0000006b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x150}}, {{0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000006cc0)=""/152, 0x98}, {&(0x7f0000006d80)=""/229, 0xe5}], 0x2, &(0x7f0000006ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000006f80), 0x6e, &(0x7f0000007380)=[{&(0x7f0000007000)=""/196, 0xc4}, {&(0x7f0000007100)=""/246, 0xf6}, {&(0x7f0000007200)=""/84, 0x54}, {&(0x7f0000007280)=""/245, 0xf5}], 0x4, &(0x7f00000073c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x9, 0x10002, &(0x7f0000007700)={0x77359400}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000007740)={0xffffffffffffffff, 0x7fff, 0x0, 0x7}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00000fffffffdbf770d389d5456a441ac13c48f0000200"/32]) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000008200), 0x1311c0fc73acbfea, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r11 = accept4$unix(r0, &(0x7f0000008300), &(0x7f0000008380)=0x6e, 0x100000) sendmmsg$unix(r0, &(0x7f0000008400)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="ccd79ad7d3a28f197f9ad3320a2776ee818f3f7d19c7b33c9b3e63b19e3530b9848ea32a0a15e0cb99b73ed6a9f0575a57797a8db26bb1b0fda40bf852f2b3e1347e6ae2996152d332476db265a390afadcc0539661ba9aca477a37c5b7a9610a600c892842c9a0743febee3a0fbede9edc2e92d2db9a9b4d8d5", 0x7a}, {&(0x7f0000000200)="d7972dfc8ab39849b7f9f946b43167d6de83c5139120d41231", 0x19}], 0x2, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80}}, {{&(0x7f0000000780)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000800)="e9f4590a305e1bd89dcf4a4b753283a38e12be4ef8dcb72d71c8b25ff7d3939029d8a1f9d2d4107fe70058a6a4635a4cfef33245a93cfd72b28ec2e4889cae766687c56a", 0x44}, {&(0x7f0000000880)="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", 0x1000}], 0x2, &(0x7f0000007780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r2, r5, r6, r0]}}, @rights={{0x24, 0x1, 0x1, [r7, r0, r8, r1, r0]}}], 0x118, 0x20000000}}, {{&(0x7f00000078c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008140)=[{&(0x7f0000007940)="f5547dbfb0701b28f91f24f72128949f58f949c4cfed5996ab0feb528d859438c3cafa5ff138f2a7c82ac337bcd576be077a332b37667a6b0dd64dd197214905bba0214cc27ed264d0", 0x49}, {&(0x7f00000079c0)="32d99c938f58a54ed67f0598239b71c84abfb145b3be9649467aafd2322741ccada3ba27c8e323d2f833ef03bbaf9e48f9698bf835d9ba254b3cb3300242e6c6ba27f26d8105162e88aea7302e16a8255f750376fdeb2fc526f0faf6833c06e9670859287065ee4e410f4fbf1d", 0x6d}, {&(0x7f0000007a40)="598c209dcf34c1ef25f413108e8fae7c8a00004f629879a81967625dda58483ba8af04b619ec65d5028c550bc5d303045ad2ea07bfdf1eefe1c5e9b9d8a717e33ab27e8cc4ccffc35d7345aaac7aeb3ecee4974a7defb29782a20b94e7a211fdd3afcf647555fdb23f1ca065ad8d8e21bf056553c8997f84bc3c49c544d9b6ea57bb73083a66f5f9b27f520ea7a64ca89701637c9fc92b8ededf30069e9772ad626ae97a8fe1f7b19f17c7e73b890a30baea3b1a79513972a76e4de352c1bf4230f0efe893e969bad85cd970413d81ed8874395cb45a0cf7d290642aa1e84a68662c0b9a086879b0a94d78953a70b40fa4941248eddbe71225", 0xf9}, {&(0x7f0000007b40)="bcf8603ac61795fa64a3f85cdfc3e6e3161e359bcb5cd626c925ac475842016a8c28d9fd108ee45aa43fe5e9355c07b8fd9552efc4cb0bfbf73b996bd46661fe0334a4648408a3f1789ba89adcff6957ace68209f48d1deaebd053b4864500bb08e140deb0b42d9ca1386252777cae4f0fd552c4149b09524bb4add7a314f7644535dd0008e4e644ddf46746c4fbe260a3d4bf111c7cb0dd9822943102ca51034312b747e5da4b59d01d89dbfef9082926c28f93d6f7094173d9a5c69ff9ae73f726db97b54e22ffe474b12aab99", 0xce}, {&(0x7f0000007c40)="15f87c17a7aff762c614a02152c7", 0xe}, {&(0x7f0000007c80)="0e190fd179f5fcd6a6ce76a4f53567bf557d4202bf9af2adb74f30aee59c30ab39ffcf56d9c50684252e8cd56f57f6fec50ddd813f5ede8875f090cec7a293b5662f0457550bff844af8840c7203ac72ef942503fc6660ba6d6e97dc8d35cea5bbb265c84208e72700c05cce5ce53b0a1d0c6ddd31145767eaeaa92cbf879e38dfdc96152aec1facbf79a89a558e4a", 0x8f}, {&(0x7f0000007d40)="dfb00490341be07cbad9d988a75811fa731852233fb08ab063f91fbc38483938d3f2eba624fbe4480baeb4ba08bbb8fac49b0874a998e6f1a54775fd7e2f51852b7c24c94882b50c7d0a8df0cc38bf6343a65b7f97718be4e23f5f5c0185489b9c1ba1eb9864f86d67f55e5aefc4ff50388bafea5d58c0c72073616e8d9437a51a724e19be286484aea7ab93cdd96db8e72c7d4f7ce95f5767f89521253adcf3e90a70531740f7cc9cd9b8c119b640f6fecd6ad24747434d4c6a3f09df14a3efa33eb30a660b7c1c88e9", 0xca}, {&(0x7f0000007e40)="f7db56c1309d04cfd96b16bb0f71c7a683b55f46781030e3ce39265c819d19dd9b44e42302d896b74fc4c9ae9010d6a5d4d4ab396d3cf412ccf417bba904e2b724b36e59c40aa8cf1a0515d8c191d61efa48d6c67f144a5ed91c5f16c5f723f1dcacbd4177e36441cd95c048750661a18ac5ad87e285f344fd4c6d37a5027ddfbf0e013a5919c601aad52d882b599dc61efcd3fe4cf8a63345492ff9daa4a491df85508083607edfffaabd694955022fafd61ccce868480cf289c2917276a48144db1d8065cb1e374703627eb7d1d2565c6d43aff16ef12821affe50156b8d4701d291420b0955c7c96ba265", 0xec}, {&(0x7f0000007f40)="d71132589eaec4cd995be864a014508698ed2db3c11d33b0e00ddaf2c17e1e9dd342741e5980cb8fb186299bc5a1aba273df8284b61f3d16b408fdc6fbccd99317a3a922656260b61e2c4054987632a38c0c03d9038e793b785cc478242dadb155a6b8d971552a6a623d889cf166f7607cdaacad9e0887fc715f99782d73aa322d0ee9199b738b3acb2cb83fec07fca49a81675cc2b1cfa5a00476f5088d344d333d8aedb13ee94de2e126900762b401f6d71870ec51703756bef5ad281896dcedcb1759436c29", 0xc7}, {&(0x7f0000008040)="48b66b1e045dbee8a99bb7d55d12e0f3e42f090770f5d3d2ca069aa52e14a1ed53806d0ba79d0a15bfb0e90b700562b406923eb0716c12909d6face4f6a2bac036d298c40cdf8bd7626ae44e982225592308d70182de1ad09348250f36f2d84592899a6d12eb7740fa5c4ad6cf477911dd90935bc2d1dc4fd36b8e26725557abd5999fb48df24a589aa8f0d035a7fd61798dbed87f11b72ffba618b799df47f4794d615b4199a831fc790a0e59f944ce5443ac632d9ee4313af326ae396bcaaa86f6fa", 0xc3}], 0xa, &(0x7f00000083c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r9, r10]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r11]}}], 0x40, 0x48002}}], 0x3, 0x5) fcntl$setlease(r2, 0x400, 0x0) 07:42:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') 07:42:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop2', 0x1c1000, 0x22) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3800003, 0x4000010, r1, 0x48090000) r2 = dup3(r0, r0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) r3 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xc59a, 0x4, &(0x7f0000000480)=[{&(0x7f0000000200)="b1064155dabd4c43438fc820ecd1f403e7b84355346fa6193954b4837ab56cac5d10d9f2bfe12bdb883408f1eb8f9110e984dbab1cfbe1589390a486181ab1b526b4df9ba1e5cb15def5a7070119be31eb341e3d1661b439736623bdf82ea62b503b7fc5e31665f05cd4bc16546e9dcb0cf6b79f1bafbe7e328b2f31966e7b642269cb643b998a90462c584274539323bbdf80b42a1f16cf61659d7047637ce0abed740343a4fffe2e65483d27e0b14f171d51433150448bb45a4e", 0xbb, 0x10000}, {&(0x7f00000002c0)="a457bf0edfea17d13f779451f161470d35c0503e0ae1339fcd11ff6e505d5f6b12e47fdbaecf6ca54292b2a732935fcb94bda42cfd05df298aba3e15e5a173fa58965d0308875d931694e4277d3608625ad3370fd4c72ec8ff34013fff0468eec67c594289bc0a4aa4a0cc6918f6c2ecaaf4a391317c5f73581736fe83a68617b40ad3a1f726941956e8e84f796c8507060a151083a19568d452b438dcb21dd96d5f2e4ec40b", 0xa6, 0x120}, {&(0x7f0000000100)="4a017ee883916a3fa23a81cff6d540e19c57e85997ef", 0x16, 0x1}, {&(0x7f0000000380)="59eea68896400143c87f3244b6d7140ba001830d25f5f5f0dbc9dacb753793528c52c86b74172ed44398aa63ff6328d337b849f015d5642c0d6c4c27edb35362e2f6a7b200015203299db97df8ee3b66c11958a34ac0ddd944dac8267c52e4e9efe92f4c590e50fe1c786eacdfb91b8f0543856e789ed4f079f8e0574f55d0a953ded48adb7b7642b5d2232fc978fa93db0929565e490b887c25161462dbb135627cd910015e68d405d02b7cd268cbb49ef3a4b016af9ce4f1a0bed94a0ae88c4f3b49dbb739a513", 0xc8, 0x2}], 0x840002, &(0x7f0000000140)={[{'+:],'}, {'fdinfo\x00'}, {'fdinfo\x00'}, {')/'}, {'(}{'}], [{@subj_user={'subj_user', 0x3d, 'fdinfo\x00'}}]}) creat(&(0x7f0000000500)='./file0\x00', 0x10) r4 = fcntl$dupfd(r1, 0x0, r0) dup3(r3, r4, 0x80000) rmdir(&(0x7f0000000180)='./file0\x00') 07:42:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 6) 07:42:03 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x14c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x244}, 0x1, 0x0, 0x0, 0x50}, 0x400c001) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdee5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044850}, 0x0) set_mempolicy(0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000200000101040000000000000000020000801400018008000100e000000108000200000000120c0002800500010000000000240002801400018008000100ac01000000000200ac1e00010c0002800500010000000000080007400000000036eb519fc64a18b7a487d4ba6ca925fb66b06ae7c138ee61e84aa200000000"], 0x64}}, 0x0) [ 78.159119][ T6854] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 78.167134][ T6854] ref_ctr increment failed for inode: 0x3735 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 78.183552][ T6869] ref_ctr increment failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:03 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 36) [ 78.218280][ T6885] loop4: detected capacity change from 0 to 256 [ 78.227572][ T6869] ref_ctr increment failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 78.239595][ T6898] ref_ctr increment failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fchdir(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs(r1, &(0x7f0000000080)='net/psched\x00') 07:42:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fcntl$notify(r0, 0x402, 0x20) fchdir(r0) rmdir(&(0x7f0000000040)='./file0\x00') [ 78.271335][ T6899] FAULT_INJECTION: forcing a failure. [ 78.271335][ T6899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.284674][ T6899] CPU: 1 PID: 6899 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 78.293356][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.303410][ T6899] Call Trace: [ 78.306679][ T6899] dump_stack_lvl+0xd6/0x122 [ 78.311302][ T6899] dump_stack+0x11/0x1b [ 78.315458][ T6899] should_fail+0x23c/0x250 07:42:03 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:03 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 78.319872][ T6899] __alloc_pages+0x102/0x320 [ 78.324471][ T6899] alloc_pages+0x382/0x3d0 [ 78.328923][ T6899] __get_free_pages+0x8/0x30 [ 78.333521][ T6899] io_uring_create+0x949/0x1bb0 [ 78.338384][ T6899] __x64_sys_io_uring_setup+0xf3/0x130 [ 78.343852][ T6899] do_syscall_64+0x44/0xa0 [ 78.348278][ T6899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.354239][ T6899] RIP: 0033:0x7fd63c5f78d9 07:42:03 executing program 4: r0 = gettid() tkill(r0, 0x34) r1 = gettid() tkill(r1, 0x34) r2 = syz_open_procfs(r1, &(0x7f0000000000)='autogroup\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fchdir(r2) rmdir(&(0x7f0000000180)='./file0\x00') [ 78.358671][ T6899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 78.378283][ T6899] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 78.386697][ T6899] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 78.394672][ T6899] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 78.402708][ T6899] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 78.410674][ T6899] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 07:42:03 executing program 4: fchdir(0xffffffffffffffff) rmdir(&(0x7f0000000180)='./file0\x00') [ 78.418652][ T6899] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 78.441591][ T6922] ref_ctr increment failed for inode: 0x3747 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000917d2a7c [ 78.454506][ T6927] ref_ctr increment failed for inode: 0x3751 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b82a6454 07:42:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') fstat(0xffffffffffffffff, &(0x7f0000000000)) fchdir(r0) rmdir(&(0x7f0000000180)='./file0\x00') 07:42:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = syz_io_uring_setup(0x5c86, &(0x7f0000000080)={0x0, 0xdabc, 0x2, 0x0, 0x3af, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket(0x9, 0x2, 0x5d1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x8410}, {r1, 0x8000}, {r2, 0x8}, {r3}, {r4, 0x8000}, {r5, 0x8200}], 0x6, 0xef) close(r0) [ 78.471715][ T6912] FAULT_INJECTION: forcing a failure. [ 78.471715][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 78.484341][ T6912] CPU: 1 PID: 6912 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 78.493011][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.503066][ T6912] Call Trace: [ 78.506436][ T6912] dump_stack_lvl+0xd6/0x122 [ 78.511032][ T6912] dump_stack+0x11/0x1b [ 78.515200][ T6912] should_fail+0x23c/0x250 07:42:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 7) [ 78.519664][ T6912] ? anon_vma_clone+0x8d/0x380 [ 78.524431][ T6912] __should_failslab+0x81/0x90 [ 78.529196][ T6912] should_failslab+0x5/0x20 [ 78.533706][ T6912] kmem_cache_alloc+0x4f/0x300 [ 78.538488][ T6912] anon_vma_clone+0x8d/0x380 [ 78.543096][ T6912] __split_vma+0x134/0x320 [ 78.547517][ T6912] ? vmacache_find+0x2df/0x320 [ 78.552322][ T6912] __do_munmap+0x2ee/0x1340 [ 78.556842][ T6912] ? __xas_nomem+0xfc/0x270 [ 78.561433][ T6912] mmap_region+0x58a/0x1260 [ 78.566021][ T6912] ? selinux_mmap_addr+0x94/0xa0 [ 78.571036][ T6912] ? security_mmap_addr+0x78/0x90 [ 78.576061][ T6912] do_mmap+0x781/0xc20 [ 78.580153][ T6912] vm_mmap_pgoff+0x117/0x1f0 [ 78.584739][ T6912] ksys_mmap_pgoff+0x284/0x350 [ 78.589566][ T6912] ? exit_to_user_mode_prepare+0x65/0x190 [ 78.595279][ T6912] do_syscall_64+0x44/0xa0 [ 78.599703][ T6912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.605584][ T6912] RIP: 0033:0x7f6e743e6922 [ 78.609983][ T6912] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 78.629587][ T6912] RSP: 002b:00007f6e7215e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 78.637982][ T6912] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e743e6922 [ 78.645949][ T6912] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 78.653940][ T6912] RBP: 0000000020002000 R08: 0000000000000006 R09: 0000000000000000 [ 78.661990][ T6912] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 07:42:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0xffffffffffffffff, 0xdc88, &(0x7f0000000000)="63395bfbbd1e1a4b65d18624608c8de7d944ff8d49fa3e20c05a2d68d504761ed854568bdae9a3c9dfec60d8dfbf9af584056a390212bd12922f48c6931eff9746e43bc28cbbe29b647dd12534052caac615d144c6cd00ad2addc7ca4e2a9cda7a7c55cc908b03c1acbb935ba3009e98f71d09ce450037404f4281a270cbb0f5392eee15debe7579a77a6eea") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) tkill(0x0, 0x38) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000540)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66510700ae897094e730269097eaa769be6d05c41bd34e123b0b17f485aea48ca8db38f8c44f7b7d9c400000000000000087cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715e05182ce9c3d183026274adaf1e8eab06d16e43031d66d7764b1842ad09fdcedc2cab6cf4f0eff072f000000000057e4ff4345dbfd3ec8eb6b1d68ac7e70b59d9701d7507b3a21dcf7030900000048fd08fa9c5035637340f38c01a3b70fd7a1003e576a2fdc11ee292e28d99cf08a084a848ea134b355909c6f6a5fee4f9f156c1188e8836cb9e8fb62b915f3ffefffff507d1a867f6f9d69ddc592a48ebcced9087afef45fa5ffbc9dda6259421e5d83b0c15c333cb143be479f0e6e24c9d623dc4abe6b2dfd0ad3d7481be1f5bf318df9d29e8508e158b81de55c40890faa30c6f7131145821ae94c8818dbaa13471b4d31f91307615c818694f06a9d6bb5d78502a78bc25e4f15a3dbc321660c247f32949aed5023c154423c7e6f1dd9a4cfd23d1e3b135e611a0c218867a17a295e5009db6e446efe27665754212e4bab40cdfa986fb86834dba515a2d208bb19b00be61f702a01bc93040af81917f8aaf9fbd1c5f920", 0x1b4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, r1, 0x200000000002, &(0x7f0000000300)="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") exit_group(0x0) 07:42:03 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 78.669959][ T6912] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 78.682937][ T6927] ref_ctr increment failed for inode: 0x3751 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b82a6454 [ 78.695795][ T6948] ref_ctr increment failed for inode: 0x3751 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b82a6454 07:42:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 37) [ 78.727805][ T6946] FAULT_INJECTION: forcing a failure. [ 78.727805][ T6946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.741087][ T6946] CPU: 1 PID: 6946 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 78.749765][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.759828][ T6946] Call Trace: [ 78.763108][ T6946] dump_stack_lvl+0xd6/0x122 [ 78.767703][ T6946] dump_stack+0x11/0x1b [ 78.771867][ T6946] should_fail+0x23c/0x250 07:42:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="045f6243054fefe35bdbb269ddebbbecb45459dfee627f2a3738bc5f0eb2fddb6074c241e8b495b88b914ba2d6ed07b439981d35f798bf664f491b2c8954698122d337ba20927b8da10554cfab83b80b8fb1802f5953675e5a4bdcad924840f5ff4034637e4f2f662f22737f87c946bb4f08ffe6d2b07c0bd015e4a5c9fd8b474773589274942032364594c9e65d429a996a58629dd81e2a361060527b394dbe3e322dfb8958c2d8be58b379e2d861", 0xaf}], 0x1, 0x9, 0x5) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="00000100"], 0x28}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000002c0)={@private1}, &(0x7f0000000300)=0x14) write(r0, &(0x7f0000000140)="a0881b63c9370708651492457e86531854f674cfc1561bf0a28ecb2493826815b2b300f3559c22b338478476b65279f6426bcc0d0ee03c2ef43d2fca86d8de848ca71cbbd462621f507284067cd2f180213c959b4ed5cb388c1c2172cbd7", 0x5e) [ 78.776288][ T6946] __alloc_pages+0x102/0x320 [ 78.780892][ T6946] alloc_pages+0x382/0x3d0 [ 78.785314][ T6946] __get_free_pages+0x8/0x30 [ 78.789921][ T6946] io_uring_create+0xa42/0x1bb0 [ 78.794775][ T6946] ? tick_program_event+0x78/0xc0 [ 78.799862][ T6946] __x64_sys_io_uring_setup+0xf3/0x130 [ 78.805368][ T6946] do_syscall_64+0x44/0xa0 [ 78.809857][ T6946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.815760][ T6946] RIP: 0033:0x7fd63c5f78d9 07:42:03 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x58040580) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) [ 78.820181][ T6946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 78.839869][ T6946] RSP: 002b:00007fd63a34e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 78.848356][ T6946] RAX: ffffffffffffffda RBX: 00007fd63c6fc020 RCX: 00007fd63c5f78d9 [ 78.856327][ T6946] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 78.864353][ T6946] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 78.872321][ T6946] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 78.880278][ T6946] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 78.894024][ T6944] ref_ctr increment failed for inode: 0x3746 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 78.909705][ T6975] FAULT_INJECTION: forcing a failure. [ 78.909705][ T6975] name failslab, interval 1, probability 0, space 0, times 0 07:42:04 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:04 executing program 0: sendto(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000011c0)=@l2={0x1f, 0x81}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r0, &(0x7f0000000000)="acf288ca", 0x5c8, 0x0, &(0x7f00000011c0)=@can={0x1d, r1}, 0x80) [ 78.922343][ T6975] CPU: 0 PID: 6975 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 78.931015][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.941107][ T6975] Call Trace: [ 78.944380][ T6975] dump_stack_lvl+0xd6/0x122 [ 78.949073][ T6975] dump_stack+0x11/0x1b [ 78.953234][ T6975] should_fail+0x23c/0x250 [ 78.957654][ T6975] ? vm_area_alloc+0x28/0xa0 [ 78.962241][ T6975] __should_failslab+0x81/0x90 [ 78.967093][ T6975] should_failslab+0x5/0x20 [ 78.971580][ T6975] kmem_cache_alloc+0x4f/0x300 [ 78.976418][ T6975] vm_area_alloc+0x28/0xa0 [ 78.980814][ T6975] mmap_region+0x73b/0x1260 [ 78.985302][ T6975] ? selinux_mmap_addr+0x94/0xa0 [ 78.990254][ T6975] ? security_mmap_addr+0x78/0x90 [ 78.995309][ T6975] do_mmap+0x781/0xc20 [ 78.999363][ T6975] vm_mmap_pgoff+0x117/0x1f0 [ 79.003953][ T6975] ksys_mmap_pgoff+0x284/0x350 [ 79.008794][ T6975] ? exit_to_user_mode_prepare+0x65/0x190 [ 79.014566][ T6975] do_syscall_64+0x44/0xa0 [ 79.018981][ T6975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.024901][ T6975] RIP: 0033:0x7f6e743e6922 [ 79.029313][ T6975] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 79.048937][ T6975] RSP: 002b:00007f6e7213d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 79.057482][ T6975] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e743e6922 [ 79.065448][ T6975] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 07:42:04 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 8) 07:42:04 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 79.073484][ T6975] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 79.081450][ T6975] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 79.089419][ T6975] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 79.098610][ T6960] ref_ctr increment failed for inode: 0x370c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 07:42:04 executing program 0: pipe(&(0x7f0000000000)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x8002, &(0x7f0000000100)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) clone(0x800c000, &(0x7f0000000040)="91465cc092c28ca70434543ceba7f739802ab7316b4265cc6ae4b22e5229b0d27a7669fa2b7025c5f36a8f18994d6baa1e3ac821d234f84a4db0cd7bc2935e97cfe538bdcad0f9f57c5e470c1accb09145c3c81cd2045986fe0de76749f76a243788ed6650ace86911d6b5c09c03f13614dce1", &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="1adfc9bce45f019a10b662ca52a3cc01db1ba810163695a33e2389a48d1ab06b1e196bbbbf60e5cda1c81db98c870d6db2cdfa0e8c56ca7eb9986412214ab807987f9f2a8b2577c9d0444b734af601f51212629d33c34c42abf92a8c28b302771b57de8d815f02e24ea6150eb1fcd408ccd137") 07:42:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = syz_io_uring_setup(0x5c86, &(0x7f0000000080)={0x0, 0xdabc, 0x2, 0x0, 0x3af, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket(0x9, 0x2, 0x5d1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x8410}, {r1, 0x8000}, {r2, 0x8}, {r3}, {r4, 0x8000}, {r5, 0x8200}], 0x6, 0xef) close(r0) 07:42:04 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 38) [ 79.144574][ T6978] ref_ctr increment failed for inode: 0x374a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000009340dda7 [ 79.191570][ T6993] FAULT_INJECTION: forcing a failure. [ 79.191570][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 79.204254][ T6993] CPU: 0 PID: 6993 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 79.206226][ T7002] FAULT_INJECTION: forcing a failure. [ 79.206226][ T7002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.212927][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.236351][ T6993] Call Trace: [ 79.239618][ T6993] dump_stack_lvl+0xd6/0x122 [ 79.244202][ T6993] dump_stack+0x11/0x1b [ 79.248340][ T6993] should_fail+0x23c/0x250 [ 79.252740][ T6993] __should_failslab+0x81/0x90 [ 79.257488][ T6993] ? io_uring_create+0x16a6/0x1bb0 [ 79.262585][ T6993] should_failslab+0x5/0x20 [ 79.267075][ T6993] kmem_cache_alloc_trace+0x52/0x320 [ 79.272349][ T6993] ? alloc_pages+0x382/0x3d0 [ 79.276931][ T6993] io_uring_create+0x16a6/0x1bb0 [ 79.281855][ T6993] __x64_sys_io_uring_setup+0xf3/0x130 [ 79.287300][ T6993] do_syscall_64+0x44/0xa0 [ 79.291704][ T6993] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.297667][ T6993] RIP: 0033:0x7fd63c5f78d9 [ 79.302084][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 79.321677][ T6993] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 79.330074][ T6993] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 79.338101][ T6993] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 79.346056][ T6993] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 79.354048][ T6993] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 79.362000][ T6993] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 79.370008][ T7002] CPU: 1 PID: 7002 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 79.378689][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.388739][ T7002] Call Trace: [ 79.392016][ T7002] dump_stack_lvl+0xd6/0x122 [ 79.396747][ T7002] dump_stack+0x11/0x1b [ 79.400905][ T7002] should_fail+0x23c/0x250 [ 79.405344][ T7002] __alloc_pages+0x102/0x320 [ 79.409982][ T7002] alloc_pages+0x382/0x3d0 [ 79.414499][ T7002] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 79.420117][ T7002] pte_alloc_one+0x29/0xb0 [ 79.424570][ T7002] ? __mem_cgroup_charge+0xeb/0x170 [ 79.429778][ T7002] do_cow_fault+0x1a1/0x560 [ 79.434292][ T7002] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 79.439847][ T7002] handle_mm_fault+0x9aa/0x1580 [ 79.444735][ T7002] ? follow_page_mask+0x42b/0x10b0 [ 79.449848][ T7002] __get_user_pages+0x381/0xc50 [ 79.454703][ T7002] __get_user_pages_remote+0x17f/0x610 [ 79.460196][ T7002] get_user_pages_remote+0x6f/0xa0 [ 79.465388][ T7002] __update_ref_ctr+0x94/0x240 [ 79.470156][ T7002] update_ref_ctr+0x36f/0x610 [ 79.474928][ T7002] uprobe_write_opcode+0x3e9/0x990 [ 79.480048][ T7002] set_swbp+0x26/0x30 [ 79.484117][ T7002] install_breakpoint+0x3bd/0x4d0 07:42:04 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:04 executing program 0: unshare(0x20000600) unshare(0x10020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) unshare(0x0) 07:42:04 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop5', 0x400382, 0x86) recvmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000140), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/104, 0x68}], 0x4, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x40000122) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000006c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 79.489155][ T7002] uprobe_mmap+0x80c/0xcd0 [ 79.493583][ T7002] ? __vma_link_rb+0x3c2/0x3e0 [ 79.498424][ T7002] __vma_adjust+0x118d/0x1a70 [ 79.503103][ T7002] __split_vma+0x24b/0x320 [ 79.507540][ T7002] __do_munmap+0x27c/0x1340 [ 79.512042][ T7002] ? __xas_nomem+0xfc/0x270 [ 79.516543][ T7002] mmap_region+0x58a/0x1260 [ 79.521094][ T7002] ? selinux_mmap_addr+0x94/0xa0 [ 79.526044][ T7002] ? security_mmap_addr+0x78/0x90 [ 79.531087][ T7002] do_mmap+0x781/0xc20 [ 79.535166][ T7002] vm_mmap_pgoff+0x117/0x1f0 [ 79.539798][ T7002] ksys_mmap_pgoff+0x284/0x350 [ 79.544567][ T7002] ? exit_to_user_mode_prepare+0x65/0x190 [ 79.550300][ T7002] do_syscall_64+0x44/0xa0 [ 79.554770][ T7002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.560672][ T7002] RIP: 0033:0x7f6e743e6922 [ 79.565079][ T7002] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 79.584679][ T7002] RSP: 002b:00007f6e7215e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 79.593085][ T7002] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e743e6922 [ 79.601038][ T7002] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 79.608997][ T7002] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 79.616952][ T7002] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 79.624987][ T7002] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 79.633034][ T7002] ref_ctr increment failed for inode: 0x3748 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 79.645359][ T22] audit: type=1326 audit(1633160524.784:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7024 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x0 [ 79.669930][ T7025] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e 07:42:04 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 9) 07:42:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xa104a2, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6e6f64655f72006b773d3078303030302030303130303030313030302c70726a71756f74612c163fd248b48c00"/55]) 07:42:04 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 79.670059][ T22] audit: type=1326 audit(1633160524.804:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7024 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x0 [ 79.704777][ T7029] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 79.708648][ T22] audit: type=1326 audit(1633160524.824:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7024 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f0e8e76d51b code=0x0 07:42:04 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (fail_nth: 39) [ 79.758209][ T7025] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 79.770704][ T7029] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 79.804793][ T7035] FAULT_INJECTION: forcing a failure. [ 79.804793][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 79.813438][ T7036] EXT4-fs (sda1): Unrecognized mount option "mnode_r" or missing value [ 79.817474][ T7035] CPU: 0 PID: 7035 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 79.834370][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.844425][ T7035] Call Trace: [ 79.847707][ T7035] dump_stack_lvl+0xd6/0x122 [ 79.852296][ T7035] dump_stack+0x11/0x1b [ 79.856487][ T7035] should_fail+0x23c/0x250 [ 79.860906][ T7035] ? kzalloc+0x30/0x30 [ 79.864980][ T7035] __should_failslab+0x81/0x90 [ 79.869752][ T7035] ? percpu_ref_init+0x96/0x250 [ 79.874685][ T7035] should_failslab+0x5/0x20 [ 79.879196][ T7035] kmem_cache_alloc_trace+0x52/0x320 [ 79.884568][ T7035] ? kzalloc+0x30/0x30 [ 79.888704][ T7035] percpu_ref_init+0x96/0x250 [ 79.893390][ T7035] io_uring_create+0x16c8/0x1bb0 [ 79.898340][ T7035] __x64_sys_io_uring_setup+0xf3/0x130 [ 79.903810][ T7035] do_syscall_64+0x44/0xa0 [ 79.908319][ T7035] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.911544][ T7046] ref_ctr increment failed for inode: 0x3753 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd [ 79.914296][ T7035] RIP: 0033:0x7fd63c5f78d9 [ 79.914314][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 79.942812][ T7046] FAULT_INJECTION: forcing a failure. [ 79.942812][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 79.950027][ T7035] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 79.950051][ T7035] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 79.950062][ T7035] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 79.950077][ T7035] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 79.950088][ T7035] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 80.002868][ T7035] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 80.010871][ T7046] CPU: 1 PID: 7046 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 80.019573][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.029625][ T7046] Call Trace: [ 80.032907][ T7046] dump_stack_lvl+0xd6/0x122 [ 80.037513][ T7046] dump_stack+0x11/0x1b [ 80.041679][ T7046] should_fail+0x23c/0x250 [ 80.046185][ T7046] ? vm_area_dup+0x44/0x130 [ 80.050695][ T7046] __should_failslab+0x81/0x90 [ 80.055470][ T7046] should_failslab+0x5/0x20 [ 80.059982][ T7046] kmem_cache_alloc+0x4f/0x300 [ 80.064810][ T7046] ? __vma_adjust+0x1830/0x1a70 [ 80.069669][ T7046] vm_area_dup+0x44/0x130 [ 80.074103][ T7046] __split_vma+0x82/0x320 [ 80.078441][ T7046] ? vmacache_find+0x2df/0x320 [ 80.083218][ T7046] __do_munmap+0x2ee/0x1340 [ 80.087783][ T7046] ? __xas_nomem+0xfc/0x270 [ 80.092293][ T7046] mmap_region+0x58a/0x1260 [ 80.096827][ T7046] ? selinux_mmap_addr+0x94/0xa0 [ 80.101841][ T7046] ? security_mmap_addr+0x78/0x90 [ 80.106878][ T7046] do_mmap+0x781/0xc20 [ 80.111009][ T7046] vm_mmap_pgoff+0x117/0x1f0 [ 80.115636][ T7046] ksys_mmap_pgoff+0x284/0x350 [ 80.120420][ T7046] ? exit_to_user_mode_prepare+0x65/0x190 [ 80.126149][ T7046] do_syscall_64+0x44/0xa0 [ 80.130584][ T7046] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.136507][ T7046] RIP: 0033:0x7f6e743e6922 [ 80.140927][ T7046] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 80.160610][ T7046] RSP: 002b:00007f6e7213d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 80.169034][ T7046] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6e743e6922 [ 80.177014][ T7046] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 80.185002][ T7046] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 80.192978][ T7046] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 07:42:05 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 80.200999][ T7046] R13: 0000000020081000 R14: 0000000020000080 R15: 0000000020002000 [ 80.220839][ T7036] EXT4-fs (sda1): Unrecognized mount option "mnode_r" or missing value 07:42:05 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xa104a2, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6e6f64655f72006b773d3078303030302030303130303030313030302c70726a71756f74612c163fd248b48c00"/55]) 07:42:05 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 10) [ 80.297972][ T7052] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 80.301881][ T7058] EXT4-fs (sda1): Unrecognized mount option "mnode_r" or missing value [ 80.322667][ T7057] FAULT_INJECTION: forcing a failure. [ 80.322667][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.335743][ T7057] CPU: 0 PID: 7057 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 07:42:05 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (fail_nth: 1) [ 80.344419][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.354473][ T7057] Call Trace: [ 80.357756][ T7057] dump_stack_lvl+0xd6/0x122 [ 80.362358][ T7057] dump_stack+0x11/0x1b [ 80.366577][ T7057] should_fail+0x23c/0x250 [ 80.371005][ T7057] should_fail_usercopy+0x16/0x20 [ 80.376033][ T7057] _copy_to_user+0x1c/0x90 [ 80.380458][ T7057] io_uring_create+0x1859/0x1bb0 [ 80.385401][ T7057] __x64_sys_io_uring_setup+0xf3/0x130 [ 80.390864][ T7057] do_syscall_64+0x44/0xa0 [ 80.395342][ T7057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.401248][ T7057] RIP: 0033:0x7fd63c5f78d9 [ 80.405664][ T7057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 80.425281][ T7057] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 80.433700][ T7057] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 80.441674][ T7057] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 80.449651][ T7057] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 80.457626][ T7057] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 80.465599][ T7057] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 80.477118][ T7064] FAULT_INJECTION: forcing a failure. [ 80.477118][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.477713][ T7052] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 80.490197][ T7064] CPU: 0 PID: 7064 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 80.510480][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.520535][ T7064] Call Trace: [ 80.523816][ T7064] dump_stack_lvl+0xd6/0x122 [ 80.528434][ T7064] dump_stack+0x11/0x1b [ 80.532665][ T7064] should_fail+0x23c/0x250 [ 80.537087][ T7064] should_fail_usercopy+0x16/0x20 [ 80.542132][ T7064] _copy_from_user+0x1c/0xd0 [ 80.546736][ T7064] io_submit_one+0x54/0x13b0 [ 80.551336][ T7064] ? asm_exc_page_fault+0x1e/0x30 [ 80.556376][ T7064] __se_sys_io_submit+0x105/0x270 [ 80.561492][ T7064] __x64_sys_io_submit+0x3f/0x50 [ 80.566445][ T7064] do_syscall_64+0x44/0xa0 [ 80.570946][ T7064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.576858][ T7064] RIP: 0033:0x7f5ed53328d9 [ 80.581274][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 80.600934][ T7064] RSP: 002b:00007f5ed30aa188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 80.609380][ T7064] RAX: ffffffffffffffda RBX: 00007f5ed5436f60 RCX: 00007f5ed53328d9 [ 80.617356][ T7064] RDX: 00000000200004c0 RSI: 0000000000000002 RDI: 00007f5ed541a000 [ 80.625330][ T7064] RBP: 00007f5ed30aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 80.633403][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.641438][ T7064] R13: 00007ffe0db9e08f R14: 00007f5ed30aa300 R15: 0000000000022000 07:42:05 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffe, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f7887374f48dc91cb4f167ef8eb55de66696c653020255b20692a272420ffff200020002000205d0a5a10a7073d27b37c87ba7314f2fffff21c0900905eff2bec1f99712d403868285d47af09d5eda54d57944f267d14db01cd3097eae499d94299e05d3a8cee5a90e11dd07b1cc1904b8578ff168bcfddd690afc11fb4628f98824e02de4c27c2b723107afb8a16c057ceac373e3928ec976ee68d5607d9bbfe8d47de75ffcf95499df5b577d7f6a65c9bf4"], 0x5c) 07:42:05 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (fail_nth: 2) [ 80.740453][ T7072] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 80.780961][ T7072] ref_ctr increment failed for inode: 0x3732 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 80.796769][ T7082] FAULT_INJECTION: forcing a failure. [ 80.796769][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 80.809516][ T7082] CPU: 1 PID: 7082 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 80.818253][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.828311][ T7082] Call Trace: [ 80.831588][ T7082] dump_stack_lvl+0xd6/0x122 [ 80.836188][ T7082] dump_stack+0x11/0x1b [ 80.840353][ T7082] should_fail+0x23c/0x250 [ 80.844810][ T7082] ? io_submit_one+0xc2/0x13b0 [ 80.849586][ T7082] __should_failslab+0x81/0x90 [ 80.854375][ T7082] should_failslab+0x5/0x20 [ 80.858891][ T7082] kmem_cache_alloc+0x4f/0x300 [ 80.863676][ T7082] io_submit_one+0xc2/0x13b0 [ 80.868344][ T7082] ? asm_exc_page_fault+0x1e/0x30 [ 80.873387][ T7082] __se_sys_io_submit+0x105/0x270 [ 80.878426][ T7082] __x64_sys_io_submit+0x3f/0x50 [ 80.883537][ T7082] do_syscall_64+0x44/0xa0 [ 80.887970][ T7082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.893893][ T7082] RIP: 0033:0x7f5ed53328d9 [ 80.898311][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 80.917923][ T7082] RSP: 002b:00007f5ed30aa188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 07:42:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 80.926344][ T7082] RAX: ffffffffffffffda RBX: 00007f5ed5436f60 RCX: 00007f5ed53328d9 [ 80.934317][ T7082] RDX: 00000000200004c0 RSI: 0000000000000002 RDI: 00007f5ed541a000 [ 80.942292][ T7082] RBP: 00007f5ed30aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 80.950303][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.958322][ T7082] R13: 00007ffe0db9e08f R14: 00007f5ed30aa300 R15: 0000000000022000 07:42:06 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 11) 07:42:06 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 81.032496][ T7090] ref_ctr increment failed for inode: 0x371e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 81.062105][ T7097] ref_ctr increment failed for inode: 0x3753 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 [ 81.074943][ T7096] FAULT_INJECTION: forcing a failure. [ 81.074943][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 81.087598][ T7096] CPU: 1 PID: 7096 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 81.096272][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.106344][ T7096] Call Trace: [ 81.109721][ T7096] dump_stack_lvl+0xd6/0x122 [ 81.114325][ T7096] dump_stack+0x11/0x1b [ 81.118492][ T7096] should_fail+0x23c/0x250 [ 81.122994][ T7096] ? sock_alloc_inode+0x23/0x90 [ 81.127901][ T7096] __should_failslab+0x81/0x90 [ 81.132681][ T7096] ? sockfs_init_fs_context+0x70/0x70 [ 81.138099][ T7096] should_failslab+0x5/0x20 [ 81.142613][ T7096] kmem_cache_alloc+0x4f/0x300 [ 81.147468][ T7096] ? sockfs_init_fs_context+0x70/0x70 [ 81.152920][ T7096] sock_alloc_inode+0x23/0x90 [ 81.157688][ T7096] ? sockfs_init_fs_context+0x70/0x70 [ 81.163073][ T7096] new_inode_pseudo+0x38/0x1c0 [ 81.167854][ T7096] __sock_create+0x122/0x4e0 [ 81.172458][ T7096] ? should_fail+0xd6/0x250 [ 81.176970][ T7096] sock_create_kern+0x34/0x40 [ 81.181662][ T7096] io_uring_create+0x18a2/0x1bb0 [ 81.186615][ T7096] __x64_sys_io_uring_setup+0xf3/0x130 [ 81.192090][ T7096] do_syscall_64+0x44/0xa0 [ 81.196520][ T7096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.202500][ T7096] RIP: 0033:0x7fd63c5f78d9 [ 81.206919][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:42:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c0a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:06 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (fail_nth: 3) [ 81.226659][ T7096] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 81.235140][ T7096] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 81.243117][ T7096] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 81.251093][ T7096] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 81.259074][ T7096] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 81.267052][ T7096] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 81.275097][ T7096] socket: no more sockets [ 81.309904][ T7097] ref_ctr increment failed for inode: 0x3753 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 [ 81.319802][ T7106] FAULT_INJECTION: forcing a failure. [ 81.319802][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.334662][ T7106] CPU: 0 PID: 7106 