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"/3584, 0xe00) fallocate(r0, 0x11, 0xffffffffffffffff, 0x1b2ec479) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername(r2, &(0x7f0000000100)=@ll, &(0x7f0000000040)=0x80) sendfile(r0, r1, 0x0, 0x11f08) 06:03:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xc, &(0x7f0000000000)=""/73) 06:03:21 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1179.085899][T13663] loop2: detected capacity change from 0 to 131456 [ 1179.095043][T13663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:21 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xd, &(0x7f0000000000)=""/73) 06:03:21 executing program 0: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:21 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0001e70f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1179.143669][T13674] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1179.152161][T13674] ref_ctr increment failed for inode: 0x361d offset: 0x3 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000000)=""/73) 06:03:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xd, &(0x7f0000000000)=""/73) 06:03:21 executing program 0: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000080)={0x0, "c8dc8d66389c82d4734544cac1738acf7bdf8e324da810205051e8a40aedc609000dacbfc5c4212589aeeba2ff7de6aaf371bca2caeae5b06682e31b6bb9b0f9"}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) vmsplice(r0, &(0x7f0000000780)=[{&(0x7f0000000080)="fd0d9970f1c9afe02484e5b3c4180d90a4ecbb19785916c49c1a692c913252", 0x1f}, {&(0x7f00000000c0)="7e06e51e8341c8541e20609bc0d7bd7b3ec5d741a452a8774b1d67d9e9dead87c41f74d54f9458ab78f68a13076c8c2713ca646482f7d5f1302b9b75e958b71ae6b3949ae758e89f53e1470b87792c71643afb7af8aca99e78e9179c9e2a5c97768f2a42b0312bc07ca898291072c75d0d83578bc9f9e41acf37bac60e101d4de14060e96ea91d3a6edb9d4e91ddcb3b338b9978d540b11a78e5b05bdd3371a74c18", 0xa2}, {&(0x7f0000000180)="036b72b94cdc11b3214c71db35b2ac40d37e8d74c45b5d64658043943e7df468ddf2b16f9bc31d98f784857b98bac17d3f467292af395b326b04565d07be91800cca5e849cecde3fe619ec631c446888f1bef0d5af984229c781406336ffe56096c45f99a2590ff80cf58316e349a8d8f8e290676c2acf563f39dae5f9939c0ddc95d9908e423720409097d736fc8025346a6215cd3235a06a33", 0x9a}, {&(0x7f0000000240)="27978825cdd520f93e731342d981192571a1fc73a4836a6e51be1b1a364f26de1daf438e54d7d2930193392b1b73da702871b6154adb77b37e2a551728eca0e4b954d10125385fccb4aafe9c8c8be66818ec78e0b0997e8b5c4ec4aa955473d1fe930385775e4350baebc3a6ce9b9a9924ec369a42a3dca24781ff8edb95f23c4cb965a5d50fe187591adb6270dafed61bf51d22df925c51f6ce8a9aba4d825aa5d2e84fcacc0f147ec9b6a53f9db54332", 0xb1}, {&(0x7f0000000300)="bc240d3e1ba5d19809e2bd415b9d4b1def64b400211673858a6a53d5ee9cc4640287801bf1990d", 0x27}, {&(0x7f0000000340)="5e24f0f81f4ceb984c64582f1b63e499c3e1acd24fe139fc659bcf67571e4e2907c8ffab6049b85015d9e640c64556eea4500a3e5c253f3702b12c90acfde45788ff43f4e2c5c8c2a3cb0a1195d9967414fd1fc201ec059ff5396ceb71e7b2df924e4578060ec0c3d102c78596e23e3cb604493b4ba6f35664fa419d02b5b7723f7a020045607f047bc597e4c7f01cf98e6e4cf740ac24f0475bec58161f3e452ac5dbd51e615bbe4c75cb58f4c7ebe9184ac816b349c0a4469c4d682bf9af521a5ebf8a9e3a5c4e6efa9f88ab55d6ee", 0xd0}, {&(0x7f0000000440)="7a12996943b1c0705bfc274d8bb64eddcd2f18997671ea50cec61d0ae4176fed9c71c9aa6328105e867cf4c91ea8d1c9567ab71672224439899091b5fc6918e56d3865be7e4785bf8b9a20b942a082722cdf1940bd98527a0e4d700ab1454c31879d1f398e00ae1c0f084785ba25a3366bd52185d9d95bc1259da180fb3bd2a71becc4552f2fce9b6050cfb37b6da89a2c9e96c5962e37718d2c027e89168fcf6aad7171d690043867f0ca6e16edde9cd161197c1350a36e54e0dc37d098b01bff74e9e4e972cc83b3fefe4042d7ab1e8f8594", 0xd3}, {&(0x7f0000000840)="49ee2683319219b5533792eb693dd372cb9f216f1cb38cced19e9917d9821f71fb464b05b78496ba334b386a4fd4dbdacb48643240a949bfd7afd6008af7ad936cab3302cbc3e724db3b136771bc7618b96c505da2b29a5484fd216429534146d88ceb822a39e8eccec7f5c3c6e779a648f3e65ac541e4935a4972c31912c4234bde37570feacdbd0332ce92c54f75304feef5c336cc864c473201deb69e63f11a7c7a2ad987a1d1bdd34010e0fdda230cb6402162b1a17e60628bc027b4366579af1382bd120ea1410072c545482de96e03bc1d808989077926388ec2742cbda87a7dd3c61c", 0xe6}, {&(0x7f0000000600)="86d3ae1e549b3e4efcb3f84ba65652c7f2a1e97da48d84ee8e22c5909592b2d98f1340fbcfd7a806f5caf4cf541e72df1f2bcac768d85ca19488fdb6c33568775c1a7ae90ed7932b31fd9ec8ab7a2b8652153a30b466c287b07644ffad47b81367f81cf8f7a1507ec57c341b52c434", 0x6f}, {&(0x7f0000000680)="a5fdc43dac88b57dde198c95725540f76d1f7b8b34792ff134600d36112567facc3da1ab2c0ed539513604ae586a90170dea3f0a2fe61ab2994900bd2ac410bd349098e9534fa071af10544e3a37b80bcff083247a3f0880c4c1534110edad00b05975c22f09ece4116017488bcb47e97adc9c02eb1f2838eb5532983ee826b54d6521d6a8b86d63a1bd19fa39b7532a89fd672646e48f02214b9d7e6573be63a0dd36ee12b0384c82bf68b03b6a37e03d5b474ff1acfeeda841845eb15aaa596abab2e549ca4a2e5485600a1bdcf70499032c2756a427531497d6", 0xdb}], 0xa, 0x10) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1179.335774][T13692] loop2: detected capacity change from 0 to 131456 [ 1179.379208][T13692] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1179.416414][T13687] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 06:03:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x40600, 0x102) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@rodir='rodir'}, {@fat=@errors_remount='errors=remount-ro'}]}) 06:03:21 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce000fff0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1179.424795][T13687] ref_ctr increment failed for inode: 0x361d offset: 0xd00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007d4000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x6, 0x401, 0x4, 0x1}, 0x10) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) [ 1179.660690][T13722] loop2: detected capacity change from 0 to 131456 [ 1179.677065][T13720] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1179.685480][T13720] ref_ctr increment failed for inode: 0x361d offset: 0xd00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:21 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1179.707909][T13722] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:21 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x84}, 0x18) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0xffffffff, 0x7, 0xffff, 0x2, 0x712, 0x101, 0xfffffff9, 0x0, 0x1, 0x200, 0x58, 0xae32, 0x2, 0x7}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:21 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/140) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000000)=0x7) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001e00010a7a83d335431a72f600000000de9de83f9e0e8efffffffff054c46f18cc2b1353b5c610de8926243e99167d985ebe327e6a9b7ab283454febe37ee11efd08b20aa870f0040042fc6ead0f947b5b80114ee7150ad942bbe92da53508d7f7d80b3956b9645cea9b1bbce2dabb445d15b552e374134a8090a14a1c8c60ce7dc30b4f21c8237d07cba82456d8c560a6faa285b59b8b875c854c3dc4ba222f80b7893e160cdd914cd850d3f032d99a1610611d3b7fde6f2b00"/202], 0x14}}, 0x0) 06:03:21 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000003000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1179.798397][T13731] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1179.806801][T13731] ref_ctr increment failed for inode: 0x361d offset: 0x4 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0xc) lchown(&(0x7f0000000280)='./file0\x00', 0xee00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x11, 0x7, 0x1}, {0x76, 0x7, 0xf9, 0x10000}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x6e) [ 1179.921015][T13734] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1179.929429][T13734] ref_ctr increment failed for inode: 0x361d offset: 0xe00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1179.989058][T13747] loop2: detected capacity change from 0 to 131456 [ 1180.008477][T13747] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:22 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000005000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/189, 0xbd}], 0x2, &(0x7f00000000c0)=""/35, 0x23}, 0xffff}, {{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000500)=""/74, 0x4a}, 0x6}], 0x2, 0x20, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000061ccfa4749bbad393fa4c5e2e5e4479817522c00"]) [ 1180.059974][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 1180.059988][ T25] audit: type=1326 audit(1618985001.990:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 06:03:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/143, 0x8f}, {&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x5, 0xfffffff7, 0xffffffff) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1180.152537][ T25] audit: type=1326 audit(1618985002.020:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x466459 code=0x7ffc0000 06:03:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000780), 0x12) write$cgroup_subtree(r2, 0x0, 0x200600) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000440)={0x80, 0xdfe, 0x5, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) [ 1180.190884][ T25] audit: type=1326 audit(1618985002.020:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 1180.216133][ T25] audit: type=1326 audit(1618985002.030:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=94 compat=0 ip=0x466459 code=0x7ffc0000 06:03:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) mmap(&(0x7f000043c000/0x3000)=nil, 0x3000, 0x2000006, 0x20010, r2, 0xa2cc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1180.267403][T13770] loop2: detected capacity change from 0 to 131456 06:03:22 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000006000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1180.323080][T13770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1180.348150][ T25] audit: type=1326 audit(1618985002.030:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 06:03:22 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x1, &(0x7f0000000180)=0xc5f, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}, 0x10) [ 1180.374122][ T25] audit: type=1326 audit(1618985002.030:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x466459 code=0x7ffc0000 [ 1180.398833][ T25] audit: type=1326 audit(1618985002.030:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 1180.494952][T13782] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1180.503416][T13782] ref_ctr increment failed for inode: 0x361d offset: 0x5 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1180.515808][ T25] audit: type=1326 audit(1618985002.030:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=42 compat=0 ip=0x466459 code=0x7ffc0000 06:03:22 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {&(0x7f0000000240)="2200160100000000011600080000000008257809140b2a3a0802", 0x1a, 0x8b000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r1 = signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20100, 0xe0) [ 1180.554928][T13796] loop2: detected capacity change from 0 to 131456 [ 1180.589843][T13796] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="09b15c120d9aad7814142588c4000010", @ANYRES16=r1, @ANYBLOB="00022abd7000c53c2fe40200000008000300", @ANYRES32=0x0, @ANYBLOB="0500350009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x4000001) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x80000, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @initdev}, &(0x7f0000000200)=0xc) sendmsg$netlink(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x8048) 06:03:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x101000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) fcntl$addseals(r1, 0x409, 0x8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r2 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x3000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) [ 1180.615458][T13793] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1180.623848][T13793] ref_ctr increment failed for inode: 0x361d offset: 0x1100 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:22 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000007000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1180.672314][ T25] audit: type=1326 audit(1618985002.030:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 1180.724978][ T25] audit: type=1326 audit(1618985002.030:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x466459 code=0x7ffc0000 [ 1180.756081][T13811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13811 comm=syz-executor.0 06:03:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x8000000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/164, 0xa4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0xb295, 0x9) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:22 executing program 0: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='fuseblk\x00', 0x198411, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816d000) umount2(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc) unlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') [ 1180.791433][T13811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13811 comm=syz-executor.0 06:03:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1180.859154][T13822] loop2: detected capacity change from 0 to 131456 06:03:22 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r2}], 0x1, 0xfffffffb) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) r3 = syz_io_uring_setup(0x102de5, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000015c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)="f8d7fb9a91ee70173ec2f44811398d58c83c230865456914ed2dea3c4b2747d3c2beea157c2b0df1b16c7537fbc5410b225a16a3bcf3d82c4671142695a9ae418aa4057f4f915f60be25295387cb447b755de3a1c0abc2975778d5140947b187314b5ff449e2ad605f276d512c3bd3c1fa31ffc3c49d6f307ab81a74426f3742c62b370a9d7133651f12a12fca8af86bbfb6af3b7a9e60889f1838727e8aa28319fa27743db2880b73ed404fc986a952eaae9bbe20", 0xb5}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="1aa4cef2d9fe23874d05c79d298d77dfc656bd29af1619c250eb0df83f9a6412e0221ce2c4ed6679699082ec668d981e0145ba88e5beb001dc7252ffae4e498c4b8533c516cd453b5d71cba2dfb9f229990fb4c48d3cb451e41cd9ee7c9ff9e32d89d1419e07b3eb9ea52ae06c3bdbf890ec053ae773d59d25fd7914ed2e2d2ddfb90ae7cff13da70cb480812b90b95d42107eea8f9b0524d76bfec2fc762d4f7593e98caa416be5f61aa1b5550876aeb82d154b4e888f3cecd2e67d408bd54413097c76a5639cb9d51dfce243e14cf6c75d1100bb89ac70c25f360ad77f20a8dd56", 0xe2}, {&(0x7f0000001300)="3a66d8b9cfe9e719d6df526053119d7e82404f72730a0e0edf576b76dcc9b4dd1997289cd9fa974e8d9e465e76eaf17e0f378cc7a64021cd62aa08c5b61b06590d283cab23fb1e4cb1386f1b0da8b0946564c407358df326a06302a683bfaa0ece15c593500408cd64586972db27a2a0d9722c6324c6b76c6a8fdc89f79e88dcef5b5fa36aae0fbcb247ff2d2892de49e75d2f6fdaa0577510f64ceb83df521511c2b1179c64d66bdeda42aed9567794a0", 0xb1}, {&(0x7f00000013c0)="8aafe85b7607d08abc8a8c26130105f29abc3ffaba74b2a9b94a6cec63254a46411d420c50090b14377edfb47d31947af4ae9015b75193a9c4c5510931e4f67186f380d0160c95cfac6c10a244f2dee69f57c3334c98", 0x56}, {&(0x7f0000001440)="d7031bed1b65f82cbafda6b738f67d4d4992d6c9ea93e56f2dad5954b2a0539ee1f5117e35e85f0612d2638c1ab71bdc1a8605e5a957ffb4f831bc8c7cc3e95d91bf7f3d079dda2739ea48559a5eda51002eb9e77e148581ecfbdeb3bf2928d05908ec771dc594b11a2d51d646730e41ce01a0c4", 0x74}, {&(0x7f0000000000)="2bc1f045e34a563246214d9ff5b1ac4ab062eea920c527214a0b56ccb061c6bff2c706e40d2ef892a50bc410c6129f236a9b", 0x32}], 0x7, &(0x7f0000001540)}, 0x0, 0x44004, 0x0, {0x0, r4}}, 0xffff) syz_open_procfs(0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1180.932399][T13833] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1180.940977][T13833] ref_ctr increment failed for inode: 0x361d offset: 0x6 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1180.955321][T13822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:22 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000009000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') mmap(&(0x7f000004c000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0xf22d2000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x5, 0x80) fsync(r2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1181.086892][T13840] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1181.095305][T13840] ref_ctr increment failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1181.180868][T13853] loop2: detected capacity change from 0 to 131456 [ 1181.203804][T13853] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:23 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000a000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:23 executing program 5: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x80) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:23 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$setpipe(r0, 0x407, 0x4) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/259, 0x103}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/255, 0xff}, {&(0x7f0000000340)=""/69, 0x45}], 0x4, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:23 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/78, 0x4e}], 0x6, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1181.478690][T13873] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1181.487153][T13873] ref_ctr increment failed for inode: 0x361d offset: 0x7 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1181.501166][T13875] loop2: detected capacity change from 0 to 131456 [ 1181.562056][T13875] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1181.570168][T13882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1181.580967][T13882] ref_ctr increment failed for inode: 0x361d offset: 0x2000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:23 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000b000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:23 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x648a02, 0x105) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) r4 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x5a1000, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:23 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:23 executing program 0: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1181.838910][T13902] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1181.841324][T13904] loop2: detected capacity change from 0 to 131456 [ 1181.847410][T13902] ref_ctr increment failed for inode: 0x361d offset: 0x2000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1181.875459][T13904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:23 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendto$inet6(r1, &(0x7f0000000040)="46ae508db20a2a948317d890c48209e6ece40a7d5dfafeb10ba0dc8c0a79855449609e39e3483e33fa8dfdb5886aba2d157ba424a798524a9cce1fb59e3ea660eaa1eef06df2d1191ab56be2efe33ebca6d74b2dc7c07f2eb4c0cbfb3ae3b3a07c66e42d0ea858001960d439800936ad13e842d77be1349fd495aed02f9cf3c6b3e8fa4dec981c7668b051b5dcd44b51a5416b13f111b707cc7840e815975cc371e8aa518fc26f39f249262d504b337ef4475f5830d7b4d5e6f1b9e5", 0xbc, 0x4040000, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cgroup\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000000240)=""/224, 0xe0}], 0x2, 0x20, 0x0) 06:03:23 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',Y']) 06:03:23 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2500}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001600)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)="ee9c3db7108cb56d2e66084de52663a18c2852de40a4469df4057c2699d77189fac4eb457e265d3b52c0b1ba6fd9296b47b346a684949e567658c42da69c81593637674c8de2437ad7b063242f987cfcef19b3efbd2c7b0c2142035c2cfd5fc1a281c3afb0481801e79ca94adbe26bbcce1522a433b7c7c58d4b0b2eed219e2c407f7283b980aa9a39a512eee5947e312c371a9703c06ba353a8dcb5", 0x9c}, {&(0x7f00000001c0)="9b88f323673a47194dc6102dee4b75e0c9f145b2f3eaec70e3149dfac2f1e67448b588c78323168c9d9147a3201e8125580bfdce0963303e22ef13e4a87ba127cce6576330cc3e6bc275f9", 0x4b}, {&(0x7f0000000240)="247ea646bdf8e3eda1b53f920595c528f76f99f20d00e72c822de2ed4bca9fd22307deed54434535c3341e3372c1b6d45b99c0a4f32fda64f93dc0c4b80f7d0f37a39831001b63e8903776949bd2f07eb387b7d9894a1a61e4dd39ccfbf914f2929c9ca8a1707a41bc50a1c1ef5d07ad5b8aaff54c79d8449512826adc2b7a7757dc66c3428b040d0eee1bfbc152a5501738d3d2025a40dc58aee48b79350ea303f4", 0xa2}, {&(0x7f0000000300)="3ae5c8683de87f4d52add7cb3ec1fd1327a2a5eea72a6296367f7b0e2a2b6313ff4ea84b5fb795a60f60ebeb77b7b45cea0d4b19bb625bc5e608f8985e85c43ce8eb176b709201fc02", 0x49}, {&(0x7f0000000380)="4c5c70aa6eae18575e548709557e0dc41290940946789c6c041d695cdb949ae31f3bc6f664fc46623ff0c01dadec3b73e78dfc33f6e6acf4093527caeffc3eeaa2a49060998a0a72ceef6fe1e6e21aa92493aa056f1d07a26649e14e2b3987cb81909487ccf8716caaa38355492a01a3815c9b013391cc457fa8766682ce610e2e8b38e6588007f62a7f07c93d432e11fc16d8472ab97c8b320687e602c451e8e1d62bae87092a6a4941dbac7bc17e7a83808718a9dfd57baf243c50a6dcab255c2bd6d595c8c70ce21498e272824554c72ddbb103e4cf20fbc86c66f2627ddbcfcdad26c2af96c14c47533ff0ea4256a745ccd6001ec413de49ad67f3d32996c59e0437c0a16cc105aa3814eae87d2b2279938a42726f84fbb1fc63bea066595f9a83b77180bfb6b9cb2e964a260a7aad108078ea4fe9b646538dbadf9ed2afbc9c15c3b619fc38929b7ccbea0d7e6342ada15f69fcbb4894bd02538a628341760aeb0d353c5b7364dc43ce8ccd5e0572c84d8d6aba9927ab3da8191b7222713d73699ce95f14fa286df3410555f269ec1cdf7c2b8d433b145df2c980119ec7d1a10a07228eb3b94bf7bf976311fcf58012d747126f9962e1dedcae9dfa7506325c09d2320bc4b3b57b203664986e48c104cc4650d78418aea404f6ea1fdecf03bd795489487ae2a365a497e069b95a42920f382acfbd85dc4709a5e441027b2a7a472717dd7672f76ac2e37597d61d3533e83f1c8909a9aa84f78bc1c2b3bbed1f8cbb2de76016ae5d4832e33aae9185c2ad820519cc1f6d4f713ef735128132616d6b863668a519a21873c2d736313581d9feafce856dcb93977fb497fecac0b258100d8254199d1bc658d1982696d20a143185d2a86091ce381f6326b17d4139beb28ab01dd9176c5a550556e509fe3aa7608296541e2f4f37e33e433f940e7c7c79073600112b843fd8ab9bbbc35b7ba6792529311a032c45ebd0eadd7e851599a43f84dc4405653426d99e9ef663cd5e3c63ff51445b2be1a205c6a69cd3faea25c657cdaf98b66e413a1830dbe6db05a40e06d3ade82b4ca75c31529a306d419741543a07c6b8f4856763bb86fbb192f107ec58269734ba69bf21bc32480c097d08e496ecbe4367690d07167be9c8d190a0fc085cde1ac43b9561167e5e32e870329bda1867c18e6129398cb9c7fe386d8a4a4947eec7090c47eb6dfcd03ab89a9f1b908a1703a8826732c32143543d9a827d064fcb997f85f838f1853055c185b24488612bbf6583466da15e8ec2b2a9017467632da52639f4d806a2a514fe5e797fcee6b9ac1b22f1bca78242b0dbe675c27f95cf2ed7c93b2fdd31cd4689dcb5809d96f647fbd2b82ff05046d2a3045ed9ab8881ae7f4f98fb0fdc6acd69489b77fa79b14e6de6f8f83093b8b37716b30a92e20c8a7fef53d8e0017df1e32833c1c01ea4a8c2b0b95826d2ad08b45307dbb71ce6a366917fdc6aede20484c5fccc9f0da1b76b1f012d697e37155259548dfc4490c2395289ecd71938631d5bd81bdeabc283b2a4a54fbb58116e6a1240ef20b760706773a22cb5b6330f264f4a00bc41b1b1aa7fa41d09a330b879d523a9c53a0f0f8e69441bedb040d00f6a81e394b4ad13cc63c0a6ca7647ded8c79f7e64f6b09dfe5cb858efd3bffb2e38df691981064618e9102b0a3b237f13ad2dfeec9a7a512bcfbaef8767359ac0e968c9db1cb19686a96261c5af3be2780fae5de12e642f665ef96aac328905842eb47bb3c3f4db0484a67e040e17122decdef09629c9e931ab2a388c3e10352c7e4cb41cbe664b632b8a0e9c3c7d236a085264dbc44be993939b96d6ace846acf4d8e320bc821ac93f301ed3cdbb4141e7c54d10fa39825a71e6a8c93c79223b19b0223c95fbff04736ab9c7bef53e082b61abc8c7d70e2a0fd5f7eaecc65206ab677bf7e76f54f5cfd75eb2b068c6002d3ca32754766c1a6aa0605052af393682b9b995837d77789c715b96d7791260b067893f72cf714f61c4d62529a92f4e0a627996cbb83ffe27964512b7d2f769b88229b008480f525fd47e27da76dc19b2c9bd89049d22d393017d11cbbb723443676e19a7b5311b7ee253e6f605fd672a5437bf0deec9b2accc9ac83bf53bae86a21cdfe0681a15f85cad20aa231571a76bacd64fd5e40c2267d1bacfeeec1ba241cb4aebec3e159e5b6740698207002089effad10b46bb4cc28ce71d7f8b4b0bce846ba26b016a613b40fb3e9b2589dd5fbfc7c249a6695269173c82eff038ef24430548207aee574c4bbb45afd8663bed22ca6c7099bee468fcca97f47ba60d871e97dd8ad6e675ac414c95b5ec8cfcfadbb1c80be28c1c9709df886702938b0fb6fe2646b7c902884975cf3a966d39cb453501f68115f4b1802f369713428ffa8331f73b1fb2a1534bfb46c6f947b3b93f6a62b9f38ef67dde215793efb13d5c8ef799132b8c18aeef2d519bcbddb626fb22c6ba8294dc25acca2ed4dec406a8b82d6faaec266b05bc6e883623738defbb9de5268103252367e9442936c39ea6574650a001b4c612ef38f06aafd5836c1de7fb8272e8770020167c4cfb16af7e6a1d5f0071a5b5b76fbe702203b9ff8681475f7e708611df3f4f1250c81167cdf5e990ac7b52938af6554cb71c6f85a340016c9483a67966e88739681ae0b8a0c8e61655042d597b3fa9b2dea1707ff1a7db1af8541616937f0f07d6f6d4514a0ad6ea4b655372c5614558aaa31c44ad4c4bf9264a2a34bb50076a0d42c2cee5930d0c102191ebeb9b6cf6899dbfaa0af26ba14c30ee8aff06fc640cc7278357e093e1ced45d2e57ce30d191c9726af7f11275118cc8fd7344c6a663fc7b443f666ef23709e459b34ad6735e23e927803f83e5afa914bcb017734180a0dbf5b6a0c4e6f579e1d8a34b415f2043e98c5b305ce4727494b54323baf4629ef23cf285c49d2c9df1cacbe7171c79b3256ae63d780c29b31e715080aab3acd0895c1c6662b07a9368e3be00e97328c16f7d14a345be75b89db96445c54438d2beb150ed2ceeaaa92202e1a6520a40693a69a89b9af15d1151f0e5625c283e29ac3f035c4a471c62b651578fbdaa2d60d4341111cd1f91b4b8bc8901e43548e3924088b3946b7414a277807795b642747eaff1afff7da6ce05f9e8b532617230ab46c9a2cff57732a59acb4b9bb15098c4215f08a89fc35bf1f537365698d325558121f518582cda8e5046e814013dd136468a756764744cfd95d9e2816d87a0b2e3abb237be05624b6808ac5d393bc753943521037dda83705fb7c5a2d44fd281451b53c96f10fe8c42a5717556bf40551937154b7f1fc17a16779515ebfa3ebace2214ad23f9501e232dbf08e1d71f5e7918ba4c88327eb98c4aa74513a9eb5f15d45bf4e6c0297eb0a99d352ff40e562bce38e9ae6193202223f8239e055618b9d4c6fb9b6302c70860a4d27e2cf82933c04abcc8b7a2739590a6a20e733fc7a12afaa2799be34742b2df4e9b51b86836818a1f29ef1b8e086007b0fed1232d1f78d7c65581d428803891681103e2af9ceea5bcc84a8e49391adb5372a825ea0e2c36f3f30516ceb6577d8f013cf06902cd6cef3ea3570f4aa14d522243009f1bd9978177850538e93046d90a0b464bbcd5165383eff4ec4b6e04106a00624bab74c803d15238b2c72de896349ec13d78372ec8dbfcd8fc00876b18d9523a85957fa5078389041a2d614d09740fe3653b0ea5fa5dcc0d0cce3ba1018981b215151adca0410113575dd78b0666579378bb463040665a54dfc2d3639198cee64b49b092d6164c525deb0a3a149c522bc0fff74cd2244e817417880a587e4eb654459a22fb375b208532967a19cad0e2bcdc446fb91831389dac877824866e1069b923ad78cad2121d6fafb212f0670c8cd5ba12c92367d2c40ee394b9a63ab021b2f938ecd82b00dfa0c9d88581d27c59fb20f95684a8bdd357b83bb2d8e4ce30f1b662d8635345ce8fc136049596c2af91cbd91528468bfe209f63a84b3bb68c145ea50ccab5948fb8970ab66103c484abb31d67c62d432deafe84806a59f3435e6d4f87f5b68a2942e89b6d56aa88810f0ae60a7bd08799f40fe2bb9115c1c710ed456400bf1775157a99db3c51d5474a361d5a7ac571730e227a605538d8d8930e0fa05065e797843349b951d824ff825efc12f6d7c669d58120260edb0df9e214a46fcb746ca5a1d691ec2f9eac306cffe6ab2db614adcfd9db8dc3b630f8913739567941afe9464abca81895c53b38f10d5bd95df3354067d251184680c5609cb6ad2c252edb24b2b613e69f64e4e2fdb600a47b9f9670476be7f8c09a1d83f5c272f168efff863706d703904d04b17cd68cc77ee14e2e977135d6b8c4e12868912e96fc6f0c37b10775ac2eea537ab91b6d5658ffceaa93ea7c5e86edd3b0e1a7106cddfbf985678e85bc5ac3f611cb5c8e2a4cc5d4ca903bbdb1564aa45aa78c5e90810870ca3be9edc6d7607e9d2640c853f5ab63e41a8a04dc9f9c80bb133aefacb27739a0f7b9aeff17765010c2d6eb9c2961e71ef04c220c8b5db97f28667f9bfaf1f3cb228b9435f1414907880f013cd8813ae143d71a6ee2b4c14a49a027ad410d72855be041e4562eeb3ec2779fb0cd2172bcaadb5477ffe00eebcac823a72cbbdf3f7a7b6fa343077fbcad6edafcae9946632f0b35619cf3a97e05f9ed5cc400d12cea6035b7db7c7662f3aedaa329059c87fe5b8d4514fa06285ff4a05fd99b50fde1aa629ce2459a9c3a32b49669c17defcc6baeaf5c509d4cb2a6f49956389f9782196c4fdbdfe8f3a9372bb829b153b2c019666a8b8bb5ac74a3c0e1701b55960195d0537306db6f34bcb5a51b80280f2ee334287d6374dd42320b7ee88464faeed0eb07a1234734d87b001cefe0623825772307f25ad4be5f49cca12752a4cfb95da2cd950c6dc36532e24f2293e603adde1ca9f7b951364dec0fc1544e97b57b1e136b4329fff868a31bed1eb41c94ffbc367abd2fc2f94e62c8059765a5a606632d2d9bff636de8ddbefb6d9590615fa0894bb13de994611d3a4f68543b1cf51c3ad30ecc60a964b026a47171d0aa087824ece8d40eae9b49271c53124ce643a774230b4f32f836bacdfe520fdcb7d032c2a81da7a63652e85fdac544e630a5df514d1340329b03b34a6f38eda8e60269122ce9f862deb61b2894a829378ab8981df7b88f3d3183006b3fc2be49ed08366b8918552e44016353b11428b7da17a38f6313d1de2ef8b089647db62ef7e46b2f71f574d329dbe9e8de17e966c9c6ab347ecbe96ca01bee741867fc1c350b760ef91739671550c4c36357935e21ec9ba4f309755678771540046db733b13f7ffab308c4e41232584fce645855134eaebb4df00d3f84d039fff1667f8395f22870b88b547e8bd36778b8ed6160b3ecf3d67b8cfa4572a3635913d1a3367ef40f8a1c88d017a9498c5d67b1e3f62c8a495c7b1ad313d0263bf9f53dc5cff6c2981e7303193bfdc15961f9b9324e563240d605af9c6353a42de40e740ba8153bda41ed40bdbf3894f10f0e70091992473821eda9605b558d91bf529a45b036e646de31f1bfb89c25235f45da13bc2b976ad34eceb2f16876b6f9bc7392188445c553ecb3b01e91d4ec49e09c1c4eb11150bb0a51de687d6007a2128f6b9b26e32d16bf0a8096e043dbcfe433bc921ecadcca82fff3a99bd1056adfe480a28c0521c322577e5398ab83942889d1b122822b879b", 0x1000}, {&(0x7f0000001380)="bd8e33753faec6917a8b71b6ada8c4cc9fcd9cdb26430a4f3df295f605c5f918e4beb5b69b4cd3650e91099dcd34de31925fb324ae616858b19d087bce4687c9804d65797c1bce77f6e8c1c31aaadccd6132ee40915be36bd65aefc6ba72668623da7f54cf8f4993adf7bc8c87429931c470de7d4d62b0279d3176ae50baa16723e9bb95808040b4220a6c2409c1b70ff79eb5ae1265e62bf4dd5a69e98123b8ee57f321b154b6ca8d5d5912f0f574e84451d690be0159c3be639712662ce64c21441e5c81cd4403501b237da503b4bc1e99899b4b3bc6f554bf0124ce4f47b119e0af1a92a27da99a543665e3d72d37abfe25b77f079c5ab9", 0xf9}], 0x6, &(0x7f0000001500)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9a}}, @txtime={{0x18, 0x1, 0x3d, 0x49}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x400}}], 0xd8}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1181.983596][T13914] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1181.991977][T13914] ref_ctr increment failed for inode: 0x361d offset: 0x8 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:23 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000c000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xacf0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/167, 0xa7}], 0x2, 0xd9f, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000540)) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000419000/0x4000)=nil, 0x4000, 0x4000004, 0x8010, r2, 0x10000000) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_io_uring_setup(0x102de5, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_setup(0x4d0f, &(0x7f00000002c0)={0x0, 0x806a, 0x8, 0x3, 0x3e}, &(0x7f0000eb3000/0x4000)=nil, &(0x7f000028d000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r3, 0x6, 0x0, 0x101, 0x4, 0x1}, 0x3) 06:03:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="9e9857973b80890807c8bc4a4ed86729855fb8f94fe6836182874d8a41896b08d92daf55049a2179740b373a4dd8de6ba599fc8304dab26eb7dc3fadb377698e3377deb2eb381d6dcad583bcc62347e3f4f09aa0fc53394bc90fd474053a5373efb7090d2d444272f5a923262d4efd9dbcef6f18dcbb5b2aa56346f03c7993c6d7b8b1063c53b39039295af3ef77ae7b593e89d7cf54ef481dea526608", 0x9d}, {&(0x7f0000000140)="3c2d6cd3e5dace2a0c16f81512bc00fa93cb2b49b87f7b4f93728483048493b9a2ee4f03502537b78a97ce5381667c9fd1792d790d9b04958c81a4a221cc74485c4642fc0b473f783055668fa6e1847771e6a7a67b32a2252924c57a7d843639", 0x60}, {&(0x7f00000001c0)="83baf147047d1ae6026ac161ea00eb7de8476dd16d1a6bf430502a487f8c3fc969080cc600c0ae4313ba3791bd35e54138be61a582704bff05a5c51a148d55dc0578862243726988bfd5f146f86d317136959f37197873949922da062da306f0a4ed7d5f831f886b4b69458d3045494cf704bda285e6f677df109cb1456cabce70ffa3c27aa4b5dcda2c475d9e208b0817f0de972195a4effac7aa9f788e8943a9f59bacac5ab5a9bf61e13fe1010827f45013dfd34ec0718bc95ef38d4432e9c01bdd76d3237ece27691ac0f1c3d47c", 0xd0}, {&(0x7f00000002c0)="cffccdc8818a841e490f4720f70af4f0176e75b82f95e87d1e85a0d523f4600c50002e28b9485ce32be4a03f18e83b0f", 0x30}, {&(0x7f0000000300)="887d9092aec39340e2c60a2a8a4808b481984ae045fb30e549fceee786c141ce643f08efd53015b57ad3", 0x2a}, {&(0x7f0000000340)="5eb1610edfe1f145b6de744514c6b83a004dcad0c0aa629a1581fa34d974cef1f17db3e227a6dcc38ee491c4c9acb71fa83fe135bde3728a038c8c5c00408a70dee20b6d12acd4d54d665ef59f5191263717901e30c5b7ee0757", 0x5a}, {&(0x7f00000003c0)="d24ab1127a56e462905195d69115fe3df34f0d4c61f61961b61d0f8d946829293ffc2ee776bc2e29aff9b5552f99", 0x2e}], 0x7, 0x6) [ 1182.062112][T13929] 9pnet: Insufficient options for proto=fd 06:03:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00000, 0x6, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019ff9600500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000010000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0}, {&(0x7f00000002c0)="ed41000000040000d8f4655fd8f4655fd8f4655f00000000000002002000000000000800030000000af30100040000000000000000000000010000005000000000", 0x41}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000300)=ANY=[]) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) openat(r1, &(0x7f0000000340)='./file0\x00', 0x40000, 0x100) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x9, 0x8, 0x7, 0x1, 0x0, 0x4, 0x1a801, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0xb}, 0x1819, 0x100000001, 0x9, 0x8, 0x1, 0x2, 0x99}, 0xffffffffffffffff, 0x9, r0, 0x9) [ 1182.169409][T13927] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1182.177820][T13927] ref_ctr increment failed for inode: 0x361d offset: 0x2500 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fspick(r0, &(0x7f0000000340)='./file0\x00', 0x1) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:newrole_exec_t:s0\x00', 0x24, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f00003d3000/0x3000)=nil, &(0x7f0000232000/0x2000)=nil, &(0x7f0000358000/0x3000)=nil, &(0x7f00007d2000/0x2000)=nil, &(0x7f0000692000/0x2000)=nil, &(0x7f0000744000/0x1000)=nil, &(0x7f000053f000/0x4000)=nil, &(0x7f00007f8000/0x3000)=nil, &(0x7f000077d000/0x3000)=nil, &(0x7f0000749000/0x2000)=nil, &(0x7f0000000100)="a082d41ab05de4ccaa12c2098aeb1b4ec2720761d5641e8c5cf776de999fd28f07c89d86c275bc28c41beb8ff95a5f2971904b3e2f99d384c1cbb7946516f66f9799e491673dad8ed00fac101a898dc2aad6650e0eba098fcc55c6084c51709e904e80cce46692834c9f2d5eb236a8a7639024d68bd20295adbb6da7596df584e3dfa43881978e43c28735d3938727c5d58bb28390243c319a59cd17bc5cb207fe287993f487e59a79e6021a12dc186bcbf450f73b8b0c675b4b2449693df1add113449b51fe9a0224b18ccc988dd555ac15", 0xd2, r0}, 0x68) [ 1182.234762][T13951] loop2: detected capacity change from 0 to 131456 [ 1182.265304][T13951] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:24 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000d000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x9, &(0x7f0000000480)=[{&(0x7f0000010000)="200000000400000003000000300000000f00000000000005da94638984afc45373ae91f3ef000200000002000000008000000080000020000000dcf4655fdc04665f0100ffff53ef630001000000dbf4655f0000000000000000", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000340)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}, {&(0x7f0000000040)="68d10783442fd7c65111878af859464435d30eb104f453706ff3e77efbd7a9ded450e679beebc92545a5c2", 0x2b, 0x10000}, {&(0x7f0000000080)="b3d948129016ddeccc32fb059cb091443ecd8f87f14f31795beecd7fdea158456bdae688ed4ccd76a59046f43b8e0a7c7e1d33fd", 0xfffffffffffffff5, 0x1}, {&(0x7f0000000380)="c4d4fdf73acc35c553c43c061c686ab83a51565cba1fa604cfb15473a1fce6a71cdc515101e99ed01ddc45058e73e30815652bf23580cf34f284ec87fb34033164f78c66ae7485e114a440997d2cb83128c262f4a16778d643be45f3807d2a9f4b54c7955d0fc6840f657579560b45746408ee39b0d3d40d47cba7496a25660a58897a4b54c76e31cf8479dee1cc5ade47db4aa42a0c165cd44992e331711da99b6c63d0bb4498b298201b6a37a49ebd68f51cf5e25bc907324a2756c977b3cdc9ca95dfbb0df46dc9b78aeb21a42e21653a663caa92326f7f7705ff2a396f3a94a68c3c34749ee48424f8f9a017d671dda309588c0995", 0xf7}, {&(0x7f0000000780)="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", 0x7d, 0x3f}, {&(0x7f00000000c0)="42ab3fa086afb3ba4ea4b44019c917b1218809fdf5976785e378e6c2d8e83978ba382f", 0x23, 0x7}, {&(0x7f0000000280)="8f4e9359d81051a0ec8a0f3a415ba8ae1a054d8ce2e9fbe6e36995712fd35d34f6a9bc3f7ad2b57d0a3f33a90468196a262a35d49fa70c14d3073313a3ba3a9aa366ad0f80634b643695ab82f1", 0x4d}], 0x0, &(0x7f0000000740)) 06:03:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)='ns/user\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x10010, r1, 0xd853b000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x3, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1182.432590][T13968] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1182.441030][T13968] ref_ctr increment failed for inode: 0x361d offset: 0x2500 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:24 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1182.571840][T13976] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1182.580307][T13976] ref_ctr increment failed for inode: 0x361d offset: 0x9 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1182.605520][T13986] loop2: detected capacity change from 0 to 131456 06:03:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x109000, 0x168) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1182.628388][T13986] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000e000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x3a, 0x1d, [], [@generic={0x0, 0xe5, "eecc6f0dcb4092a836135255d0771b49814dc213b281366e5f1ee9782f3b8ca2827ff704278ccf25a867d53c5f071bb7f9c0eb689977727f6dc1a016b8279a070885385792108cd49cbbfde4677c9b33d6b45a2528f792bd4f9ccd0b89ba052347b527f68c175646ad0a28f1ac6bddfd5b6839bf7235045459aea34c9e05446080bf2dc44b9522bb2f18a59ad5887fb22a8cce2f4cb4b902cb2db6807e3fc4363a0a9b4bf6f2e7cec30822b4f05f40f8dcf603c361691f442514c8811b94538fba82434b9cecbea89e4c2eb49c4d7680ff72df60a17ddf17247d1d53a4e6a9f73acf0df5dd"}, @pad1]}, 0xf8) [ 1182.876162][T14004] loop2: detected capacity change from 0 to 131456 [ 1182.876172][T13995] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1182.891120][T13995] ref_ctr increment failed for inode: 0x361d offset: 0x2700 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1182.908776][T14004] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000020f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/97) 06:03:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340)='ethtool\x00', r0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmmsg$inet(r3, &(0x7f0000006440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x38}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0xc0400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x2804c0d4) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x34) ptrace$cont(0x18, r5, 0x0, 0x0) tkill(r5, 0x7) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r5, 0x0, 0xb) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sendmsg$netlink(r0, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)={0x58, 0x30, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xc, 0x57, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @pid=r5}]}, @generic="d141dab697476dabdf90df636734ac40c78d6d8796f48b79347ed0077cb2e526e3bfd02efe63104dc9312649a1b1dff58f6e0f36567cce11db853f7f"]}, 0x58}, {&(0x7f0000000140)={0x1110, 0x37, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x10fd, 0x77, 0x0, 