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 81.343398][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.353458][ T7106] Call Trace: [ 81.356738][ T7106] dump_stack_lvl+0xd6/0x122 [ 81.361343][ T7106] dump_stack+0x11/0x1b [ 81.365509][ T7106] should_fail+0x23c/0x250 [ 81.369936][ T7106] should_fail_usercopy+0x16/0x20 [ 81.374972][ T7106] _copy_from_user+0x1c/0xd0 [ 81.379572][ T7106] io_submit_one+0x54/0x13b0 [ 81.384238][ T7106] __se_sys_io_submit+0x105/0x270 [ 81.389281][ T7106] __x64_sys_io_submit+0x3f/0x50 [ 81.394286][ T7106] do_syscall_64+0x44/0xa0 [ 81.398718][ T7106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.404654][ T7106] RIP: 0033:0x7f5ed53328d9 [ 81.409153][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 81.428837][ T7106] RSP: 002b:00007f5ed30aa188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 81.437252][ T7106] RAX: ffffffffffffffda RBX: 00007f5ed5436f60 RCX: 00007f5ed53328d9 [ 81.445265][ T7106] RDX: 00000000200004c0 RSI: 0000000000000002 RDI: 00007f5ed541a000 07:42:06 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 81.453239][ T7106] RBP: 00007f5ed30aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.461222][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.469196][ T7106] R13: 00007ffe0db9e08f R14: 00007f5ed30aa300 R15: 0000000000022000 [ 81.500728][ T7104] ref_ctr increment failed for inode: 0x3745 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 81.522722][ T7114] ref_ctr increment failed for inode: 0x3753 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 81.522887][ T7104] ref_ctr increment failed for inode: 0x3745 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 07:42:06 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (fail_nth: 4) [ 81.548501][ T7115] ref_ctr increment failed for inode: 0x3745 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 81.575025][ T7115] ref_ctr increment failed for inode: 0x3745 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 81.607786][ T7114] ref_ctr increment failed for inode: 0x3753 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 81.616342][ T7120] FAULT_INJECTION: forcing a failure. [ 81.616342][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 81.632194][ T7120] CPU: 1 PID: 7120 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 81.632358][ T7121] ref_ctr increment failed for inode: 0x3753 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 81.640886][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.640901][ T7120] Call Trace: [ 81.640908][ T7120] dump_stack_lvl+0xd6/0x122 [ 81.640934][ T7120] dump_stack+0x11/0x1b [ 81.674624][ T7120] should_fail+0x23c/0x250 [ 81.679045][ T7120] ? io_submit_one+0xc2/0x13b0 [ 81.683811][ T7120] __should_failslab+0x81/0x90 [ 81.688588][ T7120] should_failslab+0x5/0x20 [ 81.693211][ T7120] kmem_cache_alloc+0x4f/0x300 [ 81.698016][ T7120] io_submit_one+0xc2/0x13b0 [ 81.702612][ T7120] __se_sys_io_submit+0x105/0x270 [ 81.707661][ T7120] __x64_sys_io_submit+0x3f/0x50 [ 81.712623][ T7120] do_syscall_64+0x44/0xa0 [ 81.717067][ T7120] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 81.723039][ T7120] RIP: 0033:0x7f5ed53328d9 [ 81.727498][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 81.747152][ T7120] RSP: 002b:00007f5ed30aa188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 81.755726][ T7120] RAX: ffffffffffffffda RBX: 00007f5ed5436f60 RCX: 00007f5ed53328d9 [ 81.763710][ T7120] RDX: 00000000200004c0 RSI: 0000000000000002 RDI: 00007f5ed541a000 [ 81.771693][ T7120] RBP: 00007f5ed30aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.779888][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.787860][ T7120] R13: 00007ffe0db9e08f R14: 00007f5ed30aa300 R15: 0000000000022000 07:42:07 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 12) 07:42:07 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:07 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c64, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 81.901480][ T7129] FAULT_INJECTION: forcing a failure. [ 81.901480][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 81.914196][ T7129] CPU: 0 PID: 7129 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 81.922876][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.929592][ T7133] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 81.932948][ T7129] Call Trace: [ 81.932958][ T7129] dump_stack_lvl+0xd6/0x122 [ 81.952502][ T7129] dump_stack+0x11/0x1b [ 81.956872][ T7129] should_fail+0x23c/0x250 [ 81.961305][ T7129] ? security_inode_alloc+0x30/0x180 [ 81.966611][ T7129] __should_failslab+0x81/0x90 [ 81.971381][ T7129] should_failslab+0x5/0x20 [ 81.975903][ T7129] kmem_cache_alloc+0x4f/0x300 [ 81.980677][ T7129] security_inode_alloc+0x30/0x180 [ 81.985819][ T7129] inode_init_always+0x20b/0x430 [ 81.990770][ T7129] ? sockfs_init_fs_context+0x70/0x70 [ 81.996154][ T7129] new_inode_pseudo+0x73/0x1c0 [ 82.000988][ T7129] __sock_create+0x122/0x4e0 [ 82.005694][ T7129] ? should_fail+0xd6/0x250 [ 82.010207][ T7129] sock_create_kern+0x34/0x40 [ 82.014931][ T7129] io_uring_create+0x18a2/0x1bb0 [ 82.019898][ T7129] __x64_sys_io_uring_setup+0xf3/0x130 [ 82.025376][ T7129] do_syscall_64+0x44/0xa0 [ 82.029808][ T7129] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 82.035742][ T7129] RIP: 0033:0x7fd63c5f78d9 [ 82.040158][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 82.059857][ T7129] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 82.068438][ T7129] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 82.076405][ T7129] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 82.084470][ T7129] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 82.092466][ T7129] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 07:42:07 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (fail_nth: 5) [ 82.100439][ T7129] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 82.108490][ T7129] socket: no more sockets [ 82.113263][ T7133] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 82.115956][ T7135] ref_ctr increment failed for inode: 0x375b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 82.137353][ T7136] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 82.164526][ T7131] ref_ctr increment failed for inode: 0x375b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 82.196999][ T7141] FAULT_INJECTION: forcing a failure. [ 82.196999][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.211023][ T7141] CPU: 1 PID: 7141 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 82.219834][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.229912][ T7141] Call Trace: [ 82.233192][ T7141] dump_stack_lvl+0xd6/0x122 [ 82.237790][ T7141] dump_stack+0x11/0x1b [ 82.241957][ T7141] should_fail+0x23c/0x250 [ 82.246411][ T7141] should_fail_usercopy+0x16/0x20 [ 82.251536][ T7141] _copy_to_user+0x1c/0x90 [ 82.255959][ T7141] simple_read_from_buffer+0xab/0x120 [ 82.261471][ T7141] proc_fail_nth_read+0x10d/0x150 [ 82.266509][ T7141] ? proc_fault_inject_write+0x230/0x230 [ 82.272155][ T7141] vfs_read+0x1e6/0x750 [ 82.276327][ T7141] ? __fget_light+0x21b/0x260 [ 82.281052][ T7141] ? __cond_resched+0x11/0x40 [ 82.285783][ T7141] ksys_read+0xd9/0x190 [ 82.289988][ T7141] __x64_sys_read+0x3e/0x50 [ 82.294644][ T7141] do_syscall_64+0x44/0xa0 [ 82.299147][ T7141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 82.305055][ T7141] RIP: 0033:0x7f5ed52e548c [ 82.312338][ T7141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 82.331951][ T7141] RSP: 002b:00007f5ed30aa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.340365][ T7141] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5ed52e548c [ 82.348339][ T7141] RDX: 000000000000000f RSI: 00007f5ed30aa1e0 RDI: 0000000000000005 [ 82.356577][ T7141] RBP: 00007f5ed30aa1d0 R08: 0000000000000000 R09: 0000000000000000 07:42:07 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 82.364595][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.372588][ T7141] R13: 00007ffe0db9e08f R14: 00007f5ed30aa300 R15: 0000000000022000 07:42:07 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 13) 07:42:07 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 82.450529][ T7148] ref_ctr increment failed for inode: 0x3757 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 82.476720][ T7148] ref_ctr increment failed for inode: 0x3757 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 82.477745][ T7150] FAULT_INJECTION: forcing a failure. [ 82.477745][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 82.501179][ T7150] CPU: 0 PID: 7150 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 82.509855][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.519936][ T7150] Call Trace: [ 82.523220][ T7150] dump_stack_lvl+0xd6/0x122 [ 82.527819][ T7150] dump_stack+0x11/0x1b [ 82.532074][ T7150] should_fail+0x23c/0x250 [ 82.536495][ T7150] ? sk_prot_alloc+0x41/0x190 [ 82.541174][ T7150] __should_failslab+0x81/0x90 [ 82.545943][ T7150] should_failslab+0x5/0x20 07:42:07 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 82.550449][ T7150] kmem_cache_alloc+0x4f/0x300 [ 82.555432][ T7150] sk_prot_alloc+0x41/0x190 [ 82.559935][ T7150] sk_alloc+0x2e/0x220 [ 82.564000][ T7150] unix_create1+0xa2/0x3f0 [ 82.568418][ T7150] unix_create+0xfb/0x120 [ 82.572749][ T7150] __sock_create+0x2c7/0x4e0 [ 82.577350][ T7150] sock_create_kern+0x34/0x40 [ 82.582073][ T7150] io_uring_create+0x18a2/0x1bb0 [ 82.587011][ T7150] __x64_sys_io_uring_setup+0xf3/0x130 [ 82.592474][ T7150] do_syscall_64+0x44/0xa0 [ 82.596923][ T7150] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 82.602828][ T7150] RIP: 0033:0x7fd63c5f78d9 [ 82.607237][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 82.626845][ T7150] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 82.635324][ T7150] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 82.643298][ T7150] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 82.651277][ T7150] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 82.659250][ T7150] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 82.667221][ T7150] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 82.684789][ T7152] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:07 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:07 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0xffffffffffffffff, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 82.714188][ T7152] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 82.729725][ T7162] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:07 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 82.780536][ T7164] ref_ctr increment failed for inode: 0x3744 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 82.806277][ T7164] ref_ctr increment failed for inode: 0x3744 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c 07:42:07 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004044}, 0x804) readahead(0xffffffffffffffff, 0xdb, 0xa47) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f00005bb000/0x1000)=nil, 0x1000, 0x1800003, 0x10, r2, 0x0) ioctl$EVIOCGSW(r1, 0x80404523, &(0x7f0000000040)=""/81) 07:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 82.825498][ T7172] ref_ctr increment failed for inode: 0x3744 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 82.859227][ T7175] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:08 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 82.882973][ T7175] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 82.902043][ T7183] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:08 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 82.931475][ T7184] ref_ctr increment failed for inode: 0x3746 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 82.962062][ T7184] ref_ctr increment failed for inode: 0x3746 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 82.978562][ T7194] ref_ctr increment failed for inode: 0x3746 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 83.021646][ T7198] ref_ctr increment failed for inode: 0x3762 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f 07:42:08 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 83.024342][ T7199] ref_ctr increment failed for inode: 0x3767 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000051aa6c03 [ 83.054447][ T7198] ref_ctr increment failed for inode: 0x3762 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 83.081105][ T7202] ref_ctr increment failed for inode: 0x3762 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f 07:42:08 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 14) 07:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 83.190595][ T7214] FAULT_INJECTION: forcing a failure. [ 83.190595][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 83.191457][ T7213] ref_ctr increment failed for inode: 0x375c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 83.203336][ T7214] CPU: 1 PID: 7214 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 83.223781][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.233853][ T7214] Call Trace: [ 83.237133][ T7214] dump_stack_lvl+0xd6/0x122 [ 83.241767][ T7214] dump_stack+0x11/0x1b [ 83.245962][ T7214] should_fail+0x23c/0x250 [ 83.250404][ T7214] __should_failslab+0x81/0x90 [ 83.255205][ T7214] ? selinux_sk_alloc_security+0x61/0x120 [ 83.260929][ T7214] should_failslab+0x5/0x20 [ 83.265440][ T7214] kmem_cache_alloc_trace+0x52/0x320 [ 83.270784][ T7214] ? should_fail+0xd6/0x250 [ 83.275297][ T7214] selinux_sk_alloc_security+0x61/0x120 [ 83.280876][ T7214] security_sk_alloc+0x45/0x90 [ 83.285785][ T7214] sk_prot_alloc+0xd2/0x190 [ 83.290304][ T7214] sk_alloc+0x2e/0x220 [ 83.294413][ T7214] unix_create1+0xa2/0x3f0 [ 83.298863][ T7214] unix_create+0xfb/0x120 [ 83.303269][ T7214] __sock_create+0x2c7/0x4e0 [ 83.307943][ T7214] sock_create_kern+0x34/0x40 [ 83.312624][ T7214] io_uring_create+0x18a2/0x1bb0 [ 83.317589][ T7214] __x64_sys_io_uring_setup+0xf3/0x130 [ 83.323056][ T7214] do_syscall_64+0x44/0xa0 [ 83.327615][ T7214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.333605][ T7214] RIP: 0033:0x7fd63c5f78d9 [ 83.338116][ T7214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 83.357733][ T7214] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 83.366145][ T7214] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 83.374123][ T7214] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 83.382101][ T7214] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 07:42:08 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:08 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:08 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 15) [ 83.390074][ T7214] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 83.398066][ T7214] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 83.406425][ T7213] ref_ctr increment failed for inode: 0x375c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 83.427364][ T7219] ref_ctr increment failed for inode: 0x375c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 83.474346][ T7224] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 83.500413][ T7228] FAULT_INJECTION: forcing a failure. [ 83.500413][ T7228] name failslab, interval 1, probability 0, space 0, times 0 [ 83.513125][ T7228] CPU: 1 PID: 7228 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 83.521817][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.531876][ T7228] Call Trace: [ 83.535154][ T7228] dump_stack_lvl+0xd6/0x122 [ 83.539761][ T7228] dump_stack+0x11/0x1b [ 83.543931][ T7228] should_fail+0x23c/0x250 [ 83.548435][ T7228] ? __d_alloc+0x36/0x370 [ 83.552839][ T7228] __should_failslab+0x81/0x90 [ 83.557652][ T7228] should_failslab+0x5/0x20 [ 83.562162][ T7228] kmem_cache_alloc+0x4f/0x300 [ 83.567004][ T7228] __d_alloc+0x36/0x370 [ 83.571465][ T7228] d_alloc_pseudo+0x1a/0x50 [ 83.575992][ T7228] alloc_file_pseudo+0x77/0x150 [ 83.580998][ T7228] anon_inode_getfile+0x9f/0x120 [ 83.585949][ T7228] io_uring_create+0x18f8/0x1bb0 [ 83.590904][ T7228] __x64_sys_io_uring_setup+0xf3/0x130 [ 83.596465][ T7228] do_syscall_64+0x44/0xa0 [ 83.600907][ T7228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.606813][ T7228] RIP: 0033:0x7fd63c5f78d9 07:42:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3090, 0x4, 0x0, 0x0, 0x100000000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x0, 0xed, 0x2, 0x7, 0x0, 0x5, 0x1e044, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000004c80), 0xa}, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0xfb85}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053240)={0x1, [], 0x2, "b4081e4f76c36c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000620c0)={0x3, [], 0x0, "fa11d4cc10dc18"}) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x8, 0x0, 0x0, 0x1, 0x0, 0x2000000000000001, 0xa1c5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000980), 0x1}, 0x8008, 0x6, 0x93, 0x3, 0x101, 0x0, 0x6, 0x0, 0x7fff}, 0x0, 0x40b, 0xffffffffffffffff, 0x2) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVid:De', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000009c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xad, "97bcffecfde694"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002000)={r4, r3, "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", "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"}) 07:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 83.611232][ T7228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 83.630840][ T7228] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 83.639254][ T7228] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 83.647229][ T7228] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 83.655200][ T7228] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 83.663199][ T7228] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 83.671218][ T7228] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 83.679726][ T7224] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 07:42:08 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:08 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r0) [ 83.720173][ C1] sd 0:0:1:0: tag#215 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 83.729934][ C1] sd 0:0:1:0: tag#215 CDB: opcode=0xe5 (vendor) [ 83.736181][ C1] sd 0:0:1:0: tag#215 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 83.745139][ C1] sd 0:0:1:0: tag#215 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 83.754356][ C1] sd 0:0:1:0: tag#215 CDB[20]: ba 07:42:08 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 16) [ 83.818712][ T7254] ref_ctr increment failed for inode: 0x3766 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 [ 83.844834][ T7256] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 83.857124][ T7236] ref_ctr increment failed for inode: 0x3766 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 [ 83.858393][ T7255] FAULT_INJECTION: forcing a failure. [ 83.858393][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 83.880176][ T7257] ref_ctr increment failed for inode: 0x3766 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 [ 83.881410][ T7255] CPU: 0 PID: 7255 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 83.901649][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.911699][ T7255] Call Trace: [ 83.914977][ T7255] dump_stack_lvl+0xd6/0x122 [ 83.919588][ T7255] dump_stack+0x11/0x1b [ 83.923793][ T7255] should_fail+0x23c/0x250 [ 83.928207][ T7255] ? __alloc_file+0x2e/0x1a0 [ 83.932843][ T7255] __should_failslab+0x81/0x90 [ 83.937619][ T7255] should_failslab+0x5/0x20 [ 83.942126][ T7255] kmem_cache_alloc+0x4f/0x300 [ 83.946897][ T7255] __alloc_file+0x2e/0x1a0 [ 83.951317][ T7255] alloc_empty_file+0xcd/0x1c0 [ 83.956154][ T7255] alloc_file+0x3a/0x280 [ 83.960401][ T7255] alloc_file_pseudo+0xfa/0x150 [ 83.965388][ T7255] anon_inode_getfile+0x9f/0x120 [ 83.970371][ T7255] io_uring_create+0x18f8/0x1bb0 [ 83.975314][ T7255] __x64_sys_io_uring_setup+0xf3/0x130 [ 83.980861][ T7255] do_syscall_64+0x44/0xa0 [ 83.985288][ T7255] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.991194][ T7255] RIP: 0033:0x7fd63c5f78d9 [ 83.995610][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.015221][ T7255] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 84.023633][ T7255] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 84.031708][ T7255] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 84.039681][ T7255] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 84.047738][ T7255] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 84.055742][ T7255] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:09 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:09 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 17) 07:42:09 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 84.080960][ T7247] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 84.096779][ T7259] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:09 executing program 0: r0 = io_uring_setup(0x45db, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x42040, 0x2565659bd15f0f84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r1, &(0x7f0000001540)=ANY=[], 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10ffd600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "36cfe9537217829ae3c72a476a4c0665b17110"}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x9) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/46, 0x2e}], 0x1) [ 84.181935][ T7270] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 84.200332][ T7273] FAULT_INJECTION: forcing a failure. [ 84.200332][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 84.212982][ T7273] CPU: 1 PID: 7273 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 84.221708][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.231768][ T7273] Call Trace: [ 84.235053][ T7273] dump_stack_lvl+0xd6/0x122 [ 84.239657][ T7273] dump_stack+0x11/0x1b [ 84.243820][ T7273] should_fail+0x23c/0x250 [ 84.248279][ T7273] ? security_file_alloc+0x30/0x190 [ 84.253209][ T7277] ref_ctr increment failed for inode: 0x3766 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 84.253555][ T7273] __should_failslab+0x81/0x90 [ 84.269923][ T7273] should_failslab+0x5/0x20 [ 84.274456][ T7273] kmem_cache_alloc+0x4f/0x300 [ 84.279229][ T7273] security_file_alloc+0x30/0x190 [ 84.284274][ T7273] __alloc_file+0x83/0x1a0 [ 84.288743][ T7273] alloc_empty_file+0xcd/0x1c0 [ 84.293609][ T7273] alloc_file+0x3a/0x280 [ 84.297869][ T7273] alloc_file_pseudo+0xfa/0x150 [ 84.302837][ T7273] anon_inode_getfile+0x9f/0x120 [ 84.307790][ T7273] io_uring_create+0x18f8/0x1bb0 [ 84.312739][ T7273] __x64_sys_io_uring_setup+0xf3/0x130 [ 84.318266][ T7273] do_syscall_64+0x44/0xa0 [ 84.322752][ T7273] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.328661][ T7273] RIP: 0033:0x7fd63c5f78d9 [ 84.333077][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.352686][ T7273] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 84.361180][ T7273] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 84.369156][ T7273] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 84.377132][ T7273] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 84.385103][ T7273] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 84.393133][ T7273] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 84.407640][ T7270] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:09 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:09 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 84.423521][ T7281] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:09 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 18) 07:42:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:09 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 84.506289][ T7294] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 84.522769][ T7295] FAULT_INJECTION: forcing a failure. [ 84.522769][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 84.535439][ T7295] CPU: 1 PID: 7295 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 84.544109][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.554165][ T7295] Call Trace: [ 84.557445][ T7295] dump_stack_lvl+0xd6/0x122 [ 84.562154][ T7295] dump_stack+0x11/0x1b [ 84.566312][ T7295] should_fail+0x23c/0x250 [ 84.570809][ T7295] __should_failslab+0x81/0x90 [ 84.575577][ T7295] ? io_uring_alloc_task_context+0x49/0x2d0 [ 84.581619][ T7295] should_failslab+0x5/0x20 [ 84.586167][ T7295] kmem_cache_alloc_trace+0x52/0x320 [ 84.588545][ T7302] ref_ctr increment failed for inode: 0x3767 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 84.591564][ T7295] io_uring_alloc_task_context+0x49/0x2d0 [ 84.608930][ T7295] ? alloc_fd+0x388/0x3e0 [ 84.613288][ T7295] io_uring_add_tctx_node+0x66/0x200 [ 84.618590][ T7295] io_uring_create+0x19f2/0x1bb0 [ 84.623572][ T7295] __x64_sys_io_uring_setup+0xf3/0x130 [ 84.629171][ T7295] do_syscall_64+0x44/0xa0 [ 84.633599][ T7295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.639546][ T7295] RIP: 0033:0x7fd63c5f78d9 [ 84.644012][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.663627][ T7295] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 84.672045][ T7295] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 84.680018][ T7295] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 84.687991][ T7295] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 84.695978][ T7295] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 07:42:09 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:09 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 84.703948][ T7295] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 84.713118][ T7294] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 84.726095][ T7301] ref_ctr increment failed for inode: 0x3764 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 07:42:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0x8, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000091c0)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f000000a580)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="15ffbc623fca74228f089e291c68bcf11c9e0e39a3647d8d8d48eadeebcdb34cb2ebc7b93bb7b8cec54ab486f43bd0da4d7eced02f2f9870e296d68039386688bed5fde35f1dfc6512f8380707a4df34c7199e0f1836d4f28ea969d768e58452ed32710dba0a3dcde6e2ac7547d06acb31ff5ec3286eaf55c66d7d73ace2ed16de8a9b8539fa1060e3889ceeeea69ca2e77cdb90a6c95f4f4d6e6b4985d67aa7c1a894f4a549a0293926f4d0d624d143c90f6f", 0xb3}], 0x1, &(0x7f0000000280)=[{0xc8, 0x1, 0x80000000, "4bee12fa116ba000c5094f78ee3bdaf998dc6a9dabeb6bce9040fa3584a6b5cc7417bf986e298ec2c977851cffd73b841245ad6a08325ebe922f4b8527afaaadf31c096d8fa8ce8242705ec0d8d18ce9325790aabbe2bd4f420c2eb48a427c9c54fcfb31ef96298e67a507899bf0cc8b226fe24e6cbe28b98157d19e667d6b0bd807777c95a029c319c37713c1fc699f0854eb1d92182cb961d13f9f3154156b74cd7a79f17444e105e3610dd23f23b1fd34361b"}, {0x28, 0x116, 0x3ff, "0d5133b26f8c6a4a7db80471b2bb320a3c5cd4a563"}], 0xf0}}, {{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x729c}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="3611996a85dadc9d282f939ecf1fb2b29019223e0db7544f66ff01fca4161cd1261f9fe1bde2e55f341be251b82d80424b1c98aab0354ba7792d0fd59df1277a7740c8f412dbac2c1b5d4e9dc19f0b7d1ee0b36f1b5b12240c0778bdcb32fd3b8f9e75fb7d9b4cad1e3b242cff0364bdd2b6adb66caf7a070dd4aa53bcf18f166bfce2d3f87776c2663eb6123ac3e2625fe1275b666b6dc84704c7d6fb2502471e60402121cae27d39fc914ef224a51832f7067fbc2ebff1b11559852aeb6b39ebeeea5d75b1fd0f7705af193279e53c80cc22", 0xd3}, {&(0x7f0000000140)="cbb7f16bf971902fed9b79d00a76b61f614996db55de6721eed9095ecc11f5706179eed325afa925c7db1ff1a6ae06f669061f464667f3b5233b42e6665fd802", 0x40}, {&(0x7f0000000500)="164571296ba4ebada17a05c7a9a543f502a2e97980a7c29a866eec4f282b6b35afc2a4fa4d21268ceb45d2d0a50621cb4a71d8e50cc9eab69e050ea6aed92e8d749e7f520d8e1e78304b536fe164619dfb4352b7630e67d93b89e1c90ddc47e2a2e2daf9731a245640e03c79362600240cace6d7cf373d80742e40928ba7c1", 0x7f}], 0x3, &(0x7f00000005c0)}}, {{&(0x7f0000000600)=@x25, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000680)="a9dbcb891fd653c02e7d93f2da43fd7163d71132c43f0dea4620a149218e2f0d24d3c77a4d0526104d5a4d8758ad1317f609ceadde821b240b805db8156c4c163c0443cab26863109983d9b90ce8362f18f1a1e8c72f6b4adcef6853fbd310f2fa54c387c1124861a65afdf7b71ca32421329edbebfbf07c000756edb272d1aa55bb53fa32d2777c65c87891105f615f099ba1640d5025c83b53319c1dd2757760317a3ef825775e1b62d5ff530f8fc68ff3e29d013ec839f8e000fb4f088be8834c025e20136e9e05bf1e389a6f590ac430ca619ff7e769d3343586781c", 0xde}, {&(0x7f0000000780)="6d1062c5f39a077ab66640efea9171c4de9f2e33e249d7ff49ae7d4868401b3eb7c31e972aaeffcaabfecc825ea551f0cee8d301dda186bd690d3268d5c099be11f54d56f13f114f04f358f7d8fbde882ce19c25a0c118a063c64a692ca68a8db96f0c63f0bdde076ddf3ee071d3b783054b479289638913e1a23af92d0a0111962b9e7915228feff42160597a903eb2eb05d8e0473d33cce045ece21491552130a9a48b042e6a623c8723100595", 0xae}, {&(0x7f0000000840)="acbef4a363a7690141499c86", 0xc}, {&(0x7f0000000880)="52317cbaebb847b6145d90682ec7e5d8da204d64a7ce9d25f781c7a502168630951229e369327e5d3323e661afe18e370bcc18a4923cda42f16dc0b29f3602af0726cd048971671096cfbbf5656b6fef1aa3bf2469ede829a0425286c1bb3677e6aaea9f0cc756a0e9004d83570eeef46d4537bd167dbb8de9232f18d5ce87b5516be41654940595244248bb499fce7505f3982f30ebb32c745b3339335131048850ed480b78904fdde43a78a9be31324e02fdfac3afecbef33ccec8d74f7d934f", 0xc1}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="06a7d47c7df79f6dd823c8efdd870069b0913e43ee8888b4127a6652dd07588a8e1a679e9af52b875ff0de8827a6293aeabff59d905c1bd215b8d75e2757b4fc2b43bb4e32d3b52e72633bf9ac253694371e6758637921c2399b61e260ad0975f723ef39e3492637b8cf71fe25d4e63285b321d558335937498a06feea1c0ea2a2bb827e1f14ff3f9d516b331e2a51acbb42", 0x92}, {&(0x7f0000000a80)="6adccca169589be59bc8094aff9f966215884a2a5a83ab296845bf36a0e44f560e40913bf6cb664a2bb5827bac21be9e71e092b780b30adcfdbd6839caabbb65020d4e3b8567b88bca38656993b44a1ecaa5150fa4b684d092e377dafe5a2ca3b9c5fde9f56c9a28a8c37a98bdbfbf2c6e283f4b7c229048bf6c07fb14d93d523e905d7fce711fe11d994f6ea3e9", 0x8e}, {&(0x7f0000000b40)="6710e0f3168cf39f20f8ee5464d1ca4080b841cffc4179e58431a8cafed60e63149ed761006ae88ae1c7decd7db47b3cd4c7c49d01b50fceb52688597ec1d3f4b8d4ae3f7442299ee1d5553c0fd24d749e48686274fc03533e486f0dd732daee44ce43f549faa14dc378a4e4041e053595c091cfcd251fd67108c119d29b1b5650b5a6c2b7bd43b338ed01ccc74498789cb9e03d8366155be6a2f3598746fe379c779d070f6ff98606f773e96cd35dd4738f99de4eb7944d65cefe0986a020d172fc68df458c2279b26205abe53b0cda011dfbb98e569097e88461da4bde83b2a7b96a2e2c2ab0a564", 0xe9}, {&(0x7f0000000c40)="ecd794faf5de91b76138e4ddc4012b3e5c9587f10c06637266a050ccd0c6c4c9d622696d1a6c9930e15f976b3070d5d28edd7b8971b20744ccf60528d14324e598c6ad5de1a8ed65cc1e50311de76eb34afbac1baaadeb8d8ddf3c0f3865b7c69c6d4a5ba8ca4e1591524981296ff0bddba9c779fcfe3846eb9ba22c8e290764aa678ff6c05a871b547052554aefbb5f3236f1bb640724cdc87a4b556aa927297236143d19895107a4186a4c292f11f106ab8ebfb05588513ba83afb", 0xbc}, {&(0x7f0000000d00)="152fe079586ee601a305fa8b0829a8b3f6678ce75c1311e005116ce2e5f9211030f6140bfd9d1366c17a2a28ea83fd61a541475094242b777e65b7bed6571f25462aa2edc344e3b0369476556528e0fd847a8b49758c", 0x56}], 0xa, &(0x7f0000000e40)}}, {{&(0x7f0000000e80)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x4}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f00)="0ff615ddbd3819fc48f09c393c79297b5cac6efdd65fa608a1fcb856b16c88be64a185f169", 0x25}, {&(0x7f0000000f40)="558ea6e948323ecd35886480275d36f3063bb9cba49498bb87853cfb331d29bc3913ae73c68329a52582d749007bf302a6ea452acd11c7c8c549ceb64b227e6c20c3531f2c0718b7fc4d3efc7944fd7a2d470acebe26b2dc4a9ea6474f80cd8cb8146dc17d1da5e0ae2a304353eeba3ae3cc116b5bb244d61d7ebddd61d884ca29eadac0ed4d0469fae57a13a5794a78ac8d29d9893be1eac0a58dfd5c5d9bc96958d75fbc04268aadfc568b9c70430852781a930a91a727d1574d6b1dea37e63eb41f", 0xc3}, {&(0x7f0000001040)}], 0x3}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)="ff44e5ba0e82e43efaf088d49e8f9a04190625eebb39bf2ab52ee58648daf2a2be645759dd788d4643dc9be1fdfc3bce9c236fdfc36525701d06b99fc339f022d94eea52320a2f5bfb3982992c8d8d526b821b8ccce917ac4c81fe88a6d66e181b8bdc0734bfc91d736eb63305bfe7816532ba9e1334a1d2985fdc5a17934fe0ba123c48ca8bcd1c2a405ea298ef6b8aa24c612595d7008f18aece30baf0fc923e3c2cbfef062826844172a8297686adfd15e3ad1ae14e84e5034b7a36e80a0791e976d0d478997042d656a4a32076a112d05fa88c06814770", 0xd9}, {&(0x7f00000011c0)="ba31952604119131f5403473cee52b9c1ade3c85be8174fe678417311ef868a2fb7f37ee1b4cdd278605b4f41aa2fd4957651ba0f8248a0f5cfb462821ab261d4bf4f5c2e4168b9f7904ae4cd71572a7c47f7c37a08b3c511b750dcc8ecfa7c6d268856d08f59c83d4b173a79a2d576d50b4b4d32c487ee984c84ab5b5a3ad608ecb5630bb6c65c05001c0b4da7291f49d8393a73117d3cda36dfc4246eecb63a2029547286dd3b65769e50d5b56c47edf09fcc9f87e68caefb3d3ff5af875e7071917c9c096529dde607b9428d436546db62419bbfb75406d62cdac4f2a67f480727601a1ffbbcef244ae5f4caec9", 0xef}], 0x2, &(0x7f0000001300)=[{0xb0, 0x102, 0x4, "88fad3a3e39f99ba9e8cfea7b35bc5a8fa4c872496028116f491c9a69eb7bd5219ae9456cd5d322a40f965400fd2dfc975f415e660d9e00f73e575c70146f202f9839de2c36a0b95ea71d017383685820a0b6bccab4950525ead80e477d9c1b37362c26ffe501ced7aa8ddb56baf7f9e74b6a0fe143e8670a4ee3450a3a3a09f267ecdfeb3998eb31712028c6c680745a63e784bef29cf7037e15a21f9102b75"}, {0x58, 0x119, 0xffffff81, "31b3401fe2d0c960ddd0316b974c971c7cda031414f687b7d02bd617e3d09ad41e0fce39dc92a175946b824bdc221f86f60dc816265cdc2adcce3fa59802aa00367f401a055d"}], 0x108}}, {{&(0x7f0000001440)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f0000001980)=[{&(0x7f00000014c0)="ee3fc146d3c5f110d0e0e79d6b934e2a3c0600b1937fb3ebde56c87c42159394bf522050b8adc7dd42938c57bdcc530b2f3f23a67f225e57c4cdc16f4bcf6ae071f8e9b64a3f9bb634d94f2840023a0b1d654a1a5d1eb97df5be8ffb26fe416f5564efdf7625ac4c8f999efedd4e3ad5da6fefa7443983e09e96dd589b7d4b2ca2bd8216ba555897bb4123c72464cf3986d8a2215f87b39028f1cd5cc33fe4ecb386c381d425a85c038a5566bd594bc6c6dd49da8c2653fe420fc6a9a331e54ad827081b21498f2474306b8247", 0xcd}, {&(0x7f00000015c0)="581e96cc55631fd4c472e63c216dcbc427eeb19c732146aae73ba81afa5fbe84ff577966a617fc79c52fe669ff6e49af1c490812f538e8a1729d83a7e8eb2561c66ca78c358799f16ac856cea485aa17ead3589d8ff3fb4813b28d1ceaf839ac50bbc860bd1b7a732d6cfa81d72f4355ac2ffaf198c4d1bea3729757b8380397656f0223da3de43b3f2facf20be09cf4aaa963f2cdb8e361784146b491287f5763e62e", 0xa3}, {&(0x7f0000001680)="e2fe663d2df5cb3a816415d3d42fb617184d5593acc4b9745e5a9f8732491800485b913fdf068b8e6f6424f8a8", 0x2d}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="335c99070d90374a6107a7f9ade75bcf654dc4650e7639416fbbfe463ba6f272f9afc4bde1b855efc75b58bfc4e92e4af3fe6935e1ca20ba6a212239bd6a657a03ea322c4a3d3cfb0949d296834cbc8ca63482e98985109188c72aacd7cb3d98a8ffafc9dc3f7b1ab496a02e7112ebb687940b5fb917fc79a93d42615496672a475af74338f12c63c7f578248500c45f390f6947c7c77852e9be", 0x9a}, {&(0x7f0000001800)="9abb8e32ca67353f231f8908cdc9f42cdb187dcd7b78805106f2d627b6d6e9cc4eb41c27cc18865a0ad8faaa5af67281a3c2b840be89c925bc3faa8437e643450b2592f295eac21f46b1a439795452156fdd1a1702f8932354cf53893d7c89b3b77d34e0672009c59a8cc96f1205d8141302f42a2e8297487ce59b3a407dcca6fa76f46e632b139fe450a93016ff37c91b458850514b42080d5a1371de15ae175ca5706eba22ce041a51f85d8c81aaec4e9256475fae721037f1c3bf8b1df73ee05047e20df2dc35504ceeda62535100d60e4c5f51a2e1ae2718a223cfb7e9be96871c2109db47cb5c6f1b107592a681295bda11", 0xf4}, {&(0x7f0000001900)="0ffd181b146369996a30e8ff075409c9054bc6cfcb4f658a5d6e60ea749bc9d67eef3f68921ac201dcce4eb500746463a6b3cc5f7eb4ec5d82bdb97d73f5709d3072f5ab5348eaea6dc9b674455da98102d20cfa73e4f501bdb839918d736c1a0574f3e09f", 0x65}], 0x7, &(0x7f0000001a00)=[{0xd0, 0x10f, 0x6, "ba3f55ad18ba6eeff6ace0d37300a5b945362c61dfbebc768b433bdec0ab17a0e0cbc9d0beabafa460b422642f659404f9247e60cd17501671d835140bbfa063ade246bbf616f772ede44f7446b13d693f4aa117e716b722e9c6b3e167bb02488152ca6684cadf9ab0b595a77200526e92bca9d8a98ff7f24807fb230e84990417dffe7b8f7cd3ede17a1a8b3fbc12eb17da3c33af5010e6a35ec543b0c6a24bf92264e6f9ede627bd8f338a3d934f15dc4f97f5fc3c569a0708"}, {0x48, 0x117, 0x7ff, "13c784d54a0bd41d7aa22c759cc01541f4eae800d76b39a98e5dd5bca1cb6c70eb3129f084afa470487b24f6b9e645ea9c78466c"}, {0x78, 0x6, 0x3, "203ff33b50e0cb2aee0c388991e2f62b96e509230c1d78f959cd0b7eb4ef9123d361617e2fcc02c4a8e667564b6403b01303b6d53753490c264fac45a8339ed2b2e3862e3188da2ea72e1470b63720c244aace74a7ce4c6f7d0b4cca32ae5ca7effb2aba1614f536"}, {0xa0, 0x101, 0x125, "1e18c0ba12e4a318c3d2a81072aa3c7b985947661692f31788be142aa6d8795d4f353c5944d764e47467bedd9b9fa33debbe74b6c1fd930fb8ad81de38cd366e9f9c256673e39b03b6b2eb47fd1264e766598d0513cd2e9c2dc3b71c07ca9be3a6df2553a079eabd3deb2f67976a4fc4f98453d049a6a778e9200b64d7a0d33030448d78a9bc0f4bef451e70a358fc"}, {0xa0, 0x10c, 0x5, "16706afc0d42f15155308e94bf04e81096e28918a2c2a07f13e996893f012908387b0d412b18f3742aab46aab87451be49f8b2d0bcef67c4c7b6262cc39f26475fb1ead5b6997ee3f695603fe9cfaf0ce4387db299c52087a1bf7023c491005f103c65ac72b6fe51f2b6e1905119b3ad8b51f2e3cf250bb18348264f16dec89623a0c061891b14b1ad6406067a40d65d"}, {0x90, 0x10d, 0x1, "ee97ad16ae858b4fd595bd896af1cc262fb8097fe6d91e324cbdd27eeb03460f26b9e27557ac8f5b7a3eef5b6be28a67129f18e40d9aa95333f0f4ab15fe321fe1658c91c5fa709a80777d0dae893d351a72959fcadcd01af84afe5d6264ba8221c7bf985ee2e5425bc63e60044ee06dcbe121a6718dc35fa57dc4"}, {0xe0, 0x11, 0x10000, "ac237e028bc278ea4d9325e615becbd3a5ecf87254097723ce1c8f25dc6a0aa58fe24e49035bc3ba70636451c29bd4b07ff0de1107794a0de4a298c87bb2a5387b1d87d5a6e39981fa8d7ca179809183e49dc72ba18300169a9c49e69c7eb75e9f55a9b8067855bea997d295be126668d6834690baa3efdf55921b763177f620885ff996c094aa1d41863a61e0c50b2c7b4aff4fd49d5f2745d668a0ec3a7920525c1014619d03c400220a5dfa392a55a0cd257b6bf4c52af07ea4932f6dcbaed4fa0c6952fb4b3a8b63b9ca70052db8"}, {0xb8, 0x101, 0x0, "57775eaf53c6806dfdff8921f50462c34f10ce2c3f6e2b25c65ddce580990fbdd43544e0677018a837f760b0c9c7f3f32966b537438dcec68547ccba9739cd5fffdfd6387c8ccca3854e059c78d89e70cbb02815323b4bacbf63e88597ffe2df53b1451a7cfd200259cf7b9b78619db18b4988c293c0497625f7831784cc7dcb81b90d9025c8df1e16adac5c4554bd375bc8af106f11991fcb3f0be4d65b72bb06711852"}, {0x1010, 0x1, 0x1c4008b3, "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"}, {0x1010, 0x119, 0x4f, "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"}], 0x2518}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003f40)="c966c08a83a09548adf864a58feee6595bffffddcb85ae37e6719eae7518ab607a6e9fe4857d86cc098fdf0156506b34d94b6b4a6c211d7f7a5a67d945a7f4494002fa041b69384fae7c08f3a8f6960749171dc28f255d95fe39a39cae552bc84614cfbad2ac3d67f31a6e9c2fedef27657dffdda44ae938c1fd1a2ac95535e8a1f380d044d03ddef5e8afd437fb1cc6b971e4694b034f283bb9d4b62a1e88d5ab70bd", 0xa3}, {&(0x7f0000004000)="b33c8f0b540bce864e90a27c2b51eb5dbbe8d164cb6bb952f72819c448cbb241b5428ee0aaf398837675124cf87887f99cb3ef99439848767632acb33a13c54bbf700bcee81410d06ade42384c3f8720631ac9d3", 0x54}, {&(0x7f0000004080)="042a65d7254efa2c118d039dace90177bfc9dd8852c81ff3c2a0d6b1c52a1a0ddaba3526b3d93bdcc8cc479a9ba358db2f64117c24662f884b5df730c2564842cdaf5b36f5f0218ebd5e", 0x4a}, {&(0x7f0000004100)="68b623f2962baeaa0fe0ecbbe7b7c21ea26cc9be771a59adf07d79c9eee8a655013db83adfaaffa31e2be776a18493f959642a1d300b6549db06c8cedcdf8975ff259ab4cefd333a8ee18b220c8bf437ce3025f287ed7f890a230dfa4a2bf62015a72d510cdbc805f4c9a550b8e435632838aeedec96a29715e81e15dae760e0c4fa29d3f6c10007a6e0", 0x8a}, {&(0x7f00000041c0)="4ee1b3fd17c9e7c997176770230b36841337aff49c5dacb7fc13df2b058f97911d28db2024c68bb2c94b0c84b998ae7c776d2f708bcddf3f803a0665786e21ab6d60b4d4b58ec09c4b6201fab1a22ffedd0c2735ebf50018d6fba3588e4b72e1f9963460d1091d8dfefe3be64397199477811dacb1ae4cf2391c142ac69d796634341a", 0x83}, {&(0x7f0000004280)="6c965f926f349381810395af27c3325ab017d21a588abc032801d55944037656639b5a189f87a3a86d42aa1472faafb596510956d1944827e54e563af04e45cc8efd0e002d3faa4ac472ba08fc2a7626bcfad0059d4c9a496b8f48649abdc4fc591a53f097bfc676e3b7abffa30058259d155214a274b932074e9be47a0b8e4f5fbc98b581d7eab0e01378", 0x8b}], 0x6, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], 0x22b8}}, {{0x0, 0x0, &(0x7f0000007b00)=[{&(0x7f0000006680)="4e17783157d9a6ea1683102b03127ea22f7079a3994b9964f6a0ee861ec07dd439b86e0bbbceeb67aa42823fbecd4906fd94e968788f56ade9bcc19c3d257366467607deea3a7f6e40aff0dd494b42861156a7dfd7fa5115960afd9238c8e00c7bc76a0d4a41904c6eb76be8a0f193def2490e5b5baf2d6e613b248ed5f09722a3093142a686c51d85105959db909fdad48eab87b04341c000e62f3660250b2e74467456", 0xa4}, {&(0x7f0000006740)="3ac5ed1e733c0ad688fc87d5482b2999a983636d88332076e306b1a2d5aa7ddbb43f301646e46027b2ad00f690b0ded56cacf2bb52220c3f86c1b0083f1268d7950f87e4775ad58f528de44f29be544fc524a9af2cff48c9d315", 