0x1, [@generic="0d78e28ed6702175a6447c68cf6d5857abdcf6ee71433c2ce33dd2aeb46cb5a8f6e7c83d1f860eea75257a6b79d6909c418aa74d5730cf58221aedc6f46d7558e4ae4853c83e742f17c649c70247c158bee70dfa78fd22f4c683e2e4e1d5724201a876b88fa2ea70984e02265fd0728ee1a0075e21513023d6497087784acce397ab6d2c85917268e388dae933a9d39e44da42a7a5bb84cd9e8b2c6f40164981074b3c9ba3418d806b453746b01808c8e863bb62d4a8e50f5bba593b024df84c27d600f7ba6597900b3ddfabf4e9b9bc9956fe71af996fed68ee40b03a82496b7c353eae201478e4a602889584fc1b47cd1e1a09cb98c29db5a86aca9e60e5188650e84324d0d8242792caab6793e249448a2a5ac0651ef2aafa6d1085ad81cad486be2c0190a22d949162e5c2be867cff4fdf3c8e0f89a4b3b3eeed05759128eb7e0f9f10da8805a8ca3f3c49f1fea3f056a6acdb47d37356e855d7ccf1f82ef4af94444d2e1753874e6520a84737370c8e9e6529b0d217c3d336ef2bb663d8f9a624760996118f67cb58154d26fe58ed4a801ff6e69c0080a49a7b8c2282b5aaf196fc0382dc7a0026758c498df0b2cf61f091d2998487df47fc85329cd8829e06c3f78ca65ea2249dc707ce1e7ecad5843a0ef40c687b9388331ddbd3f7a3a561a1b08b0cf835fe2fa27a1e2a8e172427f2a71e86a3b5b5e7dd3f2dcb6ac7265efe7e70ff4403644316f26093ec5f4c0520f0c0d7b5ff08e763f8aacba3301376b173fc72441482190aa466017c92a659c63e4f1ae255965e9531d6f75b44cd593b1ab898fa2a962411e6036d7f816f18646570b0854055f99d275471450b1bd2e57d1dfcbc79b8d25124452449a30beb9d06878a5afa9159fd1a8c5eef2e1fd4cbbdeb379b483d3d3eafc5bc53a562a0f37ba6d9ee33a954914c83c37ee306359e485e6b16b3c6c96b9dc24d7b419cb8eb0efa2677a3fde30b5762bcd0f25a451a7f33bc0a1dd6e16e5b56a42bba23a564e549bcc934ec942540519a01167643b1bf9f66754c036e7266c6af723b7ee708466c10d996c02b9fe39068ac966360c295e8ab070efbec2d8d573693522be2c0d226550fa0bdbd7e183f59e013354cfcdb565867c13ce79257e163873d8611e8600d6c5fad02c3ca4527b06df8c8e407e652c7fe88581ef4192ef13e2963e76306b37b35afd201efb047e88606d1585c893548d4add21fa505bb37ba8a96462da5e33bee677426e2d6d2c6ee1d2ac9179e972ab8ee8cf33fc0d813daef7dfe115acd75dc4efb2c2b432556e43e24724004552fde97fde991db3d81666e39ade2798f32de6d9c1ca1378fbb7c6ff031fc393c117afef16203b39f9af3dd80f8ab432f06d4cdf00dd09a12b97c2460471c6e7c5a4c31ff44aa726650f2ee60f663a7a63c67f6f09ee9fe8948641d2c14e30cc9488adabd36b8e871811b7bf853f2942f6d33e656f7725f2a30b93258eed94c7884f8333d85c54c36be23b598705bf0e8bfd3fb496f046e2bd8072c9e28c2736d05a15ddda53de86fb5c89120ba8c256df57cb470355d22e498b965876165d306f77e9af3e8f350443347d20bf2481c61eb47dc9436184fd05e67cd0047b92918284f71807fca49d84e599577f00766b979804e4d212415b73458a749b918caf3c79f72730d122eb1a4d8545689d7b0b4db6f33919b10e54c838d82411f2bff754cac9740ed40e65cd95f875a8e3784c3970c0b57ee7d90118fc912b14cb6967acb4e110b2ebd9556655fdfc454c3c3476a8ef58590912d36e533f924fe3fc212bdf02ebf5c3bac4c048901d51723dd3241ec87bdc88e1aa5427475c112d32551398a0ac8c453c80355eadcd8bdd4230942b8e4c862c516e638d59af94930fb575d0bd769bbd6ca1d9e138513a76f2e83469c62897c88ce511b4c2bf2e25075d1740477a19ec3b55877eae44747338b2915983c57710033a924477d1f07cd9e74c8ac84c3278ef9b3589ceedfe8a8c79577d652344ac4f2fa454721797ed65a2db802d96c413b5307f55dbb8facbfcb452877727462bd5a1637aaaaacb3130df98988425336a0cb1d070d23c86fc50f3b64b320be23c413ad4af68950712cceae7c8598fe96ae55a3ec7e4610c2a7830c57194a3d3672e2ec3aa38351055819f225028cdf166bcfaf9d546da70677cef4f12a8c4a6194cb67c8747a32d15160efad3fddeac07c2db5981ff46e6c55022c26067a17995e658280794b24f42b507d5673b82972d52c67d92635905cf1d637be53fc7553ba5f1381bc409af7b338770e2159984165fa506c97447fe4777fe2055b5a6f13fdede511a943d32194ac102249d6c11cbe37f2cddae0ee7af8b65d48c4f6f4c895bad2ba843a16a15b15cc36d5b3f7723333a8c2d767db06a44450aa6d720eca641febc05ae51cf580c5c3c4c26a5a67b3028d5e0ab59df5cf74f841661d786b86712a84d50e6b8298dd378ad534a0896c9c6206e06d7958d8e6482fcad2ba23ac6689fb94c800298d9a4bacc98d5750642386c58efa0d29b50df462599327effcb8533c1f968cd306ec1ba0896b7a8b48f0a4c64fce086a5515f7fbb897cc67508dbc7eaad1412503d0ce7b3811a9d42eb4cbe15f3e9fe7b872bb0b4bf949baa00c129ad34b33cf1f039427ec1358b1ff06649c829158bdd5e6796395de22275b0a3cc4e25957520ac8b86d0f231ec3db0143d0ee8200a7449eefc90611398733a470c767d32a1e764f13691f2db1ca92b358e64098e185cfdf5c68995e2f8041844ff4eec94a2b7b75b854220e10d27fbc97d6a4a22d5081aadb5c001adc5b9b5c26d5dc29bd6a94443da4c52944066539c9c673b5f614492e550ddd0a7e647b66e2aa2759ec50b2069f4a083714f677b35be7b72375c0f5d2c3c21e3df015aa7b5a316f3bad2036af967da4adcac8bb19c06060e80551e24150cec1478e3e9ef53b9b509f40353904917c94b72e7bbdf47a3bc5bb94e8a81027e8c575471bb61bef6e65b143f800aa98bd972b10b58a4faa66077a52ab9e13f4bfb43675ec7d67ced817b563a91ec493b941809e9e5411a25cb950c5ac5537efbee827bd7d285d82bc1b12762bf7c2f462812f840eb39a7e96fcf8301bf5ad0e676595806c2aa5341426db9095be47ed7dc231a0947a91f1e6396daec1ab5e7b14ae91220ebf65ce411978c3c1fd91cc2432c1379a938d2900b5caa4b520f28c019ab9f2dac038f44d018956522915652ac0d47cb1982329b9110360909402b00cbd170178166274b6ccd418f685b996852d79a5a31738da65e60c307d942ff0fc9b1c185039e69e966fcc6a9e2e19cc260361d0fbdb01fc1b09caf8181c81345c4f4fdbdae146f00e03c5e52182f4bcf1751dc6ac3e3de17e6873daf906f50cf251bf1b0d6ddd8cc9fd944e5898b9b47d2a2ec2bddc212e1ea61f1fb9be15c04b500de7ef2c108f4d2dfa75c97c23b227d091fbec32f33fe2fabaf92e9eb3cd405ccaea241bc63551e230c84f1e89d5fa7bbe4780728e42b7a67e98667b37aa835ce459fc9eb756d33f90c0b88a63cb8a38cd54fd100235bcc319200860ec5ad3356b496b3f035591d4dfe91a05345bac2e4c84858d191e34e6e30e2632867efe89f055bd36e71817825c2fdb064d56d21bcee98134ae381959f92599a1611597a009d441ff3d0db68ea477c4c2d1d4b526df237e8a02ad114b65e0b3cc8327a93081c64c62bdab2475f51aaa1ebbcc3c936345528e3d2ea7317985daf345b6da2f65327127996e51b9169311a89c73b19f1c87d6272e3eedb102e5309ae98875c4b86c60b318bc7ebde75559be509254037e89a5e4a64b5409c1e31ed9a30b779c18acb2072162a5933eb3fad93770656b6d7f7474c52d3dcc34dc666212488a31f0abc4e84167596d0a28b72a0ff1eb03fb83ad0d41140f23053d15ef7922b3b1f54a7d5b92bf50cf3a4518ca544fdb02ba7afd05bd9a528904fadfc8139cc141afb8af2ac22e450f7778cc6d200440302985cf4f27ce5285301dda39816205643ddca8e603ef51911dbb222b6d854759d8a367cf293ec381325998b64fd36f6f19bae3b67e50ae9ba1b80ac932aee87eac335e708b76bd27d586afadcfc8895395db5bb402f4fb7b4a6f0b938acbe453d4094aa901fe555eea93284198990ecdb86dc0bdc6c4adb91ca0144a670f8bd795b34861b033c548b6ff71dbf2ace1a4de596becd4b44f19eee265129595819463c4ebf0e9a0cb186e37b9efe629c225867aed51008f2ad11a8d7420169072b8f3ae88e6165f0e798dc3e7cceb5a42f9ebeab0be9c8f410a99cfba39a1a0f345ade17d719b74ba0bc869e4cb9895aca6edde95c33b0f7c83515319689e0d178088302b3d6d79d4c4a8ddf40417a3602589252487a5fa0ee245e9a83d050c9ad2b93becab1cbfb36bb1251c0e8541bbb2a243e26b24ba12a36b4d5ecd12fb02bcf39e47fdd5b23692a9c7ea91483037d8d36a694588a2f91957b08dfd04a1e3573c161009ed1c4df4a0e4116ca8216ced28150887b7b88df9d5ae56fa154ec0eef037f7c26ad80f1299d06d977111400d9de215050dd4a8bb63611e2ca72f4044e930e8a81a7ce6c99fc8d6abc970c4e6c7d4ec855e3a5ae1ac80e0566298c9deac5da11b8fee412db74b275da98c552b255462a0a2951df5cee681385e405ec18291cf560af09803edb7a95d45193d0bf160e99ed34007f9bfc2431c3cfe00192661535bf078dbb15fb7b62cb1283f082b4d186ca5c7e6deed5f0703f503a75ba93633659bb51e14205bd82160b9be8f1d37977f6b6d8feeb1c9f0715e6143752d9f49a0057643169e4a157169d33cb174a2c8092b1ac2ad0a76350a958960615da3b99113da282a3731ea0f5f09062134e5fd14f93fad6ab0c30f7ef1f07a449190e432c67a3ac0536e65a5cd85bdd9a8d4ed75131973b0cba4999f45598fed40fb52a17ccafc7d42130eedf53182d52045e5eb9c15f83039aa5c6177adc498ef117dee84b4984475d4c178ef7165814c6d1a68e03ca75dcecb958f6d3564eade6db613d368ded3f53fc174e43fe43c1aed7da30b590a86e653ca3ef3c6aea0cfdd50d23f9f59763078b22a46fe23869313b254ea1b4af63ed4d8cdbc24e132b7b3332fcbb34174a2d42cf35e37fc934659f5cff4ddbfb7e3da957ac153fe6c719aa832f325795757969488060a073054c26284af82fa946ab7b3b47f8153c5e2a0e0368300df6b8bfe7a4daef6afea87822a5e8b22bd6d13df6ff01cfadcbf5c21911ad4adab5f90cdd294bfada31d8874fb09ecd91ea50db23c77a0cf41b177efd1c22849ab1d78b535e2d07d326357aa41da4375e3532ed011138fd889bfec314fd207e90a99154a160483e49becaef89935a611ad6ef3cbced7c6b05f56b843308540ef4f412d3b6207a0ae4301ccf473c3e77b244134136c69a32584ce6d0395971ff223a94fbdff93afb7ad7574bc62af0c9a8105f611ce15c20fddd0e3352f42422c48014166328259114f06871a53d6c5e8a90f5a240c8a33bcf87e2415b0ffc08de0ac6f8c38da94fe5ef0cc5a397c73fb1e381a9bb2d08606232d92a71e53fd8b33594c20e364dcbf8a7e13fb0c86fe6adfcccb9202705055525821bae7c613aa36dec9ec00cfa9da8afaf7f4a0fc87639b5c29803e30f50322d0bcd114008030f0bcf02324a64add81b55440f9fcddebf7b693aec0cb6b31df8f06113b55b56ca01b8418df711c95fabea5ea454812b454bb5c", @generic="f4fe292c7d932a5f", @generic="01dc58709c5c848a072ba6b8439fb3a01ae5c7dba860309b83fd1f95ef8de3f967554300619b25faa41352ee32ad17225c53ab1e774174509d87f2aae763a4def7d9b889be862891293dfe9d0f7fe98916ccd7f5a0b7befc2e743d2d273ea3bc9e4f1c98f1ca18f9136ca1b9bb59ca14c70039cb2ba1439f2ecd1d2c791bcd724fb0cdc5f8cfaa8db74145fb086e4781712e25ed9f89bef14232462bd73a3fde81a0f78660a84ce998b1168adca3d3611ab85e67c223a846fb959f26942200baf2f2bd08443bfd3477931f56c4827ac55a", @typed={0x8, 0x52, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0xffffffff}, @typed={0x7, 0x3e, 0x0, 0x0, @str='-.\x00'}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, 0x1110}], 0x2, 0x0, 0x0, 0x4008000}, 0x20000000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000110468fe070061f547769827a46f02f08a00000a00010000000004001a000a00030014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) 06:03:25 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:25 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:25 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x5000) shmdt(r1) shmdt(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x25dfdbfb, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bind$netlink(r2, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x824, 0x42e02) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@polexpire={0x324, 0x1b, 0x200, 0x70bd26, 0x25dfdbff, {{{@in=@broadcast, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e21, 0x8000, 0x4e21, 0x7f03, 0xa, 0x20, 0x0, 0x67}, {0xc9a, 0x3f, 0x7, 0x5, 0x5f3, 0xff, 0x1a, 0x6}, {0x7ff, 0x81, 0x20, 0x7fff}, 0xf5, 0x6e6bba, 0x0, 0x0, 0x3, 0x2}}, [@algo_comp={0x11d, 0x3, {{'lzjh\x00'}, 0x6a8, "16999b26281765e4fc46d8c33c95fd9a1b30876f3ae234e1562e39eb56f69abd037b79f788e61a66d1f186b03eebe3f2c4b5ee7e421309f7e043b4c4fa7ff4c621c0a4de2fc378029f6599721c73121dfbf8e7fca0758c943727cbfe5f4f7b6e8bb8b1d8ecfdb28cc107817e3f4c48bcce5cd13efed787f5ff5d91ec02562100f4eec74fd45afdfd4c99c8426d6fe107739bc54fe7b819a44aef7e02dde4f26dfdaf726704d279f3e79c032a01729824446a46613ad70c2d6224e681e4dc236bfcb7a6a0592511a5646f676ca887a0869ac4b432a1"}}, @tfcpad={0x8, 0x16, 0x4}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0x3}}, @offload={0xc, 0x1c, {r4, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0x28}, 0x0, 0xa}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0x4e23, 0x7fff, 0x4e21, 0x1ff, 0xa, 0x0, 0xa0, 0x29, 0x0, r6}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x6c}, @in6=@ipv4={[], [], @private=0xa010102}, {0x1f, 0x7fffffff, 0x4, 0x1, 0x7fffffff, 0x4e, 0x8001, 0x7907}, {0x8, 0xa87, 0xfc0, 0x2}, {0xcd8, 0x9, 0x100}, 0x70bd26, 0x3502, 0xa, 0x0, 0x8d}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) [ 1183.196099][T14021] loop2: detected capacity change from 0 to 131456 06:03:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r3, @ANYBLOB="01bc020010ecd3d786f91f"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, ':$}'}], 0xa, "3bf4ff3e95fc0dc505281b679596fb180dd44c8dd0356456557bfc8f008a36bfb2aa45b6ee9c51923b8e9c88e69b95f1a241168219d5203afb683cfd008e4121391a71fdf1ce1eaef011f105bff3cd9a715e4eb0416e7b6532753b57edf796678b921117824dbeeb69907e7fffbbaad92d264df492a3a1c1c609554256f656e103be603913c76fdc7790b28151d67359ef6471285d070d5bb2ef34432b1873a276f82d69169ab5faa5768a749a56817fdc67a8202a741cbb0eef48aed78894ce6b5e3f78770ad01097ff0e700f0db499f0beea7442a91bffdd6279f3905c758f60f7e16c8e"}, 0xf5) [ 1183.269782][T14021] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1183.276010][T14028] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1183.288688][T14028] ref_ctr increment failed for inode: 0x361d offset: 0xa ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000030f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1183.364055][T14033] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1183.372466][T14033] ref_ctr increment failed for inode: 0x361d offset: 0x4800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000020f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000020f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x80010, r0, 0xf1d58000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/60) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 06:03:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000020f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:25 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1183.585966][T14055] loop2: detected capacity change from 0 to 131456 06:03:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) mmap(&(0x7f0000454000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0xcd92a000) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="23000000240007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 1183.636345][T14055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x240c80, 0x0) mmap(&(0x7f000078c000/0x4000)=nil, 0x4000, 0x2800003, 0x11, r0, 0xb9faa000) getsockname$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000100)=0x6e) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x200) preadv(r1, &(0x7f0000000800)=[{&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000740)=""/136, 0x88}], 0x2, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000340)=""/134, 0x86}], 0x4, 0x1, 0x8) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x80) utimensat(r3, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)={{}, {0x0, 0xea60}}, 0x100) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/89) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl(r4, 0x3, &(0x7f0000000500)="0c251c0f73a975d458b01071d4cffd5ef6d1b5c9f84d716dc86413a18527a3f5c138b24d4c68bd2c2e235a5d66a1f91089b1df0e434c05f614c23438f9cd4dbb41b4b9a15cf38bf303fe") 06:03:25 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000040f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010100"/28], 0x1c}}, 0x0) [ 1183.811361][T14072] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1183.819782][T14072] ref_ctr increment failed for inode: 0x361d offset: 0xb ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x800007, 0x12, r1, 0xd893a000) r2 = syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="408f3af9061895ed6513c77e67", 0xd, 0x3}, {&(0x7f0000000180)="ecfbe3e6ec643b15137a09a1b3d2636f76114566558f115902f64d5a4472e7cdd655374cc54fd2e1a835d92dc3f436f0c66d04a1b61e1e1e", 0x38, 0x3}, {&(0x7f00000001c0)="be6f5e71bcbac7c94ccd0f878911b6170b305112eb23172bc02953350ef228ed46d56dd176129ea046c7d105b6261948185a3fb33bfcc16a1de802468d3fbcf5d0529354460a79f627db7813d8d3440234d94fc8ba78dd53fff5c8d41b87ebc62fc295c5f5f71a7e5c6d7722c28d3b8181dabebce50e49acebb619832c8d65f5375f723e838edd5c0998c82ff2c4f90f241a6e997386cb518ca37c159017a78df363b6452422b05ab2e1a1129b5ff89bb6e7e847cc15d1803f35ca44710a4e8ddb7308", 0xc3, 0x101}], 0x222004, &(0x7f0000002ac0)=ANY=[@ANYBLOB="40285c2c66756e633d4d4f44554c455f434844434b2c666f776e65723ec175f37410c36b162203c1cdd97e952046fbe1776e82f980a8802290ed83940dd0837d82f6669af91fb431323ac1a6157391e3d5777670f5d9dc80ca9ba8052c56a3b12aec6d0b82c970ab6867a2f61de458c0401fad7a947336af03ba4c42825f92d38c8ba3361056d97be5dbabd289b7bef06c8a29bc6895b2b50e06ce876edf92027d137073217fcf9263ac76a6b977", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2d90262c736d61636b66737472616e736d7574653d2c7375626a5f757365723d2c7063723d3030303030303030303030303030b47f883030303035352c6673757569643d38646365633936322d343953342d300507612d626631622d66343035303334"]) preadv(r2, &(0x7f00000028c0)=[{&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/211, 0xd3}, {&(0x7f0000001600)=""/254, 0xfe}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/131, 0x83}, {&(0x7f00000027c0)=""/215, 0xd7}], 0x9, 0xed, 0x519) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:25 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xbc8051858e1806e9, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b", 0x1f) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000200)="5b32fed2a81d3b06b0ddd34f29f27de97a0ce91075eb489ff056734c322a803126d012840ce18b62df8f959e977957a0361318e27f74fe37328f3f359229d51573055290e088042f22f299852f82b13090ce4230d0421250c7a0e9e874f9ac48a021ca48593bfcc3fb96aba3f30e40b7e35fc3b8914373901e10f599bc00312a4c2f129b7d6a7bc11b55f6c49bc72247db37682d3e6c78c880c3f356979c4cc6ac71d03e589e3d6f45f288e9653d30c5a0ab6277ba9f1e439784", 0xba, 0x20000000, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x32}, 0x80}, 0x1c) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @loopback, 0x1f}, 0x1c) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0xc6, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x2, 0x5}, 0x84, 0xbdc, 0x9, 0x6, 0x7fffffff, 0xffff, 0xe1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000100)="0ca39b2b31d57bb129d90353506b0782fee8ac", 0x13, 0x800, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xef) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 1183.960841][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1184.076446][T14102] loop2: detected capacity change from 0 to 131456 [ 1184.115887][T14102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:26 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x1, 0x40) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) read$rfkill(r1, &(0x7f0000000000), 0x8) 06:03:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000001880)={0x5, 0x70, 0xe6, 0xb2, 0x0, 0x40, 0x0, 0x7fff, 0x800, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc5a, 0x1, @perf_bp={&(0x7f0000001840), 0x9}, 0x100, 0xcb6a, 0x1f, 0x5, 0x23, 0x6, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000001900)) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r3, 0x8, 0x1000, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001980)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000001a80)=0xe8) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80000001) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) sendmsg(r0, &(0x7f0000001800)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x6, @remote, 0x28000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="9dbd1b44f185093ae0beda3812d79114f2c684c1e088035c850b1cf05707bee31241540fa57ef12068a816b3c02c834a42b5e598a4cfc3a40c29be63b9688f667d681210b2f7aeb8c4c51a8b711dc9f69d71669d1a3154b08c6c21094f13fd29a74dfe162c49f18e80464d358a2ae92f21777f7f22620bbf56ad19e4969477e864606e86cd8e583cb301ae2d1e002beb9ad1bc706991412092e01db39910f40b90e31c0eeb1539bfa856fff5a124cdc64b62696382e81d7e9379b74b0312e1fded040b2c980f945c5fa6e7221bf269904b0470a825c393d4c41a14f4c2d1271ac8084968a253e22d5163a86448", 0xed}, {&(0x7f0000000280)="f00f924645805dc1644e63cd6c3ad891243a046643e58242829096506b8d727be7111db58bb2fd028ba55d8e48727c9642e502f526241cb94e50c084ced27cbf099c909e96afd529f0018aea70f32aeab24c36e51b4db49a5ebb2bb6e1cc47909cb30feb2e35bee9656f72fde5259d51f7cf739297dfee30dab9ca19a318b7a50a30262c7ba93585151d5fecc671b659f0976bf490e5ce21e15a6fe7be1529972e5f41e5f55088d9e533233e1ba29538bb1e4f3f66d02c3b3f47114fee5bb70a7e21d8f18562852e9884d6a8904a", 0xce}, {&(0x7f0000000380)="ef14944feff49f4703247109b37b489fe321ef84584fb309da3a5a58ca", 0x1d}, {&(0x7f00000003c0)="8d86cf3af8501e77fb2b6acd3db702c59a92012692c06c560ecc3e16fee6269d787e72d848fd7031d870e39cfe7d8408cbf47b11cbf758aba4ec4c6cb337aaab1c823ebaf05a774169abb8392924b4efb6e3b65cb1442a8217efbaeee1264189e99fbd3b1cb0f535dc2357835be8be150f4ed264fb630f94daf86830dfbae44db8f8007038709fa83fa885d476398f177b91541a9b3c733bf6a9222162fcc9e65e40cbaa6dc99d2d2cd01f184abcf90fd62f0fc4538ada4ba0bd294f4d7ba7004070f3dca3084c9effbe945ce49932a922bb6970bb80b9a760516163ec", 0xdd}], 0x4, &(0x7f0000000500)=[{0xe8, 0x1, 0x72, "7a794b719c6e36f75aaf4a4d61e8bb06809bdfa90d69ef7ddc9402b5b708595b83b590f599fef0617b18e3fe95afc47ac24847e5e1a97d16605168c356036d62e3c5328806db005bf6c691e9e82373f57efc6a8813f78c8aa52757ff92c7073ed54482ae1bc4a7024dc51f91565d6d896043edbd391f850a3edf968e2a7c38920eaf17501b30e53d98dd154498aa8f915ced0df8197691b7e73ee6a02a2a64f5a35ba2f56a6e84b26d3afb4505cef1f7500d7c741970b77937548ac4fb7a78f49d22056676fcd77b8097ba9fb716401242346e"}, {0x1010, 0x328, 0x9d5, "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"}, {0x108, 0x97, 0x7, "546b5b6e231140517008a644bd986836a0f6621556b8d85cdd19b85c25ed29b3e70cc0a2afc88c886b37a58cfda1959bd787128404f8921906e755af630a64d798cbedd2adfe9205818956a7210722253c0b58fbd6a90c2be4824007860b25f8a6afd91aa7da4a89c182bfc24aa6badf9df38a44294a26b5c17da3c600f7b8b9646c0fcc63d1414829abb97806769aa0764c1fbc64e8ab308e3a62597a4fe29a89b185516002ce2199e67bf5aae7f5511334c1f1edf4f81e9c8e6edeae71bc8b6cffb6db20b6273f051808040c466422eacf119645b6838500c0175304bb038c067f4cc433ba20339c74fa50bbcd9bd82b6b40576e0882"}, {0xe0, 0x111, 0x8, "b8995e634d1e0d35c3e64b71b5c4005f1540d0a21d28756d1f615bc292c53c5c761ebda5eebb5e108093d1b4941ddf6b3c7b5be16256fe989680bb7d7cc042ae0a53203c286d9a07b237c6420036d599a886a688bf661e5cc9f9fb4ad3bd3e9376335df2ad5d18eec201d07906bc2e122ef58552c3330dbff83315e441ebdff4b62682d33f28125fb85ff4779bb23ea6258a300ce44bdea309c518e22e0d0562595b85cb88fd6b6435a00b69b93c92b32ee067a432736de97bf3f0c25027c5297f47e6ed3b6a09ce46fa1363bc"}], 0x12e0}, 0x20800) [ 1184.139560][T14097] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1184.147940][T14097] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000050f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0000001000000000"], 0x109000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x1000000000000, 0x10000000002) flock(r0, 0x0) [ 1184.427623][T14129] loop2: detected capacity change from 0 to 131456 [ 1184.448604][T14129] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:26 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) shmctl$SHM_UNLOCK(0x0, 0xc) 06:03:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000060f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:26 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0000001000000000"], 0x109000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x1000000000000, 0x10000000002) flock(r0, 0x0) 06:03:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) sendto$inet6(r0, &(0x7f0000000080)="42d23d9acb12a5ed35ea54398539a7a50e723ee1b312dd08abc93cc523f57afa7e2e06cb89f744d606c5b7ad7798a00174806ae18d9dfe5f38bcde6d1dc77caaa5577ea8bd732dfbb91a42b573e85152942a2aa83106ae166e0e5cd128605696fea4a5c285619af8663589dc85618bcaa48ab6e67165aee17542dd1b55443bdc1c4e54f17259285b100f7b1422beff4a68a08d1c5d09f7e3e5c99888e51698eb6b8cf8dc6bd322162a84c67d95aa58ee14ba2079ef57e4a5", 0xb8, 0x24000841, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, 0x1c) [ 1184.766390][T14144] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1184.774810][T14144] ref_ctr increment failed for inode: 0x361d offset: 0xc ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1184.806904][T14147] loop2: detected capacity change from 0 to 131456 [ 1184.865923][T14147] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f00000025c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000400)="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", 0x401}]) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000001400)=0xf1, 0x4) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x8, 0x1000, 0x10000) ftruncate(r4, 0xffffffffffffffd2) fallocate(r3, 0x8, 0x1000, 0x10000) r5 = syz_open_dev$vcsn(&(0x7f0000001880)='/dev/vcs#\x00', 0x8001, 0x341181) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x80) sendfile(r4, r4, 0x0, 0x80000001) io_submit(r1, 0x3, &(0x7f0000000080)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, &(0x7f0000001b00)="b039fb6ae3542215ab25faf949bc934dd85065dce83d4910c2223963d7fbc19bbd63edabec041a1eee232daadb95512886998b0514a000c42e3977a9ce1b57dbb12ff514e7608b337bb2177a7be0534dc3c504227ba24606f7d565026c0dc97879e7", 0x62, 0x100000000000000, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x6, 0xff00, 0xffffffffffffffff, &(0x7f00000016c0)="d665c01e8f03f69f529c7137622f4d4d3fe2701d9b6e06ec03", 0x19, 0x4, 0x0, 0x2, r2}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x3, 0xd3e, 0xffffffffffffffff, &(0x7f0000001740)="1256e75abbd978d04f2f590bbbcedd4ed1ddfac150bfaf390bf54521fc1b6c1ec9513a1317866a3495dc7ad747885224f80bd333f728028138579ba78076df2a7a0d23dea7e3a89c2eb96093579b636838696a4a1473f94199bc864e5ec42e860348937fa7acf0d0b5ff556af45ce80e3dc3630f22b62a3d15bc1c172b64448911ffc88f1a45f03a127aa0f8fd820ecca734181c6903d7b6e8f0d3a74bcaf31d7496098e908a5cfb0c66820674382a059fe81f33a979af7c66f9c6415f76edf9bfc9ae8aafebef3b879a6a6d27e311eac6da127b77405a11252930e27d1a148ba74f5a48c9408ed7622f7a817280682edf79c12fa3f8afdf", 0xf8, 0xffffffffffff8b6d, 0x0, 0x1, r3}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x2, 0x101, r5, &(0x7f00000018c0)="9848587c03fc78472f117aeee5221ce7db7e9d925bccf0cff257a5783bc102d7c99b9510c50f6da3720d5e9edbe5f278748b4589692f052a9b4ea4c998bf1ffc500d7d19e30838b3833d2f6def7e16036862f596ec9f9854618024526a2c7b59db4ce0f3951cde241089c97bcd8a4dcab5ea87375e74301db599bd54e1be5b416a8d3a0aa6102f0decad5433b0eab8569a2265396bfe8953202d3b056c4fb9a9030df43e923a43dc46925e317e82414ec8ae2d28582038d09dbdbe1948ffc7724679b75124e2609407afbad8d31d58e01269532d99f104d5e5741dfcf63c913568761254d0f4d84daa734a7af89c", 0xee, 0x4, 0x0, 0x3, r6}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000001a00)="364d0565e91f006f3873f4737fc0ae70d016be86d98bda45c92b11a794f8dd47a10c553b58a88f43900d515438fa9a6d7e58d0039655f58787d47e8ca4e0fec3fb261aaa25c890b392", 0x49, 0xffffffffffff96f4}]) r7 = openat(r6, &(0x7f0000000000)='./bus\x00', 0x82, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f0000001600)=""/63, 0x3f}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001640)=""/57, 0x39}, {&(0x7f0000001440)=""/161, 0xf5}, {&(0x7f0000001500)=""/3, 0x3}], 0x9, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000070f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:27 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2201064}, 0xc, &(0x7f0000002940)=[{&(0x7f0000000140)={0x130, 0x19, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x7, 0x0, 0x0, @fd}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}, 0x130}, {&(0x7f0000002a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}, {&(0x7f0000000500)={0x1178, 0x33, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@typed={0xc, 0x8e, 0x0, 0x0, @u64=0x200}, @generic="40902d8408afdaeb42fcf9fb3aa9e5fec0b1b8de0310a5b913dfa3847923b4e24a1b40be9e9eb9403930d9a27889338511eeca7258f98986643abaf7e00f72aa8911ae1cd4e07838b65f3de8b1e2975f05cc51ac78effd2c496086cab9db888c7ed64ebcde634b1e94237da4261b8456ccab9648fcc26531b0bcdd43fca941d39995ebe5943fa83f49ea59599b74ec75aafccae5049e38ced51e85ed49d46ead364175ce", @nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x59, 0x0, 0x0, @ipv6=@private2}]}, @nested={0x109e, 0x27, 0x0, 0x1, [@generic="0eddbeb6b7c8b8a8e2796a99205787e4f527c4c21600153b99be200798c61b9ba2d6", @generic="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", @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="703ee298f216f7e7ebb911402eeb01ff1c589a0d0b82f7a950d2cefa4d19a9f065fd5e23ed0b7465c6fcc6782f07ca1c1d70858947167530c3f8dd811758", @generic="94a41baa01fd6abe8754c368d63fef7a5ea6f227ac0ad51147efdb06e9c2d693a2d8", @typed={0x7, 0x1c, 0x0, 0x0, @str='[(\x00'}, @typed={0x8, 0x38, 0x0, 0x0, @fd}]}]}, 0x1178}, {&(0x7f0000001680)={0x1280, 0x3f, 0x2, 0x70bd29, 0x25dfdbff, "", [@generic="889b3963d1a24f07ce41c314b8e37b6e8279b85d42a29d0e1bb28c941f30faccfe6456e946f96abef661f1f65a4dbf833471b6b542d7cd647b963f803e7fcdb1ed053b77e807652abd451ec4aae01a2601044186d2ec2727d3173a28fa63210489663613b2a8bb3558574cf07d0512b4594677aa7749fa67193ac8d9c0a54535a4ddfc8336573175b0c478bdea6789dfdca35e7d397eec46d188819f3531a4f018c9c934f963fe84f6bc8699", @typed={0x4, 0x19}, @generic="22f73623b642f425d3a7a1f935cad7340e130b83eb5db33fb295987b56eb87b47c1b550661ed614b0b67a0475acbeb4f3e753006aed0033625bb9f885a1fb76c47dedec00098de652b506fdfcd4ca6e092455fc366f1c4704aeffc0245d028fc206ec37114a74e3670600bb0de1b52810c3078c583e5fe58766acca50889c7b2468e489e8e739854eedf104d86753e6f82939cda2fd50ac5eeaff949650aa45bbffeb9101e0a9802b8167c5ba7d26c15f9bc1f941eaff752cfa58b321b907958371f7f19b5a9fbb7c403c6a5416f7c70bfdf447341058729c54ad686bd328c4b76b7b90d4908e620c73311393929e09f7015", @generic="bb4af04bea3d07fcb4840cdc99834378d7a82482be9696869b3dd9e287f49446a44d698b99a4687164d1a2512b84910c3274286f758d76fd6d436d739fb0f9210bef5fb5caeef50bc3a22a3eb9d4d6f8d57d0d0c36038f6461087a42da81b6375b", @generic="030e3bc06ff9adf431541bffccb45f04aa62fac426e9d5c7800746fdf0bf974efa90175199fb8490993b011c115a3ed8a7113560972072bcb3bf059bc42a26217d6025b6e8e1ef1c0b2ed63e01775accbcf0bd5d1ded1fca4278716d60ac3511d4c908f0c70266e1f82176", @generic="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"]}, 0x1280}, {&(0x7f0000002900)={0x14, 0x20, 0x40a, 0x70bd26, 0x25dfdbfe, "", [@typed={0x4, 0x11}]}, 0x14}], 0x5, &(0x7f00000029c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x70}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, 0x200, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1185.169964][T14170] loop2: detected capacity change from 0 to 131456 [ 1185.209567][T14170] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000080f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1e, &(0x7f0000000640)="f47970da7c2fd541e0656c5762306aa606a0c2a76e59b65fa78fb184da00"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x3}, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xfbff, 0x1, 0x81, 0x8}]}, 0x10) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) [ 1185.292712][T14148] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1185.301158][T14148] ref_ctr increment failed for inode: 0x361d offset: 0x6000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2) mmap(&(0x7f000041a000/0x4000)=nil, 0x4000, 0x1800002, 0x13, r0, 0x851af000) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1185.486580][T14191] loop2: detected capacity change from 0 to 131456 06:03:27 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x8102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r0, 0xbee0000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000090f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1185.606425][T14203] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1185.614813][T14203] ref_ctr increment failed for inode: 0x361d offset: 0x6000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:27 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:27 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x20000, 0x0) sendfile(r0, r1, 0x0, 0x80000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@mcast2, 0x66, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)='wg2\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80000001) mmap(&(0x7f00004b8000/0x1000)=nil, 0x1000, 0x8, 0x80010, r5, 0x812f5000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1185.682229][T14207] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1185.690707][T14207] ref_ctr increment failed for inode: 0x361d offset: 0xd ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1185.741000][T14213] loop2: detected capacity change from 0 to 131456 06:03:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x9, 0x0, [], [{0x0, 0x6, 0x6, 0x1485, 0x4, 0x8}, {0x1ff, 0x2, 0x9, 0x3, 0xcb, 0x8}], [[], [], [], [], [], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000a0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1185.818203][T14214] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1185.826623][T14214] ref_ctr increment failed for inode: 0x361d offset: 0x6800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:27 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00', r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r0, @ANYBLOB="8c7f39d8233c81a1298f22ee49e9033ed45af336bc070000002e50164f5f69c016a1d8d740fa1cf2865f8b846900"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:27 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1186.032163][T14240] loop2: detected capacity change from 0 to 131456 [ 1186.040750][T14239] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1186.049506][T14239] ref_ctr increment failed for inode: 0x361d offset: 0xe ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1186.227486][T14253] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1186.235995][T14253] ref_ctr increment failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1186.361415][T14256] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1186.369795][T14256] ref_ctr increment failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket(0x2, 0x803, 0xff) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x8, 0x1000, 0x10000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) splice(r4, &(0x7f0000000080)=0x3, r5, &(0x7f0000000100)=0x2f59, 0x8, 0xb) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = dup(r3) sendfile(r6, r2, 0x0, 0x400000000000007e) 06:03:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x58a6, &(0x7f0000000140)={0x0, 0x297f, 0x1, 0x1, 0x18}, &(0x7f0000257000/0x1000)=nil, &(0x7f0000096000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) r4 = syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x800, 0x3, &(0x7f0000000400)=[{&(0x7f00000002c0)="ddecb33f317280a8b2904918d28eae2cc981a48a35006f66082275481188667529f431d9baa649d25ea6c817b291d1f267a1d041d44e7a7d8ef46c2ccf768a253c39f1ba21b69c6b1a23240576b4c7c6e86d1859f87a6cea6ec2933d035b83474a12911ec3da651ee9a11a63b973a451588fc054f50a6049158736626af4c7b9544461ec19dafb2d88d67330a24b0f86b2429174e8acf30510e4b74cc3f4c3010739f8cf4f79f06e1de6af3b6a069dc603764c1889b255dd132813efdaf1", 0xbe, 0x2}, {&(0x7f0000000380)="4382f5c004503b7309137b4743afe4504b77fd7d83837d3e5caac1fb6256b99a781338eb36", 0x25, 0x8}, {&(0x7f00000003c0)="f7e4c87e8e359ead1ec2d35ee409af1593c3bc239e117bd4d9924cf5ede209d6ad1370b084f3ac5df1df22ada8bd", 0x2e, 0x3}], 0x1202090, &(0x7f0000000480)={[{'&'}, {'\'\''}, {'+'}, {'\x8e##/^--'}], [{@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x1}}, {@smackfshat={'smackfshat', 0x3d, '/'}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r5 = open(&(0x7f0000000540)='./file0\x00', 0x101402, 0x192) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r4, 0xfffffffffffffffe) fallocate(r6, 0x8, 0x1000, 0x10000) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000580)=[r2, r0, r4, 0xffffffffffffffff, r5, r0, r6, r0, r0], 0x9) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000b0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:30 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:30 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000680)="200000000002000019350000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203bf6988130ae721eb4aaba2040000000000000025260f995f92c6bab737d24e90884b93173cf8318eb0f3bc8daa8184b9ea3a78d073505c8037e81a9261bd4a04e2c0a1ed903e25e36f978e1e69c169e590bddb537b7039a42687c948e9d3bb2e2a63fd120efb80b86261", 0xd0, 0x400}], 0x1004001, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xdd, 0x3, 0x80, "c07f8b6a67d0c5f0c18248530f89bd69", "d45f172367f96b6b727a99eff94f403a076dcbb10308a7a6159b6e44cfe1d8cc6f23d691dc2b2972329b1892a38c8d8e85572b37445c503386f65dcc321e1f5f628787abe25300000000000000039b60e9b83addfc09edb674639ec11dab2b106d5fc653267bfa4c26bf309f6ab7d531230ab3b7fe244ce6adc4d9199baf30ca19f3cd0ac41122babdc08a549b5c6500297244503455cea4aeb3671efaad7e69eb73062483f59eebe1acff35598066fd0eb17bf5355ee9b632ad40aaa10892838b5f37baa0b3bee2"}, 0xdd, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0xe0) [ 1188.468397][T14262] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1188.476776][T14262] ref_ctr increment failed for inode: 0x361d offset: 0x7400 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1188.536126][T14269] loop2: detected capacity change from 0 to 131456 06:03:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:30 executing program 0: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x4e7c1000) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB='nonumtail']) rmdir(&(0x7f0000000000)='.\x00') [ 1188.614230][T14263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1188.622642][T14263] ref_ctr increment failed for inode: 0x361d offset: 0x10 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:30 executing program 5: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0xee9a4000) preadv(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x8000, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000001100)={0x5, 0xfffffffa}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) pipe(&(0x7f0000000080)) 06:03:30 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000009e000/0x2000)=nil, 0x2000, 0x4, 0x80010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffffffbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x201000) sendto$inet(r3, &(0x7f00000000c0)="78c9971c8b302bc82dcf691356db4e060cb1558c812afc384889cc0113f3b3ec1139ddc4f7c1e1c531214297854bf20dd4d347705b8ddfa645c422", 0x3b, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) [ 1188.703410][T14263] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1188.711503][T14263] ref_ctr decrement failed for inode: 0x361d offset: 0x10 ref_ctr_offset: 0x4 of mm: 0x00000000d3a3cc9e 06:03:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000f, 0x4000010, r0, 0x52a65000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000100)="b687af8ed54d725032250e4d701cde387fed28c9ca037b9ba11a57b99b617456cbfc064a20c0be4ca44dc24ab8dc0bdf", 0x30) [ 1188.879939][T14303] loop2: detected capacity change from 0 to 131456 06:03:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000d0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010002000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01020000000000000000000000ff7f0000000000000002000000000000000900010073797a30000000000800"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(r0, &(0x7f0000000300)='./file0\x00', 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x2f, 0x5, 0x48, 0x1, 0x0, @mcast2, @dev, 0x40, 0x80, 0x4, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24020000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf251500000058000180080003000200000014000200697036746e6c300000000000000000001400020076657468305f746f5f62617461647600", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000002c000180140002006e657464657673696d3000000000000014000200766c616e3100000000000000000000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0100008000000000", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f7465616d0000006400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300010000001400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020069705f76746930000000000000000000080003000200000044000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1c000180", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000064000180080003000300000014000200767863616e31000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000300) 06:03:30 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:31 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1189.132343][T14324] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1189.140783][T14324] ref_ctr increment failed for inode: 0x361d offset: 0x7a00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1189.163042][T14327] loop2: detected capacity change from 0 to 131456 06:03:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000e0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800009, 0x20010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1189.298679][T14335] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1189.307281][T14335] ref_ctr increment failed for inode: 0x361d offset: 0x11 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1189.340807][T14344] loop2: detected capacity change from 0 to 131456 06:03:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000f0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:31 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x240000, 0x60) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:31 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff07}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1189.620812][T14362] loop2: detected capacity change from 0 to 131456 06:03:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000a, 0x16, r0, 0xe8045000) r1 = inotify_init1(0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.origin\x00', &(0x7f00000000c0)=""/134, 0x86) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r2 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) pwrite64(r1, &(0x7f0000000180)="eeb1817d04d8dc607a26ae50528b7f9b90b845bb14935179b0c240e6fa7a9c52c241a07ea5bd6b0513a9e099fd6a13611bd0612e7b47b1bfb07a191b6ae3aac0f8c7248693eb07be5b57229df7b6546dc4456fed22d23b31985197276ef5b29d3ec755dce2d3bbba55d9446816df62dce7984d371be349db8aae2db964b33e1c27e5db9cca145681c151269652f13d059ad0ce67769428cf1d41c5758464a6df878878404d89e642b512464f3a2b700a46a2f79d5f10c3151f72b83dc85f9a17", 0xc0, 0x3f) shmctl$SHM_UNLOCK(r2, 0xc) 06:03:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000100f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:31 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x12}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1189.769620][T14370] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1189.778090][T14370] ref_ctr increment failed for inode: 0x361d offset: 0xff07 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1189.837596][T14381] loop2: detected capacity change from 0 to 131456 06:03:31 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2) r2 = socket$inet6(0xa, 0x401000000001, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x400, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2140, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000300)=0x1c) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000280)=0x6) close(r2) clock_gettime(0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x4) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf41be7ff89490ca3, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 06:03:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000764000/0x1000)=nil) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x34) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0xb) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x2, 0xee00, 0xee01, 0xee00, r3, 0x145, 0x1}, 0x0, 0x800, 0x9, 0x68b8, r4, r5, 0x857b}) shmctl$SHM_UNLOCK(r1, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x80000001) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/37, 0x25}], 0x1, &(0x7f0000000280)=""/52, 0x34}, 0x10102) 06:03:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000110f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:32 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x9, 0xff, 0x3e27}, {0x5, 0xa1, 0x3, 0x3}, {0x1, 0x0, 0x1, 0x10001}, {0x20, 0x56, 0x3, 0x52fc}, {0x101, 0x7, 0x5, 0xf16}, {0xff, 0x8}, {0x0, 0x3, 0x1f, 0x8}]}, 0x10) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) fallocate(r1, 0x8, 0x4, 0xffffffffffffff95) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) [ 1190.070687][T14404] loop2: detected capacity change from 0 to 131456 06:03:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x8, 0x4) sendto$inet(r0, &(0x7f0000000080)="fd", 0x1, 