0x5a}, {&(0x7f00000067c0)="5d91ac51", 0x4}, {&(0x7f0000006800)="e7b2d492ea20c1ef123001ec5fc3ca9838db57471ee43ca8ad5f1fa93a3fcb3f4159f16b5641789fcb21f1ab758d21bd8cddc42c94efd67ade89d23c531939825c3d27caed72f3018aa49b01469479cc074fb12f057a114126caf2df97e9d0d0391b08c43cf2d6e4decc6a284d2cb0004f11ea8fdd3d533357a1d1908b04586bd51ffe37c87b44f19c8be77678dee507a7ba95718933449d050d6f530909b55ef1f441b943af52ed201755a8b08ed3f06c91eef14c53dfd7125bfbb685c627e87f289e1ee16b874cbd217d2088f5163195fe263a5457a3523d037d2ef4e13685937adcc0d059beb616b61c80eeeb9ec5891975800bc1043c458f2c7836638f8d07f7bab3b086e951edc64991cf8a79f8c85c006ba541bd699fcfc4cbfb6b2f9799437ae31c6d8e2d714ef722dd71761ead8347b20662aa5739e2549ae8125dd2494331701506fba087a8d8ad7e9a144a4b9740cc1904ea2458644b8618caa4a4cf19cd545e75f3b4db726357d537d756eff998ddfdf461e1a0adb7d2d38faef0be1c5af08d7126bcabe7f77e7a47c5f4a8fa93657d3e8222dcd60b55b627cec350f2fd1b82e0da2375005f84ea14074796b9d44e340a195f3861a8a11768f9bc905e24cde395623b33c1896a17c0ebb6be70c0c0c2ea9ccaf343e69ba6984f6f0c259e010fe2032b0280453e2edb116de5b8860b3516cd144279105746db0a110293f0fe7d92964d686f29d5fc9ad017c0286e9db96229bffb6ba2fed1ffa1c0dc2883b318a5374d1a7da53077ee2781b9a58300a5cd75ce3fd9268d326456ed798212993feab1d3158d3119be92c18ad2920c04853d9d00fe1955294221e3fbfc202a2becdaf4fc555950ab49e362dd802761ec389b1da114fb1c9e97a07719afe065ee1e75942c0391592c5ff44d3bcd8249efe063ec05467e244a97b3ca2131d0c580d7713f0cc777d851ea2ff3d61302220296932101ed67dff66dbae440629f7d10400beef82ca28af5cdc76848cd7bee020a37c8badc0452146e702cc1d6bca7883c06dc3956dbb95e798ba0f629a29727345380093972d44e47e33902612671c9ba8704ee2c9822c1e519cc76a2f1843c525c6aa9a86325ae9c248350405e464f0841afe7e0788b2af3e73036bf0363d80bbcf8745197ab9a12ae73bafc9665545963848b845c5a1479d02adf07ee031e5a4427f7634206677c4e1fc9818c45bd8b6f8f8ac648aa24b4bb1aab58fd8bcf6caa4393cc1a244c17797bfc21fa0a7d5ac6c88fef0b1df9100dbe249df7936b50c9cdcd0e572c413fbdc7967efff35ef5dc0473ae1e2ba3e4abfe15b9729cde85c296977112fef11c8fd3c3f0e15681788948fd7351bfb42d4510d43afa7c7b05a1ed8fa6e3745d847cb72765286c7b7431f374a1d482cc5c3364d4bc6a2125c7be28b80f61307086484ff1e927be19080e76f60998f6bf624e2bd0bc3674a6d3d4e73c50d4393a29dfd55cd5c7be68d2b4979d6a31cd3d6f88db41c0011f0839a50ba22ac71331c342563d5c5d0472ba0fe7fbf596d5da75241b587382a19b6b2778c60594b3a1f083e12d73f7ec80b1f1918f668c1702024c65e0f1ef2aff1fb52e8af569467c24567bf7d4dbb1a375a3f75e11714b9c3a3efb34a1a4fab04bcf9408681598505e66fb37a6af91d356029de35a4071ead3004799288b04799c93dc028c04486dc5c8a7fa35e39d89b979beecf1c1be47d57f6d53eb51cd8f1c962b5cf890f05654a45fc0b49fe99bf199cef020ff10d452d2b785aaae174dde603739f3c61e1980265595a481eaf99606cbf030e8b31b9f7a1e62f30b2954ad2a0f645de88e647a478f8e6f3a47b5b2c2cd13dfdbc907029127a3d8c3cac99f9b6e74a1bd463cad9b49b2fd678a5b0e15de617ee4258dbd633980dff38539c63b18206dc9e51cbeaf277d7fe54b5b226f15a55e285698bbbcfa841ef8343edc1b9b39f38c3bb427859ca63f383f3341ce9c0f0381933a63558c3afa37b3bd5f6e1848f5bc0c5e4baef9f7ca07f85414cf5a1864c32a112089460225a9ceec177df9002560a8ed39f3cac9256d488fe82b1da34b3729fc29df74fff8c0b30933fd0d8b06150ed5c1507b8e4ef6cf2755e5251a67168a016412c8fcb8470a3964be67dd484c414f91196836849d0c0d29e3d4e6581e6a03c57e3b0e08416070bb2c9d3c022edacfaa733d0e434a8ca1ddf52783b61d9cbba98a1bc989ebb64d579f5173f754384e84bab88dcb453e3efb931010482489a270126f051c1f8c511a37ceeec2af54abd50c5422a79e0d8d473d3121b86489486be97fe4b3f48c1f300aac667998627f779119cf4cdd6006f274b9066bc1caaa3c02c65ca85f4178d84c71c7d617b3577dba93e998ffaa6ecc47690ddfca97828266076d796ba2637b8c9660ad17641a9501b6bafa122a80dea80d608d3d63aa3a9ed4bcb9506d684517b5130c91b34d52a5d648dba96428ad2b5b1efd52b24914bc851d3348a61af7eaed8e300066e8685f4a6eac491b603c01a2c11db9371550d8b290c18816a9a006e660eaa08c2fcc6c7970f2a6cb19e979198efec176af4e17c7286011d9a93708522014a773f15f094bd0687286a7e62590727307288b203c3f623be2921c9e33cd03d7673e0ac8c5a8148707182357e627fed675caf425f36e482dd1f2bab757a18f0946c80390fa78ef1efaa93ee1fd1e8b4143a064109f34f29316a700a261e95bc3b1fd784586b5c4c432bb508eb7aef0abfca470bab63b73dd1d3870aae467d7d7c5e75531aae38653c4c7c5d39032f58803b01fd79086d4b22e50079c79e200edc8f18a2fd64513f5f883ae37e127b895a0cc17a3dfe0d1808e67c496c57450db09b0fdf70eb34f252c9cbaea520352515a128772ae626f187a3532de3502c722c6a670091aa1d8fe0a18ffd4bea93198139db60e406c7131a5afff16f7041fa40d9637ffcaa6151e2f392f8e5d23ba369ea8d8042805041872aceb664e03d8bfb557b9a48972c40048f0bb0072192521416b038804d4b056e777d350f5222a2db14575686302b293b973d0b0dfdb58aca502728eabc301dad44700de337116df7992241ec92cff37d154a293b271327f4d536d8bb58cd1e35183d5885ca5719f00a8797d0fd8e311eaab80addb05203c600d533eb18e977adfe3f8d07ff7ab8dea8328b0f060d2b21334437b557f4dc2b8722e8df633ed7236715bfba9a8fdcf48f749d236c878d02afd330b00d2531a728b3364fe7b2cbbc78f174780b2b069b575a88928695c8243fb13dbeb968f048570e00fddd75b286b735d178ad1b5c34c61ef5be589471b95ce5d2a711601725656aaf484e7d95ec54a30197ceb53ba9d8710374e97b24d33d3e8ec080f2191f7cba7925719344d17f190c1e6d303c6ae7037700175c7562200614d698321eba360948d2f8c62c36c62aad902ffefff2097617cda7b2c74617c2e266ea6e51d0805b3615d2c68e2c9eef2d661b54899bd571c3333ca13d9fc74dbbbaf5b7ce76af5ce6dec5805b403a563d84f6b0f6604639e4db6a0ad91241ec5f5ee0b38ef2e4e93c7e4e2f3e85913d6a465b042ffbf30b8b542baf7202e87ff12aa9954fa74b8b2ff0da9a696099ba71772d8aa1902c7bdde4785cef1838d63a879753ab41ad54c380ffd1b8ad24a978dbdeb8357f610a0b755f1cc53ab1aaa3f3e4366568f6404cf3cb60ad6825964229ec2f10b22544eb9a7d40c06fa8034821cce3caecd24f9bf99beb02d8365b11eefd032e73868d4c23430183f6616c54e6b176c1763647f78dd73a76c062117585289272e82db5f5e3345ab91fc9bf107fcbd368ea8f89b8a81de939f204ce27c2947659a75c1a93cd3222db0d285ee65ef87d78a04c1e02107e320fa50d0c4d0deda882d2cdf5d326f9eebbf27d35642b3a718b56877f14911b87b82d824fcf86704ebb281536d5df4e41ac43dfca78816973090522dbb6e41149e48a4030f5cb81b3955a2ed36c2d7f0bb90418948821d93140a2755066e6cdf00aed57b5ee29f2503253742853d99e2af2ebe15c6ed0c0bad3cca259e96eb436402c4071554e83c13af4dd8363a98b58634d3b56565f5f2dc649756b84d34d48fd49612c8b535cd38f22375ad2228f540f32896419cb57ed5b7581978b1998f5884b2c32e501f20dab87853c06401248e3c3b634c896e54fb7e852dcfe4450da371dc2cb46df25077d416b830e921332bc7720939eb8c4ad85d651c530156076f44a16246d439f34d85fa3c32e196cf3a42fbb21d2e5400c62c8dc06c8cbed1625822d2ac5942a3a7394ccaf3cbc53e2cdcff074b6b9e4c22f3b735b4cb8a5cc7e3b330d2083e5e30ede76f61ef3854ee9bbd7fbfbeb83402a34a705a221adda5be35a46197ee2cf9196ec5a3bd0f1a7024cc9a704ceed7153274cb0a6a208cca094295ba2b9d4f0a6d6d82dae151e2639289c41ac0ee3c36876700d743e43e4b90cf7acdd83d9f0bdf2b543400d303c51262f9bb422b708152c76faebd1f447f123dbf24fe8838d6ccc8f8d1cda265e2049e5d036c938676691c7c22fc1a0cfb10969f86ea4b60601ed3d4e677b852139ef111afd13c2ffe45f80f77caa7d160ae2c232728bbbe3211c53ade87316e46d55b67b1b1eca50bb0e979b40f543d3b4064120b70b77c2e4807ed1f9fd26a635ef313daa91679314f32e75575aa59dd4d29e28374b204e797b4607188edb70d9a68a195c28f15e935afc79069d2594e3e6b81509e9941612f82a7a2c9c0069ccd928be7153f06e16290600eb4758a9d4948c993d851d98a9686e129ff4f3a510805e91ed0c2cedf5d9b29f11bf5f02b08969921d2db2791d8749ec2af349fcf8d1918fdeb6b52aa333431c3a1dfd3b19a8ec0dc5b672f95b9954cac479fce733e2804ad300a3575a0f1668fbc110668a70cb4b1eba9a635c44253b7bbb1a140cec5fc057cdd28c4f7748b221b4b4826a9b1b9c7e49e742121baa632a0bfe7c489456ebfdca791758a2b3deb77168af2f99989b7d0d2c65e8303a9ddb634e37a76a4b09b7ac4b2fab476d7d265ad76db3f8ba881cdf98d4d480862d076a9d5204f5662cd0fbf8b614db40862c78f5dfbaefdaf76cfb6dd9ae372e1a927380d9c4af189b0a49e5f6deff0ee34619b225ebf9f3fe429b8e73f2e2d842cd4f2a2669c509434322574cc41cb3aacb35c171d0438d8f15c2ff3bbc7ccfc182a70e38be9875557d906decbdc49cfc0dd8dda5e04317bb0eb17656b18f8d7efd2bb50f77d35ff0dca337d620a849fb7ccd469d7b5d4e22f4b8014a3e223cc47e09f7498f26b2674a027df2d9dc41a979bf9fd31104993d4431ce907f04ca88cf51e115b89a36cfcf25420c7e891696351e53ffa0249696c47157d5d3e82fc0a8eddf98e91569cf64b5749307b0026a6f8c32ff311162b9be6da24d1ce885d4e8bb7c114cd513a79bdfcf8d34558802c78470a844d727e8b89cdf19d268793909336d6325716ae616274c18d845d27f0fe64744e005cfcf96720cda875dd0f8e06cbfe8152d279e8faa2ea36711582f9d62ecfef8f7ed409e7360d0c81a23dc29a6a69b186a6ce9a817218296b8e5d65eb83bf22f76bd7f4f11a680e4d83eb9981e42aa7f0901990eff2f9c7fc79068c655d58994046c8d75ea4bd13e8ecad9f07072572dd9ff2b3f1195f713f0b14e73dd1cb7c2e8b8cf850c8b9b8a23b87c9cb3bc88a4b29467e3f96c71c3b220f4a6bc9cfabe9497fc76422ead95c353eb00220597e", 0x1000}, {&(0x7f0000007800)="9a767d8a1d4ea511b81c9545a09a4608879ff18d0e72ceb7e1579903feb90d1ca8780e9f1c4559ab789ad3de6ac586181f18311d198dec8a20ec5f0c93c9bb325b321a437bc864730ba71d28cfcce0cd7f3328d244912d3bde25e1dfeaf3b1f877be1a1b811f4daf743c7ca73e0cfa5347e288f0323ed4e6f9a3ab4f1f46f24be3c872985ac18a040552f76618ae351c9d505e0cfb9b4c38849ef8200914801b7c92518858fe3cb74c34a442e94630754248d73227f581a5db7e07c3f4ead47bfafdd371fedf239960fb1e242aaab5914fe2e5d4263e3b233e57215cb40484e366fe2e93950171fc6457a599cdbcc6d93296a401df14", 0xf6}, {&(0x7f0000007900)="05bcc04de0e8564afbe184f45dfced0b856cf80e520535411a8b216d411aedf258902d370cc1baa8af7f1f2bd38d6553db54cb14474ce15fc562158f68eee6a096ab2f670e32820a7438f806aaf64fdb062c5a0fdc32287a71b07782fec46f01e8a0acba2669d718d67d594d44b7d333a154d5f1011e4cdf51e3ebe90a7c9c3a2cfd91748f47741143da5b358abf015e41ad2f9d92c57ed5b1ba0fbfe2541a973b292abd2e5c967e1111ec9059c23d36e9124621661079829c60fafe350ecbbe18332594bbc01970e5330ea33d787b7b094ef75372bedd62310adff2a01de633cb65", 0xe2}, {&(0x7f0000007a00)="784f12c1fa0e3fb59ba10ec21644531fdc79d481673ce119ed0a7d48814d8a5ed556c9248f6cfe591b9e76405e550094a9c0b5eeb8f46de00b9bf412abded5ae45b8275a79fd607855022ac4230d5cc299b90b716937c2675a56318ea4df163e8ecb21f58c7f50b178385269665718b18dfae62d5e11553be9a752fb5fab7d15d3cc9ff8fccec627107d8b962e4147002ef0770a648bcc1cfb982bcda5538efe1dc7c5edf1ff3043b5f4370e0a6856fba7678c4261f4e92214dfedbe4d40f958c420b1f0f535d723565fc1b464f9f69e", 0xd0}], 0x7, &(0x7f0000007b80)=[{0xe0, 0x117, 0x9, "fd39d25e87389cb8e1194ce582073bbf71328f0f07fbf9d5654d7823711e27596e3d46bea2a6d4ca65a07da522382a327d7ee0ed15a071cef6a98ced203f07e22058d43a580c250abf3b1dd13a3f218b6a93bad4189fa056b76280fef71d7d045240d50fa4bd885fb7d4907a6c961236d5888b3f959a0d2fa03b9c9b945a4c21d712e1a6ffb83a04ff393464bfaed728719bdd17c161c6f76c9363c35b3e0e2ab3380107d7f5c7b2536f5129f42dbef46efe824b14e62a1a690fe11402d51cc4654e08bbd7a0f62a90"}, {0xa0, 0x103, 0x380, "280380681f29568be23d7276897eb2dbc43b689fe071f0e51a185d1d2c813f92616877349c92574862611f1f5f7515b24700329a3492c742b7edbafe581f3dd91b88a2eb95e81faf05cc34017a03214bd6550bf00c7981b2cb57f60002c5945460e48948f4983c5e6254efacdb766b27b15e5f506cc92309524d0386694dbdf56c2008f449e98f5272472026"}, {0x110, 0x105, 0x1, "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"}, {0x90, 0x1, 0x7, "af365ccf3dd339fb72184c19a25adab29e84a15946a02c08cffd14afd86a7960c193177bc4258cc5fb42f77db13991e849324767a08adeb203e9607e039399b86ca488d3813da89576c4a71fb79fefa40057867e44246591b0aee8832f3dad25545bd9d6809d0064167df93d8be8d13c03cee679014d0968205c"}, {0x18, 0x1, 0x4, "c86b853bb8f53c"}, {0x40, 0x107, 0x6, "928d46e2cd7db582dfb3c318be04df4c52f83e10b347ef3ab3dcf2b0db25f1e34aa73227cfe5413e2da1a55699"}, {0x80, 0x10f, 0x7fff, "2ce3acad5bbc549f166b1f9ff4d181595d297dd004b5d8edc0ca5840f69cbc52e17aab03bf6a88133ea210b0ab4fe3288c4de0f522cba1e2503ace3ef97bf69647e5f4b257a8a692df2907ec99fee4fa50dab56319f5b92b2a74fc673972112d59253b38ff3f2c2285dc31"}], 0x3f8}}, {{&(0x7f0000007f80)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x80, &(0x7f0000009140)=[{&(0x7f0000008000)="30379d70713fa88c2cf7b5a3b3c85c46ac77bd83275b207e111e54272fae306b9c0d563b54274fae1b5cc82b5e4967987833218e5f3d808daeb85a6ac0f0d0f8fb614beaba2fd832ee15ec5519e7a127eab2c2c1cfea838d1fa9cf075332734074ccd9a3f4f20ee863d404da71a26efa12379febd782c35a9ddd99cffd9b0dc6b4837e64308bb7063dc150e72f133bf62b31baf3a763e01647eed01976f13c44071c5f0e725e", 0xa6}, {&(0x7f00000080c0)="fa01c8fcf0df815ce18c38de6e4037eda4456a01da4e96bc9a35db585e273663b9768dd542bb5571d10c2ef353dafff04b9f9fd8da9e3f50e7d71351c12a356c78e7cef279124b34fda3c03ff1a2d41f8613fc431c49eb22fae8acc8de43c6d4", 0x60}, {&(0x7f0000008140)="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", 0x1000}], 0x3, &(0x7f0000009180)}}, {{&(0x7f0000009200)=@ll={0x11, 0xf6, r3, 0x1, 0x5}, 0x80, &(0x7f00000092c0)=[{&(0x7f0000009280)="915362b2f2b491a780ec21a71eb1fd1f25fd90ba1e38cae63f93285360acc0d79026adee39c1e911fc3ef1efcbf3fcdd9e774635665efa222a54232e743543", 0x3f}], 0x1, &(0x7f0000009300)=[{0x1010, 0x29, 0x7, "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"}, {0x100, 0x88, 0x3a9, "19e9c1236b1c94aff4585840bb17ab8de6754027b22464b621994b0de5a20f23c0d9bb0811fd44ff470303e4561bb76e02c39f5d1f9792cbcac532781392f3bf7cf9c6dd37d9e37c06b626cbee9d222d2bac6214baec1ceec701e23bb04519127d4b7c63c615db53357636b83feb8900baef28a68b6aa34dcb6d8aef543dd17809e652afedf72758ae545cbfd876787b9d83c73b3f55b73cc40b127a2f04183610edf35a1c8153ca73bb3475ae1e3a2c99119048c93e1c5d92c065fea8042eb71c925d632ac39d149945172ea05129db17bf6ecb38b6568d61a42dc9b2beeb4f2d84bd68aae871db9685d0c2638d"}, {0xe0, 0x10c, 0x80, "5cc4586f1bc748494556e745afbd26851b35c123ca09024f35553c4dec9b2218f727c2b7f024cd5af0ec2cba05b61e99e7410891779de967212d6f9ca9a566b86f9bef1318135fbfc0c7fa31082ef644b52f2f3ed6ab526f89a3bcab74a12cf622a7fb983bea8e7971c2cc0f997b30c4695defc1a3189449e810d93acccd4f01d1f0094c21350042c37c5679f1c8d793458c7d328808dad40a2a37626c74fb27c6a5e446a424d48af00c35ac34650558c1ef00492318af91eedeae4a37fcb3978a0d665f8312dfe99e"}, {0x80, 0x102, 0x6d, "1ee179eab6fe41eb6cce6643b7154c4bc1f7b01f69dc511c602af977d9f5f3dc0a9d52f32ce3a79948314564365fd7edc3846126ec77f3dd4a2a98fc42ff758ad2bb09a29be92c64b4e285186cf22a7e026020bd38c26f8ba3ca7f9600c13e5274c72c6c39c3e7be0ea6855be108607b"}], 0x1270}}], 0xa, 0x45) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240848c5) [ 84.766479][ T7297] ref_ctr increment failed for inode: 0x3764 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 [ 84.784421][ T7314] ref_ctr increment failed for inode: 0x3764 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 07:42:09 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 19) [ 84.805466][ T7311] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 84.835871][ T7311] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 84.849009][ T7326] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:10 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 84.866215][ T7323] FAULT_INJECTION: forcing a failure. [ 84.866215][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 84.878887][ T7323] CPU: 1 PID: 7323 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 84.887564][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.897616][ T7323] Call Trace: [ 84.900892][ T7323] dump_stack_lvl+0xd6/0x122 [ 84.905487][ T7323] dump_stack+0x11/0x1b [ 84.909641][ T7323] should_fail+0x23c/0x250 07:42:10 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 84.914062][ T7323] __should_failslab+0x81/0x90 [ 84.918884][ T7323] ? io_uring_alloc_task_context+0xea/0x2d0 [ 84.924869][ T7323] should_failslab+0x5/0x20 [ 84.929377][ T7323] kmem_cache_alloc_trace+0x52/0x320 [ 84.934665][ T7323] io_uring_alloc_task_context+0xea/0x2d0 [ 84.940392][ T7323] io_uring_add_tctx_node+0x66/0x200 [ 84.945706][ T7323] io_uring_create+0x19f2/0x1bb0 [ 84.950648][ T7323] __x64_sys_io_uring_setup+0xf3/0x130 [ 84.956158][ T7323] do_syscall_64+0x44/0xa0 [ 84.960628][ T7323] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.966540][ T7323] RIP: 0033:0x7fd63c5f78d9 [ 84.970955][ T7323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.978273][ T7337] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 84.990634][ T7323] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 84.990657][ T7323] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 84.990668][ T7323] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 84.990679][ T7323] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 85.020399][ T7338] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 85.026614][ T7323] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 85.026631][ T7323] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:10 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 20) 07:42:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x200081) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffa) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{}, 0x14, 0xef, 0x3}, {{0x0, 0xea60}, 0x3, 0x7f, 0x9}, {{0x77359400}, 0x2, 0xf7ff, 0x9}, {{}, 0x1, 0x1, 0x20}, {{r3, r4/1000+60000}, 0x1f, 0x2, 0x3}], 0x78) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffffea}) 07:42:10 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 85.068883][ T7336] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 85.085285][ T7344] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 85.105014][ T7331] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 85.124105][ T7351] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 85.136633][ T7349] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.159166][ T7350] FAULT_INJECTION: forcing a failure. [ 85.159166][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 85.171820][ T7350] CPU: 0 PID: 7350 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 85.180493][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.190545][ T7350] Call Trace: [ 85.193850][ T7350] dump_stack_lvl+0xd6/0x122 [ 85.198552][ T7350] dump_stack+0x11/0x1b [ 85.202727][ T7350] should_fail+0x23c/0x250 [ 85.207146][ T7350] ? io_wq_create+0x7b/0x6f0 [ 85.211762][ T7350] __should_failslab+0x81/0x90 [ 85.216608][ T7350] should_failslab+0x5/0x20 07:42:10 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfe, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 85.221119][ T7350] __kmalloc+0x6f/0x350 [ 85.225280][ T7350] ? should_fail+0xd6/0x250 [ 85.229787][ T7350] io_wq_create+0x7b/0x6f0 [ 85.234219][ T7350] ? kmem_cache_alloc_trace+0x221/0x320 [ 85.239815][ T7350] ? io_uring_alloc_task_context+0xea/0x2d0 [ 85.245723][ T7350] io_uring_alloc_task_context+0x192/0x2d0 [ 85.251569][ T7350] ? io_wq_free_work+0xd0/0xd0 [ 85.256344][ T7350] ? tctx_task_work+0x4d0/0x4d0 [ 85.261214][ T7350] io_uring_add_tctx_node+0x66/0x200 [ 85.266520][ T7350] io_uring_create+0x19f2/0x1bb0 07:42:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 85.271469][ T7350] __x64_sys_io_uring_setup+0xf3/0x130 [ 85.276939][ T7350] do_syscall_64+0x44/0xa0 [ 85.281367][ T7350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.287271][ T7350] RIP: 0033:0x7fd63c5f78d9 [ 85.291686][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 85.311295][ T7350] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:42:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 85.319741][ T7350] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 85.327716][ T7350] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 85.335688][ T7350] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 85.343654][ T7350] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 85.349962][ T7354] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000000b82d68 [ 85.351620][ T7350] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:10 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 21) [ 85.383876][ T7354] ref_ctr increment failed for inode: 0x375e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000000b82d68 [ 85.384700][ T7368] ref_ctr increment failed for inode: 0x375b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 85.411778][ T7369] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 07:42:10 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x1e5, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:10 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 85.449234][ T7369] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 85.466133][ T7378] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 85.503918][ T7377] FAULT_INJECTION: forcing a failure. [ 85.503918][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 85.516568][ T7377] CPU: 1 PID: 7377 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 85.525241][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.535295][ T7377] Call Trace: [ 85.538574][ T7377] dump_stack_lvl+0xd6/0x122 [ 85.543174][ T7377] dump_stack+0x11/0x1b [ 85.547339][ T7377] should_fail+0x23c/0x250 [ 85.551759][ T7377] __should_failslab+0x81/0x90 [ 85.556530][ T7377] should_failslab+0x5/0x20 [ 85.561054][ T7377] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 85.566780][ T7377] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 85.573646][ T7377] ? io_wq_create+0x217/0x6f0 [ 85.578335][ T7377] io_wq_create+0x217/0x6f0 [ 85.582859][ T7377] io_uring_alloc_task_context+0x192/0x2d0 [ 85.585403][ T7388] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 85.588768][ T7377] ? io_wq_free_work+0xd0/0xd0 [ 85.605152][ T7377] ? tctx_task_work+0x4d0/0x4d0 [ 85.610079][ T7377] io_uring_add_tctx_node+0x66/0x200 [ 85.615383][ T7377] io_uring_create+0x19f2/0x1bb0 [ 85.620337][ T7377] __x64_sys_io_uring_setup+0xf3/0x130 [ 85.625842][ T7377] do_syscall_64+0x44/0xa0 [ 85.630271][ T7377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.636242][ T7377] RIP: 0033:0x7fd63c5f78d9 [ 85.640655][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 85.660367][ T7377] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 85.668783][ T7377] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 85.676763][ T7377] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 85.684795][ T7377] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 85.692779][ T7377] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 07:42:10 executing program 4: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) memfd_create(0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000140), 0x0, 0x2, 0x3dad) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000680)={0x2, [{r162, r184}, {r155, r122}, {r23}, {r93, r174}, {r12}, {r79}, {r84, r42}, {r104, r138}, {r224}, {r74, r120}, {r12, r205}, {r133, r116}, {r193, r173}, {0x0, r260}, {r41, r89}, {r228, r13}, {r123, r36}, {r262, r237}, {0x0, r182}, {r206, r51}, {r56, r40}, {r100, r116}, {0x0, r101}, {r18, r78}, {}, {r269, r52}, {r80, r13}, {r213, r6}, {r141, r73}, {r22, r67}, {r144, r265}, {}, {r106}, {r172, r30}, {0x0, r101}, {r249}, {r217, r234}, {r22, r27}, {r255, r182}, {r147, r54}, {r69, r178}, {r24, r20}, {r264}, {r39}, {0x0, r158}, {0x0, r142}, {}, {r239, r146}, {r49, r40}, {r77, r192}, {0x0, r211}, {0x0, r42}, {r210}, {r238, r268}, {r257, r235}, {0x0, r148}, {}, {r87, r271}, {r216, r161}, {r50, r86}, {r98, r71}, {}, {r75, r126}, {r10, r165}, {r149, r194}, {r196, r48}, {r53, r21}, {r164, r195}, {r169, r161}, {r229, r194}, {r118, r105}, {r102, r82}, {r245, r198}, {r187, r256}, {0x0, r134}, {r270}, {r121, r63}, {r72, r242}, {r262, r219}, {r253, r46}, {r107}, {0x0, r223}, {r93, r260}, {r22}, {r31, r261}, {0x0, r203}, {r177, r180}, {r10, r124}, {r81}, {}, {r102, r150}, {r125, r247}, {r236, r244}, {0x0, r116}, {r199}, {r9, r38}, {r5}, {0x0, r266}, {r155, r89}, {r238, r130}, {0x0, r114}, {r243}, {r233, r176}, {r251, r20}, {r199, r157}, {0x0, r176}, {r232, r38}, {r87, r278}, {r3, r92}, {r228, r179}, {r272, r250}, {r163, r60}, {r222, r260}, {r4, r209}, {r208, r166}, {r115, r201}, {r151, r218}, {r102}, {r224, r92}, {r80, r32}, {0x0, r254}, {r37, r274}, {r204}, {r206}, {r80, r64}, {}, {r34, r114}, {r18, r148}, {r118}, {0x0, r70}, {r43, r103}, {r14}, {r128, r244}, {r47, r44}, {r170, r110}, {r167, r225}, {r129, r186}, {r220}, {0x0, r145}, {r233, r140}, {0x0, r61}, {0x0, r52}, {r65, r89}, {r136, r194}, {r87, r17}, {r121, r67}, {r156, r29}, {0x0, r21}, {r181, r38}, {0x0, r184}, {0x0, r42}, {r33}, {r208, r60}, {r115, r28}, {r171}, {r160, r108}, {r79, r276}, {0x0, r48}, {r128}, {r39, r148}, {r45, r159}, {r31, r165}, {r196, r200}, {r111, r17}, {r160, r99}, {r153, r8}, {r135}, {r3, r97}, {r212, r46}, {r175, r83}, {r66, r197}, {r214, r138}, {0x0, r252}, {r85, r276}, {r241, r78}, {r90, r231}, {r190, r11}, {r16}, {r109, r113}, {r128, r158}, {r162, r247}, {r275, r25}, {r133, r184}, {r259, r60}, {r117, r25}, {0x0, r158}, {r33, r108}, {r100, r152}, {r22}, {r245, r35}, {r199, r246}, {r55, r247}, {r251, r195}, {r153, r73}, {r181, r279}, {r181}, {0x0, r227}, {r206, r154}, {r12}, {r273, r132}, {r183, r95}, {0x0, r113}, {r127, r122}, {r5, r235}, {r119, r88}, {r267, r138}, {r220, r230}, {r238, r189}, {r156}, {r131, r230}, {r107}, {r213}, {r210, r92}, {r245, r225}, {0x0, r248}, {0x0, r6}, {r19}, {r112, r44}, {r188, r184}, {0x0, r240}, {r168, r186}, {r185, r110}, {r190}, {0x0, r215}, {r269, r191}, {r245, r235}, {r59, r15}, {r207, r76}, {r253, r139}, {r79}, {r129, r46}, {r22, r91}, {r109, r62}, {0x0, r258}, {r26}, {r81, r103}, {r45, r48}, {r94, r137}, {r243}, {r143, r105}, {r277, r265}, {0x0, r244}, {r202, r96}, {r214}, {0x0, r203}, {r226, r157}, {r102}, {0x0, r57}, {r68, r21}, {r133, r276}, {r210, r227}, {r66, r258}, {0x0, r200}, {r7}, {r10, r21}], 0x80, "0a039aeff8a603"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b4c0)={0xb71, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r280}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r221}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r58}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r113}, {}, {}, {}, {}, {0x0, r263}], 0x0, "96789ae50ca19a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000073800)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xfe, "a8fe56a2adc45f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000074800)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r281}], 0x3, "e064fc5a3feab2"}) r282 = syz_open_procfs(0x0, &(0x7f00000004c0)='pagemap\x00') pread64(r282, &(0x7f0000001240)=""/102400, 0x200000, 0x0) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f00001e1000/0x2000)=nil, &(0x7f00001e1000/0x2000)=nil, &(0x7f0000ae4000/0x1000)=nil, &(0x7f00009e0000/0x4000)=nil], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) [ 85.700754][ T7377] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 85.714786][ T7385] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 85.732569][ T7389] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:10 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@updpolicy={0x1e0, 0x19, 0x565, 0x0, 0x0, {{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x2, 0xcc2, 0xffff, 0x5, 0x49, 0x0, 0x1000000000000000}, {0x0, 0x0, 0x0, 0x7}, 0x7fffffff, 0x6e6bc0, 0x0, 0x1, 0x4, 0x2}, [@extra_flags={0x8, 0x18, 0x7}, @policy_type={0xa}, @algo_crypt={0xf7, 0x2, {{'ecb(camellia)\x00'}, 0x578, "40bc504b0d1469959abb2ad67083619d76552f566e31032f3428bbbb0279ae7143cc9c49c91384ac1bd93e19f79e249c75b86ae7ed9bb6f75a2e636103fe87de578d678d8babc470ab6df0b92f0ca2d3c0894ab0e82174d059e1c57d1bc65dd581688141a57c62236882bc851c9fd7732742195fd1a7136c281ce7dd82841f4a3f3f3f241844f05db8bbf36f279debb5637ac63d215b4eb58a2b3bfd80f4089c5799488ed30248cb05c732eb37df3b"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e22, @in=@local}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) 07:42:10 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:10 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x300, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 85.833719][ T7401] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000107da3f6 [ 85.841550][ C1] sd 0:0:1:0: tag#235 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 85.855183][ C1] sd 0:0:1:0: tag#235 CDB: opcode=0xe5 (vendor) [ 85.861460][ C1] sd 0:0:1:0: tag#235 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 85.870421][ C1] sd 0:0:1:0: tag#235 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:42:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0xfffffffe) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000200)="51700b8f96a5472d2da665186dcd5f8740fefaf9b4b8bd1b0695c2cfebf5ee18fded48f74948bfac8d80f88494172234c254947748be6fab525cd527f6ea1055e9f36f91e0b80ca3dea2a6a5568bcf43ba52fc007ddd4f6e572f3fca69cf42acec7d80f2acf996b0cbf37c51bbcddeece7e554fdbddae0769ccecb137dc196b7c4a0cc40edd43b24d41ae4ba679a141c173b00") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@uname={'uname', 0x3d, ']\''}}, {@fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@fsmagic}, {@smackfsroot={'smackfsroot', 0x3d, ',&)'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) [ 85.879390][ C1] sd 0:0:1:0: tag#235 CDB[20]: ba [ 85.884946][ T7401] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000107da3f6 [ 85.898319][ T7408] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 85.941197][ T7414] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 07:42:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 85.993017][ T7414] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 86.002081][ T7404] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 86.020546][ T7418] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 86.032289][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 07:42:11 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x500, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 86.051887][ T7414] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 86.089931][ T7424] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 22) 07:42:11 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 86.124606][ T7424] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 86.141317][ T7435] ref_ctr increment failed for inode: 0x376a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e 07:42:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 86.178943][ T7438] FAULT_INJECTION: forcing a failure. [ 86.178943][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 86.191572][ T7438] CPU: 0 PID: 7438 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 86.200250][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.210368][ T7438] Call Trace: [ 86.211024][ T7444] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd [ 86.213656][ T7438] dump_stack_lvl+0xd6/0x122 [ 86.229873][ T7438] dump_stack+0x11/0x1b [ 86.234028][ T7438] should_fail+0x23c/0x250 [ 86.238640][ T7438] __should_failslab+0x81/0x90 [ 86.243435][ T7438] ? io_uring_add_tctx_node+0xdc/0x200 [ 86.248962][ T7438] should_failslab+0x5/0x20 [ 86.253463][ T7438] kmem_cache_alloc_trace+0x52/0x320 [ 86.258823][ T7438] ? xa_load+0x249/0x260 [ 86.263074][ T7438] io_uring_add_tctx_node+0xdc/0x200 [ 86.268369][ T7438] io_uring_create+0x19f2/0x1bb0 [ 86.273309][ T7438] __x64_sys_io_uring_setup+0xf3/0x130 [ 86.278853][ T7438] do_syscall_64+0x44/0xa0 [ 86.283355][ T7438] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.284153][ C1] sd 0:0:1:0: tag#199 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 86.289310][ T7438] RIP: 0033:0x7fd63c5f78d9 [ 86.289325][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 86.289342][ T7438] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 86.299077][ C1] sd 0:0:1:0: tag#199 CDB: opcode=0xe5 (vendor) [ 86.303441][ T7438] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 86.303454][ T7438] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 86.323071][ C1] sd 0:0:1:0: tag#199 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 86.331415][ T7438] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 86.331455][ T7438] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 86.337686][ C1] sd 0:0:1:0: tag#199 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 86.345616][ T7438] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 86.353594][ C1] sd 0:0:1:0: tag#199 CDB[20]: ba [ 86.404056][ T7444] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd [ 86.415920][ T7454] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd [ 86.431633][ T7449] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 86.445310][ T7449] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 86.457188][ T7457] ref_ctr increment failed for inode: 0x376b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 07:42:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) creat(&(0x7f0000000000)='./file0\x00', 0x49) 07:42:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 23) 07:42:11 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:11 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x700, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:11 executing program 0: set_mempolicy(0x2, &(0x7f0000000300)=0x9, 0xfc) unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) 07:42:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 86.471220][ T7448] ref_ctr increment failed for inode: 0x376e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 86.521413][ T7465] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 86.537967][ T7470] ref_ctr increment failed for inode: 0x3769 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a4aa2256 [ 86.551254][ T7467] FAULT_INJECTION: forcing a failure. [ 86.551254][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 86.563922][ T7467] CPU: 0 PID: 7467 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 86.572593][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.578745][ T22] audit: type=1326 audit(1633160531.693:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7461 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f8a3f8d9 code=0x0 [ 86.582771][ T7467] Call Trace: [ 86.582780][ T7467] dump_stack_lvl+0xd6/0x122 [ 86.614472][ T7467] dump_stack+0x11/0x1b [ 86.618640][ T7467] should_fail+0x23c/0x250 [ 86.623039][ T7467] ? xas_create+0x96b/0xb30 [ 86.627534][ T7467] __should_failslab+0x81/0x90 [ 86.632285][ T7467] should_failslab+0x5/0x20 [ 86.636831][ T7467] kmem_cache_alloc+0x4f/0x300 [ 86.641648][ T7467] xas_create+0x96b/0xb30 [ 86.646017][ T7467] xas_store+0x70/0xca0 [ 86.650168][ T7467] ? io_wq_create+0x217/0x6f0 [ 86.654956][ T7467] ? io_wq_create+0x4fc/0x6f0 [ 86.659629][ T7467] __xa_store+0xdb/0x330 [ 86.663868][ T7467] xa_store+0x30/0x70 [ 86.667839][ T7467] io_uring_add_tctx_node+0x111/0x200 [ 86.673236][ T7467] io_uring_create+0x19f2/0x1bb0 [ 86.678170][ T7467] __x64_sys_io_uring_setup+0xf3/0x130 [ 86.683627][ T7467] do_syscall_64+0x44/0xa0 [ 86.688057][ T7467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.693956][ T7467] RIP: 0033:0x7fd63c5f78d9 [ 86.698353][ T7467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 86.717948][ T7467] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 86.726424][ T7467] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 86.734380][ T7467] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 86.742397][ T7467] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 86.750356][ T7467] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 86.758326][ T7467] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:11 executing program 0: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x30]}}}}]}) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x2) sendto$unix(r0, &(0x7f0000000040)="3e7793a1c303197552dbe9e5cbab488af8dfe7b2c6a875ee413b4a663bce8d69f6c2e5", 0x23, 0x44, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) [ 86.775338][ T7467] ref_ctr increment failed for inode: 0x376d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000107da3f6 [ 86.802504][ T7465] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:11 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf00, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:11 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 86.814533][ T7491] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:12 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 24) [ 86.906673][ T7497] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 86.922655][ T7501] ref_ctr increment failed for inode: 0x375d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 86.934825][ T7497] ref_ctr increment failed for inode: 0x375f offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 86.947674][ T7501] ref_ctr increment failed for inode: 0x375d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 86.964625][ T7507] FAULT_INJECTION: forcing a failure. [ 86.964625][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 86.967909][ T7512] ref_ctr increment failed for inode: 0x375d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004528889e [ 86.977279][ T7507] CPU: 1 PID: 7507 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 86.998067][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.008122][ T7507] Call Trace: [ 87.011391][ T7507] dump_stack_lvl+0xd6/0x122 [ 87.016033][ T7507] dump_stack+0x11/0x1b [ 87.020198][ T7507] should_fail+0x23c/0x250 [ 87.024634][ T7507] ? xas_create+0x96b/0xb30 [ 87.029150][ T7507] __should_failslab+0x81/0x90 [ 87.033966][ T7507] should_failslab+0x5/0x20 [ 87.038550][ T7507] kmem_cache_alloc+0x4f/0x300 [ 87.043320][ T7507] ? xas_create+0x96b/0xb30 [ 87.047893][ T7507] xas_create+0x96b/0xb30 [ 87.052240][ T7507] xas_store+0x70/0xca0 07:42:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="53000000fcffffff0604000300002000100200200000000000000020000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a658d7e87dcc09f43f44005de78d1024114758ae5f437c", 0x58}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="651422f95b00dcf9f540ed488b81b15f565dddcdca3c1d8947397440edc058ae643258c1", 0x24}, {&(0x7f0000000080)="b69a9f2ee030ba157b74e7ab16ec48c22c32877b75951cbbde93bd95252a1612e06e9215b83c961d37b902b589ba4c9092224995cc58fd224880d855a0ab75b81e2882d319766d1a0e12c98e982b2205946b6262b914adabedc364996b9d5452153d0addcd8c45322a5841ce9ccff82ef9095cb9d92552793e8c054cedfd1ef979d5bfbd4a51f449f635c0e74cf4337fa2f5b79f032dcc033ae17da33210670b63ced0c82224559839053737356f68437b394643d40e781caa299b5995095676a0688662775fe888dbb98477f9e4", 0xce}, {&(0x7f0000000240)="62e97225af0a4016d73d6fdb70de6d487cf800f02375a2291c40a2bf4809b876", 0x20}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="4446283703229361a107d2ae5a17", 0xe}, {&(0x7f0000000300)="5645e3a52c117261e41bdfa521bf21209d1f80a7eb9f8420126992a8f7d937d007ae1bda8f4fea2dd33061e8172e090bd9a917354019ba610ff8e137b6834baadf3f7c7fd3e7e2ed9ec5bc7e231eef68e5b0d62f295d83391d8443b597f38f594312aaebc4ba37a6b2c3bf01095de8de73ce4ed86f5b75b9993409bdeeee318728a4f77d353b20b4d1c0aa0c76c57724a456db7dca8a5275ca98ea51e1bf56e0e851f9d595e6ba1a466bb57b3bb77cd880a15b1f8cf27f56f02017e5566ea9ac207f01c85456", 0xc6}, {&(0x7f0000000400)="aa2a8bc861871fe7f4d9df16de986c3cc844c2b17cb01bce344961ae53037f314b956d53cc0c5b6dd464ca9b9f30bc7f1e40e58e7caa747f15b6a1fae579176b4705f702c4fae7ca765063422c08041902285c5d562378523f5bf04cb09299ceab4fcf4427", 0x65}], 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) [ 87.056405][ T7507] ? io_wq_create+0x217/0x6f0 [ 87.061096][ T7507] ? io_wq_create+0x4fc/0x6f0 [ 87.065782][ T7507] __xa_store+0xdb/0x330 [ 87.070031][ T7507] xa_store+0x30/0x70 [ 87.074018][ T7507] io_uring_add_tctx_node+0x111/0x200 [ 87.079405][ T7507] io_uring_create+0x19f2/0x1bb0 [ 87.084377][ T7507] __x64_sys_io_uring_setup+0xf3/0x130 [ 87.089844][ T7507] do_syscall_64+0x44/0xa0 [ 87.094266][ T7507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.100165][ T7507] RIP: 0033:0x7fd63c5f78d9 [ 87.104562][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.124158][ T7507] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 87.132557][ T7507] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 87.140536][ T7507] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 87.148498][ T7507] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 87.156448][ T7507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 87.164400][ T7507] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 87.172654][ T7507] ref_ctr increment failed for inode: 0x3772 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 87.364800][ T22] audit: type=1326 audit(1633160532.471:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7461 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f8a3f8d9 code=0x0 07:42:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x107f, 0x8040) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x301002, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000800)=[{&(0x7f00000009c0)="1e53851521405f68000049445ab542cdcc1a7bda86e079a689acae17cc31c898eda6f288fe62", 0x26}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 07:42:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:12 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:12 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xe501, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:12 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 25) 07:42:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 