0x40081, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="b36111b37ed9107025b765a411e8f60f854e43723834988bc411c90b8ad560de3b7478e9e360bf452ab6e2d81d7dc48b19cca29f1b37eb37978b0a5476256aff6ccda372ebeb1000a7c42ea5bc4479625cca730ebf35425edc359cda86e317cb6bd3e1dcc7934daaee492f16e9e69d662fb6c4fbb671ac0217ac78db17c9c4c2a9a70f0625663d05aa8cddda4610938fcab6b6029896a9ce0bb3698949422529e66af2b0b3566e43739710dddad0600e91e24c90c36f0f991557fc", 0xbb, 0x40800, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 06:03:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000120f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:32 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:32 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x18}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) madvise(&(0x7f000048b000/0x1000)=nil, 0x1000, 0xc) 06:03:32 executing program 0: clock_getres(0xb3443022c6f81c29, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r2}], 0x1, 0xfffffffb) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) fcntl$setlease(r3, 0x400, 0x2) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r6}], 0x1, 0xfffffffb) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(r0, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002100, 0x1, {0x3}}, 0x7) [ 1190.306865][T14426] loop2: detected capacity change from 0 to 131456 06:03:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000005540)='devices.allow\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x8) preadv(r1, &(0x7f0000000280), 0x0, 0x8, 0x6) r3 = dup2(r0, r0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000080)=""/12, 0xc}, {&(0x7f00000000c0)=""/130, 0x82}, {&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000026c0)=""/39, 0x27}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/4093, 0xffd}, {&(0x7f0000001340)=""/4090, 0xffa}, {&(0x7f00000024c0)=""/24, 0x18}, {&(0x7f0000002400)=""/100, 0x64}, {&(0x7f0000002500)=""/205, 0xcd}, {&(0x7f00000027c0)=""/250, 0xfa}], 0xb, 0x1, 0x1) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0xa78) syz_mount_image$msdos(&(0x7f0000002480)='msdos\x00', &(0x7f0000002600)='./bus\x00', 0xffffffffffffffff, 0x3, &(0x7f00000054c0)=[{&(0x7f0000002640)="e35ce9554f0276aa632930d5993d72d31aff3f1fc6bf61b665ccbe5b869923e85cf8253366d6707730d22c47fef661f470be912167afb397a272161fce3efc198f03e38a803296e4f227664172c81c1ff072ba74", 0x54, 0x8}, {&(0x7f0000005380)="37db21f6689941ed58f6f92a0836142905cda961ace4ce5b9593ba7e3d68509a52f457ebf8279bf609583c93e8197f996a1832ec783b8acb758fac2a0b7bebdd21114934951a6d7475dd0325b8826a345dfc386a0f1ddb7030fa61a81ad91dccd3a606e399", 0x65, 0xc33}, {&(0x7f0000005400)="5a1849e5f620fffa797a8c70a7879c09556e319e302858ffe6634a456371020610e3323b9ebd8990c4c456836eec6eed9a6f1490c0223a98372f545c40988518bba9c4b78becc71004a138803b4f229ce9ed5abd6d42e125c4b8aa6e8ee689c9935a9bfe81cf0b735f76281d164d8d180b71c634364c8a562f1b1ccae286f9ac4842b5deeda36f2d919553f8633125d72cf26f85d436f8f635347f9e095c4ad4caa333406373471959ce8e707a458a592a2d4c08d3934d5038f595", 0xbb, 0x2000000000000}], 0x1406, &(0x7f0000005640)=ANY=[@ANYBLOB='nodots,dots,dots,usefree,dots,dots,dots,dont_measure\vsmackfstransmute=#/%,dont_hash,root\x00\x00ntext=sysadm_u,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000280)={'veth0_vlan\x00'}) pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = signalfd(r3, &(0x7f00000023c0)={[0xff]}, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f00000028c0)=ANY=[@ANYBLOB="c5010000000000003874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da6c8c221901ac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056330bc6dfad031b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8aa17b7a12800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ff00"/10888]) dup2(r5, r6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002340)=0x205, 0x4) 06:03:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000140f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1190.428639][T14424] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1190.437035][T14424] ref_ctr increment failed for inode: 0x361d offset: 0x18 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) shmctl$IPC_RMID(0x0, 0x0) 06:03:32 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b2b18}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1190.588342][T14456] loop2: detected capacity change from 0 to 131456 [ 1190.619899][T14455] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 06:03:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = signalfd(r0, &(0x7f0000000080)={[0xfc]}, 0x8) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:03:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000180f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1190.628295][T14455] ref_ctr increment failed for inode: 0x361d offset: 0x18 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:32 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x25}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:32 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000003c0)={0x1, 0xfff}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='@\'\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='!%^/}}]}Q\x00', &(0x7f00000001c0)='){.\xaf^[),*\x00', &(0x7f0000000340)='# Io\xc0', &(0x7f0000000240)='$*%-&-\'\x84]\x00'], &(0x7f0000000400)=[&(0x7f00000002c0)='$/!\x00', &(0x7f0000000300)='@)(\x00', &(0x7f0000000440)='*\x00\xdc6\x13\xf6Ns])\x05\xb0\xfb\x87\xe2\xd8\x94\xe2p\x90\xc6Aro\x1b9n\xd7\xe0\xc4/(\x9eb\xea\x10\x9d\xf6\xcf\xceu$ji\x10\xcd\xc2\x9b\xb9\x06\xfc\xd6\xef\x9f\x1e\a\xee7\xac]\xa7\xbfc\xb4\xc6\x1f\xe3\f\aJ\ru\xf5\x9f\xb4\xcb\xb2$\x93\x16\x89E\x89\x0293\x9e\x90\x94L\xa8\x04N\x86\xf5\xd4\xb0\x91\x893\x10\xb2\xb1\x89Zr\x94)\xf5X#\r\xe4\x97\xe9{\xee\x8b)', &(0x7f0000000380)='*\x00', &(0x7f0000000200)='+{\x00'], 0x400) 06:03:32 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000190f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1190.775501][T14479] loop2: detected capacity change from 0 to 131456 [ 1190.840907][T14476] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1190.849326][T14476] ref_ctr increment failed for inode: 0x361d offset: 0x25 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1190.972184][T14498] loop2: detected capacity change from 0 to 131456 [ 1190.974129][T14496] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1190.987186][T14496] ref_ctr increment failed for inode: 0x361d offset: 0x25 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) shmctl$IPC_RMID(0x0, 0x0) 06:03:33 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00001b0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)) r3 = io_uring_setup(0x38f4, &(0x7f0000000100)={0x0, 0x1963, 0x20, 0x1, 0x127, 0x0, r0}) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x8, 0x1000, 0x10000) r5 = accept$inet(r0, 0x0, &(0x7f0000000180)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ppoll(&(0x7f00000001c0)=[{r0, 0x1000}, {r1, 0x28}, {r3, 0xa060}, {r4, 0xe142}, {r5, 0xc110}, {0xffffffffffffffff, 0x4}, {r0, 0x4000}, {r6, 0x102}], 0x8, &(0x7f0000000200), &(0x7f0000000240), 0x8) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x501400, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f00000000c0)=0x3f, 0x9) 06:03:33 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x27}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:33 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) chown(&(0x7f00000001c0)='./file0\x00', r0, 0x0) time(&(0x7f0000000180)) r1 = getpid() perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xff, 0x0, 0x8, 0x17, 0x0, 0xfffffffffffffffc, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x4, 0x2, 0x5, 0x6, 0x1, 0x8, 0x101}, r1, 0x7, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="473405bb72e3d72000"]) 06:03:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="05387867e010723e7da9080000000000000087ae677086a01dac470000000000000000"], 0x23, 0x2) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x800, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/28, 0x1c}], 0x7, 0xcd4, 0x2c) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) open(&(0x7f0000000580)='./bus\x00', 0x414441, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000540)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast1}}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) madvise(&(0x7f00007c8000/0x3000)=nil, 0x3000, 0x12) [ 1191.363947][T14518] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1191.372372][T14518] ref_ctr increment failed for inode: 0x361d offset: 0x27 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1191.383411][T14523] loop2: detected capacity change from 0 to 131456 06:03:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000220f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:33 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="0800000010", 0x5, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="ee5e723b3d12fa09f803013e140babd3e49ef47c63e039433f068dcc73072d55a7c69cce0678c527045e46560fc9aa82c64aa58c77fe838942d45c4731ad5ea1cebdeee02fb92f6f5f7dec9696ca24d4327d0eaab7f5b3e98a2fec8386fb2e1460312ba83a7078", 0x67, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x100, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, 0x897c}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="e6e6876e4186f55cdeee5c91bb96dae92efe399c6f301979b3caadf0e1b2dc5876e4c3bcd5b77b8ad5ee246fa9db10e9cc76b33b", 0x34}], 0x1, &(0x7f00000002c0)=[{0xb8, 0x109, 0x7, "3815c2686c170292c65641eb1a3e8c24ba8dc7e0a1ca2e21ecc459e0ae2b40bfeb91398ae99325f786000da1174ec909737d370ca2e1d9f1de8eb4133625eb28c8c11887cadb8b8b8eb9e00b476ff32264b01b60b5dba0f7d44db4ce51a47399ce5ef435c91fb79606bc11e55ce21096dce4002f1347bfac9c5cacc2c59187e72dd6a79482fd0a4250515a187241f0f6d0eabcff2a6f8afec25e7348a489e5b38fd5"}, {0x100, 0x114, 0x5, "fdecdd759994b37a194a54739051f494ed1c1a27f0dc72170f25bb82da5bb5bf8306c71873e598c6cd2cf33e679a6207204526ded002188b4a16c05dada813036a187c591d5db4531f58c3735e72ef0dfadba0881a6ca5014a56921d5c0b3c3423bfe92c3c8430209da07134d342b0a90c628991e02d6e9f0137f54bd023014e5985e00af8a44879f88e1d05882a3ed8db2088a81158ae6dd739b5411b4a71f76271a23f2d68afb741295b82981b979e541fbadcd3ac22a8b83d18675fc3ac27098fb76ea2c662f573dd2b636aea5b0661c0c24ad91cea8efc864fed0143224891cb094c0f3234edea91c6b4"}, {0x28, 0x109, 0xff, "465c1de8a0911b6129d3421422ef52f5f476c319cc69cdf1"}, {0xb0, 0x107, 0x9, "468387f082203c288d93065668ec38180843524813cfbe525289a194f6ff423ee16aa49464e4a7a424d2e1a3a289565f6996e258061020e6cdebbedd3bbe77ee578eb6977d02cf31daa73f24665e19923db716cb6e1d8257a6d0b4aac6b615f97f5f9165fd4784f59188cb7c9c9eb97aebbff8c104b42bb1fbc4ceb47900f582640b29f7d419e9c4edfe5b4c89d869bbd45415a98b9c9c3013db54f0d01cce"}, {0x80, 0x101, 0xe2, "9b8dc372e65f042cb9a45a524a4ea3ffdc514c8899d5b163778c72552ac935c711298d70d6782e7cb557596e7df4d20d27b9ffc8761d556ea522e370980ca4249b7374f4e754f23655606c069d6d107317241c15ab0dcad5de4e2ad4a74abf755f53d8e7bd4be2df34"}, {0x100, 0x112, 0x7, "e9425b5895ad618610af4822745d93216fcc3da4c817dd086d8c58b4a7eb0181824b56a0e6c54503fdfe5b678071575409cb61e7e0aa2c6a1eea59cb83b13c7684d5151813cb8bf2244a701ab54d7194e30938e6faf46c1e8caad3618be408e6b579d899680bc46ecca70a192183079858b8f6c37d1805cef5894d076b004ed42ffcd8316052ddae5b855c506085116ebc4078906389831315667224a2d83a8efb68322f272d07fde032544647485649daa59e5ddca14f6893ded3da8e767f01c625189478eeadb9ca11bc223abcdffb2824f8b571054377032a74e05146442bb20c4eb4b5e27c69fcbd0b"}], 0x410}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)="400e77b531e4afea96f124dc5fed505f36ab4d26027d4313bb101eed9e9ad57db0f61f6f31ad06705023c8343376da7d8db5dd35e37806dbb0a17aa3fae1f5f846652209b3b7dcb8df8eba8b441055f34f4ee9d862ca6992ac7d5f21ec9e748f8c186761279b494476d311aeac4db4d2c573dd7b5ed813c3b07db5052d6d5f461f0fbaf26e1ce5549a93c9f75d417e86b047ac5afa1bd400cf308c2cd15f67676db3eefccf706006025611fb263c26683ca009f561d00709a6ee3ea13e77f309e7272af02be132aedcf722fbc1494bcc3fb1c754b0bb392d80dc2f27184ee8bc9b7a2d3d048a49e9deec11120bd9ae3fe545d18f78b7205848", 0xf9}, {&(0x7f0000000800)="de0ab61211107b6d5a3cceb44a610bec28229531cef171ee41a43adab4ccb93505ed5d26d76428037d5bebc1078d1d46a79d634b9b0664c491151d9f7df54864a7a76bc1d27feb3295507ea448c01591c716f6a105103a0157de8b83029f041adf1cf8133f312e1d8ba97c2da267e70d0bd888b6eae4ad14c2adac", 0x7b}, {&(0x7f0000000880)="486f42cdbc8010693bf4596645a01b6424a006aff0aa9dbff580377119e3b002133a4eb24b4ae8972757876539bf5a9ab43e6948e43d7c85c7ba87c194aa761c0c5e6cba2030a0239afd627f5db2dd077a23aa252c6de1808f36b59aaedab9f619a50259a104c2022ee0597fb0c27a88473075ed7ee594cddb801bb3e6cf462e4d96247996eeb775a95b128bcc87ca6d41b6b56d061e444038", 0x99}], 0x3, &(0x7f0000000980)=[{0x40, 0x10f, 0x80000000, "cd133eaa3718ad8f5a2fb406b3833e6bdd17b03726fc7d2ac7da25a2c6874351776a08081948135d468ea8d3"}, {0x68, 0x108, 0x80000000, "97eb9e601036af7cc56ce607c82275267b63072f7b2ebe8c57309acfbd373dc05585a7e05538ad0954dfc2c91dfc1d56cd7be61d4b4935ed9f1f6d6041f54196081f81fca7360fc0c8a937132af9726b8d584ba3a59a98d1"}], 0xa8}}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="e4e6ee56d1050b7e88cbb9ab208de5a37e9ef8d575420e2f920da890096b4b7d9c72fe529bef496d83ed76e781e0514c6f5d29fb2e807ff307b5198fdd54eb9983c9aaf07bb9e926572973d34ae1d28ec16b0a2c19", 0x55}, {&(0x7f0000000b40)="090f802da976ed466f31648aa806f9f92b8c699d8e3e3cec96807ece77d7b8f5dcb6737e9dc24ffd6ca9e1a1fa2004e98e3dd2b3d3e2abcd15e0ef21296062e8f2d825995fe66b888bf48f0a7eb3979dbb45bf0e3391df28216a071020e17cee2f5c815165555393e78fd58b8690c4c55b07fc220b2b", 0x76}, {&(0x7f0000000bc0)="cee5f5e0689af165ba752251de1ec9212034", 0x12}], 0x3, &(0x7f0000000c40)=[{0x58, 0x88, 0x1, "4ac12087c3972c9976856c7543b7e4ccc6effb349e1e9a4d23c7c7786594c25503f9a99b02cb92a4c6f80e8768a19d4edf72f75e1b165e735433145780b4080b731ca9706c7e"}, {0xd8, 0x100, 0x62, "e48e34edda1aa7461e62741ad170603d516b8526300533b6962ef37b82f528becd8a89cb727bf02cbaa55a17586ed6a5e7fe3982c0ef12d18ec33e92013e1b76dafd7e3951403d0c2b60fc82561cd8edc49488ca67323624614c49c299217670f27beeb02bd02aa88d929f7d2babc03569e72780bc28460f87310b6e610bf535a8b147398f0b495e118704e894be70fe400cb1830def8c362c9fe9926f42b67cd7ee0e297cf738f463497cc9efa4feeecf34bc29b4e34d42c63045ae4d290bb6a72850e50c53"}, {0x108, 0x112, 0x4, "89caf1d65b5aa2a86fa8ce9e42cba9e2bb72b9fee8e87241df2bd3b2d78bedffe058a01158f47b73b510ffb7c4c8d31c53bd9a65f10bd9d90adfcecd649a59fee8d5871a2994d64823fb39e570b5574f94227191a4b9d1ec61b7bcd81e0094209443cd97fa048898bdc411a594f4e1d4f882ee83f043dd89b910a490de709b4572087efe2d59f6579c08b5e71bd9e682dd3f4e71f1bf5baaf8ac2d1c505a8c819c0b10612635dfaad637098dc49add25c012ee2079e8b4b0ac1570485bf78c74032088002f6bc2bddcae4954e6016752a03b2db56d9b2c5fe9008194608522a69e004f71116ecf5d8dc22fe7517b998ef84de854c66f28"}, {0xd8, 0x6, 0x0, "c709ccd43cb0952bf2f144055dfff982105ab69bb7629fcb7ad4c0dd549a8fd89cda54f04da3e864310af17bf8ab226fcd5c2bc7af1c4ba92dadacfd0f89f4a41654c6fe6890454f4e96b3992b89543387f321684d5c9ec18890fb3a73ae00ea96ed04356ab2df73c9585a27fe738c7faf592b0b4f389cf03e781ab007108b4464008ece710218b2ecdb6d79523780d3a7f65919d59f14b9102286587c1737ed62657e772475f2d9eb27b0127919590b26d782dc17629a50304e61fb9a40c423f994af108cba43"}, {0x30, 0x116, 0xfcb0, "d931a070beee2ce6280595e8a4c08eab33c31bb5d6f614218db07b413b"}, {0xb8, 0x29, 0x512113f5, "7c0d7eb03f5d692230cca43cc40f0198d81d9ac11d30db8603765c4006349368a528ed8e3fb40d440293d1717ee7c5574b29410731e1fafa967ae77b572cf6100e15f2e37befdcfbd509c6311cf4fc611a13421de140c00c23bd22131f245d4f7c0af6cc479027d2c7e4566a72a495d6eca8ac910b467b30e514fd53e41fc1b21f86c2edaceff53de284246448dec9f299a74a0cf880b94008d25120555bc120eeef1dc210"}, {0x48, 0x105, 0x3ff, "4811d7a996c446b0a69aae9cd8bed28765af1f5e61d6e356dd6e3846127c84f3ed157353187b86e222bbe06ff07f873337c415f5d2c14d"}, {0x58, 0x29, 0x6, "4eb83ad95013764258922032eed7b021e6ed95f9ba04f5703770146440478d30bd2bc6afa5c41abc40a75c4d0f31049ada77706784c1886bc8fc7b34ea0004d288d78fc0"}], 0x498}}, {{&(0x7f0000001100)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)="c961c94c752f08dfc93f80bd80372343dd3d14b26a681c8df926c1d09dcaa96e0fd385c66a23b7a52479dbf906deaac1461b50042762742e074df88523909011c21638f72991376d21414a88613cd26b1b5a9bf24c6c79c87b9da5c85a29ed9a5a8f34536c922784a7487c2a6d4a8edf4ba1ef3007ebafb64247632974e92885a002f0eb442333195ef604c921bf019f5dd77b87ea6668b39c47a14bf5f506c8602f86f4d919a38f876549985cd34c7e26185919ca918e2e2fd1b2111cca3628a46189628d8f9b64b9f8b5cbee12bb", 0xcf}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="e800000000000000000000003a050000487331166e202c3a8923b229b628509e7d88f851a207f57f7797ae2581c9d2a4c460340a52dcff45bf3a5bfd23499a13dd7977fc0abc5c5f25327eff97e4fccaffe762a14760447f0ea5e19cfabf9aee388bc69feb5a883dc664bdd9b8e28121f36de976545f5398f9d4f315cca544af6597c2f2bd11ce71100c8e991751599d54204e5bf75570fc129e96bd77febfdc9d47cfda1a9c58108ea646a80597f8356416d56f7273b7155d56225ad71e50d2217b34cb1c32d500427718381fa82450e3adae8f53145e0b0fcbb19266393af34001ff000000000090000000000000000401000024360000955c711bac96c9953de88d23dbea5a2da1dfbe68a73a09273e373d77ca3c309e321a98f4c7b1930d6e7b6ee62e063fe9bcc74991f4034ff66a93a3a93d5b8863927ecb12ef814cc04303e3bf781e16f37d9b2e5a6652419d525b8debfafabbf9cb0f71b70eb1cd969647e340de722d872aad11460b7b01c0b601000000000000f8000000000000000e01000000020000f305c2dff1c3b9e653a9cafcaabfc22978d26946c06ea46b6036356123bc0a86fd7aefd6ce19d5d190c097fd8c6faac0d9198a850b57a35fe1067bc834cac084fe9ed6df265df0bf779b198a8c5d70535d41e063323e4b03135c6737af985983a70960224fc9092b4661cb85d8464e372f9464e0da5b8e7d6cdb21eeaee0416674f3821659e1fe614cb381794b7f30f04d50d482b342e1af53ec5d3c419c2e4141ebfc323e90f1147bb218fcc00bc20f3223fb46b11cf6cf85cd1cf285f2f9ec429a2ed4e1b896252cb913dbef72d496d195e94c1c22fc97bdf4e2dc000000000000f8000000000000001100000083669e8902f200f0f691b1baa0b8401b327345052573dfb857fcca41bdc1009e35192d598bb4e860bb965daab4ded54f86bf07e8b22e666a0a08b748daae326bdf1869ac30f9ef6db3169fd078233944ecb42ace7ffa3c927b1936d3164caa42fde81ecde0850d82a205209143c89cb250120f94ee7da22a15970ca7782525fc5cd2846c74c649b0abdd455d8070aac15f9c4273691b95be4df70b31abb0b5762ad57d6ac73457e6d95fa95798ecc85372186210d89ca6574e411f7150b77e5e1484532fd5547abbd66591cfaae1cde3067287c1e3ae5372fc4a2564fd45fa35655e4cf856eb703c7f24ca0090000000000000000c010000ffff000096b0812bc38a2bdb8aa4d1c61c20143e831d7fe8873f92c9ddba7f01ba567e60e71efdd19a766702d11035c23b6fb91688f6b3842dd33b8d138eb666ed9c8e98a7d9d9ac51284feb30b6d900a53b0dbc526404c4b113e91fe9799126357f5068b6ea848129e8be3f4e0083127aceefdfdc23000000700000000000000009010000ff7f000074798be2fd353e10ce80f743ddd949e106e2cfff5c4a9463857c6d06f57efc1a6b1f755b1300d71406e882913d025314573151459e92f4dbe47735887df6dc88ca0d32ed9d350cf9b4902182a48e02827270ec8bdf6eaefd63dfc5b40000000040000000000000000b01000007000000fd8aa191ae063f58d477a241803aa6372cd6b072a6e16da52fb421f63d6f9bd1f46ee30055ae76cc0d8a00000000000090000000000000003a000000feffffff1ac5cf83dd596c97fe7b6141701942f9174c925ed257de52b5c162b202ca90e2580f8bd2b23f48ca42dc0f632e796ec2f86e4a4c83edabbbdda64760ff094e113ce1fddcec562679e9f24267d3c1fde0e4df3b4267f3966ddb5d643981e589800cc284b1afe81c3867d8781f326899330da83290f91b7c623d10649f00"/1330], 0x538}}, {{&(0x7f0000001800)=@rc={0x1f, @fixed={[], 0x11}, 0xff}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001880)="e9ce96eef5565092532d3dbc98dde84551fd75fe31cbac1497e0040979511aa82d9bdaa2206a3f602291c03899a8c98a5e55f6dc6051281f59daa83d4624ca354a956bdba8282ee84a82adc35ab6f4cfff4c20ab476ffe1d053559c93ece36f9a1cc8307150b412843af0272a665f52b210f32c10558d77818e556d927fc93b28950e02e7badced33eba3ea6f65d46c8c330a4d6a8a0319e312695a5a6896260156d34971b065aa513afa5314d2449d5f154b4c7dbf1e5ca7e7ff2d650ceabda976b58", 0xc3}, {&(0x7f0000001980)="532a86d09398574be10d539db6d1dc9573ec2f3469b753474f973f664f0ad5f57020f80c14eb5c5d936247d21b219d4bcdb6044cdd36dcbb10f8bfbae16fd177d47a036dbc4c490d5eae135185807376803851927b3d40ab58b73430d9998ef0437e50203ace66", 0x67}, {&(0x7f0000002140)="1da726bca055a84f2ea288041573f2ab904125f639abe68ba4d648ae33c521e4a16a0bc7eea8ff42ef33043e005d0a0926309d664ad964da017d6be24734abbfc3afff70a44b5700dc762f76cc0165bed4bc4d5262d61c7a53dfd085163468779d92fbbda07306d5dbf8aa0af89be78cdbf08fecc7a5aa5975cf6844e54f32bd6b05b0de7ddf", 0x86}], 0x3, &(0x7f0000001ac0)=[{0xc0, 0x6, 0x8, "a433edfac889140553a71a32d4b38284b7249834658f88fc0c9b205189330403575d31a8c443c8caabe4e9a9b36531f06b933f4776b7c016c2c6df1a01d6883191e7e5599e9967cf0d59a6a91750f28ef8c8e4acccc0525e1918d998fd4fe534ca6214dfa73c004da02b844fc6a2a9be61ddd7af011dda1387ffc45d08a051694172061076e6ea534776984abd91990964cd04f4f168b46c5af525b81ba600d024ee84632e05ca242fd8"}, {0x50, 0x119, 0x9, "53702df09d1ce9a25b069c2fce31f7eefbbb0686e53361ddd85a9e511fdbe3ab3acc9d0c6a2ee0bfc7cd946f5c0fc9935fb08336f12fc2d0312147"}, {0xf0, 0x110, 