87.450969][ T7538] loop3: detected capacity change from 0 to 1036 [ 87.464844][ T7545] ref_ctr increment failed for inode: 0x3770 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 87.466453][ T7548] FAULT_INJECTION: forcing a failure. [ 87.466453][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 87.476893][ T7547] ref_ctr increment failed for inode: 0x3771 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 87.489253][ T7548] CPU: 1 PID: 7548 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 87.489303][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.489313][ T7548] Call Trace: [ 87.489319][ T7548] dump_stack_lvl+0xd6/0x122 [ 87.489342][ T7548] dump_stack+0x11/0x1b [ 87.531725][ T7548] should_fail+0x23c/0x250 [ 87.536120][ T7548] ? xas_create+0x96b/0xb30 [ 87.540629][ T7548] __should_failslab+0x81/0x90 [ 87.545376][ T7548] should_failslab+0x5/0x20 [ 87.550067][ T7548] kmem_cache_alloc+0x4f/0x300 [ 87.554812][ T7548] ? xas_create+0x96b/0xb30 [ 87.559379][ T7548] xas_create+0x96b/0xb30 [ 87.563686][ T7548] xas_store+0x70/0xca0 [ 87.567865][ T7548] ? io_wq_create+0x217/0x6f0 [ 87.572632][ T7548] ? io_wq_create+0x4fc/0x6f0 [ 87.577420][ T7548] __xa_store+0xdb/0x330 [ 87.581654][ T7548] xa_store+0x30/0x70 [ 87.585617][ T7548] io_uring_add_tctx_node+0x111/0x200 [ 87.590972][ T7548] io_uring_create+0x19f2/0x1bb0 [ 87.596681][ T7548] __x64_sys_io_uring_setup+0xf3/0x130 [ 87.602122][ T7548] do_syscall_64+0x44/0xa0 [ 87.606524][ T7548] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.612462][ T7548] RIP: 0033:0x7fd63c5f78d9 [ 87.616860][ T7548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.636459][ T7548] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 87.644854][ T7548] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 87.652904][ T7548] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 87.660871][ T7548] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 87.668996][ T7548] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 87.676949][ T7548] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 87.685261][ T7548] ref_ctr increment failed for inode: 0x3774 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 07:42:12 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x25, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0xcbf, 0x80000001}, 0x14) write$binfmt_misc(r1, &(0x7f0000000d40)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4000000000003, 0x0) r4 = socket(0x1d, 0x4, 0x1f) splice(r1, &(0x7f0000000040)=0x81, r4, &(0x7f00000000c0), 0x2, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000140)) 07:42:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x80}, {0x4c}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x24000040) r1 = signalfd4(r0, &(0x7f0000000080)={[0x7fff]}, 0x8, 0x80400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) sendfile(r2, r3, &(0x7f0000000a40)=0x9, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) [ 87.697403][ T7550] ref_ctr increment failed for inode: 0x3776 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 87.738347][ T7547] ref_ctr increment failed for inode: 0x3771 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e 07:42:12 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 26) 07:42:12 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xeffd, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 87.750064][ T7564] TCP: TCP_TX_DELAY enabled [ 87.756340][ T7557] ref_ctr increment failed for inode: 0x3771 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 87.797091][ T7571] FAULT_INJECTION: forcing a failure. [ 87.797091][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 87.809817][ T7571] CPU: 0 PID: 7571 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 87.818524][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.828778][ T7571] Call Trace: [ 87.832049][ T7571] dump_stack_lvl+0xd6/0x122 [ 87.837489][ T7571] dump_stack+0x11/0x1b [ 87.841665][ T7571] should_fail+0x23c/0x250 07:42:12 executing program 4: r0 = inotify_init1(0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x2000002fffffffb]}, 0x0, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) inotify_add_watch(r3, &(0x7f0000000040)='./file0/file0\x00', 0x60000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r1}) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xa40029df) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) 07:42:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:12 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 87.846200][ T7571] ? xas_create+0x96b/0xb30 [ 87.851105][ T7571] __should_failslab+0x81/0x90 [ 87.861328][ T7571] should_failslab+0x5/0x20 [ 87.865928][ T7571] kmem_cache_alloc+0x4f/0x300 [ 87.870712][ T7571] ? xas_create+0x96b/0xb30 [ 87.875241][ T7571] xas_create+0x96b/0xb30 [ 87.879585][ T7571] xas_store+0x70/0xca0 [ 87.883782][ T7571] ? io_wq_create+0x217/0x6f0 [ 87.888497][ T7571] ? io_wq_create+0x4fc/0x6f0 [ 87.893222][ T7571] __xa_store+0xdb/0x330 07:42:13 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 87.893373][ T7584] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd [ 87.897545][ T7571] xa_store+0x30/0x70 [ 87.897571][ T7571] io_uring_add_tctx_node+0x111/0x200 [ 87.897594][ T7571] io_uring_create+0x19f2/0x1bb0 [ 87.923460][ T7571] __x64_sys_io_uring_setup+0xf3/0x130 [ 87.928968][ T7571] do_syscall_64+0x44/0xa0 [ 87.933395][ T7571] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.939316][ T7571] RIP: 0033:0x7fd63c5f78d9 [ 87.943723][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.963368][ T7571] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 87.971865][ T7571] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 87.979871][ T7571] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 87.987825][ T7571] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 87.995796][ T7571] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 88.003817][ T7571] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 88.014251][ T7586] ref_ctr increment failed for inode: 0x3781 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 88.021057][ T7571] ref_ctr increment failed for inode: 0x375d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 88.039009][ T7584] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd 07:42:13 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:13 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 27) 07:42:13 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfcfd, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 88.078410][ T7593] ref_ctr increment failed for inode: 0x3782 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 88.087054][ T7601] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 88.139594][ T7601] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 88.151853][ T7610] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 88.185861][ T7612] FAULT_INJECTION: forcing a failure. [ 88.185861][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 88.185999][ T7606] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e [ 88.198629][ T7612] CPU: 0 PID: 7612 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 88.218947][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.229060][ T7612] Call Trace: [ 88.232332][ T7612] dump_stack_lvl+0xd6/0x122 [ 88.236924][ T7612] dump_stack+0x11/0x1b [ 88.241067][ T7612] should_fail+0x23c/0x250 [ 88.245471][ T7612] ? xas_create+0x96b/0xb30 [ 88.249983][ T7612] __should_failslab+0x81/0x90 [ 88.254737][ T7612] should_failslab+0x5/0x20 [ 88.259233][ T7612] kmem_cache_alloc+0x4f/0x300 [ 88.264017][ T7612] ? xas_create+0x96b/0xb30 [ 88.268526][ T7612] xas_create+0x96b/0xb30 [ 88.272837][ T7612] xas_store+0x70/0xca0 [ 88.276996][ T7612] ? io_wq_create+0x217/0x6f0 [ 88.281679][ T7612] ? io_wq_create+0x4fc/0x6f0 [ 88.286354][ T7612] __xa_store+0xdb/0x330 [ 88.290575][ T7612] xa_store+0x30/0x70 [ 88.294541][ T7612] io_uring_add_tctx_node+0x111/0x200 [ 88.299950][ T7612] io_uring_create+0x19f2/0x1bb0 [ 88.304874][ T7612] __x64_sys_io_uring_setup+0xf3/0x130 [ 88.310400][ T7612] do_syscall_64+0x44/0xa0 [ 88.314864][ T7612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.320749][ T7612] RIP: 0033:0x7fd63c5f78d9 [ 88.325141][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 88.344928][ T7612] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 88.353426][ T7612] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 88.361454][ T7612] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 88.369416][ T7612] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 88.377375][ T7612] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 88.385325][ T7612] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 88.393798][ T7612] ref_ctr increment failed for inode: 0x3770 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 88.394514][ T7606] ref_ctr increment failed for inode: 0x375a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003952818e 07:42:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:13 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfdef, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:13 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 28) 07:42:13 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800) poll(0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/67, 0x43}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000340)=""/11, 0xb}], 0x7, &(0x7f00000027c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000003a80)=[{&(0x7f0000002880)=""/190, 0xbe}, {&(0x7f0000002940)=""/19, 0x13}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/233, 0xe9}], 0x4, &(0x7f0000003ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003b80), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003c00)=""/217, 0xd9}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/149, 0x95}, {&(0x7f0000004dc0)=""/131, 0x83}], 0x4, &(0x7f0000004ec0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/180, 0xb4}], 0x1, &(0x7f0000005080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000900000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000005100)=""/254, 0xfe}, {&(0x7f0000005200)=""/52, 0x34}, {&(0x7f0000005240)=""/237, 0xed}], 0x3, &(0x7f0000005380)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005640)=[{&(0x7f0000005540)=""/163, 0xa3}, {&(0x7f0000005600)=""/9, 0x9}], 0x2, &(0x7f0000005680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x6, 0x20100, &(0x7f00000058c0)={0x0, 0x3938700}) fcntl$setown(r0, 0x8, r1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x0) r4 = openat(r3, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) sendto(r4, &(0x7f0000000240)="70daca7cfad09974a85549a5e8d82856af6412f8c8544c2a48db3acc7f54f28904b8cd2b113675b43110cda5a85aa91fb0e9195d82b60f5d86eaaa60b24d1f24e90f8f85d8df2956a7c42271f54ce65a865a2b680862a9e58facc4ce2559", 0x5e, 0x0, &(0x7f00000002c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x6, 0xff, 0x7, "540848021a5e7c1a948c7ae86c59f48d134903ac92a510c795f589bddd837113cfe5ca72181afb6a13eb54a940221dccd7e6c22c719c270378e1574b831186", 0x36}, 0x80) mount(&(0x7f0000005900)=@sr0, &(0x7f0000005940)='./file0\x00', &(0x7f0000005980)='sysfs\x00', 0x400, &(0x7f00000059c0)=']\xb7*,.}\x00') renameat(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000080)='./file0\x00') [ 88.603209][ T7628] ref_ctr increment failed for inode: 0x3758 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 88.611844][ T7633] ref_ctr increment failed for inode: 0x3780 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 88.617331][ T7637] sysfs: Unknown parameter ']·*' [ 88.633538][ T7628] ref_ctr increment failed for inode: 0x3758 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 88.635325][ T7636] FAULT_INJECTION: forcing a failure. [ 88.635325][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 88.645792][ T7639] ref_ctr increment failed for inode: 0x3758 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 88.657994][ T7636] CPU: 1 PID: 7636 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 88.658022][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.658032][ T7636] Call Trace: [ 88.658039][ T7636] dump_stack_lvl+0xd6/0x122 [ 88.679847][ T7640] sysfs: Unknown parameter ']·*' 07:42:13 executing program 4: r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x804) close(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="01ffabcc98bec62aaf50bbcf4df420a016253d2e40ab6b1437ea8d5699875ba1fdf08c79bade54cb0f932cdc05bee22c5ec52a6c37787dae447e93078eddd3195b5dc56274827a51902b11b4aa2f"], 0x141) close(r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) mount(0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fcntl$setown(r3, 0x8, r0) [ 88.688895][ T7636] dump_stack+0x11/0x1b [ 88.707131][ T7636] should_fail+0x23c/0x250 [ 88.711550][ T7636] ? xas_create+0x96b/0xb30 [ 88.716077][ T7636] __should_failslab+0x81/0x90 [ 88.720909][ T7636] should_failslab+0x5/0x20 [ 88.725443][ T7636] kmem_cache_alloc+0x4f/0x300 [ 88.730205][ T7636] ? xas_create+0x96b/0xb30 [ 88.734798][ T7636] xas_create+0x96b/0xb30 [ 88.739137][ T7636] xas_store+0x70/0xca0 [ 88.743390][ T7636] ? io_wq_create+0x217/0x6f0 [ 88.748057][ T7636] ? io_wq_create+0x4fc/0x6f0 [ 88.752777][ T7636] __xa_store+0xdb/0x330 [ 88.757063][ T7636] xa_store+0x30/0x70 [ 88.761106][ T7636] io_uring_add_tctx_node+0x111/0x200 [ 88.766556][ T7636] io_uring_create+0x19f2/0x1bb0 [ 88.771487][ T7636] __x64_sys_io_uring_setup+0xf3/0x130 [ 88.776923][ T7636] do_syscall_64+0x44/0xa0 [ 88.781320][ T7636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.787201][ T7636] RIP: 0033:0x7fd63c5f78d9 [ 88.791685][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 88.811271][ T7636] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 88.819662][ T7636] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 88.827619][ T7636] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 88.835583][ T7636] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 88.843577][ T7636] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 07:42:14 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:14 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfdfc, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000001240)=[{&(0x7f0000000040)="529965d7676433e0d4a6d04e43abbb2c90418624976a0078d88569cdbdc1d06e68fa36667d892b19eb56a8e090d87eddd68565b86576a7edfaedd998f147da55cf5208d3114f642431392b3b3cb906b9e7042fe2ee510e8f8b9365b6dfb6206455e585fa4545f189906ddb72ac3297ab7fb2254029c6c4d0bdc068a7ac7bce090c851a453a81a9449cf13cda399bec6e1a963b4ccba902d33e751b0269d997ae8bccaef4aacd3470d52177f807f0a0186a6d450643982c4b794426ea95bf04dd3d743e169a3c74ae07060363b78379855a1f17d22dfc95a86104b19c82435748d1b16aa73150b7906b2d0bbbd57ec923447b635c688ef240d1da037f518094f71ef376403540e967e12809f0aae60c05a3d9da633023c629e6c8015073e8d2a7e5c5ffd3e3c45c6fe2f0625dd9c7588ee8bb5dca1f25605572f1bb70c386e144983f1b5e1b1ecf94b85917fcfda73ed75afc6f3ea2c75ae71c33acebff529d7a6d005f3be08323df2420727d5bae04566073e0d51f99efc0c3bbb0c6bfd3e52bb43ce4c4a337725afbc73037e873fadffc4260f0fc8b1b18718e8071f3ea6a5f5a73e92b5c5fa26ba27ca1d45eb9da58e925be100039d8daeb34a68e6417baf6aaa8e52e45311179b7e64a812282477d77e9f5a77f98cecc557966612e04666e00b2c2e2512a95c83b7f9955bbf47404c35c4c4fe9fab297df34d14ed1f645bf6785a0377913f0eac9e470e9ebc85e5d97afb928a5b8ba350c6f22719f21ac7cb471a3fdab8975e5663b988f148a5f14e370811e32d4a4642c61ad1c0ecfe5f2bfc204a4847db7da1683645d5033431756853e610c0c990d8f1bbc8df5ffa49070c0d4d6a2d5a72e8ded81f096ba7f2dbbf325f7a5e1fcfc658ded303e2b1c6d5096d95d5e4ab2da166c9b409e3eb0bbb019f5493a4b246c48d55f227ec2c9c9310415714060af4d529dc9bc2bfaa452638955d77d6bef2eff0833818b7f1e303e6f200355f2c36947c7a652c0fbc339a9d0e80ef40a01cf39208df6fcf18b5302912e2f2928dc6abe9254a0fd1b7281053bfe8e8b53fed33d5681032f53a2ffd17150f61c1d6a87b9562dd93e720eaf2cad8ce3d0a65f692ff0cf06a8efa69bd2d5c553651966c13c10d3daf519a6069bcb43d0f94032d6e917d81ad26bd331c64d18b36fea651092371c829bd8f3296e221e6d3377bd89b51903b5dee42a620bcdc673a2f5737b35980b67740205476a4b2304fa69ff8ef78e3ef5d8696265f3bbc708bb0150deecc8ebc6f797ba0429ad61f882bfa024cbd2dc5fc7808348fbcc7810680adfdcc65fd15cc9bd9a24c5a042b8389a47cc80ff89c80ec8741153c3c5365ba04b134e72868f2f8fd57ea31e443f9c44b38724f78d6525a52677768d948c466664fc966a57756af6d0879663812aba45414df83e04478a687acdf5ee665bed2dbfa150de2bdfbc09ac8c258f815130f5f856bc60e491f0f869b95711dcd114e11f17507971f289ef6d1e84c77d44eb33e5bc3ba37101de5c88a7b85dad94fb8e096d55836c930f4670968e129d02ad228244456485ee79e0975aae0f5a98812362876e2603ef7e3c41c111c4f56b2c5c2b80eb580aab89207ebab80d48cf8e704e65c9901e5280387e45d674daf9dd60667c3f99e4fa95dc897ac72e52e6753a9ab6a730302c920b98d9cd392e841d02176ef883edc75c6d4e0be59a77e58de0c9d5b902ef20838ef6300578ba6b17579cb0a13ba2c4ba4cfd25157c7ba38a4f1fc9f4c0382ca4d661d7916bd7cfd76ad3acd1f58cd63834c0028cabd4c18b6a9293eac2fa30422ebade574ac6e3c7dc5cbfa98460b65fda3aeafc4592d743f45e401d62b3a48cb43212894020d1db16b05937dd706ee4144370afb3f6a66cc89ea34f8f436e1d51dd8de2b7eb39e8f96246c4d7869be7b1464108df09b92017aa3b9a723dc461878fc4083bf32a3fe08d91773e2dabdf24d71497d6185b84921e6790be32ffc430261985fcde4110c046387ca1abf0be536a4493ee2749e44271f8b45c1c7fd28806f89ce69c855d33c450d0abe50e10bd6da3a693add07a907d4d0703ea61c962b5b856099f714e8d6ec064f7f7c889e5f3e9eccc80766d673589798c019a5b755126d37775fe622a73eb9cd02000ad271e5ca30a7b40d9b747990ca3525693d25886a3cf630d5cd3361292748b09f9b6400da11c81218412f0aa312f138f463459de0840852f1cf77c8337abc8d84ab32ca8a01ecc6638401247c48e53da65b49cd9d431deb1ebae1697e253d7cdd7971ed27c4913d967a79ab325efb643a5933d6bd08a3039af186e669b7f042ebdca40e7d5e50c080c5ef8dd0be831b69b4c435bdb141a048e6a4f590a02c0105c4dd7df773391d9d0192e9cbce935ba372eeaf85630f1d46b6687b75c3a4a95606ae3b407f77e1da9c0ba3376d39a634a527f7e689cffd92da51168a611af7382481c6dc69fd82de19df2385182497700072bc95ec6c65ed7d3e475225d869776e5ef1855255deb39fde11b1bccfdb20b4500ec96d18e9842f126401cf96aafc4e1de3d201ab4f1ee25a8ef1582940e97efe745855c87987920c391e5d4f4cedc445a6f5b84e4107e3cc0704470d86cafab8abd1377eda4d10bede43d50648b0e25b62985a8f3691b7e410159dc8419fc9175751d422ddab6c366443785a6161ee07e39b06362742e0e588cc94e2391e2efddca28f5b6e81ebdb82fbb7b5615cbdfbdf20fd2bb87cc2d0e9fe94e71dd623adaba97636c79d3335ff27342851d6c7e6ff3d760ea11ec15a122299affac1df02eeceffb21befe36523272a37f79882167165481f7836c4b0ca226d81174a3a961a26aa4e1e8ee28d66edafc7308cb6b4cbfb88610aaa149cc99d23fdd59207cde8cfef1aabb1efe4db2c601da0e6f78e8a77f44a20829bf3f2d44075b3411799a3547c08c037e5de50ce60d4a1df48ad9d31206d2f400afaa3c1de76e50432d6b2de6d083473bf2285c4064708594cd072ec88fb8c75c19a5f9888fa7f85e67ab5af8e9b64f3d5191d475e5e57dd03c9e17929e64b1eca66d98744a15ec4a77be867a35937e6baa91903792276d440e987de8f45cef2831047cbd0f56bcca68b89124ed84a735e3c4f0f3c01c4875800d5603ab3dd3216de685e12a862ab0a9e93f7d089a99295a7c3da12ec8bc765dd703d1fc032e1cf6145d1aa35a1bc6cb7d422b6f8586eebca417a4e6e96dc17b88d9d5fb7eb2021cc5925810b7ab36b663a3f0a95b7c10280029d31dd53dc30431e6837d0e547cd931c38660652460eef751447f1ecfae3b28e53ef37bdd7c2ee760d51fed6ea07195378e30844b252053389ad864aac8e424cd9aa47ee5363346c05344bbbc441c0d44283d177cca94b99eff5627fab88259c2f2f33f6bda3da5cc74addba474e541a65709f47d6cb78124731a37ddd2b038526c6918f230a5e71a0b5f4611bb2c1ad60010ffd618cfccabf5d6992dfb151641cd229a64e181913e3a1857a02577e41ecd77da18d9ebf62a993185f39688b21e0a8841a40b2ee399a2df7dc8a882e6458cc4bfabac5328fff988e421ebd526d0d871b925fa83be8c15e6f752b3fd5b8d6615c44ba79c35203d427451e6610f39d5dd2d2329a6a93b03daba4792b24a2ac3d2c9f22df1f021e1a53c0d8bce0ba36706d9ed46c7054bd23b028b1abadd4ebe50671f86ded05105b608dc9776e07034013950b672df0bbeaa8306f3957ef60c78fd9f6114bf45b1fd00dabb91ced345034b86f4b33c39e2a15f51baf8af9eca4e2751e57472ec8c01b059015af128b3a127e807468a932a450f378c7dec5639dbb95c1f9bd3ceea8fa68104e3895a3a719693a420fd943aad9df547a00e9ed1741bf9cc8ddb8927f16794f2b64c5903b3f4aa54780289c9fee3729a0320266820748b1bcab55dcf355ee87239121ed7b43203b944d110f456770d52ef51e4df2e2d838db315e37a998e2d3578ed4f4e825e39ccb5f339cb7a1695bfcde7f0645b08decd12e627449d74e4a20ef0eb588c8f3f5005f5c21ee4d358039f2b2647c2219fb9c30a30bb58c2f147bfd28135a7be289a0fb8a64c83690af95d093880ebac70061a15d0b51926942ff3bf5113e1b5c1a493fa43c3c0527cb3ec555534aa27ac75eb0480b800710d8ce2ddee91452ba47fcdd4470c7a7051cb9791805838ed4c095b7f256c8ff0d71cb14a87fab8c0ef8f665c2612a64ceb9d1127b29851ed60275ebefceb62a85677a163019110e0f536725a50370295dc79335da362f7306161d69c75a300dcb622d2568d8f8112a53102e4c1bc154719158c10132fd68b4bd286f0c7e68e84722369311e067a930f051ff24ffbd139b3a51a96bbc6289a3724c3df8c6b516dac1d71ebf179a5ff130db0ac8907c1651c6689547cb017373c937805ef4a0306bf2e2a70049801e71c2377502017b3ab75eea34d3897f9f365c4d030f5e8c1d44f6c0896de15ad0fd516b05618aa6f61b8467a1e8323dcd4e3b394b5dce8ffcedd4abf90bd5b0d986d747a37d7bcbb8b8cc869309b3ff965b282501ed9fe145707c8ab07c6829289a3bee9673dcfef95e36d9aa856fff85822044eab0e241280077c6ce56cb5e4d8e2146497a09e4bb3624e273f2d50b961c669a95ee651e75c97376b5b104589e037a8ec6ac7bbb23869330f29906849dd324104d1ce5063964cfd9ee74b84c5692f6bcf1b2b758483cb13320702932174609de0a9194063652b6af273996ebad2efb0264ca98b4ec408b03e985412ed311bddc20e7bbe65a9d85679a82c31e21bf1816588fa45c21059af7f0e4f32c58575d0385acabaa5e0e1eedcf29cbaf533c01bb809fc6ffe57941c53f9fb391e8bdce8fcd79ab61f5404c73666760fb31c24e9a857d3c0bc58d27c76e5d87f7dad51317fabf3307eadd34b9aea6643fd22ffc23af66b5d671f5064d1e388b12e028fbed4b91c57f683c4d72cebbc38b5b9fcb5ff916fce768e34f3d2c11917dd914ece19e550a110593f442c16d1737b5ee1933ef16b61c138272fc9ecb44933d6e9932711d656ab8a541a7d96244928396d989d2ae3759d4e345d2450809d7226918e2acc078d1ddbfb6d773499137416abd2f730e01cd63fdf5fc796d5919e1b34c54d9cefaa6705e7db07cb28d52593621ec284cb91067fbf64678cd702bc2ded77712c6f88c93433c2e09e14cac6d58a95c288569bf45986fb8497b9c4552d5883fa44744dddab7505074572a03932988c9486de5b1c3cba8d1bb3168e46efaf9cee97a2d6c67b86fced7a7dd96799d1c9819fc2a7dbf49b7699d381603763e7cff230df2c31b68b58fbb0f935c104183f14ec648cb8afca3ff5af0f990c996d916bdb7a6e9c53d9f384901c27af4a05c906f0a10c2c9c22a975c755cad82ee131b117ef7fb8c900d2368f6e46d2d695d2fb64e1c6ec8ef7eec3d4961da14b3dbb44ab4ef6f6a4cba14391066475553bf625ca6b5340802a23aca48453753a805431dd82c8786e774bbbd8db5f71d6c3202f1458a1e2d038f604973371b357d567ef91d52e28527c5d4cb2119d6cec99bd939ca2f40b944866cae332363e26726b3edcc9b90120c3786e1e05739744dd7ecfa4cfc312e55cb39e5b5760d254105b9b0f454405f492343547e5f9a938701525e8dd64e71f2a060a3cad435edd6a09244b5a6787bde27869358e7793f77e9fd9ee9fdd83c6d3de52f6ea17c19dec1517aea383e0bc7601a56bbfc3b6318215e83e9c", 0x1000}, {&(0x7f0000001040)="d04fd85c1099d4017b8574fa2120b9ffe8bd94db0b52edd8f01c281d75569e082dd2b6be419d486195698c17bcd749b06624da800d4bd69d003d4db47ac4842a989d625ca8e3f5c42454db766b7bac80c456397e1800b156cdbe459c3f4300a09d41376f210f355b69eb32066a032b", 0x6f}, {&(0x7f0000003480)="8d29e05cab20f07292d206727c5db0a1aecc4f84c3fe7ac38a9a29bfd00702bf9a63f6a64de9f9699b1ef8a0f9e17f8b0e44afa38fcb0a2a1bbe4e37c8f9c0647ec6317cf43572d2e066a14bc3c459f9c10d4aa12796afe2419571a6991be20ba51e067319e9722c927ae74ec00eb8671022fae3a4eb7b79e44d3c7c89f8cbdb24c497234a5a2a809bf509bfc09b4a92b5bbf906b266cd71ad8b1563b24d6bbdc956357733a6cafc2437a1fc1555768190163c43b5d4a7e24c074aa70d2a612882aff402a261a1a956f0a4758714ef5bd4ea191ae4442f6b18c72317185e1e1c2e7f83582dfb8d2a457d829818ce293a1e8e49f02e93887fd6341cf70d0172d4d0a5b6f3e6ca2e645013cc56922325ae8b234682a7e9dc351ee0c8fc1647fef332b431c5d9fef5a08ef5ed6a40fa2aae641eb76be1cd3e2a471ee6700e702c3a63eaa3217a53ec3a3e7360310701f0c5fcb238e4d4c99c6263b594ca9e4021a5acd2aab78ec154437ee38a7d3be181aceed755449a8b54b0095b33e86f8486278515969128816a4a1db3104e62e6ac69377c2569785ab5c590e0390eb353cf80da9ab5a33e237bf3598beffc83dd5475f9769994559dafee487f9e29b9f8cddfb71e8dd03a347380d1ebe5cd6de109b31f6cc7b5a08e77b958f9748432fe1595c793add04b665917aab4feea86e8adf6793e195859a9800224669d3b97008bbe162ae136c91eafb09d4b8bbb003ad429931243ff557b34ba7c0ceb1607f847002f986f1d20a82629e999a54d27aee56050da972789fe53d116f9719aeb0550642d7c1e69c2af8b83c68662e710acb164aa85f9d97de33e1f41a9778c68f2b77eeedd0fe304c43c2e356a2811274fe1cf71fb576eb60884dedea8a35a843da01b0fe47ea22e93f5efcf01fb2dcaee0f956c35b9255d33ac86096cead948234a2b3068f9199eeb2c952c322cfcd20c4d908d253cdd39ee05bc88cb31891765e8f99400eab27dc7ca41692fcd5f37725fdd02b10231bcb6ad58ce0d686fc638bc2d78b6901110ca0f12ae62b934207c90ca51c199603619d707a3bf18b138f1a5774daeb64cfe23a6a539c563b3900d821cd4526d970b7001fbb8e7f299e5616356d98814e560f7258aab2081722bf7541beb49b253614f143ff10cb0bdac45cb13e0d432c5221728984e99918969153f6ff3766d4cfc4a2f62b8e37e6fe98381820a6079dfa3ab488e330d000aaf8ea142a2345fb7cde1fa5b0ffe673e5925431384a3c1316daca912d4cc13e354afec053ac7505f706cbd3d0eb6720a9ef729737f10573379496eebfa6a9df2da39e846de684ccde23b4d904bc1fccb3df4b2f96337ddca9e8e3184a013486d6a9811d7d1e945843ed178d39d9d183ce3bd99e5f398432bb32601ca0bdf5cca5572a2f3a99d1f086cc590a0f3e7716c87effc6b650664d883b10c319293bb9b8e8c669feee6430beaae12ef24d8ee1cab5eed3a3a6122a7cb7ff1d2e79db55f7aef1583c3a03eb474d7b07d841fa5b470408c1baf9819fdbaba67bef3f0f737a5593c4452f92d8c6fa31a4dffecd4298af4d35599d4ac366babfbccad449e7ea9bdac14944d5fce5ad766c59b1e240703f68ed1db11517f60f30ae3f4b44c8eed3f8693ee1bca4b2fc07dbf0c4566ffe8a51319815830120ffcf084c4709d83b7505bd4f978e9d417b868af9471f605e592b8d723ed4c51921f6982fa73d2231b1ec424f5baa693d3236d102d446dccab0bb421bc508c731734c148d599cae22bf352051aadbea05e5fad0a37f6b8a5eea09ed35ba3b7bef4985bbcd320e44479d4808a90a1e49ec6896e95fcc41cd3007786fb9fd899c0d3b5f07c1ef238268f0b3cefec3d92de5e78d7c0df4f0c7b98371c8e3954b24e7f84ea5edf3d53c530010bdddc49f84f1692c20a7e0ca12f284bd08af308462cb015485413629f65360c10a7a8066cb7a76ca6b3b39fde84e00d14869da932c0c6806211e61d914fff5711791a8d65b2cf7432fcf0a572f8d4b853666821e1ec625859cb589ecfcf142814068fefa52c5d3e5ea96743df860638d2663472588d7f60479bbd957ba59486d55a0c83a51a328c7a798061b22c495e3248c7b6ec13407c3641dc4028c17c9711efe80caffde0d572cffe47a468d95567d21572e137e9cc4aa775d4e993ded6e77c3ca87099f94128a77dcfeb21382bcee3c16d6c822cf80d0ea84431876c124e58e4e55dd8924c898e19362f1ce428f12f872f6845055f43e29f3c1a62ee3a2ac62b595d1e140f24de4650aadbb52d6c70e440217c0123c4549d3aa72fbc8feabe71361330dbc3046d2c027f4bc323474b09cbae3737983e8e5168fe5973f690d826db5da69877fde6308bd102908b72c012338b206d363326ece7dc185111fda55f95ad50907ca558b72dc859c4e87daddb3c2510d8590a0bed06c18944b34d67b39441b265e526e2bae19d7f9b2257b06c5d03050d3d706e2dccf0a06bcff2206491011bd3bd3c4287424011668fb19247191fbff9d05a363f9cca5bb83529604bff46f8f0527bdf196bdace2597ae0a6a89fa03b863c4221b50f30640fd4fc39e67013fa599083b531511dd9321330ba87159750c54945e27e4195b10362e0cdd46cfc7a4b26a7ad958e108028c0e8669e31751b76fcbf8fe2b9423b035b7fd11c8dee8056fb8c019ba0da7a7428a8a970af7e6e6cb3f236065280e57001333899ba90cb00e591edd5ee496909084c92cd929dc2a83d6dd24845102039b694f090b83a1b22f41b2328d170463229bf0ada5c15e66d9d0b8ba5792fe66d59026b347f4cd7d7f0dbeaacc8aa2965839ea10e6550833c7f70cff4c319cd6ad9c723ed210d27a403a6113a0c4c459bf365a42457e64732d8895e1561255397b964182ed467dfd577ac1791f23d1948b9b5ed3a38cc65937ee397494116e55fbf2ba8e0fa32c9033dc4584ce7c3d65734516798a7b41bcdbdae57c7bd78d74a4101c17586e394a7e2393a6cc4df3b07709447ebe7eb994ef5adf4ec3ebc0dfe9094a2fda7c1192e01748c8ea4dcd4f7e19796b7d4a0be1137e61054b4179baf69b6f6ff4e389336f5a595a90810c36482f9a62f1e1af6bf3f0f85af8c0d3d1bb56b02389f73eec4f611c2ece600730700b4d8f2b8785c57684deecd9bdd3944ee10c26c1d69c216a46fdba39a35622ad2099f1627f2b66bb0d5f26a925fd98263160c66e8ded7f30ae2798d14ec128496eafa5c9f27d08ad662649efb816d6566495eff0960ee1188540c3a9afd63db728727ea8fe1ed6076368c73ba86785e1f24ff31456f1ab7f19a81a1214ad91acac5e189115b06a01a10a12746ee80c5793aaa87ba64efff91e6127bc8c3e1d263758363717670aa5b5632f70270529dad85444c4b66e0b10cf734b299111578df473d329de357457023298bbf18dca9f41b7e16cbdf0a4ea4ed2771728d49aed0143e0c969efddc7cd813d73eb924365540de132b88662d56dca513c00c35fdf41c0933adaafadb7476048c3f2103ce76d1d166e148df47e379d98f98165161fd878171ea7bc68618ea763e347fa5735e0a9349b6e2f39bfd9ebbd0b40b58d1df05d39f04bb870550ed2ace9d3515d919878ba296ba5ad496099b460f41c387146113bb14efce7b2d1409856a816abcedddcba72757b9ee4c60e3452de3ec0becc0335481d89b9a38b19f54caeea5b2e1fea3128638ff0a463b5aad638c8a742b1d6f026df1a7b888e00b83a11c5b9b367b9457cb414bf84662f825242bb91c438acf7d08a10a5fa4944085c97e60d4948828376556e68509c870015f9560010b6bb425cae79cc7fcfca4d4ea59c79aa0a189b4f03b46e015a744e8a679b0a4caad2cb5feb4c75bcb5bc8d3dfce0ac6929709b104b6d8fc5000f4b9590418f5661d89a6079f5a173df3de8da723b5bb18e486cfaa8da2cc2bae837e5ef7e4287d0439b164ada222ab834e37dde1170e4cd13e7312e3707d2723ca00cf003c268df28a442ae301b32284c737234896a1a7e6dd2124e6f672eb08c7a3badcbc3cc67ce3e399edb37ab43ecb759507665f21f9271c3369cb967ca24ea430dd733c9ddc5b323a66c3d57cbaca463ed0e1e0bd8a1c68635c03201c852a968104e7de226e561449b8b1c22ec2e6a2abac79d83142bc14dc2368fbfa364561c092993b9a860149827c06f0a5aaefb6ffd05ae94bb5e37e9abad72eae1f787d98dc2c2b0024050b2b70d59246589e475909076e2a0ee9781cdf75d443000e51f4f546da1dcfd997945c0c492f799cb3d235be0d00e424557511edff045565411af0d295cf46f12d6ea86a2fa44f85c227733e49794b175549cadaf90f50970e3403ef1b2a5604ec2e1dcef4f33baff921d2deb2f85f597b8cfa3ae52cfc145f4d74aa84392958b7acfb6d0f5d5136fc1350400a4759c69ac69d89a119600f8f70fde93554f5983bd7ba6f2c839770dbe956a69cc4297ee1ec853b69df07f0d997f2680651d145314831c73044161a8527ebc1c5abee058d6bf3970e230218148697b8669874a74ded67bd91bd898b004066457b2a3d98877271864d2bf05853437a448606aab851603273601eb9931989f46762a6948bc04c67692c053e7dc26312155ae8f98be219273f1a688385c7d055c9db6246073efe7ae106019f8aec493246c968c509ff4d11d9eafbb93a5f9ad28b834758fbf158a5887fc6e9283c3be817f8e6a5f1160a1126a654d83466dc3eda71b2340719a2f70a1ef5f7e5090d4ac834d08205611ad70168d90b89cb83032fc368cff8f3355fb798bde0df85f40788bd1e711b2b4868c035245797ed60980c26169378bb1f483796404da83fec157d348f4e7d99d4fe485dfe963f24122ea40fed3f027a183ea4b2390bc9c551d42888429fc1af7b2f7e4b3cfe87ad1bfce6da5fcf80daa7a90e2a43fc3dbbedc3a2e347757fd2fe4656f307f6468724256b021023032bad73628fe54950142e71d289c0fcb8c5890e3997fefbe1297edcfa569da50e581582232950adf5566a79915461638f89ab057b86a0f1468acca42b827f5c33a4aa144087fa6426d32bc70d8ba74c5427623e47ced86520813543464207d01e1de57fe569a6533a295c1318f8418bdbab65af40299892bbc73ebb47d918f4d78a72f8d605ce4e4c94bc65a8ff0a69ed57abaf8f5bd833a2f709225101f835c654e61361cf95cb65dbf14fa3268c2b8f96c8de3d3ac1f046ca02cad87593e8c9fa940fd3755a02f58ca8bca2ed2935e6bf65854df2136007ed2591ee7fe2093a983cf4c087bb4c7e089af5324bdfe7fb589516c581c1b4d817129450771cc6676c6829a0260b08cfde899c3bcce365544b5d74b3a6a60fce780fe0478e77c67a24c9100c5caa170077b1274392cb34e2ebcfc313e0b2dbae45bcafe4bb9209fb020b2152a78709448a05113a223d37ada3d71d746f319d8da0c79329a420331ca08edb6a4d0d463793a35a9e3f3b83c23735249a4dfd2c2b0a8f25fe7b3e48bada1656a551b9238f04f97584b09e22f4149c5ce3c1cef8ade77737e8e048065b360d242f5635006feeef211b37a7e94bd0660cc9c6a7ca32321adbc1555a9335329dc2fd3332b6f94404d1a578bc70e3ce789fc8701bad22392c1f1d2e0bd2e2f5fbe4be4f0ce0fd348300fd39f4ef5339de90972b48ef48a31aa0ccad15df69f4c43c8fc8efc58a603c5aa0879ecc3a2cd20d3dac18fbf5df7c89f226ecb26fc5104c38688a1e4969882301c3f9a65b28b482f9450f264ceb2604bff83edec6d2a0cca965ed403c45f5930a1e74ac87e4318716a1c80d08a0588f0d001be00abc8c06b4d207900000000000000", 0x103e}, {&(0x7f0000003300)="76b495b21b41c64a7f193525c1f9a84dded57dce0978c096f933c3111dce94852245a9dcd8078bf70135a4540534b2739ad69a881b1ac22aa2ceaa0e90895aeb873594", 0x43}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="703a0125e11ad373c197f93ca85c5e8bc234b022e6225baa6ac5fa1766e7c7d2433f87bce1d5db6329233254d6a61eed428fedccc4ca55e80bc5893b6edb4b2e7c6818e8c629174a2b22ae0539bcd7be29b0f5cfba064086de9f3baca4a8ef92ee0b3a5ec17da7ffa61ca8bd8215533789e446ca891e66c299d69b178760cf0b0145c20d73bfa749a897511ac84231f6c5f564c902505d8a38", 0x99}, {&(0x7f00000010c0)="9fd1cafec487c1565c7707d53a0e55da06c3a294f4f4e3db825818d74f902b6acba5ad83a993a0f36a23547affb3a3ba6ddb21c945e8d0cef2819f04f1986cf48a878fd19cadad13ec3f6c8dff339ae4988ed08b6420156e6ab3f5b9", 0x5c}, {&(0x7f0000001140)="532133f242c81043dbf5cfaf392246f3c98aa76d58a7fd54b057b513d3b2862aa26fefd4ef826541f7e62b75e4e9eccdd87fdbe61f5353a1b3229a4cdef232e1995f2fd463cd29353e820ee0d89ef4cb4b0de8cfcc87046354bc77b97a05e676bbcd9421f16f82d7563c784ced735f77987306b38d8b1f209d872c65c5a7f1f51a8f20a359e76f4b75c1abbcc5", 0x8d}, {&(0x7f0000001200)}], 0x9) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000032c0)={0x3, 0x2, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001200)={r0, 0xfffffffffffffffd, 0x81, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000001300)) writev(r0, &(0x7f0000002100)=[{&(0x7f00000020c0)="e865999008cce4ba0893bd497f341d432851b8e989ea93dbaf037ac85f9b", 0x1e}, {&(0x7f0000003380)="dbda3891cc775b992f4d6c248499c3e3ebe4ec6e5e3dc2d628e6aee59d40a53e34b1b152dd20fd4e5494309ef0bf0f07e300f0bf21e320d7f10d6109268bd400228fab44c11d0033e9c3326530e71dff555e78ad36c2848a6ae82aba50b717eef2e678cc49de52b603d95477141f1ef5696a99d9f0c77d15d9d04480407737c475b222e681979f1649fd93efaac9316a6c6b2ac38401a62cc2e7312187ef0493f91d23f4e1f096f668df7bebc586c21713ded824dc17712f6196439304e38012cc01d016ad4ecc484b6d0f96710466bb66d5817514770ad06afd", 0xda}], 0x2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6e1) [ 88.851709][ T7636] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 88.860101][ T7636] ref_ctr increment failed for inode: 0x3781 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 88.867343][ T7649] ref_ctr increment failed for inode: 0x3782 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 07:42:14 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 29) 07:42:14 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 88.930780][ T7635] ref_ctr increment failed for inode: 0x3782 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 [ 88.961803][ T7660] ref_ctr increment failed for inode: 0x3787 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 88.985778][ T7662] FAULT_INJECTION: forcing a failure. [ 88.985778][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 88.985800][ T7662] CPU: 0 PID: 7662 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 88.985820][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.985830][ T7662] Call Trace: [ 88.985835][ T7662] dump_stack_lvl+0xd6/0x122 [ 88.985860][ T7662] dump_stack+0x11/0x1b [ 88.985879][ T7662] should_fail+0x23c/0x250 [ 88.985900][ T7662] ? xas_create+0x96b/0xb30 [ 88.985928][ T7662] __should_failslab+0x81/0x90 [ 88.985946][ T7662] should_failslab+0x5/0x20 [ 88.985969][ T7662] kmem_cache_alloc+0x4f/0x300 [ 88.985985][ T7662] ? xas_create+0x96b/0xb30 [ 88.986005][ T7662] xas_create+0x96b/0xb30 [ 88.986038][ T7662] xas_store+0x70/0xca0 [ 88.986057][ T7662] ? io_wq_create+0x217/0x6f0 [ 88.986082][ T7662] ? io_wq_create+0x4fc/0x6f0 [ 88.986101][ T7662] __xa_store+0xdb/0x330 [ 89.079165][ T7662] xa_store+0x30/0x70 [ 89.079192][ T7662] io_uring_add_tctx_node+0x111/0x200 [ 89.079217][ T7662] io_uring_create+0x19f2/0x1bb0 [ 89.079237][ T7662] __x64_sys_io_uring_setup+0xf3/0x130 [ 89.079288][ T7662] do_syscall_64+0x44/0xa0 [ 89.079310][ T7662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.109265][ T7662] RIP: 0033:0x7fd63c5f78d9 [ 89.109282][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 89.133352][ T7662] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 89.133375][ T7662] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 89.133388][ T7662] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 89.133400][ T7662] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 89.165718][ T7662] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 89.173685][ T7662] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 89.174772][ T7662] ref_ctr increment failed for inode: 0x3781 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b51119fd [ 89.184134][ T7667] ref_ctr increment failed for inode: 0x3782 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 89.206061][ T7660] ref_ctr increment failed for inode: 0x3787 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socket(0x10, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000ffffffff00002000000000000000000000000000000000000000000000097bb6ea5bd435a515fd4ec157fb16aeb8159bffec6ba4405ad8e3d733b3aa12dbd5a0cec9637b881871ede4b3e4f3fa4f9b30d8fc8502f3618781a2a525d65e65222fe790b5258196cf00c910ba64bcc1b27c204db90a32797b5fad9554d17b9e7d8e89cf5d7f8e8faa4f010153eb9d85146aa5d48e18d453f2a953abe13f2aa6490e0765f28027c75b267c52828d1ff2534e2a1b8c7258e69fdf3cb0b982d460307b87dc55ee943a57af9fdf234a581f0b8830ca4874bc60a85670c9dc0443b819bbb2d28666e24dca5f9cec39222fe2b970f4c5f"]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000080)=0xc) setgroups(0x2, &(0x7f0000000040)=[r1, 0x0]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee00) 07:42:14 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfdfe, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:14 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 30) 07:42:14 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 89.230516][ T7667] ref_ctr increment failed for inode: 0x3782 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 89.252126][ T7673] ref_ctr increment failed for inode: 0x3782 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 07:42:14 executing program 0: r0 = socket$inet6(0x10, 0xa, 0xa) sendto$inet6(r0, &(0x7f0000000000)="7800000018001f06b9409b0dffff091b02090000001006050c0003004300040002000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c20100010000000000460c0a975cc9ff3959547f509058ba86c902000000000000000400160012000a0000000004000000000080007fb4f8eca0faed", 0x78, 0x0, 0x0, 0x0) 07:42:14 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 89.278821][ T7680] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 89.299183][ T7680] ref_ctr increment failed for inode: 0x377a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 89.317756][ T7685] FAULT_INJECTION: forcing a failure. [ 89.317756][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 89.330394][ T7685] CPU: 0 PID: 7685 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 89.339069][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.349124][ T7685] Call Trace: [ 89.352412][ T7685] dump_stack_lvl+0xd6/0x122 [ 89.357125][ T7685] dump_stack+0x11/0x1b [ 89.361341][ T7685] should_fail+0x23c/0x250 [ 89.365811][ T7685] ? xas_create+0x96b/0xb30 [ 89.370298][ T7685] __should_failslab+0x81/0x90 [ 89.375064][ T7685] should_failslab+0x5/0x20 [ 89.379634][ T7685] kmem_cache_alloc+0x4f/0x300 [ 89.384377][ T7685] ? xas_create+0x96b/0xb30 [ 89.388872][ T7685] xas_create+0x96b/0xb30 [ 89.393264][ T7685] xas_store+0x70/0xca0 [ 89.397416][ T7685] ? io_wq_create+0x217/0x6f0 [ 89.402101][ T7685] ? io_wq_create+0x4fc/0x6f0 [ 89.406797][ T7685] __xa_store+0xdb/0x330 [ 89.411021][ T7685] xa_store+0x30/0x70 [ 89.415030][ T7685] io_uring_add_tctx_node+0x111/0x200 [ 89.420404][ T7685] io_uring_create+0x19f2/0x1bb0 [ 89.425424][ T7685] __x64_sys_io_uring_setup+0xf3/0x130 [ 89.430927][ T7685] do_syscall_64+0x44/0xa0 [ 89.435347][ T7685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.441296][ T7685] RIP: 0033:0x7fd63c5f78d9 [ 89.445695][ T7685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 89.465459][ T7685] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 89.473878][ T7685] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 89.481922][ T7685] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 89.489875][ T7685] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 89.497825][ T7685] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 89.505778][ T7685] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 89.514377][ T7685] ref_ctr increment failed for inode: 0x3788 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 89.524625][ T7695] ref_ctr increment failed for inode: 0x3779 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 89.546611][ T7695] ref_ctr increment failed for inode: 0x3779 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 [ 89.558539][ T7699] ref_ctr increment failed for inode: 0x3779 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 07:42:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) recvmsg$unix(r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0x458) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) recvmsg$unix(r2, &(0x7f0000001b00)={&(0x7f00000003c0), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/223, 0xdf}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/69, 0x45}, {&(0x7f0000001680)=""/222, 0xde}, {&(0x7f0000001780)=""/187, 0xbb}, {&(0x7f0000001840)=""/184, 0xb8}, {&(0x7f0000001900)=""/81, 0x51}, {&(0x7f0000001980)=""/56, 0x38}], 0x9, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x440000, 0x100) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x301040, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), &(0x7f0000000300)={0x0, 0xfb, 0xb4, 0x1, 0xfc, "250e1ac2d889c38a64b84e38499b0675", "df1c49111acbfcaf6fd649a9e6738948e95154b510ccc75f4d09706166c6ff464b200bd2f3e01df0610678e8eaeefdc20c5701b18e4e028c27a40b1eaefe2c27143c9e3123d582d8ce43755fded01d164ce2a92389d1b33011c13875c9823b2f84ff943cb7a9d0db7af871f57aaaeb347dc256c69ed164b5fdfeb3d1cf062249b115899b66e75546d31e952b58ee80ba8358bf29b47cbb238b34e9aa0d0d36"}, 0xb4, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) sendfile(r0, r4, 0x0, 0x80000004000007) 07:42:16 executing program 0: syz_open_pts(0xffffffffffffffff, 0x311001) r0 = syz_io_uring_setup(0x184, &(0x7f00000001c0)={0x0, 0xabbb, 0x20, 0x0, 0x146}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0xa0, 0x180}, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000001480)=ANY=[@ANYBLOB="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"]) r4 = accept$inet6(r3, &(0x7f0000001400)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001440)=0x1c) tee(0xffffffffffffffff, r4, 0x1f, 0x8) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0xccd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, r5}, &(0x7f000014c000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x72, {0x0, r11}, 0x5, 0x5}, 0x1000) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) exit_group(0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) clone(0x4020400, &(0x7f0000000380)="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", &(0x7f0000000300), &(0x7f0000001380), &(0x7f00000013c0)="d0527220cf38ed057eddec661b") 07:42:16 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 31) 07:42:16 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:16 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfdff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:16 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:16 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xfe) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x38004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x0, 0x9, 0x7, 0x7, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffe, 0xc0, 0x40, @scatter={0x7, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/110, 0x6e}]}, &(0x7f0000000780)="87c2a1d58a9817db7df6196fac2b2450bdaf9f62a18238e407b8aebeba72ff8a7dc26f357056b704222367cfb0aa0fd1c1e47d53cc31906f21e9388b496e59aecb458a0d15ddc258958e51a06916553a49647268248a242ed59463919836ccba81e7b71b3bc5bb16268ff7612530e436479ca45ce1d7d30e49f4ec0b87e32b834e15ecd8c4d61acceada8eb27a95f445ad8f306b19e169ae56793fa01ec1b5336e50e51e5523b2cd364a42b854cadfb73cd736426e18a2af62f2a606b776e8ec", &(0x7f0000000840)=""/73, 0x0, 0x21, 0x1, &(0x7f00000008c0)}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) [ 91.755729][ T7712] loop4: detected capacity change from 0 to 16 [ 91.783907][ T7720] FAULT_INJECTION: forcing a failure. [ 91.783907][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 91.796567][ T7720] CPU: 1 PID: 7720 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 91.802180][ T7712] handle_bad_sector: 110 callbacks suppressed [ 91.802194][ T7712] attempt to access beyond end of device [ 91.802194][ T7712] loop4: rw=2049, want=17, limit=16 [ 91.805249][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.805263][ T7720] Call Trace: [ 91.805269][ T7720] dump_stack_lvl+0xd6/0x122 [ 91.811634][ T7712] buffer_io_error: 109 callbacks suppressed [ 91.811645][ T7712] Buffer I/O error on dev loop4, logical block 16, lost async page write [ 91.822296][ T7720] dump_stack+0x11/0x1b [ 91.822323][ T7720] should_fail+0x23c/0x250 [ 91.834121][ T7719] ref_ctr increment failed for inode: 0x3770 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 91.835786][ T7720] ? xas_create+0x96b/0xb30 [ 91.843906][ T7712] attempt to access beyond end of device [ 91.843906][ T7712] loop4: rw=2049, want=18, limit=16 [ 91.846273][ T7720] __should_failslab+0x81/0x90 [ 91.846297][ T7720] should_failslab+0x5/0x20 [ 91.846315][ T7720] kmem_cache_alloc+0x4f/0x300 [ 91.871926][ T7728] attempt to access beyond end of device [ 91.871926][ T7728] loop4: rw=2049, want=17, limit=16 [ 91.875530][ T7720] ? xas_create+0x96b/0xb30 [ 91.880056][ T7728] Buffer I/O error on dev loop4, logical block 16, lost async page write [ 91.890681][ T7720] xas_create+0x96b/0xb30 [ 91.897071][ T7728] attempt to access beyond end of device [ 91.897071][ T7728] loop4: rw=2049, want=18, limit=16 [ 91.900048][ T7720] xas_store+0x70/0xca0 [ 91.900077][ T7720] ? io_wq_create+0x217/0x6f0 [ 91.900100][ T7720] ? io_wq_create+0x4fc/0x6f0 [ 91.904838][ T7728] Buffer I/O error on dev loop4, logical block 17, lost async page write [ 91.906292][ T7728] attempt to access beyond end of device [ 91.906292][ T7728] loop4: rw=2049, want=20, limit=16 [ 91.915486][ T7720] __xa_store+0xdb/0x330 [ 91.915512][ T7720] xa_store+0x30/0x70 [ 91.920011][ T7728] Buffer I/O error on dev loop4, logical block 19, lost async page write [ 91.928380][ T7720] io_uring_add_tctx_node+0x111/0x200 [ 91.934182][ T7728] attempt to access beyond end of device [ 91.934182][ T7728] loop4: rw=2049, want=21, limit=16 [ 91.943344][ T7720] io_uring_create+0x19f2/0x1bb0 [ 91.947524][ T7728] Buffer I/O error on dev loop4, logical block 20, lost async page write [ 91.952158][ T7720] __x64_sys_io_uring_setup+0xf3/0x130 [ 91.958745][ C0] sd 0:0:1:0: tag#251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 91.965287][ T7720] do_syscall_64+0x44/0xa0 [ 91.965313][ T7720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.976001][ C0] sd 0:0:1:0: tag#251 CDB: opcode=0xe5 (vendor) [ 91.980195][ T7720] RIP: 0033:0x7fd63c5f78d9 [ 91.984174][ C0] sd 0:0:1:0: tag#251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 91.992543][ T7720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 91.992562][ T7720] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 [ 91.997921][ C0] sd 0:0:1:0: tag#251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 92.008556][ T7720] ORIG_RAX: 00000000000001a9 07:42:17 executing program 0: unshare(0x40000000) r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x05\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2000072c, &(0x7f0000deaff0)={0x2, 0x3}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendto$inet(r3, &(0x7f0000000300)='\b', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x80, 0x20, 0x1f, 0x0, 0x9, 0x4040, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x25f37412, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x12690, 0xffffffff, 0x6, 0x5, 0x1000, 0x9, 0xfeff, 0x0, 0x7f}, 0x0, 0x8, r2, 0xa) dup3(r2, r3, 0x0) 07:42:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) recvmsg$unix(r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0x458) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) recvmsg$unix(r2, &(0x7f0000001b00)={&(0x7f00000003c0), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/223, 0xdf}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/69, 0x45}, {&(0x7f0000001680)=""/222, 0xde}, {&(0x7f0000001780)=""/187, 0xbb}, {&(0x7f0000001840)=""/184, 0xb8}, {&(0x7f0000001900)=""/81, 0x51}, {&(0x7f0000001980)=""/56, 0x38}], 0x9, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x440000, 0x100) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x301040, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), &(0x7f0000000300)={0x0, 0xfb, 0xb4, 0x1, 0xfc, "250e1ac2d889c38a64b84e38499b0675", "df1c49111acbfcaf6fd649a9e6738948e95154b510ccc75f4d09706166c6ff464b200bd2f3e01df0610678e8eaeefdc20c5701b18e4e028c27a40b1eaefe2c27143c9e3123d582d8ce43755fded01d164ce2a92389d1b33011c13875c9823b2f84ff943cb7a9d0db7af871f57aaaeb347dc256c69ed164b5fdfeb3d1cf062249b115899b66e75546d31e952b58ee80ba8358bf29b47cbb238b34e9aa0d0d36"}, 0xb4, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) sendfile(r0, r4, 0x0, 0x80000004000007) [ 92.008565][ T7720] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 92.008576][ T7720] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 92.013508][ C0] sd 0:0:1:0: tag#251 CDB[20]: ba [ 92.021864][ T7720] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 92.021877][ T7720] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 92.054857][ C0] sd 0:0:1:0: tag#252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 92.058005][ T7720] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 92.066975][ C0] sd 0:0:1:0: tag#252 CDB: opcode=0xe5 (vendor) [ 92.089123][ T7734] ref_ctr increment failed for inode: 0x377c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 92.092755][ C0] sd 0:0:1:0: tag#252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 92.103825][ T7720] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000f80e5483 07:42:17 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 32) [ 92.106460][ C0] sd 0:0:1:0: tag#252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 92.208419][ C0] sd 0:0:1:0: tag#252 CDB[20]: ba [ 92.214402][ T7737] device lo entered promiscuous mode [ 92.214860][ T199] attempt to access beyond end of device [ 92.214860][ T199] loop4: rw=1, want=19, limit=16 [ 92.230744][ T7719] ref_ctr increment failed for inode: 0x3770 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 92.244519][ T7745] ref_ctr increment failed for inode: 0x3770 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c 07:42:17 executing program 0: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) rt_sigprocmask(0x1, &(0x7f0000000000)={[0xec19]}, &(0x7f0000000080), 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x20000000) 07:42:17 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:17 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfe00, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 92.260398][ T7742] device lo entered promiscuous mode 07:42:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 92.309867][ T7760] loop4: detected capacity change from 0 to 16 [ 92.326749][ T7759] FAULT_INJECTION: forcing a failure. [ 92.326749][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 92.339425][ T7759] CPU: 1 PID: 7759 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 92.348097][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.358241][ T7759] Call Trace: [ 92.361517][ T7759] dump_stack_lvl+0xd6/0x122 [ 92.366151][ T7759] dump_stack+0x11/0x1b [ 92.370357][ T7759] should_fail+0x23c/0x250 [ 92.374765][ T7759] ? xas_create+0x96b/0xb30 [ 92.379258][ T7759] __should_failslab+0x81/0x90 [ 92.384024][ T7759] should_failslab+0x5/0x20 [ 92.388512][ T7759] kmem_cache_alloc+0x4f/0x300 [ 92.393258][ T7759] ? xas_create+0x96b/0xb30 [ 92.397748][ T7759] xas_create+0x96b/0xb30 [ 92.402077][ T7759] xas_store+0x70/0xca0 [ 92.406217][ T7759] ? io_wq_create+0x217/0x6f0 [ 92.410936][ T7759] ? io_wq_create+0x4fc/0x6f0 [ 92.415693][ T7759] __xa_store+0xdb/0x330 [ 92.419967][ T7759] xa_store+0x30/0x70 [ 92.423937][ T7759] io_uring_add_tctx_node+0x111/0x200 [ 92.429299][ T7759] io_uring_create+0x19f2/0x1bb0 [ 92.434283][ T7759] __x64_sys_io_uring_setup+0xf3/0x130 [ 92.439748][ T7759] do_syscall_64+0x44/0xa0 [ 92.444151][ T7759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.450093][ T7759] RIP: 0033:0x7fd63c5f78d9 [ 92.454494][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 92.474095][ T7759] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 92.482492][ T7759] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 92.490451][ T7759] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 92.498421][ T7759] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 92.506377][ T7759] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 92.514335][ T7759] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 92.526713][ T7776] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 [ 92.536981][ T7759] ref_ctr increment failed for inode: 0x3795 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:17 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 33) 07:42:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13a, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz0', "cb64b9455b3045bcff39d1fd6d8e8ca85cca5d8758dcd956f7416b3422e980338aad447d7054c50b3452b6abeb9cf27c302da95f6f412494ddc263e83d0c899a19aae488e861b183816374a5b9ae22282329515f1079f56374f9acac4273ac46b0beddaff49f26ed63c69d0a4ad1cd3daba4cbddb82e05aee4d6c99ef9eb0c127c48994027d7247e145c5f273eda820633a21a095b43e5167e43e84736951c7218dd15986edc44668dee94512520db945aca4dd23154305db3337cbcbbb540319cf9ded2628e0958f74ec7b1c36a95b76c2258e6bd23f826ed2bba905d09"}, 0xe2) ptrace$setopts(0x4206, r0, 0x0, 0x2d) ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000080)="7fbe8924e8abe5f61c6a4ce4737620868527aacf0e4c7411f5b228d6fdb4fe") tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) [ 92.555300][ T7770] ref_ctr increment failed for inode: 0x379c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 92.569080][ T7762] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 [ 92.586131][ T7782] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 07:42:17 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:17 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfefd, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 92.609754][ T7770] ref_ctr increment failed for inode: 0x379c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 92.621698][ T7787] ref_ctr increment failed for inode: 0x379c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 92.639066][ T7784] FAULT_INJECTION: forcing a failure. [ 92.639066][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 92.651695][ T7784] CPU: 1 PID: 7784 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 07:42:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 92.660444][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.670499][ T7784] Call Trace: [ 92.673774][ T7784] dump_stack_lvl+0xd6/0x122 [ 92.678383][ T7784] dump_stack+0x11/0x1b [ 92.682538][ T7784] should_fail+0x23c/0x250 [ 92.686959][ T7784] ? xas_create+0x96b/0xb30 [ 92.691468][ T7784] __should_failslab+0x81/0x90 [ 92.696236][ T7784] should_failslab+0x5/0x20 [ 92.700741][ T7784] kmem_cache_alloc+0x4f/0x300 [ 92.705501][ T7784] ? xas_create+0x96b/0xb30 07:42:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 92.710004][ T7784] xas_create+0x96b/0xb30 [ 92.714339][ T7784] xas_store+0x70/0xca0 [ 92.718573][ T7784] ? io_wq_create+0x217/0x6f0 [ 92.723257][ T7784] ? io_wq_create+0x4fc/0x6f0 [ 92.727961][ T7784] __xa_store+0xdb/0x330 [ 92.732242][ T7784] xa_store+0x30/0x70 [ 92.736222][ T7784] io_uring_add_tctx_node+0x111/0x200 [ 92.741602][ T7784] io_uring_create+0x19f2/0x1bb0 [ 92.746551][ T7784] __x64_sys_io_uring_setup+0xf3/0x130 [ 92.752024][ T7784] do_syscall_64+0x44/0xa0 [ 92.756501][ T7784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.762384][ T7784] RIP: 0033:0x7fd63c5f78d9 [ 92.762389][ T7807] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 92.778454][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 92.798062][ T7784] RSP: 002b:00007fd63a36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 92.804047][ T7809] ref_ctr increment failed for inode: 0x37a0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 92.806530][ T7784] RAX: ffffffffffffffda RBX: 00007fd63c6fbf60 RCX: 00007fd63c5f78d9 [ 92.806546][ T7784] RDX: 0000000020081000 RSI: 0000000020000240 RDI: 0000000000006c51 [ 92.806557][ T7784] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000000 [ 92.806569][ T7784] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 92.850277][ T7784] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 92.860100][ T7808] ref_ctr increment failed for inode: 0x3799 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 92.872273][ T7784] ref_ctr increment failed for inode: 0x3794 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 92.888714][ T7806] ref_ctr increment failed for inode: 0x37a0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 92.911522][ T7799] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 92.923575][ T7811] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:18 executing program 4: set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x10) syz_mount_image$msdos(0x0, 0x0, 0x100, 0x63, &(0x7f0000000000)=[{&(0x7f0000000080)="ac4c9a8c24c70819a18a279e415996452769416bf11af15c91743cd3b4a334b909a3bc9d28ee9cb72ac092335efdfbca3b25ebfe404220a5fdd90454296b85461e24663e0f3dc7f7fa772dad3298653195ae406c539983c6c3a4dc55c07e83ccbb3bc42efb4c7656231e52ecd2fd8293decc2931f4d57ab573b91992f88a34c63e988df6c3bbe92b7ba3c891cb7ec0240a26c0553e59650af349ad72020426c5f5eaa977481cca91ca4246348d1af2f3415454c8110bd301a3f61186ff844e30d642935033499db4e6abf233610ff138fd736616dafea4e216aa", 0x0, 0x19d}], 0x40081, 0x0) 07:42:18 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 34) 07:42:18 executing program 0: pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) close(r3) close(r1) write$binfmt_misc(r2, 0x0, 0xda) close(r2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x6000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0xd, r6, 0x1, 0x6}, 0x14) splice(r4, &(0x7f00000000c0)=0x1f, r5, &(0x7f0000000140)=0x8, 0x2, 0x8) 07:42:18 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffd, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x964, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 93.006368][ T7822] ref_ctr increment failed for inode: 0x3791 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 93.019458][ T7822] ref_ctr increment failed for inode: 0x3791 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 93.032200][ T7829] ref_ctr increment failed for inode: 0x3791 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 93.033059][ T7819] FAULT_INJECTION: forcing a failure. [ 93.033059][ T7819] name failslab, interval 1, probability 0, space 0, times 0 [ 93.056531][ T7819] CPU: 1 PID: 7819 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 93.060603][ T7832] ref_ctr increment failed for inode: 0x3799 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 93.065201][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.065214][ T7819] Call Trace: [ 93.065220][ T7819] dump_stack_lvl+0xd6/0x122 [ 93.065243][ T7819] dump_stack+0x11/0x1b [ 93.092961][ T7829] ref_ctr increment failed for inode: 0x3791 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 93.094698][ T7819] should_fail+0x23c/0x250 [ 93.114827][ T7819] ? vm_area_dup+0x44/0x130 [ 93.119336][ T7819] __should_failslab+0x81/0x90 [ 93.124137][ T7819] should_failslab+0x5/0x20 [ 93.128690][ T7819] kmem_cache_alloc+0x4f/0x300 [ 93.133451][ T7819] vm_area_dup+0x44/0x130 [ 93.137780][ T7819] ? kmem_cache_alloc+0x20d/0x300 [ 93.142787][ T7819] ? xas_create+0x96b/0xb30 [ 93.147302][ T7819] ? xas_create+0xae3/0xb30 [ 93.151828][ T7819] __split_vma+0x82/0x320 [ 93.156138][ T7819] ? vmacache_find+0x2df/0x320 [ 93.160889][ T7819] __do_munmap+0x27c/0x1340 [ 93.165374][ T7819] ? __xas_nomem+0xfc/0x270 [ 93.169860][ T7819] mmap_region+0x58a/0x1260 [ 93.174481][ T7819] ? selinux_mmap_addr+0x94/0xa0 [ 93.179480][ T7819] ? security_mmap_addr+0x78/0x90 [ 93.184503][ T7819] do_mmap+0x781/0xc20 [ 93.188569][ T7819] vm_mmap_pgoff+0x117/0x1f0 [ 93.193139][ T7819] ksys_mmap_pgoff+0x284/0x350 [ 93.197957][ T7819] ? exit_to_user_mode_prepare+0x65/0x190 [ 93.203682][ T7819] do_syscall_64+0x44/0xa0 [ 93.208154][ T7819] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.214114][ T7819] RIP: 0033:0x7fd63c5f7922 [ 93.218521][ T7819] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 93.238109][ T7819] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 93.246516][ T7819] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 93.254480][ T7819] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 93.262434][ T7819] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 93.270413][ T7819] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 93.278378][ T7819] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:18 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf0ff7f, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:18 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 35) 07:42:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) fcntl$lock(r0, 0x26, &(0x7f0000004a40)={0x2, 0x0, 0x2, 0x7, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000001340)=[{&(0x7f0000001300)=""/27, 0x1b}], 0x1, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001400)=""/5, 0x5}, {&(0x7f0000001440)=""/66, 0x42}, {&(0x7f00000014c0)=""/39, 0x27}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5, &(0x7f0000003600)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="95218dc11c0000a764c972080000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004b00)=[{&(0x7f0000001580)=""/5, 0x5}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/154, 0x9a}, {&(0x7f0000004800)=""/203, 0xcb}, {&(0x7f0000004900)=""/18, 0x12}, {&(0x7f0000004940)=""/124, 0x7c}, {&(0x7f00000049c0)=""/46, 0x2e}, {&(0x7f0000004a00)=""/52, 0x34}, {&(0x7f0000004a40)}, {&(0x7f0000004a80)=""/91, 0x5b}], 0xa}}], 0x3, 0x10043, &(0x7f0000004c80)={0x0, 0x3938700}) r2 = gettid() tkill(r2, 0x34) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x34) clone3(&(0x7f0000004d00)={0x800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x7}, &(0x7f0000000200)=""/219, 0xdb, &(0x7f0000000300)=""/4096, &(0x7f0000004cc0)=[0xffffffffffffffff, r1, r2, 0x0, r3, 0x0, 0xffffffffffffffff, r4], 0x8, {r0}}, 0x58) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7ffff000}], 0x1, 0x1100000, 0x0) [ 93.297808][ T7826] ref_ctr increment failed for inode: 0x3799 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 93.310568][ T7837] loop4: detected capacity change from 0 to 1 [ 93.317026][ T7839] ref_ctr increment failed for inode: 0x3799 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 07:42:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000010000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005f04b0e0301a4c01000000ff5f163ee340b76795002bbf0e5bf5ff1b081604f6db1c00010000000000000049740000010000000006ad8eff07326d3a09020000000000031b0000000000000000000000000f00"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket(0x18, 0x1, 0x1) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @remote}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x52, r3}) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x400, 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000004c40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}}], 0x1, 0x0) [ 93.368820][ T7845] ref_ctr increment failed for inode: 0x377c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 93.385174][ T7845] ref_ctr increment failed for inode: 0x377c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 93.399657][ T7856] ref_ctr increment failed for inode: 0x377c offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c 07:42:18 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 93.438112][ T7851] FAULT_INJECTION: forcing a failure. [ 93.438112][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 93.450751][ T7851] CPU: 1 PID: 7851 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 93.459564][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.469717][ T7851] Call Trace: [ 93.472991][ T7851] dump_stack_lvl+0xd6/0x122 [ 93.477642][ T7851] dump_stack+0x11/0x1b [ 93.481822][ T7851] should_fail+0x23c/0x250 [ 93.486241][ T7851] ? __anon_vma_prepare+0x41/0x2d0 [ 93.491395][ T7851] __should_failslab+0x81/0x90 [ 93.496155][ T7851] should_failslab+0x5/0x20 [ 93.500650][ T7851] kmem_cache_alloc+0x4f/0x300 [ 93.505411][ T7851] ? unlock_page_memcg+0xc3/0xe0 [ 93.510389][ T7851] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 93.516004][ T7851] __anon_vma_prepare+0x41/0x2d0 [ 93.516489][ T7867] ref_ctr increment failed for inode: 0x379d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 93.520941][ T7851] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 93.520970][ T7851] do_cow_fault+0x478/0x560 [ 93.542584][ T7851] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 93.548162][ T7851] handle_mm_fault+0x9aa/0x1580 [ 93.553019][ T7851] ? follow_page_mask+0x42b/0x10b0 [ 93.558130][ T7851] __get_user_pages+0x381/0xc50 [ 93.562983][ T7851] __get_user_pages_remote+0x17f/0x610 [ 93.568432][ T7851] get_user_pages_remote+0x6f/0xa0 [ 93.573534][ T7851] __update_ref_ctr+0x94/0x240 [ 93.578294][ T7851] update_ref_ctr+0x36f/0x610 [ 93.583231][ T7851] uprobe_write_opcode+0x3e9/0x990 [ 93.588398][ T7851] set_swbp+0x26/0x30 [ 93.592373][ T7851] install_breakpoint+0x3bd/0x4d0 [ 93.597464][ T7851] uprobe_mmap+0x80c/0xcd0 [ 93.602044][ T7851] ? __vma_link_rb+0x3c2/0x3e0 [ 93.606830][ T7851] __vma_adjust+0x118d/0x1a70 [ 93.611510][ T7851] __split_vma+0x24b/0x320 [ 93.615918][ T7851] __do_munmap+0x27c/0x1340 [ 93.620415][ T7851] ? __xas_nomem+0xfc/0x270 [ 93.624914][ T7851] mmap_region+0x58a/0x1260 [ 93.629413][ T7851] ? selinux_mmap_addr+0x94/0xa0 [ 93.634351][ T7851] ? security_mmap_addr+0x78/0x90 [ 93.639381][ T7851] do_mmap+0x781/0xc20 [ 93.643450][ T7851] vm_mmap_pgoff+0x117/0x1f0 [ 93.648039][ T7851] ksys_mmap_pgoff+0x284/0x350 [ 93.652825][ T7851] ? exit_to_user_mode_prepare+0x65/0x190 [ 93.658554][ T7851] do_syscall_64+0x44/0xa0 [ 93.662976][ T7851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.669031][ T7851] RIP: 0033:0x7fd63c5f7922 07:42:18 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000300)='nl80211\x00', &(0x7f0000000340)='./bus\x00', r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000100)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) write$binfmt_misc(r3, &(0x7f0000000080)={'syz0', "2c7d778f79466c0e6d469cafbfa74edcb6f6813574ee532dee24aec073823a06770df323f1dffd543fdedea91ad5dc36494548937d64c511f4c01151321065cb3e9291c661bb4fd1b278f645b3463eae2037cfc0a9772299de5a9be7c8d4dfe295"}, 0x65) r5 = fcntl$getown(r4, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[r3]}, 0x1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, r5, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) fremovexattr(r7, &(0x7f0000000380)=ANY=[@ANYBLOB]) [ 93.673447][ T7851] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 93.693083][ T7851] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 93.701542][ T7851] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 93.709566][ T7851] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 93.717587][ T7851] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 93.725640][ T7851] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 93.733613][ T7851] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 93.741653][ T7851] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 93.760331][ T7862] ref_ctr increment failed for inode: 0x379d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 93.773127][ T7877] ref_ctr increment failed for inode: 0x379d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:18 executing program 0: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@local, @broadcast}, &(0x7f0000000040)=0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 07:42:18 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfeffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:18 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 36) [ 93.798288][ T7876] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 07:42:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x100}, 0x0) r1 = epoll_create(0x9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x2e13e815, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x1ff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x2000008c}) [ 93.846279][ T7876] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 93.869434][ T7889] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 93.894336][ T7887] FAULT_INJECTION: forcing a failure. [ 93.894336][ T7887] name failslab, interval 1, probability 0, space 0, times 0 [ 93.907014][ T7887] CPU: 0 PID: 7887 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 93.915694][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.925767][ T7887] Call Trace: [ 93.929056][ T7887] dump_stack_lvl+0xd6/0x122 [ 93.933648][ T7887] dump_stack+0x11/0x1b [ 93.937803][ T7887] should_fail+0x23c/0x250 07:42:19 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:19 executing program 4: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = syz_io_uring_setup(0x2de1, &(0x7f0000000280), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x18641, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x4, 0x4, 0x0, {0xa, 0x4e22, 0x80000001, @empty, 0xda7}}}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001300)={0x10, 0x1, {0x5, @usage=0x3, 0x0, 0xac, 0x6, 0x101, 0xfffffffffffffe01, 0x3, 0x413, @usage=0x81, 0x7fff, 0x7, [0x400, 0x7ff, 0x2, 0x1378af51, 0x5, 0xfffffffffffff800]}, {0x0, @struct, 0x0, 0x7ff, 0x4, 0x5, 0x9, 0x100000000, 0x400, @struct={0x3ff, 0x2}, 0x401, 0x0, [0x0, 0x8, 0xf7, 0x1, 0x8, 0x1000]}, {0x9, @struct={0x0, 0x9}, 0x0, 0x0, 0xcdc, 0x200, 0x5, 0x5, 0x0, @usage=0x6, 0x0, 0x80000001, [0x2, 0x20, 0x7, 0x517c, 0x4, 0x1]}, {0xf13c, 0x3, 0x100000000002}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={0x0, 0x10000, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000c80)={0x8, 0x2, {0x0, @usage=0xec, 0x0, 0x1, 0x8000, 0x81, 0x5cd, 0x7, 0x401, @usage=0x5, 0x1000, 0x10001, [0x6, 0x8000, 0x2, 0x7, 0x6b, 0x2]}, {0x4, @usage=0xfff, 0x0, 0x3, 0x30, 0x7, 0x8, 0x4, 0x402, @usage=0x43, 0xb0f7, 0x7ff, [0xffffffffffffffe1, 0xad, 0x4, 0xc46, 0x7, 0x20]}, {0xfe, @struct={0x1}, r8, 0x3, 0x81, 0x7, 0x5a, 0xfffffffffffff801, 0x5, @struct={0x7f, 0x29d2}, 0x401, 0x6230, [0x5, 0x40, 0x8, 0x0, 0x100, 0x9]}, {0x3709, 0x0, 0x4}}) [ 93.942274][ T7887] ? __anon_vma_prepare+0x92/0x2d0 [ 93.947386][ T7887] __should_failslab+0x81/0x90 [ 93.952152][ T7887] should_failslab+0x5/0x20 [ 93.956662][ T7887] kmem_cache_alloc+0x4f/0x300 [ 93.956983][ T7899] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 93.961517][ T7887] ? __anon_vma_prepare+0x41/0x2d0 [ 93.961542][ T7887] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 93.974986][ T7896] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:19 executing program 4: set_mempolicy(0x1, &(0x7f0000000040)=0xffffffffffff7fff, 0x6) unshare(0x62000200) r0 = socket$inet(0x2, 0xa, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffb, 0x71, 0xb6, @scatter={0x2, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/167, 0xa7}]}, &(0x7f00000002c0)="1a4bfaa5f58af160d684eac55c91cf356b0085fdc14763dd40093062e7afabdbbd4d293c7ab0b477563017e27fab8d5942b7465d58f7ed64cd4ad68f5bb602a13b20a88c1e875d05f3abfb14f3112ad6560d9f9260b2a892f91d7e59132a303d3206ab91d7b628a01cad4219f8168936cd", &(0x7f0000000340)=""/129, 0x9e6, 0x21, 0x1, &(0x7f0000000400)}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @multicast}, 0x5e, {0x2, 0x0, @multicast1}, 'lo\x00'}) [ 93.978356][ T7887] __anon_vma_prepare+0x92/0x2d0 [ 94.000396][ T7887] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 94.005951][ T7887] do_cow_fault+0x478/0x560 [ 94.010453][ T7887] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 94.016007][ T7887] handle_mm_fault+0x9aa/0x1580 [ 94.020865][ T7887] ? follow_page_mask+0x42b/0x10b0 [ 94.025971][ T7887] __get_user_pages+0x381/0xc50 [ 94.030827][ T7887] __get_user_pages_remote+0x17f/0x610 [ 94.036857][ T7887] get_user_pages_remote+0x6f/0xa0 [ 94.041967][ T7887] __update_ref_ctr+0x94/0x240 07:42:19 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000e, 0x2172, 0xffffffffffffffff, 0x1f140000) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xc00000, 0x3, &(0x7f0000008000/0xc00000)=nil) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2a8, r1, 0x1a1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfcd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x907}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6efede96884a4f7617f8c8a4b6be93e94247508267f743687e38878e3b"}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2a8}}, 0x4040004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000140), 0x12000007b) [ 94.046737][ T7887] update_ref_ctr+0x36f/0x610 [ 94.047676][ T22] audit: type=1400 audit(1633160539.107:104): avc: denied { block_suspend } for pid=7893 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 94.051411][ T7887] uprobe_write_opcode+0x3e9/0x990 [ 94.079313][ T7887] set_swbp+0x26/0x30 [ 94.083480][ T7887] install_breakpoint+0x3bd/0x4d0 [ 94.088562][ T7887] uprobe_mmap+0x80c/0xcd0 [ 94.092996][ T7887] ? __vma_link_rb+0x3c2/0x3e0 [ 94.097769][ T7887] __vma_adjust+0x118d/0x1a70 [ 94.102447][ T7887] __split_vma+0x24b/0x320 [ 94.106861][ T7887] __do_munmap+0x27c/0x1340 [ 94.111416][ T7887] ? __xas_nomem+0xfc/0x270 [ 94.115925][ T7887] mmap_region+0x58a/0x1260 [ 94.120466][ T7887] ? selinux_mmap_addr+0x94/0xa0 [ 94.125442][ T7887] ? security_mmap_addr+0x78/0x90 [ 94.130480][ T7887] do_mmap+0x781/0xc20 [ 94.134570][ T7887] vm_mmap_pgoff+0x117/0x1f0 [ 94.139267][ T7887] ksys_mmap_pgoff+0x284/0x350 [ 94.144215][ T7887] ? exit_to_user_mode_prepare+0x65/0x190 [ 94.149934][ T7887] do_syscall_64+0x44/0xa0 [ 94.154362][ T7887] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.160300][ T7887] RIP: 0033:0x7fd63c5f7922 [ 94.164739][ T7887] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 94.184779][ T7887] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 94.193376][ T7887] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 94.201347][ T7887] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 94.209318][ T7887] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 94.217296][ T7887] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 94.225740][ T7887] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 94.233875][ T7887] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 94.246243][ T7896] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 94.264252][ T7930] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 94.276113][ T7899] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:19 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x3, 0xff, 0x5, 0x104}, {0x9, 0x4, 0x8, 0x1}, {0x8001, 0x7, 0x81, 0x8}, {0x1, 0x8, 0x6, 0x8}]}) syz_mount_image$msdos(0x0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{r1, 0x8, 0x7fff, 0x1, 0x401, 0x3, 0x6, 0x7fffffff, 0x9, 0x805, 0x6, 0x40ae, 0x0, 0xff, 0xffffffffffffffff}, 0x8, [0x0]}) chown(&(0x7f00000000c0)='./file1\x00', 0x0, 0xee00) 07:42:19 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:19 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 94.288383][ T7931] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:19 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:19 executing program 4: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="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", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 07:42:19 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 37) [ 94.391737][ T7937] ref_ctr increment failed for inode: 0x378b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000093e67e82 [ 94.399249][ T7947] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da [ 94.419048][ C0] sd 0:0:1:0: tag#248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 94.428983][ C0] sd 0:0:1:0: tag#248 CDB: opcode=0xe5 (vendor) [ 94.435244][ C0] sd 0:0:1:0: tag#248 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 94.445150][ C0] sd 0:0:1:0: tag#248 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 94.454110][ C0] sd 0:0:1:0: tag#248 CDB[20]: ba [ 94.459471][ T7947] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da 07:42:19 executing program 4: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000660600000000000000002000002c00f4c66823da5f00000300000000000000b20b0000000000010000000001000000010000000800000007000000000000000000000000070000000100000000000003000000000000000c0a00000000000010000000000000000000000000000000327600000000000000006a380000000000000000000000000000b820bdae5831f17b9292fbf3580fc0148432226c0bc7f7cfd1cdc9627b1f74310e5efbe2226a059be5c8cb12dba9dd5c3ecf3918750da1c8b86325e7505360df0469c827ee00b0beeaf1fe527b4ffb2c7ecfc9becc020e8754ded57daddc4b4aaa28748c451b25e6ab520e2da5a91e9eb7feebcab014d04b9efbf0f97d72d6b55b4ae1dc958706acde829fc2ee0adb07c46f8288c19f94ffa45b0753d6f0499d309ec47864f0a4962db81a7ada4469bcd568a90cbc67987e488f874c134e2ac06fa10f1249f7ec10ff9381d992ab716744bb4bfad5d0c31a53fa6377ffa64b046f3df53a7bf83da9e1a23820bcac06b8b252ac0442b106d707886af0f8e7d81011e3f8598bacafd338adc43483c92a0a7d800e56121e5cd7eb34f50a05052e6321dc271c659e81ad5299e5cc92da5c406c8b9dad3fadc136c7af7ba59ab546"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="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", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 07:42:19 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 94.484768][ T7937] ref_ctr increment failed for inode: 0x378b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000093e67e82 [ 94.487405][ C0] sd 0:0:1:0: tag#249 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 94.506182][ C0] sd 0:0:1:0: tag#249 CDB: opcode=0xe5 (vendor) [ 94.512427][ C0] sd 0:0:1:0: tag#249 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 94.521392][ C0] sd 0:0:1:0: tag#249 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 94.530355][ C0] sd 0:0:1:0: tag#249 CDB[20]: ba [ 94.551516][ T7951] FAULT_INJECTION: forcing a failure. [ 94.551516][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 94.556267][ C1] sd 0:0:1:0: tag#192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 94.564128][ T7951] CPU: 0 PID: 7951 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 94.573864][ C1] sd 0:0:1:0: tag#192 CDB: opcode=0xe5 (vendor) [ 94.582481][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.582493][ T7951] Call Trace: [ 94.582499][ T7951] dump_stack_lvl+0xd6/0x122 [ 94.582523][ T7951] dump_stack+0x11/0x1b [ 94.588749][ C1] sd 0:0:1:0: tag#192 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 94.598760][ T7951] should_fail+0x23c/0x250 [ 94.598780][ T7951] ? __anon_vma_prepare+0x92/0x2d0 [ 94.602061][ C1] sd 0:0:1:0: tag#192 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 94.606614][ T7951] __should_failslab+0x81/0x90 [ 94.606635][ T7951] should_failslab+0x5/0x20 [ 94.610771][ C1] sd 0:0:1:0: tag#192 CDB[20]: ba [ 94.619668][ T7951] kmem_cache_alloc+0x4f/0x300 [ 94.619687][ T7951] ? __anon_vma_prepare+0x41/0x2d0 [ 94.662212][ T7951] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 94.667848][ T7951] __anon_vma_prepare+0x92/0x2d0 [ 94.672790][ T7951] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 94.678432][ T7951] do_cow_fault+0x478/0x560 [ 94.682981][ T7951] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 94.688537][ T7951] handle_mm_fault+0x9aa/0x1580 [ 94.693411][ T7951] ? follow_page_mask+0x42b/0x10b0 [ 94.698521][ T7951] __get_user_pages+0x381/0xc50 [ 94.703367][ T7951] __get_user_pages_remote+0x17f/0x610 [ 94.708928][ T7951] get_user_pages_remote+0x6f/0xa0 [ 94.714480][ T7951] __update_ref_ctr+0x94/0x240 [ 94.719244][ T7951] update_ref_ctr+0x36f/0x610 [ 94.723920][ T7951] uprobe_write_opcode+0x3e9/0x990 [ 94.729030][ T7951] set_swbp+0x26/0x30 [ 94.733010][ T7951] install_breakpoint+0x3bd/0x4d0 [ 94.738056][ T7951] uprobe_mmap+0x80c/0xcd0 [ 94.742469][ T7951] ? __vma_link_rb+0x3c2/0x3e0 [ 94.747231][ T7951] __vma_adjust+0x118d/0x1a70 [ 94.751920][ T7951] __split_vma+0x24b/0x320 [ 94.756410][ T7951] __do_munmap+0x27c/0x1340 [ 94.760920][ T7951] ? __xas_nomem+0xfc/0x270 [ 94.765419][ T7951] mmap_region+0x58a/0x1260 [ 94.769925][ T7951] ? selinux_mmap_addr+0x94/0xa0 [ 94.775004][ T7951] ? security_mmap_addr+0x78/0x90 [ 94.780029][ T7951] do_mmap+0x781/0xc20 [ 94.783361][ T7982] ref_ctr increment failed for inode: 0x3794 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 94.784120][ T7951] vm_mmap_pgoff+0x117/0x1f0 [ 94.800391][ T7951] ksys_mmap_pgoff+0x284/0x350 [ 94.805164][ T7951] ? exit_to_user_mode_prepare+0x65/0x190 [ 94.810972][ T7951] do_syscall_64+0x44/0xa0 [ 94.815398][ T7951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.821365][ T7951] RIP: 0033:0x7fd63c5f7922 [ 94.825805][ T7951] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 94.838249][ T7973] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 94.845761][ T7951] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 94.845785][ T7951] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 