0x3f, "1f31098cb1f84e7cfcd23da96d0b4549455ae40513c0af75153d778c86abb99c4653e3e543890ffb104d4ae56123092fd3dbd914337f042b05e77e816fc1082bb26de40908980cc4de789d4c65bd4c293f306f0b1f4d98418b6c4e3e981d32a37c9a6b04b96aeaaeaf2b4cb228afe7c3b43069a8c70332b63e6578cf99a4ec0d92a264587b9bf651c4df35879167cf4f5b9d6ff05c3e37e2260982fbd5b0a40afb9290adbba7b09abbf83e45ea4916051e77d68770a29cc2ff669bc1166d3c37119c5c38b7cc769d788ce6eb6a304875a1d78ce036bdbe75753e"}, {0x108, 0x114, 0xfff, "758433d9dd55a121de208c5008f28aa807f6543835f8326ab650a7729b2c0ebae014397e29e062932006e34562a7f2fcd1b256fe50a98bb540f0090909e376b70bc7b0f21148119de02114e3e6dfa3e4fd15d0eb46f5f059bef0bbafcc6900fa25af847ab6e7c655113ae81e7395e88678d9cd2d1c6ac478090540c13c1aaf523a9309148054923f3864772f1df0bbdd021f133fb348bfc4cf394ce8346cff2434db7a812e437a7d8e96c1f8d454c40fdb3dc77c9f4b495846ea503125a08243249081bf7052082f564e214b841fa6848c5d677b4b9c5f0322ae036d5d0a52d2b77b6a3c67e96241f28cfeb3461b9995a4"}, {0xb8, 0x114, 0x400, "c4ceeb5c286f3c4a85eab5699389e629f56a759c8d49b09747973b3350d917782d6a245a025a280bcc3f5c5ba9f42d2cf91b68a9ab1a7d7f7cc261eae2917524f3bfad1104d68ebf161dc963a85b03519bb6027d901db2407e9fe8e178553bb2ad9075806f7ce61f1c8f22ddf697a015f1b3a5609e48aac130306cf2aa248e360275ab0bd68a7609c14f6024c64fda5ec850d180a007004bdc7eb85b156179cad9126c5e25146bc8"}, {0x110, 0x10e, 0xc000000, "039e0483a94104a601dcedd0d4b9b664c904089681861ac03c44ed1a84affcd0fe08703ad3d3e98d503e8990333b88b32e744b46c7d7de6c16250e8489f6e0e30b008e4f4f852e620cc2b790e66805d41df86043b95043ec328534588bead76e57fe1fe155807c46174f3097c3b063b4e17892c69c650e12bac07cb33b2cd1c01c18c76542dedbb89461c0a3ca72a84e95164ac6f41d99eeca194f349968fec906d8c32eb6ee1748e5034c79d6ce90e0d3323f91600beff1d302fd43a802c9aa79a1e79d70c402be0a0552802a2a31ce4000dbcbc81376ce9a9c205fe85973fcb4623fb7faca596a073d06e5267843e2c8b2a5e06df0619e3a"}, {0x68, 0x10b, 0xd58410f, "e190fd6210b2d5b478e0c9f315be915f773cea6365a9a1e6d2cf8d7c129bc14757daeb9728ad8ec37d249048a89f4b02077d0c1b8baf467b3bfbed381b8014bf13d81549435f03780f26867e1de6117d03"}], 0x538}}], 0x5, 0x80) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='0', 0x10a58, 0x800, 0x0, 0x4b6ae4f95a5de35b) 06:03:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/122, 0x7a}], 0x3, 0x8, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18c000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040004}, 0x80) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d90000000f0000000100000000000000000000000020000000200000200000002cc4645f2cc4645f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6772706a71756f74613d2e7bad2b2f67696c65"]) 06:03:33 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1004000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:33 executing program 0: r0 = fork() waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000000340)) rt_sigqueueinfo(r0, 0x40, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) waitid(0x1, r1, &(0x7f00000000c0), 0x2, &(0x7f0000000140)) 06:03:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') mmap(&(0x7f0000742000/0x3000)=nil, 0x3000, 0x8, 0x4010, r0, 0x1a47a000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20b00, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/188, 0xbc}], 0x4, 0x5, 0x401) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1191.627448][T14545] loop2: detected capacity change from 0 to 131456 06:03:33 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x28}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000250f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:33 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:33 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/140) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x491, 0x1, 0xfffc, 0x1, 0x8f4, 0x6, 0x2]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1191.799804][T14568] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1191.808296][T14568] ref_ctr increment failed for inode: 0x361d offset: 0x28 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:33 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmmsg$inet(r1, &(0x7f0000006440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x38}}], 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e20, 0x0, 0x4e22, 0x1, 0xa, 0x20, 0x80, 0x21, r2}, {0x518f, 0x7, 0x40, 0x5, 0xc174, 0x80, 0x0, 0x8001}, {0x0, 0x2, 0x6f36, 0x1000}, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d2, 0x32}, 0xa, @in=@local, 0x0, 0x4, 0x2, 0x2, 0xd51, 0xffff, 0x1}}, 0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000580)=[{{&(0x7f0000000100)={0x2, 0x0, @private}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000000)="3afe", 0x2}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000000000000070000004414c1869ef800852a4d010c000b06000000000000000089020000"], 0x28}}], 0x2, 0x0) [ 1191.846700][T14578] loop2: detected capacity change from 0 to 131456 06:03:33 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00002e0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) lseek(r0, 0x7a7, 0x4) 06:03:33 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0xe1a) socketpair(0x22, 0x800, 0x7, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) clone(0x50e40000, 0x0, 0x0, 0x0, 0x0) 06:03:33 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x8}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001180), 0x0, 0x1f, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x20880, 0x0) mmap(&(0x7f0000076000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x6a10e000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r3 = shmget(0x2, 0x1000, 0x1, &(0x7f0000048000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000140)=0x1) 06:03:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, r0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x38, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 06:03:34 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x48}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) sendto$inet(r0, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 06:03:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6000, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1192.066599][T14623] loop2: detected capacity change from 0 to 131456 06:03:34 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000480f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:34 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240048d1}, 0x2404c01c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1192.147598][T14640] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1192.156033][T14640] ref_ctr increment failed for inode: 0x361d offset: 0x48 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:34 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:34 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffffffffffd35) socket$packet(0x11, 0x3, 0x300) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x201, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "8bebeb894f74c3"}) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {0x0, r12}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f000005f580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000060580)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000060780)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r11, r13}, {r14}], 0x92, "43ff2e113f0d78"}) r15 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r15, 0xff, 0x51, 0x2) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 06:03:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f000071e000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) shmat(0x0, &(0x7f000035d000/0x3000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x5, &(0x7f0000002240)=[{&(0x7f0000000100)="fa968fe019343e140fb2b97c34ac0599523b760c8efcd338df38482f6bde0a99f4f32e9a9774cee778356d74642c3ae07cc294a2ae67b2", 0x37, 0x27b2}, {&(0x7f0000000140)="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", 0x1000, 0x9}, {&(0x7f0000001140)="4127e3c97b9096e8f6e7402841d061c5d437981388d98a052f894bee4003bafde60e80d307bc2e495ec14f2982f602e728356dce1eb9ed0c1df786ef0afb73bdff7de97e", 0x44, 0x7fff}, {&(0x7f00000011c0)="13a6d5a1457a09339512db640cd44ebad503ca26ec97d05f62d386d91c29090784e4506b3667367dee53eb51e8263c71ee95888e5723eb89a650b9bf3fd3a6c1b643ee6c246169e25328f6004140455bceb7572a4694d4eea0bd61d5", 0x5c}, {&(0x7f0000001240)="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", 0x1000, 0xffff}], 0x100802, &(0x7f00000022c0)={[{@dax='dax'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@measure='measure'}]}) [ 1192.332916][T14684] loop2: detected capacity change from 0 to 131456 [ 1192.357238][T14689] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1192.366855][T14689] ref_ctr increment failed for inode: 0x361d offset: 0x4c ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00004c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1192.492765][T14711] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1192.501180][T14711] ref_ctr increment failed for inode: 0x361d offset: 0x4c ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1192.591599][T14724] loop2: detected capacity change from 0 to 131456 06:03:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget(0x1, 0x3000, 0x80, &(0x7f0000303000/0x3000)=nil) shmat(r2, &(0x7f000004a000/0x1000)=nil, 0x0) 06:03:34 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x60}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 0: r0 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[{&(0x7f00000002c0)='\r', 0x1}, {&(0x7f0000000600)="a8cb2370004e888f7ce7b357b5055737937563a83847252ed23e6894f62a1c05daaeb2d2168056861414820c95bc0db2ae930ba5a566aa6b1c083463071bc36919e857449d6fea04639e45f60f974a25bd4c6050e1c2aab4c227840eacc3af43166af3f9f2db359522a63d438a764f504bf6c9d8047e4024b56bb4b80fb277d201", 0x81}], 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff, 0x3580) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000300)=[{&(0x7f00000000c0)="d3a9e60643c0caad92f88ff6dd9b92efd9b515e706c2db3586c0c9a8c8519269cd91c5c29cf9cb682cd9e7a7dfafed3ab7df07753ccde75ab126e0a853bc6951d0dc4407d8b4f3b67b76320a8912a2c1a81dde4cb85251ddbfe6e6e606bfd4e1fb3662d4893db5a0b18d74fa32cc4ae02afef08327eddc4883c9aaf749dcea7dc9f2911e2e5f8482dd4ad3c10d9e331af56e53e4637fcf0f2612e080c2a86911e97cf4ef66a2465e15e1167fc6d1ff6796e8c1a4a58a4b65a36bcd2e29065e72935956d7f993509172614e00b3f0205eda4d9c0b32ebb5", 0xd7, 0x1}, {&(0x7f00000001c0)="9a5429a5aae3992e115ce5ab04c161c3472ee509e0011a1dee9f9eca882ae801f05a7933c043f6e27500ebad4c0da32903fe7fcff39e4cf7318832ca7a085826996c1e79a1b1e65fcfe8b06290e02882b46244da21d5416e51efb64626bb1b2f09607c03c5754f1ba4bcc4834d5b24abfd06b050e6a2b61135743c65b0c4eff7acf4c52a674fd486069e23e61924adab619bdaa96f16c8dbf23d0d43a89fce7b61bb45b22aad172ab35bdbbec72575dcacfd2e841883250a22dba612a66b78e35b570de5d1e8f61b45cbe641a7dc04f1dfce6c0b063bb85d2584986ae6c761ea1bbdca", 0xe3, 0x1b}], 0x0, &(0x7f0000000340)={[{@nobarrier='nobarrier'}, {@nouser_xattr='nouser_xattr'}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@journal_checksum='journal_checksum'}, {@nobh='nobh'}], [{@euid_gt={'euid>', r2}}, {@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, ']{-\\'}}, {@dont_appraise='dont_appraise'}]}) 06:03:34 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00005e0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:34 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000100)="10d747d94e71b2c4788c5b8295a28cac32b4abd7f66d7c490941c48b91d728618c4310919c93be925dae558ab3241b5d89a37c68bf00c97964475fe1b6c9b4b36877440b82e4641e74df65e4fcce5f65f5bd1a977c81e879c35ea72d090b8ccd8f5b47462a8fd9c19e4db05ef4be0025f44717bc", 0x74) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = signalfd(r1, &(0x7f0000000540)={[0x64]}, 0x8) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000600)={0x4, 0x8, 0x42, &(0x7f0000000580)="9238d01947d792fd91d73778ed8f915ed8716fe7b0c4df06b87230019f48797efff19937bdae48854ede62f392d469b8adaa30059989064b2408e06371d351183a76"}) fallocate(r3, 0x8, 0x1000, 0x10000) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000180)='./bus/file0\x00', 0x9, 0x5, &(0x7f0000000480)=[{&(0x7f0000000200)="7e650d3a48b81434e187f56c9970698754a08ea19ebf9fe7ab3610fea8c0abe63ab69b81b0f51cfc3e63ce0ea797dbaaaca3243a7367", 0x36, 0x9}, {&(0x7f0000000240)="927abd358ef7a3e9dc50230ac301f84754f66cdf9d61035f5b492a22e401298e9158283207c2", 0x26, 0x3}, {&(0x7f0000000280)="8cf0a33a3197638513eb82fbf0f05c53fb6d806b08a47dc82ddfd25d4c394f1dac2301aa105569a43fbc4cf1dca052d27f8b55ed", 0x34, 0x101}, {&(0x7f00000002c0)="7fa219a50a6fc9f8e70dba295d16642014fb8f52f7eef3c462daa64f537159a66362072a58b977e9bc491eeddfa67731111f0f9cc7496eabab74e607a246ccede97a1d86af0be096520ef913495b9f6ddd1a31d0dc3934a5a42a598e408269503116f075255fd8ee160292c92266c6d6603b6c02e6277303b7559ec6e08a61618c45eae8867f2fcfb12de3d7189b798b4c34b0337aae134de95a94", 0x9b, 0x80000001}, {&(0x7f0000000380)="4d573d2e837de9ffaaa678092ced5080df511c37a054d14bd07859d1080af2c90435a2cc81d1e09a27e200a3bea8d5faeb79e440e6f9b016c3114a0d4e89554bae3eea8ff0185f43cd17549878f6df73552fd850f79906687e73709225d9305101f9378b27336309b3ad5c3e72d7d4f0b2aea78a6df8e50102ab8817e48d88ead58d917f71958f51264adfd6ef6da4cbb6e991a04a498d2f7e7c3936c36ece65267a6d89093517626f624795674ec27d6866d49449ba853d1fcc40038b51fa96b4d808930a99e77326bd0351caf47598a32e6a64bca65ed9104df5a097ff891c", 0xe0, 0x4}], 0x2058000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e725f626c6f636b733d0678253934376b6b742c687567653d77697468696e5f73697a652c6769643d", @ANYRESHEX=0xee01, @ANYRESHEX=r3, @ANYRES16, @ANYBLOB=',nr_blocks=9k,huge=never,\x00', @ANYBLOB="cd60f9e609ef88497b7058da8995ee5aba14bc537612034c8570fdc63881f4cced325ebca204e4e35483ec54ff1aa4f184a79d6a6eb1e93be4806467b4d21fcd511a1826aedb943e80877e06bfa79b5066cf8691e80eb33efc4fb3e7fafc74618ef6de673a81d686435d28d6fa0226ba9d6473d0ceaa02c13b669fd3c212f620b7ef4e84773fb2ad8a0e381be857b7c9e48e5272f82a07c3fd4cf1a4866627a170a09491b6ea0f85fdc4a84a319255f192b5d13ee981dd327a9c3914eaf2d2d74caf6f3c25ae7eba", @ANYBLOB="9465f3bcd629d7e1c69901e1cc8221abc4a6a6d3e08e825ed4319ec91d06f310f4f0ada14f3e782dc6399e09cfe2ce0bea02c983363455d0864e5d7d9085791c0e0e05816ff7a5b1f1800f5807bcec037db3b9e7ef53f1a0e387d91bb7fae1af709e0d71a67a94bcccb58706e68edc9bd1e18705797f15260efffd020f85c35654d4589ed5b7e2ba626f3c0a12bababe41758e0cc2cbd3598fc7007123a044e51a35bc7adcc7638b2722c0bff5528361b428f4", @ANYBLOB="a5f87e69b61d297e3eb86ac837aa9a4f21540a2ad618c2fa80aed01b727317a4ca027a1e95e08a89fbcbd09238ea3ee984cd1c54f3d2cd41f6a479a00ff685bfbe5922b2693ada801c475b96e64ae937bb241b25b0d2c51c64539e4948afd726e47b6d087b74cb5d9b622803c19644a46f0b660c9e00133b05eff216679143d392061950578993f9a895d6dd8cbff577edfe95"]) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80000001) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000500)='rose0\x00') sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0x5b0, 0x0, &(0x7f00000001c0), 0x10) 06:03:34 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:34 executing program 5: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000580)=""/111) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0xd61, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="47aef1f1ce69771ec6869fcd5593ccdd841a0c1805bee4de240db89ae37386a26a20a34e42e8006930fafb8bc98d857cbee2bc064464be47728c01224393cf06ed87a64f7fd5f9a99e033c93223ab784a2d3972af2b6fb873228f197c9ad1e4c8c2f995e5e89b11d5c411e26fb7ddcce47fd658280429673b1f05c8a3e8dca19e37f94ac0d0036dd683b0d4dcfa6c6ed168b38f6d54bdb8e44d42a0dcda9edd08712497c4651d36fe6193f348c58f52ee11bb2bc9a8ae4db097ffba56daaca668fcd50cbed515dd10afea45e5d1eaacf34b23d415c39f64274fd5f", 0xdb, 0x7}, {&(0x7f0000000200)="c22dc8ce8aa687f6c57b00ab382d5076d48de6a6a64ea6e330cb7d10f0b226907ad60513df3f565677cfa1e3c6c9caa511880e2522b9924c5141fca369ce02674e998b6b620529b64261c07e95cda6e7a989a4a50236d6afcbe16e1e2f75688ca8cc9fe3b8e1d09a82a56dac0c30c1e5a25fde31a3f7eddd88d57d64ff7acec5b6e9df003dcceb760d6cedd85d1bd5b18126b5c0d55a217bb7c51aebb00ea2f0ec567cb8b2bfcb0e2a2a469fac4d0b56644e954de7a41b4195e45c5896b80a9fc34c0a11dbf5e8ef18981e0d02d207b2e00a73591c502f7f9cba00a8", 0xdc, 0x2}, {&(0x7f0000000300)="dc8e087614efaf545927170e8e87a91e6e91e53021c42eb27f181140b581fd3fb1bcc0a63510902235f2700a251502af8046738c252fa9f99ee6b06508272323c16f85cfc60a778787f71ede0c40300afb9608369c9e12f2a2e40111151794e5ec61f597e4a3ecf6759825cb109247d3365a171178c07f0aafb0ba151a54dda0d4c3448542dc9c6854fbd2e172b722edf39e4b3806726ccfe28753deb3d670c855506a7e8caade694a428495daddbca7c4df61d9a410f1df747ac83c7900c40eb62a06551c078153", 0xc8, 0x4}, {&(0x7f0000000400)="ba3b00254bcd316ebe15a59ad4b1a5e4238ff785a858d5b81f13dc398ba1cab50206990e1dd986e2463d598f02a1103e94", 0x31, 0x1f1}, {&(0x7f0000000440)="51c5ab34ed7f5e5040f8d29e2e3d1e730b96a23b94a9544cf9213e6e94d4796d2e9c79ac56481a3f0194d043de3910067a8254a25b5482f02c8ccc59bb01eecdc8cb18c5c1ad079d7804cb6c782252ed86eb2fd72d8167cda106dbfafb309d7118b44e5674cedc2fd5f2f684966e9b6b75028d3e5b165d", 0x77, 0x200000004}], 0x2080802, &(0x7f0000000540)={[{@map_normal='map=normal'}], [{@obj_user={'obj_user', 0x3d, '^$[:'}}, {@audit='audit'}, {@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x10000) [ 1193.058714][T14751] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1193.067083][T14751] ref_ctr increment failed for inode: 0x361d offset: 0x60 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1193.081278][T14764] loop2: detected capacity change from 0 to 131456 [ 1193.208757][T14784] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1193.217115][T14784] ref_ctr increment failed for inode: 0x361d offset: 0x60 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:35 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0xfffffffffffffffb, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) fcntl$dupfd(r1, 0x406, r0) 06:03:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r0}, 0x2, &(0x7f0000000080)=[0x60, 0x7], 0x1, 0x5, [0x1, 0x0, 0x1, 0x6bf]}) preadv(r0, &(0x7f0000000280), 0x0, 0x80, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='schedstat\x00') r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x5437, &(0x7f0000000100)) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000002c0)={r4, 0x0, 0x5}) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x5437, &(0x7f0000000100)) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000002c0)={r7, 0x0, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000180)={0xb, 0x4, {0x0, @usage=0x9, r4, 0x7, 0x72, 0x7, 0x9, 0x4, 0x11, @usage=0x400, 0x551a, 0xfffffc00, [0x0, 0x7, 0xffffffffffffeba0, 0x3f, 0x5, 0x4]}, {0x0, @struct={0x20000000, 0x3f}, r7, 0x2, 0x4, 0x2, 0x5, 0x0, 0x14, @struct={0x4, 0x67}, 0x5, 0x1, [0x7fffffff, 0x5c3, 0x7, 0x6, 0x7548, 0x7]}, {0x2, @usage=0x6, 0x0, 0x5, 0x7fffffff, 0x4c46ecc2, 0x10001, 0x3, 0x438, @usage=0x5, 0x1ff, 0x7, [0x5, 0x3, 0x7, 0xfff, 0x7fffffff, 0x8000]}, {0xff, 0x8001, 0x80000001}}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00005f0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:35 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x10000) 06:03:35 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x68}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:35 executing program 5: ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x6b2e0000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x10000) 06:03:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x10000) [ 1193.353141][T14806] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1193.361586][T14806] ref_ctr increment failed for inode: 0x361d offset: 0x68 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1193.381191][ T25] kauditd_printk_skb: 7 callbacks suppressed 06:03:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) dup2(r0, r0) [ 1193.381205][ T25] audit: type=1326 audit(1618985015.310:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=14801 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 1193.426273][T14817] loop2: detected capacity change from 0 to 131456 06:03:35 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000600f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) [ 1193.631200][T14842] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1193.639595][T14842] ref_ctr increment failed for inode: 0x361d offset: 0x68 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1193.687593][T14844] loop2: detected capacity change from 0 to 131456 06:03:36 executing program 3: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000140)=""/133, &(0x7f0000000000)=0x85) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache='fscache'}]}}) 06:03:36 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) 06:03:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x25218000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/210, 0x65}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f00000006c0)=""/21, 0x15}], 0x7, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r3 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x88000, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = shmat(r3, &(0x7f00002d6000/0x3000)=nil, 0x4000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_UNLOCK(r5, 0xc) 06:03:36 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000610f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1194.168479][ T25] audit: type=1326 audit(1618985016.100:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=14801 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 06:03:36 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) splice(r0, &(0x7f0000000080)=0x2, r0, &(0x7f0000000100)=0x8, 0x80000001, 0x2) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fffff0000550214f9f407", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x387, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xd3, 0x5, 0xfc, "77dd3581f4710606ccd823e5d2806e17", "f044b8c9f5c4fbff04e215137438fb890e0c5623826c3e2389593002ef47da54394cc2fe2e6503b3fd29360b7190cb7f333baf1df7aa693b65ca56ddc70426282856b53f99f1ae3e742d8a41d9617cd86d2d26c7beba96e5f3dc2dfe81b57dd4a8773e406c713f71c349483b29ca316ff465eb5cf30146a27123d916b7c0e6005168a07dc7f946276d69c69f0c84228799d2f21e7450341d3c9e89e12fc44121256ba28a3cbde5001434467d1851dab20c000ee82dca8d8920e2280ddc28"}, 0xd3, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 06:03:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x4) getpeername$inet6(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) [ 1194.312581][T14877] loop2: detected capacity change from 0 to 131456 [ 1194.321535][T14868] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1194.329914][T14868] ref_ctr increment failed for inode: 0x361d offset: 0x6c ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1194.356708][T14877] EXT4-fs mount: 23 callbacks suppressed [ 1194.356721][T14877] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000620f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:36 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2c002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x20010, r1, 0x1000000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, 0x0, 0xfeffffff) [ 1194.410319][T14908] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1194.429670][T14908] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.3'. 06:03:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x5, {0x20, 0x44, 0x2001000000004, 0x44, 0x7}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8992, &(0x7f0000000500)={'sit0\x00', 0x0}) 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, 0x0, 0xfeffffff) [ 1194.593923][T14939] loop2: detected capacity change from 0 to 131456 [ 1194.604006][T14939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1194.604807][T14934] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1194.623036][T14934] ref_ctr increment failed for inode: 0x361d offset: 0x6c ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:36 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x74}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000002700)={0x1, 0x2, 0x1000, 0xb, &(0x7f0000002680)="7d0d67bb22646f750590fb", 0xb, 0x0, &(0x7f00000026c0)="e31c8c0546617ddbe66db0"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/172, 0xac}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/110, 0x6e}], 0xa, 0xd9f, 0x0) pipe(&(0x7f0000002780)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:36 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, 0x0, 0xfeffffff) 06:03:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000007840)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000640)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x8, 0x1000, 0x10000) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x40, 0x0) r7 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000012c0)="5500000019007faf37c0f2b2a4a280930a000310000243dc900523693900090010000000010000000800050000000e00080000000004d5440a009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendfile(r5, r6, 0x0, 0x80000001) ppoll(&(0x7f0000000040)=[{r1, 0x8000}, {r0, 0x8020}, {r0, 0x2520}, {r1, 0x80}, {r2, 0x4012}, {r2, 0x11c0}, {r4, 0x8100}, {r6, 0x1000}], 0x8, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x6]}, 0x8) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000280)="fa7e97a9a88f26a597151a2ab00144a84fd28e950d1824b9eef3e59f588b709b24d3778dbaac6dc026aa7a763090f8f690cdd5306bfb352eca919b9386a0209ebed0b8b8e98f58dbac8e0e4c76a0e7455dace06495a33d87935489edc52eab7e957fc329ae31f8635f706399631afb1bc5e72a98", &(0x7f0000000380)="dc81389e7f83d64d021b9179701bb1af988b581f3115d02265d6c998700f143a127916ce07ff46c39de6cb7b51b66c2ad85b3dadff691b1934197fa6e20faf4cac7dae7925"}}, &(0x7f0000000300)) 06:03:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000660f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8}, 0xfeffffff) 06:03:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x7fff) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:36 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1194.774458][T14969] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1194.782868][T14969] ref_ctr increment failed for inode: 0x361d offset: 0x74 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8}, 0xfeffffff) [ 1194.871000][T14992] loop2: detected capacity change from 0 to 131456 [ 1194.910529][T14992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:36 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800009, 0x8010, r0, 0xdfa01000) preadv(r0, &(0x7f00000000c0), 0x28, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/57) 06:03:36 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000670f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:36 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:36 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8}, 0xfeffffff) [ 1194.971928][T14969] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1194.980405][T14969] ref_ctr increment failed for inode: 0x361d offset: 0x74 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:36 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ftruncate(r2, 0xffffffff) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1195.093946][T15017] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1195.102343][T15017] ref_ctr increment failed for inode: 0x361d offset: 0x7a ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1195.141461][T15026] loop2: detected capacity change from 0 to 131456 [ 1195.155065][T15026] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:39 executing program 3: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:39 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) 06:03:39 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000680f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:39 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000001a80)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001a40)=[{&(0x7f00000017c0)=""/3, 0x3}, {&(0x7f0000001900)=""/39, 0x27}], 0x2}, 0x2000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) preadv(r2, &(0x7f0000001940)=[{&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000001780)=""/7, 0x7}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/209, 0xd1}, {&(0x7f0000001900)}], 0x7, 0x6, 0x2) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0xffffff01) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/5, 0x5}], 0x8, 0x4, 0xff) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x7, {0x30, 0x2, 0xa3f, 0x4, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r4}}, 0x6) 06:03:39 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:39 executing program 0 (fault-call:0 fault-nth:0): open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) 06:03:39 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1197.797089][T15055] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1197.805471][T15055] ref_ctr increment failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1197.829314][T15062] loop2: detected capacity change from 0 to 131456 06:03:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x8ea, @mcast2, 0xf67d}, 0x1c) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/73) 06:03:39 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x1b, 0x1, {0x4002}}, 0x0) 06:03:39 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00006c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1197.856259][T15062] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:39 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf252700000008000300", @ANYRES32=r0, @ANYBLOB="0c00990003000000740000001d002a002503016c02250301a504010784066c022484b0680400040400000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x4c000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900)='ethtool\x00', 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r3, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000004b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004b40)={&(0x7f0000000240)={0x48f0, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0xaf, 0x3, "5a8766f7f0c9d3f0bc75afece732eb1cd3034990b982af1ac4ac0152f80fbc8020362223d6a8663456621537c60ca9a4ec73e676d8a998535d405cce32f106470b39f8dfdffab1665feca84817512e5d2ca466f8172e8eb4823bd628c0e0e203723ef46d1759a85fa788435e36d018498e423f563abb4a6eea07d77c6a99b1b7651208c24e1c1000941fa34707fb437c23a4a6f24713cf06c18c142a7dfc016325e990acaea7aaaa81b746"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x1408, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "b7c4d1d538400af6eb0d39fc162aa7b66220e452eac282449e76d898a61d7725fe2973d896c8ecd6d978650c431d7b834a2c0110ceeaaeee045fe44f297f35cf5df985c764b332c2e86684cb9052bcb0df8fd1c7c2fcba7897655bf376e325c8e1536f6c44ad1b4ea9"}, @ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "58eb3219e738d007099ece202a58034ccd0cc4a79ee4ecc8c5914a0276c5295164b77cc2fbfa42ea79d6d13ed355f142567d0f50677d5ac6d1d26f1de1f1e3249a4f1c971686cb9abb14d77b7d5e7b3fa4459d53da735eff6ea7cf43c4cc6b27f0349faa73d022546c5dc89e3b9ac89bfd53aadc1a16be2b0d37334717216fd9f9bffafce4a40f88307bd23c7b45f50e6e646644eab474fc8516daab70678d9e1d685302db96990b6c54"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "3d3c9a8bc8712145131140fb7ad068d1520a94eedd9488c26854410be0ccc86c3877075aba1c635754c7426317de1df6af7b4fcfa1bc80d20459f73176b46a910e52fb9645b310d7ba06565843dd3264ea5275c88257085674a675fc07f275957ac433882f56f823f7f65cfe2c21422d8b6c7f71a92fd2abc2ee11d79f82fcd82d2a14147eadbee18fef3e171307fa43b650ee789b0260c8bd7c67f045f2174ddef1b01acf2c315fad164efdc54a06ebe5050a5f786b6cbe8c25cbdf00c1b32ce15e5f55ece6ecee1a37ba5515dcf1536859a46de76dbe01931ccbbd844c492aaed42ef28bf0671ec79110836f50ec39785497fb39e01367"}, @ETHTOOL_A_BITSET_BITS={0x1a8, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%+//\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}\x9a]\x1e*\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\[a\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!&*\xb0^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '*.\\\'!&%)%:}#\x05.,.-S-&\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "51712612100fd85f49fec79b93159eac40c49dee4654af781ea1e2b28f"}]}, @ETHTOOL_A_WOL_MODES={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "8dcdc56818a93ff6953c25734ce6cf26bb155f54dbad2515fde0f05beb840ae5c56f09bde84f20e1c6c58d19afeba1d4d4a437348fdce1c2706397752ec2591020c779894b00e89d44c61bd2002c9c77ea491433afad6eac316ab395dc085b1dba9dab187793f2ada31214884bf4a31fffae4c5f52f3ff6818cdd62dd4e59db02b941b63bd172e10bebd3273b184e4a688d1e83f3e51fe457ea2e9e143d93dbfa9714b7753f6e529b814028c4c08766dc138a88992"}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "49091c6f8737ba447b87d5a37850b5330dff1ba43324064482e039c10a83225e625145e9f968d03d2f841a2bad8b35570d6253d88cc631a66c26ad78307709f6af43c5631aa26efcc47c8d882473489c5d2893473ad6cb9a6204a77ed8dfb6394425c80d76b54e9d0e71d533f1a408454decd550cba17f22d8c91688cd45af00b2df81054fc701afe71712c0708744ab4424"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_WOL_MODES={0x22a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "962ff3ea3cd87f03c3ce037f0419483bc07e44c6fc3e82d755c5c524e758095200b37fa32c35327c26b7be4b0e78cc9363bb367964a28f0512a48281704e1cfbb7bc445b03bad789ae7fb88a078faa86b0cb2789"}, @ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "9d0fb55baa961e6f33a157766cfc6c34bba36e83288ffb3cca3a1a3e00d7074c997d9259253eca2ea27b444157812ccc22f7d4e1e3b731d79d005d08bc3b0b2076b4879352a6cd517849e3a1"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3c}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[:^%,\x94\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x31, 0x5, "db93ec3035b80e18a717f7ebb23321dcac2d2563bf336d8eea994328630fc9f18cf64ddbe3a742eaf70fdc79f5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x48f0}, 0x1, 0x0, 0x0, 0x100008c0}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1197.947049][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1197.955479][T15058] ref_ctr increment failed for inode: 0x361d offset: 0x7a ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x29, 0x1, {0x4002}}, 0x0) 06:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x50) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f000032b000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r1, 0xf4120000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) ftruncate(r1, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) 06:03:40 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1198.055038][T15098] loop2: detected capacity change from 0 to 131456 [ 1198.075344][T15098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:40 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x20000208, 0x1, {0x4002}}, 0x0) 06:03:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}}, 0x40) 06:03:40 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000740f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x20000210, 0x1, {0x4002}}, 0x0) 06:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) close(r0) 06:03:40 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x12000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x3, {0x4002}}, 0x0) 06:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4dd}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012100)="ffff01", 0x3, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000013200)="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", 0x282, 0x11581}], 0x0, &(0x7f0000000580)=ANY=[]) connect(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80) truncate(&(0x7f00000001c0)='./file0\x00', 0xaa) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 06:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mmap(&(0x7f00003c5000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r1, 0xed8c000) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80000) accept4(r3, 0x0, &(0x7f0000000200), 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80000001) open_by_handle_at(r2, &(0x7f0000000140)=@isofs={0x14, 0x1, {0x80000000, 0x1, 0x1000, 0x7, 0x2, 0xfffffff9}}, 0x10600) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10000, 0x0) write(r5, &(0x7f00000000c0)="a312d89233680b5cf26995242a184aa53ecb075942e79b6ed6325e27c60c1ff9514c26072e262cb58fb81e0bf00b4bbac387002a9588be3a9585f4bb36fe8d527751f41864d48d229a1fd1a47e0de62d9166b7d14617857b4c1f39", 0x5b) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1198.262397][T15118] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1198.270844][T15118] ref_ctr increment failed for inode: 0x361d offset: 0x500 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x6, {0x4002}}, 0x0) 06:03:40 executing program 3: unshare(0xa020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000000)=""/220, &(0x7f0000000140)=0xdc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000100)=0xc00) [ 1198.337711][T15145] loop2: detected capacity change from 0 to 131456 [ 1198.358047][T15145] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:40 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x2b9, {0x4002}}, 0x0) 06:03:40 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x182b1b00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:40 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00007a0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:40 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa4, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x7fffffff]}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000500, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x17, 0xa, 0x801, 0x0, 0x0, {0xc}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 06:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x300, {0x4002}}, 0x0) 06:03:40 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"61359e13b8c4a6b9a4a3d07561e0fd80", 0x0, 0x0, {}, {}, 0x0, [0x0, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{}, r0, 0x4, @unused=[0x6, 0x7, 0x1ff, 0x7], @name="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"}) [ 1198.552277][T15182] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1198.560782][T15182] ref_ctr increment failed for inode: 0x361d offset: 0x600 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0xfe1, {0x4002}}, 0x0) 06:03:40 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r2) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000140)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="90c8160eb393e545f0001366e004dd0f91a1fc9c7dfa597b3afc3bc9e1d4f24bf2c258b7c12a82e874907c8893ef42e22911071182d95041bf3835fe01582c579fc857ba8fb0d7a9b1c7be9425ee5d0e13c48e86192fc3eb1b6a2998b168105e31ae4c3a4974d2d267ced305dc3de71693f0a1254aff8c2a03a39779edbbb47a4350", 0x82}, {&(0x7f0000000280)="cf05d86b32d97cedb6e9ba04eb901c55a337935d0d33315848c1cb474efdb7b08b314760c2cb45de10704fb26c5669b60c1447bc2740d9fd6ecaedc96edcdf0a1dce75d550b38321934a948d762c9993c9e8041edd9c8b5126bed4a95d04b6f52a0c2507beff2a80a808d2a626a89176fc94ba651125adc723d61481f55615a5e359b83a181af89abbd5ef09f796ae4f1f1f6ad74abbb230faa46ca82c56a51223c1869bdb71814aeacc7191b896e573b654279af996ecf29a0659", 0xbb}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002800000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x20004004}, 0x2000010) sendfile(r0, r1, 0x0, 0x80000001) fcntl$setpipe(r0, 0x407, 0x22) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pidfd_getfd(r5, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800003, 0x1010, r1, 0x8a3ac000) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) shmctl$IPC_RMID(0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xde, 0x2, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) [ 1198.607618][T15197] loop2: detected capacity change from 0 to 131456 [ 1198.628569][T15197] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:40 executing program 3: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x4e06, &(0x7f0000000040)={0x0, 0x9b17, 0x4, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000296000/0x4000)=nil, &(0x7f0000514000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r3, 0x1ff, 0x3, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r6, 0x0, r3, 0x2, 0x0, 0x0, {0x0, r7}}, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x2}}, 0x0) 06:03:40 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:40 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00009b0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:40 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x10, r0, 0xd7c90000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x600080, 0x0) lseek(r2, 0x5, 0x3) sendfile(r0, r1, 0x0, 0x4000000000010046) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001840), 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus/file0\x00', 0x14d842, 0x162) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) unlinkat(r4, &(0x7f0000000040)='./bus/file0\x00', 0x200) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80000001) openat2(r6, &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100)={0x222000, 0x20, 0x4}, 0x18) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0xb}}, 0x0) 06:03:40 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1198.827986][T15230] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1198.836358][T15230] ref_ctr increment failed for inode: 0x361d offset: 0x600 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:40 