94.863090][ C1] sd 0:0:1:0: tag#205 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 94.865875][ T7951] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 94.865892][ T7951] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 07:42:19 executing program 4: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="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", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 07:42:19 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 94.873890][ C1] sd 0:0:1:0: tag#205 CDB: opcode=0xe5 (vendor) [ 94.883565][ T7951] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 94.883578][ T7951] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 94.883627][ T7951] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 94.891571][ C1] sd 0:0:1:0: tag#205 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 94.916072][ C0] sd 0:0:1:0: tag#206 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 94.921742][ C1] sd 0:0:1:0: tag#205 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 94.933349][ C0] sd 0:0:1:0: tag#206 CDB: opcode=0xe5 (vendor) [ 94.942649][ C1] sd 0:0:1:0: tag#205 CDB[20]: ba [ 94.952346][ C0] sd 0:0:1:0: tag#206 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 94.965920][ T7982] ref_ctr increment failed for inode: 0x3794 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 94.967516][ C0] sd 0:0:1:0: tag#206 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:42:19 executing program 0: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="84ac1a75082d497cf340f46694ca051e3612623c7d166876bf04ad85b78d841ff0e176b979ea48473d47fb43f929083282e3a55c4279c8d6787f86d5fb1662111b64adfb4e7044b448da6ba6dc9600b1f45429e9115403cfdb04dec8e9ef5172bdae6aeb562cae73ef90f897d39f4f61a3d08d4fc3765baaeac53e5c8095a15184f82e59579189fc8718e369771d99a0f21f1bf24d41a314abe5b0875eadf9140599405f05a455c2e5189e814f57ee1b3dc11e8ca8f56adcf334618b6bb0bb3077948069f8678e750c7663cfaef03fc46c61c85f5d7aff34d7d104c4f1cb471a36fcd7f40392a6e1c068d6f4063608eb518aea3c2638991fbebf33d1539350d6422c7995b34b9e85f9e402e0af92b2676562af30de8dbf7677d87dba4def454a2c4d161404132abdf0b0e96b37a97fbc2eefec119adaaa7f38a2b52204af7960a73f24034f3564cd0a29ec844778028ef5eb97a733824c451c3255248ed7712d25c9896351ff779f5969b6fa589f2dc519bbfc8c051c805a2367380a39ccfac11397e3f9392b05d4961ee8bfa5e63239aa91907952250a9c5117bd3bd3afe570c9742d40c28ba1902758fc5a62aed933f437edfff8ebfec6fa1421fed19fe13a7f4137594d8772d951877c7bbba5a90e43cb81b971abd459f5abc6bc913484ec6c271a212a878e78554a346d5c5fac3baa21b353433f0f4202c655eea3690f31c3226664df88e7eed412520ae3930bea3f1558b98eb2f0ea9ecc795f0de63d086637e9ec2b274b6f45ddfcfbf3f8ac3ec710f29da54bf1e3f6c4f1a09b9ce82818efa66f95f719a5f3167d923b3bf305d15aa1ce4bc4d54fc7d449a23581de863b0f609fd57cff40851199eaef93f5a84087050679b97636a407ee6d87dcbf1ea7907576774e64bea21eab323341fe7da5b8f4267302027e531cf3e3d507f84d9e578ddfe997d95376bcbd9ad1d461dac5f25d3f95c55a7c940520e54ab42197e25f23442ca75fee57f3abf59d2100840a0d91facfa9325d9e90e4fd105cf62e077124d84afaa85c72d8143dd92ad4770c87196762cd9b395e05d1921a5674b1d5ea81b9f79901f55ba148a44592854df2e2af0e5a4a64db22359ebebb9ec4837fc07f51201c27fc60029b274f4caaaa6a2e9646662b5c234149a1edc73a12e23b9f05f6304c2db14bcdb9f8d7a3883ab3032bcca82e16d76426e8d1258b1135314aef5419e949ce34c9b5f935e8e843e9ea403e2c95f3761803cbe7d934de22f5569c0a1aa37766e78d7225170698ed0d94a1105122ce9c605841afe1aca2a6bdc9bc435bd7d00ca73fa13a5cd896ed3935ffc06236dcf586cce14b72430186a34e55ae3f0c64b4e64b00788477793b52deec2961ac0182558ffde4c198e3131bed07ca26d57dc87c875089e34395a1c097ea76fe5596f9733014e7edbf9b9eeb39c8dbf3045ec2915a603441f48969e9c2ea79a5f65ffc097c9f1a4326cc048f2a3bfd96cd23b6629fb1596465ad074f0079f0fdf5751ca727be2c5cd43916d18450c0cdf4a3b26e75b7fe4d7376bc04eff24835408e3078a0bb5d61e7d44b5c19670b55901ceae9b731cb653176514b8a047e060ad3e89aad28c2df73f04e7bd2d66b667804385415ffbedf8573a632e8f441550b876d2bd82e0dc2ff2eb0ddb40336076ac7c1b3deea7cebd4b174015e970807312797e1f1e2d7bc3a5ed1fd99d4d53d617662061fb6d0df68eb410da855cf68b54308bbd5b98754439621cbc7556378c56aa3a101c23126c01688cc10147acd2854d0e56f6a2690dc9033f84d76d40ed8a80db630cbe5bb4e99609049785da04e81f2c8b240aae8638c6bc90d07162104e4b6f0b5723d3b44aad61221250ba6c82bc246469cc2b55a93b47973d9c4eaa551e8f5bc659856304b459eeaecb38e692d01b83f07d254c1254ba785a8eae23735e9d1c04500f0e735c72e0c28c256b96b3f208775ec6a29b5f511cadb249a2d0634ea35d5780e8a1d5b7d11193d96c39b4681f502c6f9f168af4538de248d83bdd23be5d105b14a39e2b30980ac651d412be79caf1008fd0ae3bff1b2b1f151ff5b6196eb18bfa57e48bc3dd8016a30d78f66d2069005bd8ae197aab26f73df1c2a952dfbd08eed31a4b56dd7a6854662cbfbe2b0a3ddc966d35289536f529d35fc1087aac7fe26cac969f80ed80aeacd2ed9977c3d29bcd53cafe6f7b86a0502683ec92bc422629ede4ab53768c322873a46ee9a34d51e57c6c419ec4be02391a74997cf80054bfb534b64ead819819fc41809a35258f2ce367e66c5e0b8ec2bbf5c187449c6de2b0f0e91ff4de141343f6671db8827bcecc5f16909be8f7a70ceded1e1d951173004f68bbbd81a104aae5ba962314c47a1eedfced1e6313a760abb38f4503a70ae6c9e388113651cb33573f64332ed869696fb1b14d53c82082be2186815417f4e566ec36fb9bbc5399a098a59cb8bb0f4f91a93a83f7a6f692ca46591e6157863bdc98beb087bfa4d4703c33bbdcfbd9d0e58b9a4df104d0716a9e55f9b788f3d6731e9915ba0793416edf35f67015df8c7633dcd4b39804dd44e90685ba515fde2e505b5606dad0ebd3df7508008b8836aa69f19af2e2ec6283b081fc0f4eba724d6d893b97434f47716b4bd605c957ff4a0c238f8b0c28f56f5e3ef5fa1f1535f80f7c4662e39dff4729cc35dac5249f41c15a72052c6f824f4d9ae16ccd293fee61774b086ba3cb7157b939634e5cba978d050a67e6bf8406ac041b962988d3fd9cc82604f5f3b2e49c30a48115fbb55f24623634b9a0684f6b8f7331a224dc4a224dd6b8fa8c128b35805d23ef774602149e809e6c2f923d0de026855a80b720a34d03f0316b5ea21a72c8ad77e27a9f5a7b0798b38cd882dd4c9ec08099f5117d96509fc5278efb259f568998273fc59e49b83aca0d495add90b1f0c7fa5b4043c3f387c1110b3a754206d1930f6958c9874293f89d8a3eb38c7de6d3a5c38d87e469ef590f9c10becacfd8a5bbff9ae2a48e556a93105fec17bbb87265fe8edaf9b42e37df068ed7221191c762e024577af2e6c31a21dbd9d60e6bf4b3193a9547e6a43d9003f128e0d843524985817d26255d31761854ee5fb98e23038170e63a86a281d30104a0e1399ab31cf0ca69fac3a4c7b1e9747be0cd1263c6ecae6f19405a57fda6df6d1411ef006e83f2eace26de5ff76a0f9943257e96ffc6bebdc210219317155cc33104fb0f697eb40dc1a01797920702316f766fa86ebc6e177bb16963f6d407f7107b7729e9f9b6c2caea28b047d5b071a6e37e7e7d9e1c0c89d5648e63bde2006a496cf0079c047ad7bb9a7e53db418383a36e57ceec02178a1ef238dd1dc6726f6979b0a48b4f17c5d56ecfda7a2a76a88248cc8c2f0e34085e95f8bc01ef85e287c187feec326bafad5c330523ff955cec62e1a591307fbd71ddc7aefdf140e1d699e43b5d833c203ac9909013b48324f016fdd496f31ab8cd78ac88e78390b45572e6124d8d9465b582cb77326f4396db48bfe904f036a06db732b7091330b1bb92470308be08e12e7cb9da3ce46a4e80df18304ce56a25c692821b78c1b8c2b673cb519753b3c83a06d1172dc160eec73e73d3671b8c23c6a60b5a86a342e5f09c6b6dbdd0d05da07b09cc364f976a422d9c06242bf4a983e4b4d2c30b40cedac2f5c47fa2aa8d1841942090cbd226efa3fdb7284f417ed7fcf5cd05f5b44c312b40d25e468d2f22d28f116feb13113fea03b5c608d57865aa864ec59fc9dd321a700c41cd57ec3328a34216df8037e34fcbe33f3ff65f277e6d4e3f99319c3e7f725afe6ac7c2417a6b41eda18dbed8aa3fb7c8d577961f93d92cb0d27f42fda5d2ed6f7997991e281bbcd8d3ab5c7cc7e8d49128874893fd61d1f61981553892ab901d6c7b398720c15482d2e94f1db045604dadf5ef955c0cbddb65d54281d328adc1ca1b9f82f808aa7057116240d9774cc27d8e3a6abbd9e22bcea29a898a4b749dc1065fd88e67f4df028400085463580c2cfa10a7f868b0aba353a959428c20090eea1b87d3ec2ed25c5e664d61c2cc733d64caaebb68a98d63fcd721ef1d7c6b3600f1967f9f0cdf47552abbe98a0d4075b24e8886c9631956fb8e8859c40d6c98d3cfa125f26c0f3746ad5ba0880e184e472d50c18c51241749d9a4d35767e7ba07b1f9a5c2488fc32ce4fa864e5e5d15e4d6c48a5779085010f738895ecb06e0ab5d04df6e4357377af19bca21f1fb9371f63f06e41dac5ec6232e04b6c5070cc82494d70285c19b767dc81a383cd09d19fd075ecfbf55d3c4bfe901fba2e379ce30a925fc20725e9ac5698fa7cf90dc82d9083f80f02e111b66e526fbc4da56d343bd26231c417f558de339734064c46164071b4561081fb44fa25f677c16050e188d51d2a59505e1e4886182c9057334a0be09ff54e09b2f14ea08c35a1026f59ec18fc2867aee42b405a5b27487e769d797a1da15a0222d45c7174747de10d352b992530fa2a0b14dbc246ff829514257b455f8b57740061160516507a0c2db6f7ee4f22d1cf64e297da29a8fa73928efaeef62d84e441f5e104b68ac94ea4517b9439bb7641b7140d14c4f14d3ec6900f79b2e23d31114bd1c0bc673cf538fb52ed258fafd2c96a972f9e7f5f50d5bffa30215322f0327a4fd3a753697a85f6b677290ad60e3829d6a18c9b4886b0fedc47252acf2f1a1886b3c7d17392875910113fc59d3c96d883ede0b9ced51af77311ef82935d2c48e208ed980bcd00df894d87fc843f15ed20fe7bfa51a1be4a3649a1fae1b6a4873b7b10f44932102c7a8c6a46fbbf20d6fee514585c79e61605aab61fe452d88dc3e511a40359e473255ff96a928343235aa2a6f5374c8218b4b2242fea3065a1a90384468f7137cca3ba074db11d5b64383231de845159d7a1ad79e7f9109dd60088b1ef5b5a82abf6f3dfc421fa37ecb37aa48a9124728cd9e72a6b50e6fa9f9aaa549abbda7ac0a26e9f72d6b29be605d9419eec20670d086bb337d0236f64b8cca51cfa00cbf4595755a95054bf8223b3b88d24c8c8f23f5cefba90d81dacb26b8d3c0a523b804bd32b5a9e47df33d529d3e78babb2ea4a7e53198b8a9fc8b8cf5931299a586444e33a4c9b4bc409ca868cbaa1dc6cd15475497c59c08b147e40b9aa31ee84c9dd960ba820ca63fb2036f70a01115fa1af729b6d280c758e296ea161fecaad21e867dc7b36d9aab6c05b1918f14a7024e4dab50aec8ec73d4851196756882d0bedd1dc7e80484ead28c130159dc3bb42ac43af5556630ea904c468d2e1f4ab45ef9ed5e096de3cde315caffa6ed2f8fb25139539c644cf935d28ef226b9f5a9e26ff1725965cfbd562e0aad730cf00f60502faf6e7d613b2ec1c2abcaa19d65efc578d84073405073ee1759f908d8fc6e35084d98e9149a187da3d81dbc9194386791766fc47ec2bc0765dda7ad0e34afafeb5698baf92b0f491900fdcc3a704d8700d02ec54f437f8564eb881fe59529565375c3ccec513dc71d9f63527d323487e801f8a92e961b50adc0130e2ec611102c0dbd73ae3eaaee7086a9d896b70b2ee3839a9bee4f97b0927703718c12133d8e96fd863228dbfaef324e5f229f9726bd7394a027be83cc44b6a0815d264548fccbe3525d08a2838b67947adef36ce1689aa15763a0d8f191cc44cc70a", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 07:42:20 executing program 0: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="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", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 07:42:20 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:20 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 38) [ 95.002110][ C0] sd 0:0:1:0: tag#206 CDB[20]: ba [ 95.011537][ T7970] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 95.026215][ T7990] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 95.038106][ C1] sd 0:0:1:0: tag#210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 95.047865][ C1] sd 0:0:1:0: tag#210 CDB: opcode=0xe5 (vendor) [ 95.054112][ C1] sd 0:0:1:0: tag#210 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 95.063101][ C1] sd 0:0:1:0: tag#210 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 95.072176][ C1] sd 0:0:1:0: tag#210 CDB[20]: ba 07:42:20 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:20 executing program 4: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1, 0x8, 0x9, 0x3}]}) sendfile(r0, r1, 0x0, 0x1) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f0000000080), 0x401, 0x0) 07:42:20 executing program 0: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="84ac1a75082d497cf340f46694ca051e3612623c7d166876bf04ad85b78d841ff0e176b979ea48473d47fb43f929083282e3a55c4279c8d6787f86d5fb1662111b64adfb4e7044b448da6ba6dc9600b1f45429e9115403cfdb04dec8e9ef5172bdae6aeb562cae73ef90f897d39f4f61a3d08d4fc3765baaeac53e5c8095a15184f82e59579189fc8718e369771d99a0f21f1bf24d41a314abe5b0875eadf9140599405f05a455c2e5189e814f57ee1b3dc11e8ca8f56adcf334618b6bb0bb3077948069f8678e750c7663cfaef03fc46c61c85f5d7aff34d7d104c4f1cb471a36fcd7f40392a6e1c068d6f4063608eb518aea3c2638991fbebf33d1539350d6422c7995b34b9e85f9e402e0af92b2676562af30de8dbf7677d87dba4def454a2c4d161404132abdf0b0e96b37a97fbc2eefec119adaaa7f38a2b52204af7960a73f24034f3564cd0a29ec844778028ef5eb97a733824c451c3255248ed7712d25c9896351ff779f5969b6fa589f2dc519bbfc8c051c805a2367380a39ccfac11397e3f9392b05d4961ee8bfa5e63239aa91907952250a9c5117bd3bd3afe570c9742d40c28ba1902758fc5a62aed933f437edfff8ebfec6fa1421fed19fe13a7f4137594d8772d951877c7bbba5a90e43cb81b971abd459f5abc6bc913484ec6c271a212a878e78554a346d5c5fac3baa21b353433f0f4202c655eea3690f31c3226664df88e7eed412520ae3930bea3f1558b98eb2f0ea9ecc795f0de63d086637e9ec2b274b6f45ddfcfbf3f8ac3ec710f29da54bf1e3f6c4f1a09b9ce82818efa66f95f719a5f3167d923b3bf305d15aa1ce4bc4d54fc7d449a23581de863b0f609fd57cff40851199eaef93f5a84087050679b97636a407ee6d87dcbf1ea7907576774e64bea21eab323341fe7da5b8f4267302027e531cf3e3d507f84d9e578ddfe997d95376bcbd9ad1d461dac5f25d3f95c55a7c940520e54ab42197e25f23442ca75fee57f3abf59d2100840a0d91facfa9325d9e90e4fd105cf62e077124d84afaa85c72d8143dd92ad4770c87196762cd9b395e05d1921a5674b1d5ea81b9f79901f55ba148a44592854df2e2af0e5a4a64db22359ebebb9ec4837fc07f51201c27fc60029b274f4caaaa6a2e9646662b5c234149a1edc73a12e23b9f05f6304c2db14bcdb9f8d7a3883ab3032bcca82e16d76426e8d1258b1135314aef5419e949ce34c9b5f935e8e843e9ea403e2c95f3761803cbe7d934de22f5569c0a1aa37766e78d7225170698ed0d94a1105122ce9c605841afe1aca2a6bdc9bc435bd7d00ca73fa13a5cd896ed3935ffc06236dcf586cce14b72430186a34e55ae3f0c64b4e64b00788477793b52deec2961ac0182558ffde4c198e3131bed07ca26d57dc87c875089e34395a1c097ea76fe5596f9733014e7edbf9b9eeb39c8dbf3045ec2915a603441f48969e9c2ea79a5f65ffc097c9f1a4326cc048f2a3bfd96cd23b6629fb1596465ad074f0079f0fdf5751ca727be2c5cd43916d18450c0cdf4a3b26e75b7fe4d7376bc04eff24835408e3078a0bb5d61e7d44b5c19670b55901ceae9b731cb653176514b8a047e060ad3e89aad28c2df73f04e7bd2d66b667804385415ffbedf8573a632e8f441550b876d2bd82e0dc2ff2eb0ddb40336076ac7c1b3deea7cebd4b174015e970807312797e1f1e2d7bc3a5ed1fd99d4d53d617662061fb6d0df68eb410da855cf68b54308bbd5b98754439621cbc7556378c56aa3a101c23126c01688cc10147acd2854d0e56f6a2690dc9033f84d76d40ed8a80db630cbe5bb4e99609049785da04e81f2c8b240aae8638c6bc90d07162104e4b6f0b5723d3b44aad61221250ba6c82bc246469cc2b55a93b47973d9c4eaa551e8f5bc659856304b459eeaecb38e692d01b83f07d254c1254ba785a8eae23735e9d1c04500f0e735c72e0c28c256b96b3f208775ec6a29b5f511cadb249a2d0634ea35d5780e8a1d5b7d11193d96c39b4681f502c6f9f168af4538de248d83bdd23be5d105b14a39e2b30980ac651d412be79caf1008fd0ae3bff1b2b1f151ff5b6196eb18bfa57e48bc3dd8016a30d78f66d2069005bd8ae197aab26f73df1c2a952dfbd08eed31a4b56dd7a6854662cbfbe2b0a3ddc966d35289536f529d35fc1087aac7fe26cac969f80ed80aeacd2ed9977c3d29bcd53cafe6f7b86a0502683ec92bc422629ede4ab53768c322873a46ee9a34d51e57c6c419ec4be02391a74997cf80054bfb534b64ead819819fc41809a35258f2ce367e66c5e0b8ec2bbf5c187449c6de2b0f0e91ff4de141343f6671db8827bcecc5f16909be8f7a70ceded1e1d951173004f68bbbd81a104aae5ba962314c47a1eedfced1e6313a760abb38f4503a70ae6c9e388113651cb33573f64332ed869696fb1b14d53c82082be2186815417f4e566ec36fb9bbc5399a098a59cb8bb0f4f91a93a83f7a6f692ca46591e6157863bdc98beb087bfa4d4703c33bbdcfbd9d0e58b9a4df104d0716a9e55f9b788f3d6731e9915ba0793416edf35f67015df8c7633dcd4b39804dd44e90685ba515fde2e505b5606dad0ebd3df7508008b8836aa69f19af2e2ec6283b081fc0f4eba724d6d893b97434f47716b4bd605c957ff4a0c238f8b0c28f56f5e3ef5fa1f1535f80f7c4662e39dff4729cc35dac5249f41c15a72052c6f824f4d9ae16ccd293fee61774b086ba3cb7157b939634e5cba978d050a67e6bf8406ac041b962988d3fd9cc82604f5f3b2e49c30a48115fbb55f24623634b9a0684f6b8f7331a224dc4a224dd6b8fa8c128b35805d23ef774602149e809e6c2f923d0de026855a80b720a34d03f0316b5ea21a72c8ad77e27a9f5a7b0798b38cd882dd4c9ec08099f5117d96509fc5278efb259f568998273fc59e49b83aca0d495add90b1f0c7fa5b4043c3f387c1110b3a754206d1930f6958c9874293f89d8a3eb38c7de6d3a5c38d87e469ef590f9c10becacfd8a5bbff9ae2a48e556a93105fec17bbb87265fe8edaf9b42e37df068ed7221191c762e024577af2e6c31a21dbd9d60e6bf4b3193a9547e6a43d9003f128e0d843524985817d26255d31761854ee5fb98e23038170e63a86a281d30104a0e1399ab31cf0ca69fac3a4c7b1e9747be0cd1263c6ecae6f19405a57fda6df6d1411ef006e83f2eace26de5ff76a0f9943257e96ffc6bebdc210219317155cc33104fb0f697eb40dc1a01797920702316f766fa86ebc6e177bb16963f6d407f7107b7729e9f9b6c2caea28b047d5b071a6e37e7e7d9e1c0c89d5648e63bde2006a496cf0079c047ad7bb9a7e53db418383a36e57ceec02178a1ef238dd1dc6726f6979b0a48b4f17c5d56ecfda7a2a76a88248cc8c2f0e34085e95f8bc01ef85e287c187feec326bafad5c330523ff955cec62e1a591307fbd71ddc7aefdf140e1d699e43b5d833c203ac9909013b48324f016fdd496f31ab8cd78ac88e78390b45572e6124d8d9465b582cb77326f4396db48bfe904f036a06db732b7091330b1bb92470308be08e12e7cb9da3ce46a4e80df18304ce56a25c692821b78c1b8c2b673cb519753b3c83a06d1172dc160eec73e73d3671b8c23c6a60b5a86a342e5f09c6b6dbdd0d05da07b09cc364f976a422d9c06242bf4a983e4b4d2c30b40cedac2f5c47fa2aa8d1841942090cbd226efa3fdb7284f417ed7fcf5cd05f5b44c312b40d25e468d2f22d28f116feb13113fea03b5c608d57865aa864ec59fc9dd321a700c41cd57ec3328a34216df8037e34fcbe33f3ff65f277e6d4e3f99319c3e7f725afe6ac7c2417a6b41eda18dbed8aa3fb7c8d577961f93d92cb0d27f42fda5d2ed6f7997991e281bbcd8d3ab5c7cc7e8d49128874893fd61d1f61981553892ab901d6c7b398720c15482d2e94f1db045604dadf5ef955c0cbddb65d54281d328adc1ca1b9f82f808aa7057116240d9774cc27d8e3a6abbd9e22bcea29a898a4b749dc1065fd88e67f4df028400085463580c2cfa10a7f868b0aba353a959428c20090eea1b87d3ec2ed25c5e664d61c2cc733d64caaebb68a98d63fcd721ef1d7c6b3600f1967f9f0cdf47552abbe98a0d4075b24e8886c9631956fb8e8859c40d6c98d3cfa125f26c0f3746ad5ba0880e184e472d50c18c51241749d9a4d35767e7ba07b1f9a5c2488fc32ce4fa864e5e5d15e4d6c48a5779085010f738895ecb06e0ab5d04df6e4357377af19bca21f1fb9371f63f06e41dac5ec6232e04b6c5070cc82494d70285c19b767dc81a383cd09d19fd075ecfbf55d3c4bfe901fba2e379ce30a925fc20725e9ac5698fa7cf90dc82d9083f80f02e111b66e526fbc4da56d343bd26231c417f558de339734064c46164071b4561081fb44fa25f677c16050e188d51d2a59505e1e4886182c9057334a0be09ff54e09b2f14ea08c35a1026f59ec18fc2867aee42b405a5b27487e769d797a1da15a0222d45c7174747de10d352b992530fa2a0b14dbc246ff829514257b455f8b57740061160516507a0c2db6f7ee4f22d1cf64e297da29a8fa73928efaeef62d84e441f5e104b68ac94ea4517b9439bb7641b7140d14c4f14d3ec6900f79b2e23d31114bd1c0bc673cf538fb52ed258fafd2c96a972f9e7f5f50d5bffa30215322f0327a4fd3a753697a85f6b677290ad60e3829d6a18c9b4886b0fedc47252acf2f1a1886b3c7d17392875910113fc59d3c96d883ede0b9ced51af77311ef82935d2c48e208ed980bcd00df894d87fc843f15ed20fe7bfa51a1be4a3649a1fae1b6a4873b7b10f44932102c7a8c6a46fbbf20d6fee514585c79e61605aab61fe452d88dc3e511a40359e473255ff96a928343235aa2a6f5374c8218b4b2242fea3065a1a90384468f7137cca3ba074db11d5b64383231de845159d7a1ad79e7f9109dd60088b1ef5b5a82abf6f3dfc421fa37ecb37aa48a9124728cd9e72a6b50e6fa9f9aaa549abbda7ac0a26e9f72d6b29be605d9419eec20670d086bb337d0236f64b8cca51cfa00cbf4595755a95054bf8223b3b88d24c8c8f23f5cefba90d81dacb26b8d3c0a523b804bd32b5a9e47df33d529d3e78babb2ea4a7e53198b8a9fc8b8cf5931299a586444e33a4c9b4bc409ca868cbaa1dc6cd15475497c59c08b147e40b9aa31ee84c9dd960ba820ca63fb2036f70a01115fa1af729b6d280c758e296ea161fecaad21e867dc7b36d9aab6c05b1918f14a7024e4dab50aec8ec73d4851196756882d0bedd1dc7e80484ead28c130159dc3bb42ac43af5556630ea904c468d2e1f4ab45ef9ed5e096de3cde315caffa6ed2f8fb25139539c644cf935d28ef226b9f5a9e26ff1725965cfbd562e0aad730cf00f60502faf6e7d613b2ec1c2abcaa19d65efc578d84073405073ee1759f908d8fc6e35084d98e9149a187da3d81dbc9194386791766fc47ec2bc0765dda7ad0e34afafeb5698baf92b0f491900fdcc3a704d8700d02ec54f437f8564eb881fe59529565375c3ccec513dc71d9f63527d323487e801f8a92e961b50adc0130e2ec611102c0dbd73ae3eaaee7086a9d896b70b2ee3839a9bee4f97b0927703718c12133d8e96fd863228dbfaef324e5f229f9726bd7394a027be83cc44b6a0815d264548fccbe3525d08a2838b67947adef36ce1689aa15763a0d8f191cc44cc70a", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) [ 95.094884][ T7997] FAULT_INJECTION: forcing a failure. [ 95.094884][ T7997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.108146][ T7997] CPU: 1 PID: 7997 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 95.116917][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.126975][ T7997] Call Trace: [ 95.130257][ T7997] dump_stack_lvl+0xd6/0x122 [ 95.134854][ T7997] dump_stack+0x11/0x1b [ 95.139099][ T7997] should_fail+0x23c/0x250 [ 95.142872][ C0] sd 0:0:1:0: tag#220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 95.143517][ T7997] __alloc_pages+0x102/0x320 [ 95.153271][ C0] sd 0:0:1:0: tag#220 CDB: opcode=0xe5 (vendor) [ 95.158067][ T7997] alloc_pages+0x382/0x3d0 [ 95.164311][ C0] sd 0:0:1:0: tag#220 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 95.168701][ T7997] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 95.177632][ C0] sd 0:0:1:0: tag#220 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:42:20 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 95.183132][ T7997] pte_alloc_one+0x29/0xb0 [ 95.183152][ T7997] ? __mem_cgroup_charge+0xeb/0x170 [ 95.192088][ C0] sd 0:0:1:0: tag#220 CDB[20]: ba [ 95.196452][ T7997] do_cow_fault+0x1a1/0x560 [ 95.211313][ T7997] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 95.216866][ T7997] handle_mm_fault+0x9aa/0x1580 [ 95.221722][ T7997] ? follow_page_mask+0x42b/0x10b0 [ 95.226835][ T7997] __get_user_pages+0x381/0xc50 [ 95.231776][ T7997] __get_user_pages_remote+0x17f/0x610 [ 95.237249][ T7997] get_user_pages_remote+0x6f/0xa0 07:42:20 executing program 0: perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xc0, 0xf4e, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x40c, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x802, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x5, 0x0, 0x5, 0x4, 0x40, 0xa0c2, 0x0, 0x9, 0x0, 0x9}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000f2cff4)={0x77540947ad9a168d}) perf_event_open(&(0x7f0000000900)={0x5, 0x80, 0x4, 0x87, 0xbe, 0x31, 0x0, 0x400000000, 0x10219, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3fe00000, 0x2, @perf_bp={&(0x7f0000000180), 0xd}, 0x621, 0x100000001, 0x1, 0x1, 0x2, 0x2, 0x8, 0x0, 0xfff, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) mq_timedsend(r3, &(0x7f00000013c0)="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", 0xfd1, 0x0, 0x0) dup2(r4, r3) mq_unlink(&(0x7f0000000240)='eth0\x00\xe2\xdf\x9di\x04\x8e\x14(\x0e\xa2\x94c\xb6\x95\xdc\xf1i\xe7,c\xdbZ\xd2\xf4\xdd|*\x1d=\x9dT0\xcf$i\xcc!\xa0n\x9d\xa6,\xd4\xf4v\x1e\xed<\xd4\xd5\xf6\xa8\f\xe5\x9b=F\x03\x84\x9bz\x1fC\xa8+\x1cJ{\xc3\xba\x8e\n\x95\xea\x89\r7\x80\x01>\xeb\xb9\x16FK\xf2\xeaqN-\x1e\xa4a*\x8c\xf8\xbc+,%\xfc~E\'\x96\x1dw\x93\x1d\x00\x00\x00\x00\x00\x00j^\x8f\xb34s,\xbf\xb06\xdc\x82b\xeb\x10WI\x94\x9d\x1b\xdd\xc7\x89\x11\x84L\xce$1\v\xa6\x87O8\'\x8cP\xd7\"zL\x80\x98\xf31\x06Y\xe0\x03z\v] \xa9^$\x05i\xb7\x9a\xbe\x01\xc3}\xc7\xc8\x8d\x04\x0f/K7f\xab\x8af\xbcS\xa1\xfb\xe5\xfe\xa0\x89\x15W\xbe\xa7\xc0U\xd1\xdb\xd4\x9c\xc3\xd8\xae=\xe3\xf6\xfam\x1e\x1bI+\xba\xcd\x0eA6\x1b\xdfBiK\x8c\xf4\xf1\xa4\xfa\xd6\xf1\x91\xc6\xf2\xdf\xb3#\x8au\x1b.\x920\x8c\x00\x00\x00\x00\xea\x00;}\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\xf8\xa79F\x19T\x91W\xd7O\xc5\"?\xe3w\x9e\xc3\xd3\x95\xa1[\xbdK\\\xe3Ca\xcca\x99\x1bmh\x1a4\x9f\xeb\x0f\x8d\x8d\xd0/\xa7\x19\xf1\xcf\x80\x12\xa5\f\xe4\xd7\x1d\xb5\x18,FJ\xd2\x91\xfd\x90\xc06\x06I3Js\xad\xd5qs\x0f\xcb\xbbQ!\x80\xbd\x0e\xa5c\x1b\xc7\x0e\xc5\xa2\xd0\xfdyj`\xe1\xee\xa8\xb3%\xae\xf3\xb9\xfaJ\xbd\xc8\xb1\xddB\x94x7\'\r\"\x7f\xd5\xe8\x1d\xd4\xf9\"\xb4B\\\xa9\xeeF\t\x9b\xd5^\x1d\xf5\xedN!T\xe0S\xc3~:\x94\xeb\xa9\xe2\x86\xffC6*\x9f8\xdfX\x18\x9f\xc1\x1c\xa6+P\xbe]\xb0\xf3\x95\xfe\x96d\xb0\xaepD\b\x9a\x8a\xa1\n\x06[\xd2\t\xd1\x00\xb8\x16cs\xb1\xf7\x01W\x80\\\x869\x89U\xb02\v\x84\xe9M\xa6\x10\x8e\x06\x06\xdc\x8ad\xd3x\x97\x1bP,\x10Q\a\xd3\x96\xb4\x85p\x0f\xf8\xcf\xba\x81\xb1\x00'/523) 07:42:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0x3f, 0x0, 0x10000}, {0xffe1, 0x2, 0x2, 0x4}, {0x75, 0x2, 0x16, 0x1}, {0x999, 0x9, 0x1, 0xfffffffc}, {0x3ff, 0x0, 0x4, 0x1}, {0x34, 0x3, 0x9, 0x8}]}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000ffffffff0000200000000000000000000000000000000000000000000009d4c28bf09ed660ba965380bf4944b0f1001a623f5d0692683fa82344a667c9a4c03978d2880fd617f342fff19844192c5cd21909dc05d0adb69b024789343845dd8d5faa48a48c1b7b0e5113434b4265936ee925626884cd7dc8cb0075f1d41f123fbd7aad7a67f7ab4ad4167975451c9346c06f9bd589209a7b0892a3d637161a39dab03054672ac800a482f270e78294a06566e9e275d36205b6e208d2eb54cf095130222fb3e49cef921b409b2d04d0ef13052cc7a1e4538cdee3343e86fa177c7e15bd8be048ff8729fa4c2823923a46d59976209d6955377cd8fb2400ad3e3dae21e2d379d37"]) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRESOCT=r0], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x1b, &(0x7f00000002c0)) r3 = gettid() tkill(r2, 0xe) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x6a4, 0xffffffff) [ 95.242463][ T7997] __update_ref_ctr+0x94/0x240 [ 95.247409][ T7997] update_ref_ctr+0x36f/0x610 [ 95.252090][ T7997] uprobe_write_opcode+0x3e9/0x990 [ 95.257200][ T7997] set_swbp+0x26/0x30 [ 95.261185][ T7997] install_breakpoint+0x3bd/0x4d0 [ 95.266568][ T7997] uprobe_mmap+0x80c/0xcd0 [ 95.271163][ T7997] ? __vma_link_rb+0x3c2/0x3e0 [ 95.275932][ T7997] __vma_adjust+0x118d/0x1a70 [ 95.280624][ T7997] __split_vma+0x24b/0x320 [ 95.285045][ T7997] __do_munmap+0x27c/0x1340 [ 95.289597][ T7997] ? __xas_nomem+0xfc/0x270 [ 95.294135][ T7997] mmap_region+0x58a/0x1260 [ 95.298695][ T7997] ? selinux_mmap_addr+0x94/0xa0 [ 95.299419][ C0] sd 0:0:1:0: tag#222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 95.303715][ T7997] ? security_mmap_addr+0x78/0x90 [ 95.303739][ T7997] do_mmap+0x781/0xc20 [ 95.313489][ C0] sd 0:0:1:0: tag#222 CDB: opcode=0xe5 (vendor) [ 95.318455][ T7997] vm_mmap_pgoff+0x117/0x1f0 [ 95.322547][ C0] sd 0:0:1:0: tag#222 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 95.328753][ T7997] ksys_mmap_pgoff+0x284/0x350 [ 95.333335][ C0] sd 0:0:1:0: tag#222 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 95.342231][ T7997] ? exit_to_user_mode_prepare+0x65/0x190 [ 95.347055][ C0] sd 0:0:1:0: tag#222 CDB[20]: ba [ 95.355888][ T7997] do_syscall_64+0x44/0xa0 [ 95.355914][ T7997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 95.376865][ T7997] RIP: 0033:0x7fd63c5f7922 07:42:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x23, 0x0, 0x12, 0x8, 0x4, "53fa02b3eb6445bab45a1afca5a231b647d27505231a730d57648fd500c3479b3ffb53fe6dd3fbc9acc89d6722fefffae189c86a677876b46104fcca18bf84a4", "f0645f8853cba21ddbe5bd5d83322e1944d8e9c18bf863c9e6243be2c1bff25fa7d1a2d81cf42e63954208c1815524cabf73115333b594a30252e32f9ce6be9f", "5201d85431137337f33c64fe538b60242168ad52b24f6b7988dfdbc8098ee30e", [0x6, 0x80000001]}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000100)) io_uring_setup(0x5195, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x3}) 07:42:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffffe, 0x80342) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x119000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x9, 0x9, 0xfffffff9}, 0x10) write$evdev(r1, &(0x7f0000000000), 0xfffffe66) [ 95.381280][ T7997] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 95.388160][ T8022] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 95.400889][ T7997] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 95.400913][ T7997] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 95.400924][ T7997] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 95.400935][ T7997] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 95.444814][ T7997] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 95.452791][ T7997] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 95.460839][ T7997] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 95.478326][ T8017] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 07:42:20 executing program 4: mmap(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)) 07:42:20 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x3000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 95.483622][ T8035] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c [ 95.494538][ T8037] ref_ctr increment failed for inode: 0x37a1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 95.526404][ T7998] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:20 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:20 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 39) [ 95.546465][ T8039] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:20 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 95.634040][ T8051] ref_ctr increment failed for inode: 0x3789 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e [ 95.637537][ T8054] ref_ctr increment failed for inode: 0x378a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 95.677524][ T8051] FAULT_INJECTION: forcing a failure. [ 95.677524][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 95.690185][ T8051] CPU: 0 PID: 8051 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 95.698868][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.708925][ T8051] Call Trace: [ 95.712213][ T8051] dump_stack_lvl+0xd6/0x122 [ 95.716818][ T8051] dump_stack+0x11/0x1b [ 95.720990][ T8051] should_fail+0x23c/0x250 [ 95.725415][ T8051] ? vm_area_dup+0x44/0x130 [ 95.729930][ T8051] __should_failslab+0x81/0x90 [ 95.734699][ T8051] should_failslab+0x5/0x20 [ 95.739798][ T8051] kmem_cache_alloc+0x4f/0x300 [ 95.744573][ T8051] ? __vma_adjust+0x1830/0x1a70 [ 95.749442][ T8051] vm_area_dup+0x44/0x130 [ 95.753781][ T8051] __split_vma+0x82/0x320 [ 95.758124][ T8051] ? vmacache_find+0x2df/0x320 [ 95.762983][ T8051] __do_munmap+0x2ee/0x1340 [ 95.767549][ T8051] ? __xas_nomem+0xfc/0x270 [ 95.772059][ T8051] mmap_region+0x58a/0x1260 07:42:20 executing program 4: unshare(0x4a060480) socketpair(0xf, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x200400, 0x28, 0x14}, 0x18) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x102, 0x53) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4007c0, 0x48) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000018c0)={r8, r6, "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", "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"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000008c0)={0x0, 0x0, "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", "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"}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @private}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @hci={0x1f, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x04\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\f\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 07:42:20 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x4000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 95.776657][ T8051] ? selinux_mmap_addr+0x94/0xa0 [ 95.781609][ T8051] ? security_mmap_addr+0x78/0x90 [ 95.786648][ T8051] do_mmap+0x781/0xc20 [ 95.790727][ T8051] vm_mmap_pgoff+0x117/0x1f0 [ 95.795408][ T8051] ksys_mmap_pgoff+0x284/0x350 [ 95.800180][ T8051] ? exit_to_user_mode_prepare+0x65/0x190 [ 95.805990][ T8051] do_syscall_64+0x44/0xa0 [ 95.810476][ T8051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 95.816384][ T8051] RIP: 0033:0x7fd63c5f7922 [ 95.820796][ T8051] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 95.840410][ T8051] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 95.848898][ T8051] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 95.856876][ T8051] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 95.864854][ T8051] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 95.872830][ T8051] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 95.880854][ T8051] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 95.889389][ T8054] ref_ctr increment failed for inode: 0x378a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 95.906816][ T8058] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:21 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 40) 07:42:21 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:21 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x5000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 95.915508][ T8076] ref_ctr increment failed for inode: 0x378a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007da11dc2 [ 95.932095][ T8058] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:21 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 96.018213][ T8086] ref_ctr increment failed for inode: 0x3794 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e [ 96.042069][ T8090] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 96.054766][ T8086] FAULT_INJECTION: forcing a failure. [ 96.054766][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 96.067431][ T8086] CPU: 1 PID: 8086 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 96.076165][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.086223][ T8086] Call Trace: [ 96.089557][ T8086] dump_stack_lvl+0xd6/0x122 [ 96.094158][ T8086] dump_stack+0x11/0x1b [ 96.098326][ T8086] should_fail+0x23c/0x250 [ 96.102753][ T8086] ? anon_vma_clone+0x8d/0x380 [ 96.107519][ T8086] __should_failslab+0x81/0x90 [ 96.112295][ T8086] should_failslab+0x5/0x20 [ 96.116808][ T8086] kmem_cache_alloc+0x4f/0x300 [ 96.121648][ T8086] anon_vma_clone+0x8d/0x380 [ 96.126242][ T8086] __split_vma+0x134/0x320 [ 96.130674][ T8086] ? vmacache_find+0x2df/0x320 [ 96.135505][ T8086] __do_munmap+0x2ee/0x1340 [ 96.140038][ T8086] ? __xas_nomem+0xfc/0x270 [ 96.144627][ T8086] mmap_region+0x58a/0x1260 [ 96.149143][ T8086] ? selinux_mmap_addr+0x94/0xa0 [ 96.154174][ T8086] ? security_mmap_addr+0x78/0x90 [ 96.159213][ T8086] do_mmap+0x781/0xc20 [ 96.163345][ T8086] vm_mmap_pgoff+0x117/0x1f0 [ 96.167960][ T8086] ksys_mmap_pgoff+0x284/0x350 [ 96.172735][ T8086] ? exit_to_user_mode_prepare+0x65/0x190 [ 96.178474][ T8086] do_syscall_64+0x44/0xa0 [ 96.182968][ T8086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 96.188924][ T8086] RIP: 0033:0x7fd63c5f7922 [ 96.193343][ T8086] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 96.212958][ T8086] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 96.221379][ T8086] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 96.229437][ T8086] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 96.237414][ T8086] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 96.245388][ T8086] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 96.253364][ T8086] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 96.268796][ T8090] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:21 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x7000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 96.311657][ T8104] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 96.328824][ T8098] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 96.355015][ T8098] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 07:42:21 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:21 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 96.389265][ T8107] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 96.410246][ T8110] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 07:42:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xffffff00, 0x3, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac, {[0xff, 0x0, 0xff]}}, 0xf0d0, 0x0, 0x5, 0x1, 0x0, 0xfff7, 'bond_slave_0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x2d5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0xe, 0x10, {@mac=@random="d191d7c709eb", {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff]}}, 0x396, 0x3, 0x5be, 0x2, 0xdaec, 0x200, 'veth1_to_bridge\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @loopback, @remote, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)}, 0x1) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@generic={0x2a, "22a3343908ae724a0352ca9a7fcac7a686b49330fdd2460cce617cca2a49cac58b27ee37254c7195bd710874db1becdcc57fa379a55ff3e8773b65db61923c8e73bd1f09899d9809da6eda51360a5122a335930b06b36d25a3030ebffb86d061030a63d63d3fb59da55f66518e85e0d53bcfb6654a0b7a15b92ae91d3f8a"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="fd", 0x1}], 0x1, &(0x7f00000009c0)=[{0xd0, 0x88, 0x7f, "8d99c2a12af047227a70ecca9a10e329288e410181fa4a915c083a4dba01a8784a43a14d440711284526e695a88268bb2cbeb493a86d6183fc28f4b94eb587d4b943f13fc2a5169b7185f994f720715e74fa186c756f49f6ec27b9592b3de8c62f3909f334984000304f4bd464466feb4585b2955990f26ee7e450f8c8d96770f1098b271be2c7d5fa430f8c8b79f6c8518824e9b3cfd58e9528e54e07b574294bfbddd011398eb229bf0f4110519b22083a80d94a46d85e350e4b"}, {0x1010, 0x115, 0xe0, "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"}, {0x68, 0x0, 0x1000, "48807e93a16e79a5d3b6a14c78eb014a486e3ce2e82979c79467215dd9a6337f6cc35376a73bff29a6bab5a682c3f42f895111b7945d80b30a10b13c522303a837bca4345e47fbfc3b71c1882678c4923ec1b811"}, {0x1010, 0x119, 0x7, "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"}, {0xf0, 0x114, 0x3ff, "bfa90250d9f3a5f949c63cf8e1bd3830d0690991f927cc0667b1120e6f746bc279ed2b0531e088ac6d48c3d7aca9d0641636225cfc74b8546c381c5a39116f6465bef9a968725a5a601df42f069a701fed54bd9315bbc791f1bb6bfe0a50a6732d1dc274fb3c29b385dbcf22ff6916da5626b9a016ea98f8a5ff9f5f86e969d080514698324d92ec3329dfd02604a74fca2c901e8a1b26fe59888ca46490b0c3e6c5dd1da9934a7a5f31c1b85110cf9d5c7f94ff02e3378c30c29860edc76fd267abd2e257c6e2a15be33c7083cbebd383ba7e979ef3be31bde9ad2773"}, {0xe8, 0x10a, 0x0, "a27248fde914411851e9b7af5690e3a3176e48e53429dd57b49c5194134fd43af110d9ee693315ee3e3250b909319b58da94bb26cb9bb3970a44251420dbc4dbac029d266f5232e51e3da07dd4fe69f9eb754b912ad511c9d9b264a6012020dc4c71c168de37ac0e212b57236f62c1f7302a88d18377e4db083c69ea0fa9616eefe8e5e2cb087bc18d2c5b0ecbf09051e23115c5b27ab2639956d11bd3a892b2cd4880c42395b9397f3ebf5287558e9df46f7c5617501ae479f9e3493692f746b4c2d523dc952a2875518d9fcb3d7078229f33"}, {0x1010, 0x10d, 0xfff, "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"}], 0x3340}, 0x0, 0x20040800, 0x1, {0x0, r6}}, 0x1) io_uring_enter(r1, 0x6374, 0x0, 0x0, 0x0, 0x0) 07:42:21 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 96.485524][ T8117] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 96.520848][ T8117] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:21 executing program 4: symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x4) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2d2040, 0x0) open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x1080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) write$binfmt_elf64(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x76, 0xff, 0x81, 0x4, 0x9, 0x3, 0x3, 0x20, 0x311, 0x40, 0x36, 0x3, 0xffff, 0x38, 0x2, 0x6, 0x9, 0x8}, [{0x6, 0xef, 0x80000000, 0x3, 0x5, 0xd5b, 0x7, 0x6ef}], "e8d0bc782d4fbb2e46b06c85f1d96bbb9cf1e21d173fbf991c18eac32700b6df09120a4f11cb7a385a4e170dba3a0f951eaf5e64852f5c95ce7df1e00c6f27c61a6643e4e2213bf5891f3d2e85e0ae006495c9e97b387d4c816fc34604a268be5a2648cd0fcdc5f196ad59deebaade9738915d6b7535e8bba987866c2bb9b52fec7439916aeb890ef940b197f5d361ef6ac7a99af66dc9e31e7beda31b9c4caa92b5e1d91f8ff1a98f793457b28ddcd821b9c07a31a10b83", ['\x00', '\x00', '\x00', '\x00']}, 0x530) r3 = dup3(r0, r0, 0x80000) inotify_add_watch(r3, &(0x7f0000000780)='./file0\x00', 0x100020a) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 07:42:21 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:21 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 96.537305][ T8126] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 96.596679][ T8128] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 96.616916][ T8128] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 96.635570][ T8146] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:21 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 41) 07:42:21 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x125, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000340)={0x6, 0x40, 0xef}) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)="43381d16e8c674efb7cc9073db352387c50fe4d9b7fba01139c31f86f6f980d6fb0be6026c8eb074a73472d65ba36d45fdc5fd538edd4bc396332b86ce843d5bd72bdd9fe4b86a69f1ee649a741b1540a00452b39d3d7f415a8257245e8d9551aa75586c3986c753860fa189666f340ce847877548b5c3501e96c4e43189d882ad66079c12ea0c0551f912ad9b96cb5172b246f238aa1a2237d675925f23562ca53ebd6cad55f7") ptrace$cont(0x18, r0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3a) 07:42:21 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:21 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x10000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000029000000370000003a00000000000000200000000000000001000000240000006200000000000000040107000000000024000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRESDEC=r0], 0x130}}], 0x2, 0x0) [ 96.674502][ T8142] ref_ctr increment failed for inode: 0x37aa offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 96.702886][ T8142] ref_ctr increment failed for inode: 0x37aa offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:21 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 96.735444][ T8153] ref_ctr increment failed for inode: 0x378b offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 96.765513][ T8160] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:21 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc, [], [0x0, 0x20]}}}, 0x4c}}, 0x0) [ 96.789784][ T8160] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c [ 96.794980][ T8153] FAULT_INJECTION: forcing a failure. [ 96.794980][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 96.814207][ T8153] CPU: 0 PID: 8153 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 96.822885][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.832940][ T8153] Call Trace: [ 96.836220][ T8153] dump_stack_lvl+0xd6/0x122 [ 96.840820][ T8153] dump_stack+0x11/0x1b [ 96.845028][ T8153] should_fail+0x23c/0x250 [ 96.849452][ T8153] ? vm_area_alloc+0x28/0xa0 [ 96.854048][ T8153] __should_failslab+0x81/0x90 [ 96.858823][ T8153] should_failslab+0x5/0x20 [ 96.863341][ T8153] kmem_cache_alloc+0x4f/0x300 [ 96.868126][ T8153] vm_area_alloc+0x28/0xa0 [ 96.872549][ T8153] mmap_region+0x73b/0x1260 [ 96.877064][ T8153] ? selinux_mmap_addr+0x94/0xa0 [ 96.882009][ T8153] ? security_mmap_addr+0x78/0x90 [ 96.887056][ T8153] do_mmap+0x781/0xc20 [ 96.891143][ T8153] vm_mmap_pgoff+0x117/0x1f0 [ 96.895740][ T8153] ksys_mmap_pgoff+0x284/0x350 [ 96.900528][ T8153] ? exit_to_user_mode_prepare+0x65/0x190 [ 96.906422][ T8153] do_syscall_64+0x44/0xa0 [ 96.910851][ T8153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 96.916759][ T8153] RIP: 0033:0x7fd63c5f7922 [ 96.921183][ T8153] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 96.940865][ T8153] RSP: 002b:00007fd63a36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 96.949304][ T8153] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd63c5f7922 [ 96.957281][ T8153] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020002000 [ 96.965332][ T8153] RBP: 0000000020002000 R08: 0000000000000007 R09: 0000000000000000 [ 96.973307][ T8153] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 96.981284][ T8153] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 07:42:22 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 42) [ 97.002705][ T8177] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e 07:42:22 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:22 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x7ffff000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:22 executing program 4: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001500)={[], [{@fsuuid}]}) set_mempolicy(0x1, &(0x7f0000000000)=0x101, 0xca42) [ 97.044645][ T8184] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 97.080387][ T8184] FAULT_INJECTION: forcing a failure. [ 97.080387][ T8184] name failslab, interval 1, probability 0, space 0, times 0 [ 97.092990][ T8184] CPU: 0 PID: 8184 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 97.101659][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.103491][ T8194] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 97.111709][ T8184] Call Trace: [ 97.111719][ T8184] dump_stack_lvl+0xd6/0x122 [ 97.131237][ T8184] dump_stack+0x11/0x1b [ 97.135443][ T8184] should_fail+0x23c/0x250 [ 97.139884][ T8184] ? __sigqueue_alloc+0x13a/0x270 [ 97.144920][ T8184] __should_failslab+0x81/0x90 [ 97.149753][ T8184] should_failslab+0x5/0x20 [ 97.154265][ T8184] kmem_cache_alloc+0x4f/0x300 [ 97.159106][ T8184] __sigqueue_alloc+0x13a/0x270 [ 97.164485][ T8184] __send_signal+0x178/0x760 [ 97.169115][ T8184] send_signal+0x281/0x390 [ 97.173584][ T8184] force_sig_info_to_task+0x254/0x310 [ 97.178964][ T8184] force_sig_fault+0x64/0x90 [ 97.183584][ T8184] __bad_area_nosemaphore+0x259/0x2f0 [ 97.188958][ T8184] exc_page_fault+0x91/0x220 [ 97.193706][ T8184] ? asm_exc_page_fault+0x8/0x30 [ 97.198652][ T8184] asm_exc_page_fault+0x1e/0x30 [ 97.203523][ T8184] RIP: 0033:0x7fd63c595043 [ 97.207936][ T8184] Code: 89 d8 8d 34 90 8b 45 04 ba 03 00 00 00 c1 e0 04 03 45 64 39 c6 48 0f 42 f0 45 31 c9 e8 c6 28 06 00 8b 75 00 41 89 d8 4c 89 ef <49> 89 06 41 b9 00 00 00 10 b9 11 80 00 00 ba 03 00 00 00 c1 e6 06 [ 97.227553][ T8184] RSP: 002b:00007fd63a36f110 EFLAGS: 00010207 [ 97.233622][ T8184] RAX: 0000000020002000 RBX: 0000000000000007 RCX: 00007fd63c5f7922 07:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 97.241595][ T8184] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020081000 [ 97.249612][ T8184] RBP: 0000000020000240 R08: 0000000000000007 R09: 0000000000000000 [ 97.257589][ T8184] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 97.265564][ T8184] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 97.278736][ T8194] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:22 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) (fail_nth: 43) [ 97.291354][ T8204] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 97.316761][ T8205] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f 07:42:22 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2503, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:22 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xe5010000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:22 executing program 4: unshare(0xc020480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x80602) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x38}, r2}, 0x14) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x10) [ 97.363142][ T8205] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 97.382976][ T8218] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 97.415115][ T8213] ref_ctr increment failed for inode: 0x3789 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e [ 97.446594][ T8223] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 97.452259][ T8213] FAULT_INJECTION: forcing a failure. 07:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:22 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 97.452259][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.471440][ T8213] CPU: 0 PID: 8213 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 97.471464][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:42:22 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xeffdffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 97.471475][ T8213] Call Trace: [ 97.471483][ T8213] dump_stack_lvl+0xd6/0x122 [ 97.471506][ T8213] dump_stack+0x11/0x1b [ 97.471523][ T8213] should_fail+0x23c/0x250 07:42:22 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:22 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 97.471541][ T8213] should_fail_usercopy+0x16/0x20 [ 97.471589][ T8213] copy_fpstate_to_sigframe+0x383/0x580 [ 97.471621][ T8213] __setup_rt_frame+0x11a/0x3e0 [ 97.471643][ T8213] arch_do_signal_or_restart+0x1fa/0x280 07:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x330, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:22 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:22 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfcfdffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 97.471666][ T8213] exit_to_user_mode_prepare+0x109/0x190 [ 97.471716][ T8213] ? asm_exc_page_fault+0x8/0x30 [ 97.471740][ T8213] irqentry_exit_to_user_mode+0x5/0x10 07:42:22 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 97.471833][ T8213] irqentry_exit+0xe/0x30 [ 97.471849][ T8213] asm_exc_page_fault+0x1e/0x30 [ 97.471874][ T8213] RIP: 0033:0x7fd63c595043 07:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 97.471888][ T8213] Code: 89 d8 8d 34 90 8b 45 04 ba 03 00 00 00 c1 e0 04 03 45 64 39 c6 48 0f 42 f0 45 31 c9 e8 c6 28 06 00 8b 75 00 41 89 d8 4c 89 ef <49> 89 06 41 b9 00 00 00 10 b9 11 80 00 00 ba 03 00 00 00 c1 e6 06 [ 97.471905][ T8213] RSP: 002b:00007fd63a36f110 EFLAGS: 00010207 [ 97.471922][ T8213] RAX: 0000000020002000 RBX: 0000000000000007 RCX: 00007fd63c5f7922 [ 97.471935][ T8213] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020081000 [ 97.472018][ T8213] RBP: 0000000020000240 R08: 0000000000000007 R09: 0000000000000000 [ 97.472028][ T8213] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 97.472038][ T8213] R13: 0000000020081000 R14: 0000000000000000 R15: 0000000020002000 [ 97.473375][ T8223] ref_ctr increment failed for inode: 0x3797 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 97.539385][ T8233] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 97.543191][ T8233] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 97.573091][ T8238] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 97.573785][ T8238] ref_ctr increment failed for inode: 0x378e offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 97.641611][ T8250] ref_ctr increment failed for inode: 0x378a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 97.642237][ T8250] ref_ctr increment failed for inode: 0x378a offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 07:42:23 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x3fffffffc000000}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00']) fallocate(r0, 0x12, 0x10000, 0xffffffffffff0000) 07:42:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:23 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:23 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfefdffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 97.658391][ T8254] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e [ 97.706044][ T8256] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 97.706866][ T8256] ref_ctr increment failed for inode: 0x37ab offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 97.741542][ T8262] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 97.742337][ T8262] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="07d1838e3a11638b207673"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='\x00') wait4(0x0, 0x0, 0x80000002, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="bb", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x32}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {}, {r3}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {}, {r3}, {}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {0x0, r4}, {r2}, {}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, 0x0}, {}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {r3}, {}, {}, {}, {0x0, r4}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000071740)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "b13b2f0b307c25"}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x8, 0x6, 0x81, 0x0, 0x7fffffff, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x80, 0x101, 0xfffffc01, 0x6, 0x1, 0x0, 0x4, 0x0, 0x80000000, 0x0, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x8) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r6 = gettid() rt_sigqueueinfo(r6, 0xa, &(0x7f00000002c0)) [ 97.760296][ T8266] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 97.760878][ T8266] ref_ctr increment failed for inode: 0x3798 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 97.811630][ T8275] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 97.812493][ T8275] ref_ctr increment failed for inode: 0x378d offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 97.860409][ T8279] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 98.091208][ T8290] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 98.103263][ T8289] loop4: detected capacity change from 0 to 233472 [ 98.112223][ T8292] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:23 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000c00)="200000003600000019000010600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf46500000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000cc0)) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x0, 0x1f, 0x8, 0x0, 0x3ff8000000000000, 0x20, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4c32, 0x23569c76, 0x3ff, 0x3, 0x20, 0x6, 0x5, 0x0, 0xa, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) [ 98.131469][ T8289] loop4: detected capacity change from 0 to 233472 [ 98.147911][ T8279] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 98.164013][ T8294] ref_ctr increment failed for inode: 0x37bb offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:23 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffdffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 98.193083][ T8312] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 98.229986][ T8294] ref_ctr increment failed for inode: 0x37bb offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:23 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x160c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) fallocate(r2, 0x8, 0x8, 0x40) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0x24000, 0x1000006, 0x800000000009031, 0xffffffffffffffff, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = syz_io_uring_complete(0x0) tkill(r3, 0x34) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x6, 0xb3, 0x8, 0x0, 0x100000000, 0x480, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x1f, 0x8}, 0x200, 0x9, 0x57a, 0x7, 0x6f, 0x4, 0xb675, 0x0, 0x0, 0x0, 0x20}, r3, 0xe, r4, 0x4) [ 98.248903][ T8320] ref_ctr increment failed for inode: 0x37bb offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:23 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:23 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0xeea, 0x2, 0x800, {0xe3, 0x6}, 0x9, 0x7}) fcntl$notify(r0, 0x402, 0x8000000b) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x1) preadv(r2, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/123, 0x7b}], 0x1, 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/180, 0xb4) [ 98.300692][ T8328] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 98.331274][ T8328] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:23 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffffdef, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 98.345610][ T8331] ref_ctr increment failed for inode: 0x37b3 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c [ 98.358205][ T8336] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 98.371742][ T8331] ref_ctr increment failed for inode: 0x37b3 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:23 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6409, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:23 executing program 0: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040801, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4040c0, 0x2) sendfile(r0, r1, 0x0, 0x80000007) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={@empty, 0x9}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x9baf9000) [ 98.395305][ T8340] ref_ctr increment failed for inode: 0x37b3 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c [ 98.412594][ T8334] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:23 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 98.445607][ T8334] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 98.458129][ T8353] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:23 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:23 executing program 0: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f8626c63025d3d3078303030303030303030303030303830302c00"]) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x7fff, 0x2, 0x2}) [ 98.485326][ T8350] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e 07:42:23 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffffdfc, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 98.529974][ T8350] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e [ 98.558085][ T8362] ref_ctr increment failed for inode: 0x37b3 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:23 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:23 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xc0000016}) [ 98.571226][ T8363] ref_ctr increment failed for inode: 0x37b1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c [ 98.583186][ T8362] ref_ctr increment failed for inode: 0x37b3 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 98.596518][ T8378] ref_ctr increment failed for inode: 0x37b3 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 98.614630][ T8366] ref_ctr increment failed for inode: 0x37b8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:23 executing program 0: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5115525f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x2c}}, 0x4000800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x13f5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xe4, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc0000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf1c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x80) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1, 0x6e, 0x1f, 0x1f, 0x0, 0xd29, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xad3f, 0x4, @perf_config_ext={0x0, 0x80}, 0x82000, 0x1, 0xffff, 0x9, 0x9, 0x1, 0x20fd, 0x0, 0x7, 0x0, 0x78}, 0x0, 0x0, r0, 0x9) pread64(r1, &(0x7f0000000480)=""/244, 0xf4, 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0xc1) r2 = syz_open_dev$sg(&(0x7f0000000680), 0x7, 0xe181) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, 0x0, 0x521, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}]}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x90, 0x3, "cbe8050cda2f09ed058dd8a4eb6126f5a99de4354571fd80316143d194b3e8bd836bd33c9dd804b811553e6820e6d884141db8594992b1f23be29529a9be5b0154a42dc100c2b0a3d536ab3902e0fa4f991f340d9e6cd532e220e31a235900fe2f2b860ca3377bb5f8c5d4237ad5c360c597e9a0de73c7cef1c160811c956ce3ecb9792d23ac818f172675be"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x90, 0x3, "e93385da19394553b2c24658df68deba0168b58b296dd90b46e135ad62ea313a5afbe44f38ed2839acd7a431e8be16bb245f71897178ef881b6841d7a3c29af5fd8e25329d7c68f2e8abce009f0663eb462b74992f38ec5a006fa7c8358c332a4d4242a06582d5974e7ef733778c040ea7d428d3a93aba315cd926e4db04cece2d50d4aafab299c84a646ae2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3c0}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x180b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5ff}]}]}]}, 0x20c}}, 0x40002) r3 = socket(0x29, 0x80000, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x104, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001480)={0x53, 0xfffffffffffffffe, 0x99, 0x82, @scatter={0x9, 0x0, &(0x7f0000001240)=[{&(0x7f0000000cc0)=""/200, 0xc8}, {&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/169, 0xa9}, {&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/147, 0x93}, {&(0x7f0000001040)=""/32, 0x20}, {&(0x7f0000001080)=""/81, 0x51}, {&(0x7f0000001100)=""/117, 0x75}, {&(0x7f0000001180)=""/152, 0x98}]}, &(0x7f0000001300)="6b6f65421e58da39260a087b3ee3b8e3b1e6ffcda238773dcdb0b8a8d82082f5196cfe74b98b0558dff58177cfab2e6cb57faf9cfecbc7278a57d42db5738f35369eddfbb81a43edd858f3b766e8b08d01ab6465b45d15c5aaf9bf70b0d2a9864ff6bead571d55b8a26e55996da381fc30a954b871c256f9ddcae5b36d4b087e88cf73e02e7415ae512368d208fcaf541092cc7fec427a10a5", &(0x7f00000013c0)=""/99, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000001440)}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c5) r5 = signalfd4(r1, &(0x7f0000001680)={[0x1]}, 0x8, 0x80000) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x40, 0xb9, 0xff, 0x4, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0xf2, 0x13f}, 0x42002, 0x2, 0x4, 0x8, 0x40, 0x9, 0x1ff, 0x0, 0x4, 0x0, 0xa000000000000000}, 0xffffffffffffffff, 0xe, r5, 0x2) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002a40)={0x0, 0xffffffffffffffff, 0x3e, 0x1, @scatter={0x3, 0x0, &(0x7f00000028c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/200, 0xc8}, {&(0x7f00000027c0)=""/194, 0xc2}]}, &(0x7f0000002900)="18c8416a72288887ab04bd41cdca117210ab966dacd9c8ed6eda14346454d1b6473000d411af4b0824a26a29bdf07620dcfa7abba27058160ba892d38a87", &(0x7f0000002940)=""/192, 0x4a8b, 0x10000, 0x0, &(0x7f0000002a00)}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r3) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x58, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ab77ae20f06fdbff4e7b3c8027c615b8"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="cb84"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "1aa4234a6878cac4c4765ae8e8a8d4fc"}]}, 0x58}, 0x1, 0x0, 0x0, 0x2050}, 0x8000) syz_open_dev$sg(&(0x7f0000002c40), 0x8, 0x202100) 07:42:23 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffffdfe, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:23 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT], 0xe8}, 0x1, 0x0, 0x0, 0x4004c14}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) getpgrp(0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x34) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00000efffffff0000200"/32]) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/167, 0xa7}], 0x4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000500)="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") r4 = gettid() rt_sigqueueinfo(r4, 0xa, &(0x7f00000002c0)) 07:42:23 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 98.629000][ T8366] ref_ctr increment failed for inode: 0x37b8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 98.650700][ T8386] ref_ctr increment failed for inode: 0x37b8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:23 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[], 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1012, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000080)) dup2(r2, r3) [ 98.695107][ T8382] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 98.732340][ T8382] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f 07:42:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0x1, &(0x7f0000001480)=[{0x0}], 0x0, &(0x7f0000001500)={[{@auto_da_alloc}, {@errors_remount}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) chdir(&(0x7f00000000c0)='./file0\x00') shutdown(r0, 0x0) chdir(0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/78, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'netpci0\x00'}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) 07:42:23 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 98.756357][ T8406] ref_ctr increment failed for inode: 0x3795 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 98.770934][ T8399] ref_ctr increment failed for inode: 0x37b5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000093e67e82 [ 98.791388][ T8406] ref_ctr increment failed for inode: 0x3795 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:23 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffffdff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8b, 0x4000000090}, 0x0) r0 = syz_io_uring_setup(0x6f85, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x1, 0xffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r7 = syz_io_uring_setup(0xccd, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r4, 0x0, &(0x7f0000000340)="48710d8e88a24ae8a1a68b9c32ca1fd479ab49e33c25c6b53fa06b5f7e1db4d3f115fda014d9dcb3b3b8541b30c43c5b257fe3e5a58a1305440f165b7360def1da7ef0aa8c07f3e2b67f39606e0f0257524c607af65cd53a3b10bc747fe23a311a0f59dc3cc01f39e76ec330661d9b87ff9b9444a10ea954abe506c67722931032394bdd7062ec", 0x87, 0x800, 0x0, {0x0, r10}}, 0x2) io_uring_enter(r0, 0x59f6, 0xb697, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) [ 98.808413][ T8399] ref_ctr increment failed for inode: 0x37b5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000093e67e82 [ 98.825310][ T8424] ref_ctr increment failed for inode: 0x37b5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000093e67e82 07:42:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 98.869911][ T8431] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 98.870435][ T8428] ref_ctr increment failed for inode: 0x3792 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r0, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r0, 0x3, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x40, 0x3, 0x1, @remote, @local, 0x40, 0x47, 0x40, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2f4, 0x0, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2f4}}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0000f07fa1c0e84faf924f"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0xa, &(0x7f00000002c0)) [ 98.932257][ T8431] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 98.947682][ T8443] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c 07:42:24 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:24 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffffe00, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:24 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 98.990490][ T8441] ref_ctr increment failed for inode: 0x37b5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 07:42:24 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x3f, 0xff, 0x9, 0x1, 0x0, 0x3, 0x8, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x10000, 0x6}, 0x0, 0x3f4, 0x7, 0x5, 0x98f, 0xd0, 0x4, 0x0, 0x101, 0x0, 0x1}, 0x0, 0xa, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xc4000, 0x0) fchmodat(r4, &(0x7f0000000300)='./file1\x00', 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x3) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000440)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000002600)=""/203, 0xcb}], 0x6, 0x400, 0x400) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 99.039912][ T8441] ref_ctr increment failed for inode: 0x37b5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 99.056206][ T8458] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 99.075043][ T8458] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f 07:42:24 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x10000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 99.092472][ T8460] ref_ctr increment failed for inode: 0x37bc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e [ 99.105027][ T8470] ref_ctr increment failed for inode: 0x37b6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 99.123725][ T8460] ref_ctr increment failed for inode: 0x37bc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003d614d1e 07:42:24 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) [ 99.139041][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 99.139065][ C0] sd 0:0:1:0: tag#195 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 99.155466][ C0] sd 0:0:1:0: tag#195 CDB: opcode=0xe5 (vendor) [ 99.161728][ C0] sd 0:0:1:0: tag#195 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 99.170675][ C0] sd 0:0:1:0: tag#195 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 99.179637][ C0] sd 0:0:1:0: tag#195 CDB[20]: ba 07:42:24 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 99.191035][ T8480] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da [ 99.207568][ T8480] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da [ 99.222821][ T8486] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da 07:42:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 99.250977][ T8487] ref_ctr increment failed for inode: 0x37b4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 99.267850][ T8490] ref_ctr increment failed for inode: 0x37c0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 99.280571][ T8487] ref_ctr increment failed for inode: 0x37b4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 99.293428][ T8493] ref_ctr increment failed for inode: 0x37b4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 99.306397][ T8490] ref_ctr increment failed for inode: 0x37c0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 99.339047][ T8498] ref_ctr increment failed for inode: 0x37c0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 99.363198][ T8497] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da [ 99.389795][ T8497] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da 07:42:24 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:24 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x7ffffffff000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:24 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:24 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7f00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 99.744609][ T8512] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da [ 99.760657][ T8512] ref_ctr increment failed for inode: 0x37b0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007f7ee7da [ 99.767208][ T8517] ref_ctr increment failed for inode: 0x37c0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 07:42:24 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf0ff7f00000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 99.786525][ T8516] ref_ctr increment failed for inode: 0x37b5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 99.802013][ T8518] ref_ctr increment failed for inode: 0x37c1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 99.814241][ T8517] ref_ctr increment failed for inode: 0x37c0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 99.833042][ T8522] ref_ctr increment failed for inode: 0x37c0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 99.860472][ T8518] ref_ctr increment failed for inode: 0x37c1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 99.874909][ T8528] ref_ctr increment failed for inode: 0x37c1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 99.948373][ T8471] ================================================================== [ 99.956485][ T8471] BUG: KCSAN: data-race in ext4_setattr / filemap_read [ 99.961765][ C0] sd 0:0:1:0: tag#203 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 99.963581][ T8471] [ 99.963588][ T8471] write to 0xffff8881063bdc08 of 8 bytes by task 8537 on cpu 0: [ 99.963602][ T8471] ext4_setattr+0xd7f/0xef0 [ 99.973339][ C0] sd 0:0:1:0: tag#203 CDB: opcode=0xe5 (vendor) [ 99.975606][ T8471] notify_change+0x8a3/0xac0 [ 99.983232][ C0] sd 0:0:1:0: tag#203 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 99.987683][ T8471] do_truncate+0xf7/0x140 [ 99.993910][ C0] sd 0:0:1:0: tag#203 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 99.998456][ T8471] path_openat+0x1925/0x1ec0 [ 100.007377][ C0] sd 0:0:1:0: tag#203 CDB[20]: ba [ 100.011662][ T8471] do_filp_open+0x105/0x220 [ 100.034708][ T8471] do_sys_openat2+0xb5/0x2b0 [ 100.039281][ T8471] __x64_sys_creat+0x62/0x80 [ 100.043846][ T8471] do_syscall_64+0x44/0xa0 [ 100.048301][ T8471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 100.054191][ T8471] [ 100.056493][ T8471] read to 0xffff8881063bdc08 of 8 bytes by task 8471 on cpu 1: [ 100.064011][ T8471] filemap_read+0xd55/0x1220 [ 100.068587][ T8471] generic_file_read_iter+0x75/0x2c0 [ 100.073919][ T8471] ext4_file_read_iter+0x1db/0x290 [ 100.079013][ T8471] generic_file_splice_read+0x24f/0x330 [ 100.084555][ T8471] splice_direct_to_actor+0x2aa/0x650 [ 100.090004][ T8471] do_splice_direct+0x106/0x190 [ 100.094847][ T8471] do_sendfile+0x63e/0xbb0 [ 100.099255][ T8471] __x64_sys_sendfile64+0x102/0x140 [ 100.104433][ T8471] do_syscall_64+0x44/0xa0 [ 100.108835][ T8471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 100.114722][ T8471] [ 100.117036][ T8471] value changed: 0x00000000009ae601 -> 0x0000000000000000 [ 100.124116][ T8471] [ 100.126414][ T8471] Reported by Kernel Concurrency Sanitizer on: [ 100.132608][ T8471] CPU: 1 PID: 8471 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 07:42:25 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x7f00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:25 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3ff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x10000, 0x34, 0x1d}, 0x18) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000680)={0x0, 0xfffffffffffffffb, 0xa5, 0x6, @buffer={0x0, 0xf1, &(0x7f0000000400)=""/241}, &(0x7f0000000500)="496810f715a0ccda586c65aff6cdcdfbdd86dcf7f174273c6fc09de3f3815380784118c295df700e18871ab10699320935cfbf40b228ec924515d31e136e62c5e75928827704294b2d7616dda4cd45f030e210c34aa58f547461a3d033d156b3182dec09a7ed9e1e10466f131b3cf4cbd687d9ada23db579e90431123604fa53488a1f9b2e7c460dfa97ac7e950804df4ab7d9de1d962fdd74a296b9e3a17c1ed6384e1375", &(0x7f00000005c0)=""/129, 0x9a6, 0x20, 0x2, &(0x7f0000000340)}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(r2, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000900)=""/73, 0x49}, {&(0x7f0000000980)=""/100, 0x64}, {&(0x7f0000000a00)=""/172, 0xac}], 0x5, 0x3, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sync_file_range(r4, 0x5, 0x9, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYBLOB="000085286fe8ffff7f006f0912604b4633e15ea60c70d32e3850be5800857551b5d8fbb06d5eb877c85713f50ecfec8caa22fe595a914d74f448b5958957b03a349462b2bfb46a22aa4eecaf7efb4649093b6754980b5874b2cd4522cf1abcf5173717ff0b5d08f48d12e609d2be3641b10e14be2151dd0242a51edfb9c16f1831fb0ccc8adf12145422da3a3b9fcf9f1b3223449f51ba195d9759763842324a4a271ab64b4ba0311d1902fe324174d397fc690973711899e74d3d08f3611b17ab22bd187163989b7992b8f858a262599977b85d2480df4aa454feb985"]) gettid() ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x1, 0x80, 0x1, 0x1, 0xfc, 0x5c, 0x0, 0x4, 0x450, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf9a7, 0x2, @perf_config_ext={0x101, 0xa38}, 0x4, 0x4545, 0xfffffff9, 0x2, 0x0, 0x6, 0x8, 0x0, 0x401, 0x0, 0x1}) 07:42:25 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x9fff, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:25 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:25 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf0ffffff7f0000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 100.141279][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.151324][ T8471] ================================================================== [ 100.202824][ T8546] ref_ctr increment failed for inode: 0x37bc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 100.205655][ C0] sd 0:0:1:0: tag#211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.224256][ C0] sd 0:0:1:0: tag#211 CDB: opcode=0xe5 (vendor) [ 100.230503][ C0] sd 0:0:1:0: tag#211 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 100.234951][ T8555] ref_ctr increment failed for inode: 0x37cc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 100.239466][ C0] sd 0:0:1:0: tag#211 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.260023][ C0] sd 0:0:1:0: tag#211 CDB[20]: ba [ 100.261095][ T8552] ref_ctr increment failed for inode: 0x37c5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000008f5147d5 [ 100.277803][ T8546] ref_ctr increment failed for inode: 0x37bc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 100.291429][ C0] sd 0:0:1:0: tag#222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:42:25 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfeffffffffffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 100.291833][ T8559] ref_ctr increment failed for inode: 0x37bc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b90af08f [ 100.301221][ C0] sd 0:0:1:0: tag#222 CDB: opcode=0xe5 (vendor) [ 100.319103][ C0] sd 0:0:1:0: tag#222 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 100.321814][ T8554] ref_ctr increment failed for inode: 0x37cd offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 100.328076][ C0] sd 0:0:1:0: tag#222 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.348631][ C0] sd 0:0:1:0: tag#222 CDB[20]: ba 07:42:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) 07:42:25 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:25 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="ac316f14ea01667879e150"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x10000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102384, 0xfffffffffffffeb0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3e) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0xf, &(0x7f00000002c0)) [ 100.379797][ T8552] ref_ctr increment failed for inode: 0x37c5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000008f5147d5 [ 100.394241][ T8568] ref_ctr increment failed for inode: 0x37c5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000008f5147d5 [ 100.410254][ T8554] ref_ctr increment failed for inode: 0x37cd offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 07:42:25 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "7e6ef4474e165c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101000) r4 = dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x3f, 0xf0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x6, @perf_config_ext={0x9, 0x9}, 0x0, 0xcf, 0x7fffffff, 0x7, 0x5, 0xb2d, 0x6, 0x0, 0x8, 0x0, 0xfffffffffffffb28}, 0x0, 0x2, r4, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3f, 0x7, 0x2, 0x9d, 0x0, 0xd5, 0x800, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x20, 0x1f, 0x4, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r5, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000640)={0x2, 0x8, @start={0x0, 0x1, "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", "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"}, [0x9, 0x0, 0x80, 0x381, 0x7, 0x3, 0x5, 0x8, 0x492a, 0x6, 0x200, 0x8, 0x6, 0xff, 0xfff, 0x3, 0x8, 0x200, 0x3, 0xbda, 0x6, 0xd9, 0x6d, 0x10001, 0x3aa800000, 0x1, 0x9, 0x10000, 0x6, 0x8, 0x8, 0x1, 0x80, 0x7f, 0x8001, 0x0, 0x2, 0x255, 0x5, 0x10001, 0xb93, 0x3, 0x9, 0x4, 0x9, 0x0, 0x4, 0x5, 0x100000001, 0x7, 0xffffffff80000000, 0x3, 0x48b8637e, 0x80000000, 0x7, 0x4312, 0x9, 0x401, 0x200, 0x16c6e980, 0x3, 0x100000000, 0xfffffffffffffff9, 0x1f]}) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 07:42:25 executing program 0: io_uring_enter(0xffffffffffffffff, 0x2e1b, 0xab99, 0x0, &(0x7f0000000140)={[0x200]}, 0x8) r0 = socket$inet(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001740)=[{&(0x7f00000000c0)="8c074d3384b9723bfc3b29e3e2aebf94b596c29af0479eefc025c240852c3d7ff7bd334a765e5d2fa2cf1bdcf12eb16e", 0x30}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_tos_u8={{0x18}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x6, 0x4) 07:42:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) [ 100.427196][ T8578] ref_ctr increment failed for inode: 0x37cd offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 100.464197][ T8576] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:25 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) getpeername$unix(r4, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x482081, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r5, 0x1) dup2(r3, r6) [ 100.486393][ T8576] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 100.506941][ T8595] ref_ctr increment failed for inode: 0x3796 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:25 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:25 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xca6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 100.538038][ T8598] ref_ctr increment failed for inode: 0x37ca offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 100.563085][ T8594] ref_ctr increment failed for inode: 0x37be offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c 07:42:25 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xda00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 100.660950][ T8594] ref_ctr increment failed for inode: 0x37be offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004676af7c [ 100.805444][ T8631] ref_ctr increment failed for inode: 0x37ca offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:26 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xde00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:26 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 100.863260][ T8626] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c [ 100.879998][ T8620] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000006df5561c 07:42:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 100.950315][ T8643] ref_ctr increment failed for inode: 0x37d4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 100.967289][ T8643] ref_ctr increment failed for inode: 0x37d4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 100.976175][ T8644] ref_ctr increment failed for inode: 0x37d7 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da 07:42:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xda00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 100.984307][ T8645] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 101.005895][ T8645] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 101.018203][ T8656] ref_ctr increment failed for inode: 0x37ba offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 101.035659][ T8652] ref_ctr increment failed for inode: 0x37da offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:26 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xefff, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 101.059081][ T8661] ref_ctr increment failed for inode: 0x37cf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 101.071171][ T8652] ref_ctr increment failed for inode: 0x37da offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 101.093062][ T8665] ref_ctr increment failed for inode: 0x37da offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 101.109097][ T8661] ref_ctr increment failed for inode: 0x37cf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 101.132090][ T8662] ref_ctr increment failed for inode: 0x37d7 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 101.153345][ T8669] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da [ 101.171334][ T8669] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da [ 101.188269][ T8675] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da 07:42:26 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xda00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:26 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xda00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:26 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 101.615015][ T8691] ref_ctr increment failed for inode: 0x37d4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 101.628315][ T8688] ref_ctr increment failed for inode: 0x37d5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 [ 101.629632][ T8689] ref_ctr increment failed for inode: 0x37d6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000002f53eff6 [ 101.642406][ T8692] ref_ctr increment failed for inode: 0x37d8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 07:42:26 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 101.652286][ T8691] ref_ctr increment failed for inode: 0x37d4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 101.675814][ T8696] ref_ctr increment failed for inode: 0x37d4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 101.685723][ T8695] ref_ctr increment failed for inode: 0x37db offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 101.700428][ T8696] ref_ctr increment failed for inode: 0x37d4 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 07:42:26 executing program 4: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in=@remote}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a04000001000000000301"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 07:42:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x8c982) r1 = dup2(0xffffffffffffffff, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xfff, 0x8, 0xd, 0x10, "b67e9cd314356107a8446a5fc45eed71e2dd48d2609e462d75f3eaa24cac17110ff23b077cbe3b49a9cc37f9438adb8bc08f8fe467f421ee75f2094127c15644", "08a5b4d1d29c665c3e6fdd9cfedefdb7fa10d3e44bdf1f1fc70ce4c827534f17", [0xfffffffffffff540, 0xff]}) fallocate(r0, 0x11, 0x600, 0x100007e00) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:42:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) [ 101.746586][ T8688] ref_ctr increment failed for inode: 0x37d5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000091cac4c4 07:42:26 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xff0f, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:26 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 101.797829][ T8711] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 101.814610][ T8718] netlink: 35885 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.826281][ T8721] netlink: 35885 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.836626][ T8711] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c 07:42:26 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[], 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1012, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) dup2(r2, r3) 07:42:26 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x8, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x80000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x40, 0x1b, 0x5, 0x0, 0x93, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000000, 0x7f}, 0x8, 0x6, 0x8, 0x2, 0x40, 0x8, 0x5, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x10, r1, 0x2) [ 101.851097][ T8729] ref_ctr increment failed for inode: 0x37bf offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 101.859005][ T8717] ref_ctr increment failed for inode: 0x37d2 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 07:42:27 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 101.895921][ T8717] ref_ctr increment failed for inode: 0x37d2 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 101.913969][ T8725] ref_ctr increment failed for inode: 0x37d9 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 07:42:27 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:27 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x20000000000003fe, 0xfe) signalfd4(r0, &(0x7f0000000080)={[0x200000]}, 0x8, 0x80000) read(r0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x7) 07:42:27 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x8c982) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000980)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0f\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^iW\xcaxo-\x89I\xd3\x04\x01\xe2\xe1\x8a\x03\x989\xf7\x00\xda\x96l\xd1\x06\xb5o\x00\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3k\x16\x16T\x8c\x18Q\xb7y\xae2~\xfcVs\xa9\xb4\xb0\x7f\x8a:\xbb\x97\x83b\x8bR]\x11\x88\xb0\x9f;i\xd4\x84\xa7\x7f-\xb3\xaa\xcbt\x9c\xbeo<\x85\x8c\xe6\xf4g\x98Rs\x82\xc5\xdbX\x13\xfeA\xc9\xe7\x10\aHwW\"\x98\x85\x9fJD\xc6F\xee\xead@\xc1\xce\xb7\x13\xc08\x02\xca|\x8b-\x06!T\xd2\x9f\xf82\x86J\x9a\xdb\x98=\xd4\\\xb7\xad\x87cOx$2\xcf\x00\x00\x00\x00\x00\x00\xfd\f\xc8\x97\x96\x9fZ\x8a\xdd\xc3\xf96\x99\xc1\xe9\xc2\x13\xa0', 0x4) write$binfmt_elf64(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x20, 0x0, 0x6, 0x2, 0x6, 0x0, 0xffffffffffffffff, 0x40, 0x26c, 0x8, 0x9, 0x38, 0x0, 0x5, 0x5, 0x2}, [{0x4, 0x7, 0x9, 0x0, 0x5, 0x10000, 0x7ff, 0x4}], "fb37c4e1ed9101cd3fdf43566ac5e49af8fc6bdbf8e09336c51eb12df8b230d0b1db64f4e91327eb8dd9bffa07ebe0bab4239c559f2368490040ae50975320cd1e9201240fda0e14"}, 0xc0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xcc, 0x0, 0x226, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x48}, {0x4}, {0x6c}, {0x65, 0x1}, {0x36, 0x1}, {0x5}, {0x4}, {0x1}, {0x48, 0x1}, {0x35}, {0x3}, {0x5a}, {0x6c, 0x1}, {0x1b, 0x1}, {0x1, 0x1}, {0x6c, 0x1}, {0x1b, 0x1}, {0x3}, {0x16}, {0x2}, {0x6}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x81, 0xac, "cc21ee74bfc22eae40977a127962dfc88fda89f190c741f7d88b67a05a689a3d27757c4022ff598e432d07bb7c40b54013878f4f2885e018b1a882b64473feb71d25b47978f1583e1615c6b71b66b10a395f7cf9b0c61688c9c6f8f97e0b7735d51faf65d92a682d4c49225c3f26b59e2c297dcd21870550576b633aa7"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2e3}]}, 0xcc}}, 0x4040) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000004c0)) mmap(&(0x7f00001de000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0x0) r4 = dup3(r2, r2, 0x0) io_submit(0x0, 0x2, &(0x7f0000000b40)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x20, 0xffffffffffffffff, &(0x7f0000000200)="1c0aadff20bc461c395271c4406fa0e8c25e4bc8b364b926db53ffe8c934a9781e789af5950ba11b41a6096e5ae3a8976646438a7d0b01e55aab85cb6418fe8d45faeec17f9d03b1305ed06cbe45004baabda7a455d6f4304aa2ecf2ed8f518c1423b3213263afa2df76d0060b843634f0fe945803b50d080b48c35980919f4619b736bbeb2045ccaa7541de2999658c9e9a5dbe0265a5301f07f6d2fa4dd78df393fa022daac4118ff0f8c3504f611b8126f82994d591e80ba2f46fe15e366ea483668b66e50a3c89", 0xc9, 0x8, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x8001, 0xffffffffffffffff, &(0x7f0000000340)="c75f7b04a9d4328647fb5ab6a1017f5a5d865ab265e39b00758a4556af7c3cf448e8c95a3d9a9780e2885bf4fd2ebdfe11446e2b4726cf5affa3aa0c0293159aee455fadef96ba952e8c582b9845ddade768b576b80d56d9c8c1d7fec3006a570e9a7dc9c4a22ee6e31f", 0x6a, 0xfffffffffffffffd, 0x0, 0x0, r4}]) pwritev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1, 0x4081002, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000780)="fc1a07788e92cf7d094f05f42190c081224a180fdf3d72d0ca1c50c0369ae566939bbc5a840832a0fbac23bda197d39b6bb951ad53e33781dc31752947ea9d67949a24e122fdcb49a7cbd6e8642b6f68b518036ded9e514d77d21a103572f268abce910955181bc161b7751ff0ef145dc3196859e9baab89ff6f179638834d362f213ab33a69140a86893599d04302da02c40f3a74017341e743348e14711807974f337d7db00c36774b82411768bd906e3a5cefd240914d4a2d131182c4a0b6851c6d6545f56ad8ab0e42408bf9cfce5ba8e4be391e4493f79d6481", 0xdc}, {&(0x7f0000000880)="0dc6bace4873f6af7b2dbe094dea00d5e72b022ff4a1966d1ec21b8cee832d3d7d28f26ac2b656813da1889cf0512200b9d7327560d27ce81d715eca1c4c5667561b0015d03427a3ad9daf1af0092021a2ba1f0f81261006e227b836b0476e600da13f4a018427eac801db369e03d6f75c07aefe4e95a45ac2c0cbc931339116dbaa62", 0x83}], 0x2, 0x4) fallocate(r1, 0x11, 0x0, 0x100007e00) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd28, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048041}, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) 07:42:27 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xff9f, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 101.945673][ T8725] ref_ctr increment failed for inode: 0x37d9 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 101.960238][ T8746] ref_ctr increment failed for inode: 0x37d9 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 [ 101.974028][ T8746] ref_ctr increment failed for inode: 0x37d9 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000018c4a479 07:42:27 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x7fffffff, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_delete(r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x200, 0x73, 0x2, 0x9, 0xb, "cf9a3cb9a0c01e346acc9468e5f86fc34be9f1"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000e98a6f2b00"}) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)) ioctl$TCGETS(r3, 0x5408, &(0x7f0000000400)) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) pread64(r4, &(0x7f0000000300)=""/255, 0xff, 0x100) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 102.024476][ T8749] ref_ctr increment failed for inode: 0x37ce offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 102.042033][ T8749] ref_ctr increment failed for inode: 0x37ce offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 102.059257][ T8744] ref_ctr increment failed for inode: 0x37de offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 07:42:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@mcast1, 0x400, 0x0, 0xff, 0x1}, 0x20) set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) sendto$inet6(r1, &(0x7f0000000000)="d03d6bfa09728e13f86587f7986c3cbc7c64b84f7fa0ca40c151648a2b49f394a43984daeeffbbc6dd801e19c07eeed888f56918c360e2c73430b9be47b87cfbf47b53d9cadba0b8d131e9301594460aaa908ff303ee731c417bb2", 0x5b, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev, 0x400, 0x0, 0x2}, 0x20) 07:42:27 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:27 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) [ 102.071964][ T8772] serio: Serial port pts0 [ 102.085532][ T8744] ref_ctr increment failed for inode: 0x37de offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004dbef6b1 07:42:27 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x2}, {0x15, 0x0, 0x0, 0x59}, {0x6, 0x5, 0x0, 0x7ffffdbf}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x4010, r0, 0x50892000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) [ 102.115869][ T8765] ref_ctr increment failed for inode: 0x37d1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 102.150430][ T8765] ref_ctr increment failed for inode: 0x37d1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c 07:42:27 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xffef, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 102.182587][ T8788] ref_ctr increment failed for inode: 0x3652 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 102.195682][ T8788] ref_ctr increment failed for inode: 0x3652 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000b073625c [ 102.212680][ T8798] ref_ctr increment failed for inode: 0x37cc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x200084, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x202, &(0x7f0000000300)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x4000}]) 07:42:27 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:27 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 102.227256][ T8798] ref_ctr increment failed for inode: 0x37cc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 102.240365][ T8805] ref_ctr increment failed for inode: 0x37d1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 102.268489][ T8805] ref_ctr increment failed for inode: 0x37d1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 07:42:27 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xf00000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 102.287515][ T8814] loop4: detected capacity change from 0 to 16 [ 102.293888][ T8815] ref_ctr increment failed for inode: 0x37d1 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 102.322452][ T8816] ref_ctr increment failed for inode: 0x3653 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 102.330094][ T8814] attempt to access beyond end of device [ 102.330094][ T8814] loop4: rw=2049, want=216, limit=16 [ 102.346406][ T8816] ref_ctr increment failed for inode: 0x3653 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 102.361180][ T8831] ref_ctr increment failed for inode: 0x3653 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 102.361597][ T8824] ref_ctr increment failed for inode: 0x37dc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 07:42:27 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 102.390229][ T8830] attempt to access beyond end of device [ 102.390229][ T8830] loop4: rw=2049, want=256, limit=16 [ 102.401701][ T8824] ref_ctr increment failed for inode: 0x37dc offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 102.402144][ T8830] attempt to access beyond end of device [ 102.402144][ T8830] loop4: rw=2049, want=257, limit=16 [ 102.424280][ T8830] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 102.446058][ T8830] attempt to access beyond end of device [ 102.446058][ T8830] loop4: rw=2049, want=258, limit=16 [ 102.456864][ T8830] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 102.465689][ T8830] attempt to access beyond end of device [ 102.465689][ T8830] loop4: rw=2049, want=259, limit=16 [ 102.476520][ T8830] Buffer I/O error on dev loop4, logical block 258, lost async page write [ 102.487288][ T8830] attempt to access beyond end of device [ 102.487288][ T8830] loop4: rw=2049, want=260, limit=16 [ 102.498170][ T8830] Buffer I/O error on dev loop4, logical block 259, lost async page write [ 102.507390][ T8830] attempt to access beyond end of device [ 102.507390][ T8830] loop4: rw=2049, want=261, limit=16 [ 102.518277][ T8830] Buffer I/O error on dev loop4, logical block 260, lost async page write [ 102.530434][ T8841] ref_ctr increment failed for inode: 0x37b9 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da [ 102.543263][ T8841] ref_ctr increment failed for inode: 0x37b9 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da [ 102.611643][ T4706] attempt to access beyond end of device [ 102.611643][ T4706] loop4: rw=1, want=248, limit=16 07:42:30 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xfffff, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:30 executing program 4: r0 = syz_io_uring_setup(0x6926, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x321}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index}, 0x10001) syz_io_uring_setup(0x7e3e, &(0x7f0000000000)={0x0, 0xd11a, 0x8, 0x0, 0x1dc}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 07:42:30 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:30 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x1000000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:30 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000140)=@v2, 0x14, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendfile(r0, r1, 0x0, 0x8400fffffffa) 07:42:30 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80019e) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0xa8900000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x3090c3, 0x0) sendfile(r0, r3, 0x0, 0x401ffc026) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x4010, 0xffffffffffffffff, 0xeb3de000) 07:42:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x8, 0x0, 0x5, 0x0, 0x3, 0xa4300, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffff, 0x5}, 0x2000, 0x6, 0x10001, 0x9, 0x7fffffff, 0x0, 0xce3c, 0x0, 0x7ff, 0x0, 0x9}, r2, 0x8, r3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) signalfd(r1, &(0x7f0000000080)={[0x80000000]}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7ff, 0x7, &(0x7f00000024c0)=[{&(0x7f0000000180)="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", 0x1000, 0x6}, {&(0x7f0000001180)="0ec938069c7b4f0bc019ab8a891136f0ddc9dae6f711531f52599ae5a50a388c4554a5c07b560caba701d5a4467b503be2a27ca0e01b1b3baf9b5ebe838e448c239b0d0acc82fcfb0642061bc2f24bde5cd8ac556c92092feb559c410e6c0de6c41444637b1391e9b3b4e3f37ad11ab796491dff1c0493453b9c6565034687c723ab1375f878c3982e2725245a7545f8b8ba39843b09060bc0e4196b404afd91a8f484f1d3357e05db278b65304a15015edd4281ef582db3c8d02cea6a3bc09b39d7f46ebfeaf31667d0117becdd9794475813ee4f2737719ef8020aa7fbb61f23653eefab36fc917b1c501d904c9eca46fe1c0ec3e3e6947690f140ab97167ac1e1af48258dfb41fe42620b44d9ff30bb2eded09a00e2cd738aa977cc5214ade2f8334b377d23ec6a72a5812cb8439f1f642d06facf1b7c14131ed647ab1f3ac195c84a3166d3eb3fa2453120e1a3988924675d704b77d8397b02088b9e3f49efd167278519b39673fc046c35f73ac74bd436f42ad33ac2455fa01eb6f00dfc82bd92c65aa652e9ebbd5d5d248386710f37b984b0fdadf5faa1722e876113f5152a353293217d5cda24ee77aeae575de20c5d773063726d4668a0e68ee6a459defa2cb94e75e17a729df620dc24b53ad3fdcf9245530bfd58d8ad0b905da26650c6384adec0286a1c1f59d2e27352811add2f96368c332a58fb9d53f3ef15c21971f450be964c326f9eac5ed0f867d1765a5f5a9505440acfe8672a175e789a54a160021a26ea0eb9fd36f2a5d6b8e752effc09d51a1514428d067ecc6042e6b4998e0b4e15241400f2e2f08690305a0d3183b57d53d21e531488347cd40eb162c12a03d9c05637f2e4068b1ac28e1d13c9b85e38d93906f00ee1aa766d83801bf195b24a367ee1c41b04e79a062cf09efe5d72e175e10285497be1eb680faa0d1d428606adf9b33700bd3521d33f6fcdc17fa2c49c5069b27765fce4bc941c71276fd98ac24c25212a5c1bb8a89e3ba2fbfa49bde1ba1d17d702f96764ebd8e6e772c70b08ec39247dfd0780d5565b218a4b7353e5cce84e368b991ddf05fa769ecf03ccb5920f51e361cd9d08f1749f5cf3e3a9ec4915029c8816999194a1a96bc91f45891cacdbe1635308aef2c0f36890b02a51978806bc07ddee5bf5dc4c91dea73fd2ac913192aa97ca6a2a88e4d1a752ef35a99aa5f2328e889c0af23bbd7aa8427995d060b51fcc0e7c05c9e04091c503bb8dc9c29b5cd3de2f7071154714efdc5cc5a37895900d62ba0ca3e448f78f8165b293f5e3f14b92b941ed8667498fd8b46021a4cb7a9bc28f0199ce747bb3d17e85322e3a0949d3611d2e4135e905bb7833c465b6e39bf41e83e0f1a81b9aacc4859285c248120cc6a420f834c155ef10cba6da7535277dedd6fb109f6b22c5b9fde7da96ac856993cb6b8556bcde94d041a70c3cad3a48743ce807d316ff663e22d877f2caefb44261cf6fcc1541588a67bbb2f9bc653b4ecb679e78fe0f725086748588ecf3b1aa1543862bb26e7152bcb4a7608ee95140dd10b97c28153473fc048ccee59d86e02d44fad92265e93c67193851500386f06e804d9a170fae878364b8c7e0372b8617596b4143acebedc946c6f88e01aa9616c3601250ea0af27107317f135c6ea5a0c13c735446a4a57ab385d7d478dcc3144e1f091dc6e2abd3b4352cfff770d041635af977547328b6771735c5230c627e30f8f99321def57e23d246615a09789e9fd1865a66d02ba64aad89a9e31938b6431f56a7a3cad11251ef5556218f8d98e318532572d0bf6d35e798cbce59a803992d05f8817be539f31e723991f6dd91ad0f77aca0c2b2634402d40d8297527e03ca6915d32313a77e93b5f224c92726b14e11400a175f89aaf183906cc9070636ced29f06533d3a0aea33faabc8563b53af887ff4cac7824ee8ee9c83a57754cda1edbdcb5232516ab5c168ea941a9117ec17b95c98ca345e451b1be8e51e470ac1fbf16dfd8376d003ced67c5da07362553fba90bdb783a29adc16dec6992e8593e3c5447c4e401fa6b8655c15e7b64f0b99b15f40777c336a54f90e74759a21a4ecbe7b1001f278137408a4527cd393770de96f7da498f7b86254c315151b83e8c916dccb82be9b2d9fd53c9d5a253caa69e57f582bf2b71c6af118b0912666579306f7f055f29c6ff1e19f2f76d644ce160ab4faaeaa9faa020e2db079bd82552a1159654745e9074be61a483c7376388cbe05e3eeb981f3c9dc70119f223751ba3405c3154664419d08f90094728b8c8bb133d795e54747986d4220043f4226c588e532ed9ffa40b2dd50c60646c499b72e1556b9ee03637126a3385f82308fea262cad1f3eb9e7310fcc92fa62cd36746a62bfb9371e3092b728bc3ab02cde7d54ee04b9bb107180799dbef4dd285fb549ae80e3677970f6bbec4d836803ea23a960e7c4dc35fb4a8b24958bcf0662e798aa69d948b871a175b23b684034a6c8f7f462efacca77cbbfc269b6d757f63c0fba82463644720118b2ffb1a94546c730c82b2bdf28e41c6262e9f1f4805fcfe8791fa6cd09d13514ed01ada7cf3e6238e8a978d27ce50b5d17a64e198e09b091e1850b91f273b12eff52ff7f93cddf2f89d7f640a9d74aea6bfda9823b8a762d04c5314a2efc0d6b61a1032ea090850c2c19118803ba812a631fb1b24ebad3664b989632a2ce4e3475a3440a112eaf8a5229fd3782b85695f0ca5f10d141cff43d8b37c9303c779ed8d3993030a0d57abda0fac422512a3e807ef88d5fb55d721eb58608a3fe0d041f1413c17e161c809ce1d14e1c3bd9e05006df9b541aa480422a1b23225116327142dc9591025455962ddfaa4b87471ed352aecb95736059b5abe59146a68daa865b983b6a3bbc808b09c265dcfcd85e2d99b501b5def8277040a75e497cdd2ad6d88412996c1e4af87b111fe07dd9d9676ad5411fdc27d2b68c42708adf39cf722dc1d201571f8d5c6444a7bf9248edcb5a783c2afcb35f87b5caae5c13c9639afc2310d9ce906e1e59b7cdb91fdeac9bd87847fcb79b3a07dbc3b03306c8afdadddd340879cb2dcb93dd8039edb4687db216bb439dedb56e40e37f2b4b94c6a78fed96618b75d5b752d19b0bcd45709e6d4625bdbb5109515285420bbabe6c5e85be3ab4243e43a40c55814856dc5ecb265bd75b364532d655d0d5b28e617c19af880f2b3e41d02d6169d50a5360e3c56ca4a9cc056cb7145065fddadd3f6fdb0d02daaa13c84e5d6f66f502c7202a687a39c09a1f856b016f703cd6d3b8c4abb101b9ebd988580f351ddd59940802bf61a78a758105c8b3d2c3ca9082f38b15cfaa09e7e7d31b34a5390ce7569efc39280419c83e67da0fa29a891ac1aafaed7d04bd82f22c7c8bb395f29279752b4c8bf1a370a8b70a8ec527c19eef33cbae497f47855fef83e380ad40953e64e05529f76b3db80aadb2d725d0f3eb1cb4bb7c31aa8923cd768c65808c56753500c351122820d8b97a9ae89dff981839a612a19ce7b643c87d2362db89fc8de4228c10370cf4888a89db3b3ef84f978a52010f316c050bc0975bd48d538d0824514778c05951fa327f5c652b991181f239b75e9dd549a18029570f14874f051bbfeed39b61900885e704e4770af410cb3f3f7b3cb8d7b7a0214dd2be8d77afb308cb8a4c55d48f59ca832b583f2e70c679459bf7388cc9d69bf6937c0f52d8a0c7ddc39b407d474189c719367fb375002458d1646f5585bff3e3d2087686f21fd894a27eba9c7a199dbc3211df6f6fa34b03d09e8b108ff3af859fe5073f77c99a35838b9e23ad31a51026f03720cf0ed70d16fbf8c35c456711f77fe4633bd8e80f33b85ba63c83552b5713dda01fd9cffde762ebf7b047d8d452b6571f76c5d57f8ae9999e517dcf59e6130e90c53cbf0069443f86c0b5561db9bb78e604ff080418cb740af2c02fd83f53b89e22cfcce1350e22e5c7d0ead12e00366756f290a7fe835a919aabd17cdd5120410d727a44ad0e5085ce4b2af35a65bf61d16e96659a5397ee1ce977771ea7701cd92ccdb8539a78931560872bec0062938f548be5ea45c33ef880eaeb5b9057ec91487cd5df9e455345969ff82d0f3947d3a0699f9192ff8fdbf1c063540ede493eb7cb89955b6a9324d229d2d90f6b73777263adaa5b130c1558a781496a768a3303de6ae08d7286f7c9654a4933d88ebfcb47001230c4362b37550aac8099a50d36c56513f13a4dd2b80e08c149a556154b255bef8bd294aebbd59dfb1454465241731effd26ff88dd461500627a84df4a591e9f7d582f8916d682e4289ae6302b9bb8436c25597d8694d9458ccaa2ed423931ef35d2ffb9e416bd26f2e994ea1fd043243e5399e5918ce3458674dad2630fe8a7cba03d9105827653152b556ec2370a6960759a2afb3454b04713579402a734579aceb73c694bdec578512e485c80bea82bf8f65be22d8f900e2df5c0750375071412e4dd82c9b836f38034a1312dfe5db4a69b62ffd3e9221e2858efd478256d6eb30faedef55552a193edc39f0b7fea4e3e8dce2b14e3afe58bc4e2bfae0a105200bbac880907e81c9e64d8ee423186481854af61e1a271323068cc5e6ca68e3ce8db5677075401aa0b815fa614ef6f97a9b62885e4075820353cc10ed77f7a99ef61d2933e587403e47785cccb2a7e4f099de3ef87f5fad27edea3beac8ee3c9168911a2e95a4a7366cca07a4217a80df55df427615be89c64d0f14767d8f1bdd838a1b2971b54867f713e9e63168cfbb40c38e6675e020aa38b956f42888720b114b63de8b849fbc1058490d0ca8549b92b343b066ebed8dec69d71570096edd502a11909fb64b2124edce8295e45ec1c6fd990220f6e92f9ad5b8a9787a387338859fa6745c3a91fe5ebacaffd6f04e7f455a741b42568daccd30c5d6a1446821e15dcd9da9cb56444e97a7cfc03f4b7350516779be8ebb10b9edf883b5aa6410603bb6816f35f16d4543917060c44e61b28891424f50861330875d0ff9520d87b1ba2fe08adff88d86d0ee5858851c24ede68e7d2fba19cc0643a4ccc5d8a927c41593032be046cdfb210150dce077df3b4a283756ee4d8c82152dff10055374049b181411d2dd0c9f5187947c628ad5115f7d7a78dcf1b5ecb87acf283e51b4d230f794b86acf0d3b7311785e4ac7a3eab5b072e45049ebe47bdc2bff06839731f5af83d51986dc8d67dc47b3efa77caa42dfc5f71d98ce4b1ecd0c119e619ad655c06752489e8586f929500f819115e738e4f278ce700b3f892d107883dcc245da176172c7687231953bb05960d3cee00335c79d8cabb24c9fcff740016e994b7dedebe8f7910523cccddd5eff141a405d7949a251bb806a8cc6e7464bf4484ea1dde66c688f624c213f5cb3dd3aea6963086adee29c47b881b1905d7890d7ed6e770dfef8a1665beb67bd30465df31de330bb164ee6d292e1eb6a34aa6d2d46abc06951f6a76387e36423f98ba1b5fc62db8d971425aa1c8dc87f3d1a58a8fe444404bbb6246911b86b22b319d830f2caaf5742df58b949263b00b5f0b359bd184a541a1abd13f3889c57abdf5b63daa80a6d0c9b6695f004e46c6390723298d4b4950d5e14abb8314f36dccddf25293dcba188fc8158dc7a21b1c31a93dd79c6c4699135dec8544c95d66414159005f540034f00b4d2494706451e37b1fddf70a2eb12beb19981ce34b35602c86b324e9de3d5179167becd454715d13899ba", 0x1000, 0xfffffffffffff000}, {&(0x7f0000002180)="9dd895ca3aa3c3bc203cfa145c9312f7e0a01cff1b473700b2353427ebdf605171d0a9ece02855e7359bb9095a54536e1c689457be2ed3649ff108bc2c1624514c2e820c1fb5d7ed10bad809d7ebe4f35e76071253702b42656d90a1ac7a0be521045a3f468e8dc274bfd4832bacb58430fa5d409c4686cedb3789ac53db4a7618e02dcfefa4e64fa04368a7", 0x8c, 0xfff}, {&(0x7f0000002240)="fef2bc1c3feaa806e7789861ceee668492154e2d71fe130164330078752d81b15520d2830c5809bdccedf380fc8bbe7d922938a8b9da21c244307795dde7ac4685b578151dd5dc423a268fb934c6b35c40be359a09ab8dfcb74fdb4652b89d", 0x5f, 0x1}, {&(0x7f00000022c0)="9d1760e71e55c9a7e71fd29fd84ba4f4408fa368460520b5580f14bb252fe8a56c45f2cec2514174eadf1f7dfe9d3fe0e7748aae5792733e42385e1640d02d2dbf2d272131cd1b7caf971ca81d07f1ac8827b8dd0b989723ca5ac193bd5a78493a56f82a41a63bb0f17bb6789521480ad8592e2b", 0x74, 0x8000}, {&(0x7f0000002340)="c06c603ade161372b57758505d807641e42a1e5b3f34c6b5aac34d5a169b6450a097eacb2e238e448238feb44fc2da7f54306594c594b0f7d67b279665c9d71a09e3966724b9cf56b4914d5e747c05781463641252e307eea870b0e57b95dc7e53c377ee144be1882375384a86ee902285b1836bcd461e92f24aa7f94b30f55342f81d57462e0785b71332ddc6dc8d953eebadcd79918199e270", 0x9a, 0x7ff}, {&(0x7f0000002400)="bc94db393faa1935455d0554be742f9c77b68df814e189f272c94fc269115cf0796942be62ae943ca97486fbf915e7be947dfa6d69469f5315697eee7ea13c41c6c35c447ae32e625d6e1e7eb3f9548da6cd69f00be2c33acc39b3b62bcb556ff5b7b97f9d6bed86755a829c3b367a75bb8f328430da49ce167f31e41632ede64a72", 0x82, 0x9}], 0x1000400, &(0x7f0000002580)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}], [{@fowner_gt}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\xda^\'+&'}}, {@dont_appraise}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee00}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000002640)={{0x2e, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x1, 'nq\x00', 0x0, 0x3, 0x26}, {@empty, 0x4e22, 0x2000, 0x8, 0x1, 0xffffffff}}, 0x44) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000f2cff4)={0xa000000a}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 105.097700][ T8859] ref_ctr increment failed for inode: 0x37e0 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000003915ec75 [ 105.114707][ T8865] ref_ctr increment failed for inode: 0x37eb offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000107da3f6 [ 105.136311][ T8865] ref_ctr increment failed for inode: 0x37eb offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000107da3f6 07:42:30 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000100585c5881ba0307e0b818476b14c361fbc0651155"], 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/4096) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x18, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 07:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2c03, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 105.149436][ T8863] ref_ctr increment failed for inode: 0x37ee offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da [ 105.172936][ T8863] ref_ctr increment failed for inode: 0x37ee offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da 07:42:30 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xe501000000000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:30 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:30 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3505d) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000010c0)={{r1}, r2, 0x6, @unused=[0x8000, 0x141895b7, 0xb5c7, 0x1], @devid}) [ 105.203240][ T8884] ref_ctr increment failed for inode: 0x37ee offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000157141da 07:42:30 executing program 4: unshare(0x2000600) unshare(0x40000000) unshare(0x20080) fork() r0 = getpid() r1 = fork() r2 = gettid() tkill(r2, 0x34) capset(&(0x7f0000000080)={0x20080522}, 0x0) ptrace(0x4208, r0) wait4(r1, &(0x7f0000000140), 0x8, &(0x7f0000000180)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x416000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000ffffffff000020000000000000000000000000000000000a335375361876ba3a1c1d4bbac6555a65e7199f881c859c4a505fe1fe35bd84363f650ea1c4216c1b812e2783d2f81cf71a5f110b7453164b2582eacd9472cd86ecb12a6ed40c96d577194a61419897bcb6348074ad5873b3121146a00"/132]) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x497d0000) getpid() waitid(0x1, r1, &(0x7f0000000380), 0x40000000, &(0x7f00000002c0)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) fork() ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) tkill(r4, 0x2f) [ 105.253657][ T8895] ref_ctr increment failed for inode: 0x37e8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 105.262641][ T8899] ref_ctr increment failed for inode: 0x3795 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 105.292528][ T8895] ref_ctr increment failed for inode: 0x37e8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 07:42:30 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) 07:42:30 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xeffdffffffffffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:30 executing program 0: io_uring_enter(0xffffffffffffffff, 0x16a2, 0xaa74, 0x0, &(0x7f0000000040)={[0x200000000000]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) set_robust_list(&(0x7f0000000080), 0x18) [ 105.313581][ T8909] ref_ctr increment failed for inode: 0x37e8 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000057126726 [ 105.337682][ T8899] ref_ctr increment failed for inode: 0x3795 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 105.352961][ T8919] ref_ctr increment failed for inode: 0x3795 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000072a8ce7 [ 105.366381][ T22] audit: type=1326 audit(1633160550.441:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 07:42:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r1 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1000, 0x2, &(0x7f0000000240)=[{&(0x7f00000005c0)="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", 0x1000, 0x2}, {&(0x7f0000000140)="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", 0xfb, 0x40}], 0x106c60, &(0x7f0000000280)={[{@dmode={'dmode', 0x3d, 0x4}}, {@sbsector={'sbsector', 0x3d, 0x8}}, {@map_acorn}, {@map_normal}], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x65, 0x66, 0x62, 0x38, 0x35, 0x33, 0x33], 0x2d, [0x36, 0x33, 0x31], 0x2d, [0x32, 0x30, 0x39, 0x63], 0x2d, [0x30, 0x33, 0x32, 0x63], 0x2d, [0x35, 0x32, 0x38, 0x65, 0x38, 0x62, 0x66, 0x62]}}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs\x00'}}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r1, 0x84ed3000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) tee(r2, r4, 0x80, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x100010, r5, 0x3d6a8000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x404}}, 0x40090) 07:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x2e03, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) 07:42:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) [ 105.409204][ T8917] ref_ctr increment failed for inode: 0x37e5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 105.431684][ T8917] ref_ctr increment failed for inode: 0x37e5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 105.448607][ T8933] loop4: detected capacity change from 0 to 8 07:42:30 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfcfdffffffffffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:30 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x200820, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 105.449426][ T8935] ref_ctr increment failed for inode: 0x37e5 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 105.457303][ T8933] ======================================================= [ 105.457303][ T8933] WARNING: The mand mount option has been deprecated and [ 105.457303][ T8933] and is ignored by this kernel. Remove the mand [ 105.457303][ T8933] option from the mount to silence this warning. [ 105.457303][ T8933] ======================================================= 07:42:30 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x84002, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1300000065e5ff00040030302164fdf4000000"], 0x13) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) dup(r3) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0802, 0x8c) write$P9_RLERRORu(r4, &(0x7f00000002c0)={0xd, 0x7, 0x2}, 0xd) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x15) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) [ 105.492754][ T22] audit: type=1326 audit(1633160550.441:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 105.539723][ T8934] ref_ctr increment failed for inode: 0x3661 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 07:42:30 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) [ 105.560142][ T8946] ref_ctr increment failed for inode: 0x37eb offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000004026d985 [ 105.569113][ T22] audit: type=1326 audit(1633160550.441:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 105.597182][ T8934] ref_ctr increment failed for inode: 0x3661 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 [ 105.598830][ T8933] loop4: detected capacity change from 0 to 8 07:42:30 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfefdffffffffffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 07:42:30 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="56ee0080000068a1", 0x8, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b41000014", 0x5, 0x0, 0x0, 0x3d) sendto$inet6(r0, &(0x7f0000000000)='E', 0x4148, 0x87a, 0x0, 0x4b6ae4f95a5de35b) 07:42:30 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 105.612812][ T8959] ref_ctr increment failed for inode: 0x3661 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x0000000081b88578 07:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0x3003, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) [ 105.660859][ T8960] ref_ctr increment failed for inode: 0x37ee offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe [ 105.685842][ T22] audit: type=1326 audit(1633160550.441:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 07:42:30 executing program 4: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x4, 0x80, 0x0, 0x6, 0x8222, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa14, 0x0, @perf_config_ext={0x8, 0x10001}, 0x42200, 0x100000001, 0x88, 0x1, 0x4, 0xffffff80, 0x3b3, 0x0, 0x6, 0x0, 0x1ff}, r2, 0x3, r3, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000040)={0xf0ffffff0f0000, 0x2}) ioctl$VT_DISALLOCATE(r5, 0x5608) close(r0) dup2(r4, r3) [ 105.713707][ T8960] ref_ctr increment failed for inode: 0x37ee offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe [ 105.729135][ T8982] ref_ctr increment failed for inode: 0x37ee offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x000000007096febe 07:42:30 executing program 0: getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101441) r3 = dup(r2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) sendmsg$unix(r3, &(0x7f0000000600)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000001c0)="b0394662285f943dcc33a2eacb87302cb9cd39fac86f5c309b00725302070cdc161d2bc587899ad853c192494357030280d23d5104200290260b0410b25965da9576b2cfe766bbf094757e8e80569b154e0b0bc502358cdc1cc5d011369ad87899849d4a4ebd9132f7af709156a01cd1e1ad4898c6eac2c4c7d61feaddaefa9acc2f5fe33f4e4d0dbc5d15b85acad8a6abfe2061080c6c63cc6b3530e82dbfbbcf0c3da5d052c1ef29bea02689ad95912e556f4897c9767c774f8f2e4d76d6c557f6dcb09801052cf57025895270583233fbb2d7", 0xd4}, {&(0x7f00000002c0)="4bbd7087c6ad446d1f906aba50c9786d27b4bdb845f629cc17ed634a0c2348d3e0a59fdd839de406e6c24162413c5b5bc62a221f503fec326770dd467c42a77d593c69d3ff81d7ca9f7191a6714513557d6b8250416f878fa504c712b96c659d00093ec997f3c454ff240bec960adbdf4f9ed3f148d81bc3471d8f5c114192722cb9488533ec1739624c942c8c", 0x8d}, {&(0x7f00000000c0)="a47548a78dd5af7e056e8399d0de6e6cd7e85b5580072354ebe9fcf7cfb369", 0x1f}, {&(0x7f0000000140)="cb044c9873f40eb8680b806f79e6145b816b8f5e5618ba5f1f475e0d93a9b8c9db73da1aac5d24cfc9d49601374b407cf48b3a0c24ffe8f68012479c62", 0x3d}, {&(0x7f0000000380)="6e4fafb4dd06b1b3465ec1399ca2baa9436da51595b31d89dadcf7b8b4014705ed4b604d83c0192dead2a008c4c742500c5068488b57667bbe471510c7b6d4b86a0201d5a8f7248c2f7ee945f12dba9ec86b8faef9f60bae473b74bf8f78a6a40be17a61096da66ff7a676a170ddb2c52b5592d987181f51aeb6e6458d49dcd796c2ead28e99a88594f533aebc8486", 0x8f}, {&(0x7f0000000440)="f25993ef738063f18470d6d03e5f5c3251bb", 0x12}, {&(0x7f0000000480)="2f858ff5fb0a6ebba5e79ca994e28c9522994920597846c0997ba599d80a26d5bd274dfcefb5fa17c141dcb6a5fd4d89846b38f3e72b6a7a8ad910ece5f96c67c66ae54993996fc57e9aeca975f224f6a96c132254936942f0ed86e2db28f5e0953f18d9325f277cf6ae592c5eae77d3e012299e0f86aa5e18befbc770ed3b5e1caa3be5032418cdb23b1d338e0c3f90256b8fa2f3cab4f001f033d915dd1c86bcea07dedf86432d2447985077ac6d4e1b69df17ea4b1e222ac451beff062c2a06601efa574cdb35172bd18ebece29fd112a4770ee0f9891707d714bbca69e05829bbbd92e186dee7cb51a5fced8745ce9e7d5", 0xf3}], 0x7, 0x0, 0x0, 0x2}, 0x800) fcntl$setsig(r0, 0xa, 0x12) r4 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r4}) recvmsg(r1, &(0x7f000095cfc8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd91}, 0x0) dup2(r0, r1) fcntl$notify(r1, 0x402, 0x80000027) r5 = fork() sched_setattr(0xffffffffffffffff, &(0x7f0000000740)={0x38, 0x0, 0x41, 0x2, 0x1a, 0x3f87, 0x3, 0x1d, 0x5, 0x1}, 0x0) ptrace(0x10, r5) recvfrom$unix(r1, &(0x7f0000000640)=""/127, 0x7f, 0x2000, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) tkill(r4, 0x18) 07:42:30 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f00002a4000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r1, 0xffffc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[], 0x10) syz_io_uring_setup(0x6c51, &(0x7f0000000240)={0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000081000/0x4000)=nil, 0x0, 0x0) [ 105.731481][ T22] audit: type=1326 audit(1633160550.441:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 105.772962][ T8977] ref_ctr increment failed for inode: 0x37e6 offset: 0x0 ref_ctr_offset: 0xfffffff6 of mm: 0x00000000a57fbb0c [ 105.773804][ T22] audit: type=1326 audit(1633160550.441:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 105.811907][ T22] audit: type=1326 audit(1633160550.441:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 105.812271][ T22] audit: type=1326 audit(1633160550.441:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 07:42:30 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0xfffdffffffffffff, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [ 105.812482][ T22] audit: type=1326 audit(1633160550.441:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 [ 105.812892][ T22] audit: type=1326 audit(1633160550.441:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8922 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e7ba8d9 code=0x7ffc0000 07:42:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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