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x25000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4029}}, 0x0) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x20000}}, 0x0) 06:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1198.945495][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1198.953934][T15250] ref_ctr increment failed for inode: 0x361d offset: 0x700 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1198.966361][T15258] loop2: detected capacity change from 0 to 131456 [ 1198.982476][T15258] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:40 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00009c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:40 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x2) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x3) [ 1199.200427][T15291] loop2: detected capacity change from 0 to 131456 [ 1199.231532][T15291] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:41 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:41 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nvram\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000440)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf250a0000004800038008000500000000001400020067656e65766531000000000000000000060007004e3a000005000800f800000008000500ffffffff0500080081000000080003000100000008000400000000800800060000000000080004003f000000"], 0x74}, 0x1, 0x0, 0x0, 0x10000}, 0x40805) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="e867cbbf1db1ba168fb32a5daf1612cf1e23aef6b70295179384b9323085542daf6fe1111951d1b2f099aefef5a4aba1a73290f4b5c10a448dc3b1164cd97cb988f42765feefd22cc3e24feed6f2755c7a7127032a60b04ac4ebe5f1289f0bd800000000040000000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250800000058000280060002000001000000000000e0000001000000000000000000000000080003000300000006000b0000000000080005000900000005000d000100000005000d000100000005000d000100000005000d0001000000143d0380060004007f000000060007004e2300005800038008000300020000000500080007000000140006002001000000000000000000000000000006000400c60f0000060007004e230000060004000800000005000800050000000600040006000000080005007f000001080006000104000008000600010000008b9e3cf439871d9f1d"], 0xe8}, 0x1, 0x0, 0x0, 0x40044}, 0x810) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) recvfrom(r4, &(0x7f0000000280)=""/78, 0x4e, 0x0, &(0x7f0000000480)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8d8, 0xb}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x4080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x4) 06:03:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001240)=[{&(0x7f0000000140)="fdd67f56c526350d0d", 0x9}, {&(0x7f0000001300)="ec150537bc7681ba392f91d25d421e3ca9420f174408683e69bb6679051fc476787af625be8b8a6c88c4c027502db6562cd85fcdf4fcda8648320e90a40ba2165cbf7a53e7a06aac5267820c42bebd0c3ef94a65176be3ee1be4d87584c950ec4afefbf6a57ff12e84907dc526edaa212fc09883fef187bfb051d20209f25d3a8e816854c7a223703490247958ff9876dc955429f63c330c1174f2f3adcdb8b457fc01ba8d96cff03fa198a65c8de858b8839c2b3a984db4699f5e321085a29ab3178f59ccb453e38a3a999b75c4c438b60a", 0xd2}], 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '(/'}, {0x20, ':![*!%%):.'}, {0x20, '-,'}, {}, {0x20, 'y$,-+):* \\.\',&+'}, {0x20, '*&:,'}, {0x20, '*\\]{'}, {0x20, '/]/-/%\\'}, {0x20, '&]'}, {0x20, '#^&^.+'}], 0xa, "1d3fb0c1bb7adbcb445c7cfc62b0200381770150bc24d6376dd37bc8a9f11cacda78f894b0e71a63427a48f532ff1f83a6942d4321e8ec23bbbe286524f8b9b96de6b9005343afe8c9b532a5694acecff3dc39fdb02cc955c9603ed12fc77cd5fbe22a0a800c332933be0b676c860e3453dd92fe37744c2ad30d27178776a5f01b336c3915bc2547383202f32e69b27b0ec5b90cf900711648e16503c3f7eb992081ae4426dfa78a32dcac016fedf9e5d180a6c712bba81648c14e3e7ab0e8f603759a90dd30c9a85143e998ab4b6d842c052c2851ae6ecb36f49f830586730a085360e73c48bc9f04e748392f828b"}, 0x138) 06:03:41 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x27000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:41 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00009d0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x18) 06:03:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x90) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) dup2(r2, r0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fremovexattr(r3, &(0x7f0000000180)=@known='system.posix_acl_access\x00') 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x2f) 06:03:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x56080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r0, &(0x7f0000000080)="6e12c1c7857f4ceec67c9b7025", 0xd) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1199.389175][T15311] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1199.397588][T15311] ref_ctr increment failed for inode: 0x361d offset: 0x900 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x300) 06:03:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x149, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r3 = gettid() tkill(r3, 0x40) [ 1199.514620][T15353] loop2: detected capacity change from 0 to 131456 [ 1199.526706][T15353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1199.570645][T15311] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1199.579109][T15311] ref_ctr increment failed for inode: 0x361d offset: 0x900 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:41 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x1800) 06:03:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = dup(r0) splice(r0, &(0x7f0000000080)=0x14, r1, &(0x7f00000000c0)=0x78, 0x6612, 0xf) preadv(r0, &(0x7f0000000100), 0x0, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000480)=0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0xfff, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="3aafedff44d8f744212540280ae3dcecb5dfb4d72e4c0e4759f4c885ba4225c7467d7b3623920356f24183ba01bfd05da7121bcf52674d286c28ed79c745b548e10df56902cfbde0e4df6066b2eab4b6770fd5f76a7b564398225afa94c0ee5668c75ed2ade2f521a7879ee83df74b4d8c42e810307478a48160cfbee300160e46aff1e117bb5a8a969d", 0x8a, 0x6}, {&(0x7f0000000240)="8fb52d2bd481bc4436a09abdaaf92c46fe09812ec0c431269ea91695a14a7fc82b4627438e0a7acf58433d049edaa652d3709bce0a8e3b3d26a0117b43d34b090d9bbd8d1bee9f5d8de39278bb4ec05e383ff8306d42ec6a0069dc3f4250f54344901d19dca89c2a15e09df50f1658195705ad94caa9ffedad44b74a6861a5ca27b440cdf1b848f17392234442f6270fd7059341c673a7f0e52cbc80feaad9f6fc61c3ac03893c9ea1cdea85a1f24b0f61ea685334d1ef6d1207e70496ccf58a6b08916d88526d1e6c182ac532e848604e4a374b5a83e4d9c645ede9554e6c104f16d94d3544e89bc27e8caf3cb34505e0623dee", 0xf4, 0xf7a4}, {&(0x7f0000000340)="8d3561c375fffbe3356c8c8fa18ebb6b0ff93b9b475059e2c76aeb0d80fb5f54419ca1d57c29467cdc47e5a661df922d6123ecce1da6c55f40", 0x39, 0x1}, {&(0x7f0000000380)="b2c9b4c8a70f9e0109d86f67a7936ec0cd979373475e2276e1880111851f6123491e95783eab4591ecc740553eb4df21df7a46d3bbb67e996cdd5f23e821330ffca05a657408ef0af55da1101e51a4c62869f2bac6ae5d", 0x57, 0xffffffff}], 0x100000, &(0x7f0000000580)={[{'[:\xef!'}, {'.-/(:'}, {'*)$\a*#\x92:):}#^'}, {}, {')-/|'}, {}, {'\x00'}, {'\\%/'}, {'!-&'}], [{@fsname={'fsname'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000080)=""/100, &(0x7f0000000140)=0x64) 06:03:41 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000011000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:41 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x48000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x2f00) 06:03:41 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x81) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)="5aa92f920ea3a0a74bd36a88795563440ecdff9e2f0c1e303d033f49d26e97dfa3f5420964d2f901a99eb50c31f2b105464530", 0x33}, {&(0x7f00000002c0)="386d1ac99d378a3ec4d8ad348bd9e528876b28d012fb3b95551fb7e9e0984b6c4db2d75a017b664e75f4861eca8451cdb1eb708960f784c037f389a4c933357ad289c321eeb6e6ff0312b975eeb88a520dcf5ab5a39ea352b9774003b2a28a56ba82e001744812", 0x67}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="30eda5b0b434ef69e2b601cfe2aafb744f6527a783cb14211284c5554b389408def061b3a5d4a1810afc1143f0b4f53a0558c731301499a52e76684ebdcb751f880dc1aceab23a90254b3b", 0x4b}, {&(0x7f00000013c0)="13f8e6b90f5c33378b06fd56fde3cab2bfd09ce683c36efe19af7283ef79cd80a32b872d1db45b57366812b2cd3de017cf01c5b0eadb300f16369916f26415ba086e2d542c", 0x45}, {&(0x7f0000001440)="f53887e45c1bd5eb3a0d2eff531b10905375b0b78b4ebcc045059c71dcf1d053b32645c9f9e2429b6de86e3bd4ce8025e2723165647eedef383a8d4d259020", 0x3f}, {&(0x7f0000001480)="902b572a6809aa3ba93ba7b77457d13efc4fd6380904bdf625b4241b300b927ab287394320c798f5d323765d99acad7e1530d89ed1735927382b7ce13e5e0fec58bb216372c195a3ab67e1fc497c919ec201f9bea6618b0c62d20214a27903ec24024fc6a4fce3425039f8866be054f86b3bc29bb6d6aab7d5ac78d410b279b7f7c78c881b193c135982451e23d4a718ef1abaf6258b64a655ee0e839ac5009fef3992cc6d21f429b94a9d920ab43f115d8877d7965dd9c47cf09cc6d4e719b261f6cffa00360642e0348922aca9fa3c02eb", 0xd2}, {&(0x7f0000001580)="56485ccfff9d89b2b9b9e28d6cbccfebd1e1355226c4e5ea7b387bb1f56215c683309ae3", 0x24}, {&(0x7f00000015c0)="dc0cbf57281a15d1def45193e698dcb1d18380a26406d4afcbb0f1c1755c9a0a61eeabdf0599ad0bbc94a6b5844f8199f7c4e0b6227d03b1e612938faaa180892d8cb2b81d7ab84711d61712b926c9ac9e335e1a89", 0x55}, {&(0x7f0000001640)="5e19b8f364f609ff715d8a255e2ab5ca7d9f14a792a6c29387c8b12c96e3a2a93d7fe148b63cea4c5f1d39ece68def34011522dba57b5c2c09ff1b5c6ef8976e32178e8c788129c9ea37f5ba9db46f052fba934296b7a1b3573c470b9c017c8281635cfa82817bcea7a45a6e88c5d735a20c7d61d13e9c86780f773ffd", 0x7d}], 0xa, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa00) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000017c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001a00)={0x1d4, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x10}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="46e1f721860955612f0bae7d57429b87753563bece3a963a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4e1dbe2cc1a75a3d5b06225d9a8a18ec"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="39f45a7d73457bd6b8bb97731667bac6f51499cb442c5b286c0decc7217f64a6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="530e4a12ac38f2c66e078a2464127c27876f410fb4910150"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7dd350d55ed2896c5865f84954ab45b9"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a0065a01e5e794ac9c7ea5a44e3d157e60922a43b2703462"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="00e3628d1f5e522b645497f1c85360d33bad37ec69eb462b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c97deedffd50d44d0e6e6627ff3354d7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf2d}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0f6b0322a1202240"}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e1b7800cd504651f56ecb6c610abc5bac9d5053d98bf6df6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="40d00dbb22e8bb1f30fd5aefd0d0a135e27061f0b67c61599cd72d530dde87be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e91ec76705e8e88353997f62a32d286a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f09990af9eb87bb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "59e27bcab7083f3c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="07abdbf9d61e682c40826e0dbb14bda341963655928f8026"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "95bcc1db482a27c7"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0x4008024) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1026005, &(0x7f00000018c0)=ANY=[@ANYBLOB='traps=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',afid=0x0000000000000004,cache=fscache,posixacl,nodevmap,version=9p2000.u,mmap,loose,noextend,noextend,nodevmap,pcr=00000000000000000043,dont_hash,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=unconfined_u,uid=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:41 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000080)={0x0, 0xbe7c, [0x9, 0x5, 0x100000000, 0x9, 0x8, 0x3f]}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}]}}) stat(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x2, r3}], {0x4, 0x4}, [{0x8, 0x6, r7}, {0x8, 0x5, 0xee01}, {0x8, 0x8, r8}, {0x8, 0x7, r9}, {0x8, 0x0, 0xee00}], {}, {0x20, 0x2}}, 0x54, 0x3) mmap(&(0x7f00007db000/0x3000)=nil, 0x3000, 0x300000e, 0x1010, r1, 0x93056000) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x3f00) [ 1199.717664][T15374] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1199.726084][T15374] ref_ctr increment failed for inode: 0x361d offset: 0xa00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1199.742312][T15387] loop2: detected capacity change from 0 to 131456 [ 1199.753434][T15387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x1000000) 06:03:41 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:41 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000012000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200200, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x3f) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) r4 = dup2(r2, r3) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x3f7, 0x200, 0x70bd2c, 0x25dfdbfe, {0x5, 0x5, './bus', './bus'}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x400884c) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x3) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r5 = shmget(0x0, 0x3000, 0x100, &(0x7f00004bf000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x2000000) 06:03:41 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x60000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1199.889721][T15408] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1199.898200][T15408] ref_ctr increment failed for inode: 0x361d offset: 0xa00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:41 executing program 3: clone(0x60000400, 0x0, 0x0, 0x0, &(0x7f0000000180)="ae2a97ee6c6a813e0051827175894818b542") 06:03:41 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x3000000) [ 1200.005765][T15421] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1200.014162][T15421] ref_ctr increment failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1200.036088][T15432] loop2: detected capacity change from 0 to 131456 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x4000000) 06:03:42 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000001c0)=0xd5, 0x8) mkdir(&(0x7f0000000140)='./file0\x00', 0x8) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c0082, 0x8) [ 1200.050871][T15421] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1200.058925][T15421] ref_ctr decrement failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x4 of mm: 0x000000004c8c3d42 [ 1200.075093][T15432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000020000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00000aa000/0x1000)=nil, 0x1000, 0x1800003, 0x10, r0, 0x3000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:42 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x68000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1200.159308][T15461] new mount options do not match the existing superblock, will be ignored [ 1200.173844][T15461] new mount options do not match the existing superblock, will be ignored [ 1200.255905][T15475] loop2: detected capacity change from 0 to 131456 [ 1200.265205][T15475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:42 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x48000, 0x15) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x8002) mmap(&(0x7f00007c4000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xad4e8000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x18000000) 06:03:42 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000049f000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0xe0fb00, 0x0, 0x0, 0x0) madvise(&(0x7f0000994000/0x3000)=nil, 0x3000, 0xe) 06:03:42 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce000000fe000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/157, 0x9d}, {&(0x7f0000001140)=""/86, 0x56}], 0x3, 0x80000001, 0x0) 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x2f000000) 06:03:42 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x74000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x100, 0x2) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4, &(0x7f0000000340)={[0x20]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x22b}], 0x1}, 0x2000) 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x3f000000) 06:03:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x20000d9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b073b39300000080000000000000000000000000000006d"], 0x78) [ 1200.439336][T15517] loop2: detected capacity change from 0 to 131456 [ 1200.462239][T15507] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1200.470653][T15507] ref_ctr increment failed for inode: 0x361d offset: 0xc00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1200.508262][T15517] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:42 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) creat(&(0x7f00000001c0)='./bus\x00', 0x4) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) mmap(&(0x7f00004f5000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0xa63cb000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00', r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x8c0) close(r1) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r3, 0x8, 0x1000, 0x10000) creat(&(0x7f0000000300)='./bus\x00', 0x98) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x9, 0x5}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000280)='batadv0\x00') shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x8, 0x1000, 0x10000) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f00000002c0)=0x4f5) 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff) 06:03:42 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) execveat(r0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000580)=[&(0x7f0000000300)=')&(,\'*^\'\x00', &(0x7f0000000380)='^^-^^\'\\\\\x11@\x17\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='@.$+\\&\x00', &(0x7f0000000440)='.\x00', &(0x7f0000000480)='-@}\x00', &(0x7f00000004c0)='%/\'\\H{,%!+#\xc1d$!{%(^[$#\x00', &(0x7f0000000500)=',}!\\\\%$(-+\x00', &(0x7f0000000540)='[\x00'], &(0x7f0000000700)=[&(0x7f0000000600)='{\x00', &(0x7f0000000640)='$]*\'\x00', &(0x7f0000000680)='\'){!^,,\x00', &(0x7f00000006c0)='/\x00'], 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffd28) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x9, 0x0, 0x3}, &(0x7f00000000c0)=[{}, {}, {}]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)) 06:03:42 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000002000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:42 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1200.653461][T15544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1200.661866][T15544] ref_ctr increment failed for inode: 0x361d offset: 0xc00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfffffffe) 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x9, 0x9, 0x1000, 0x8}) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r3, 0x8, 0x1000, 0x10000) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x1000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1200.730732][T15555] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1200.739186][T15555] ref_ctr increment failed for inode: 0x361d offset: 0xd00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x1000000000000) [ 1200.827608][T15569] loop2: detected capacity change from 0 to 131456 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/63, 0x3f}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x4, [0x4, 0x5, 0x57a5f2c8, 0x0, 0x0, 0x6]}) 06:03:42 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x100000000000000) [ 1200.872069][T15569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x88) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:43 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x200000000000000) 06:03:43 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1201.156447][T15617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1201.164838][T15617] ref_ctr increment failed for inode: 0x361d offset: 0xe00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:43 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.selinux\x00') statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1, &(0x7f0000000040)) 06:03:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000003000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xa0801, 0x11a) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x103002, 0x0) sync_file_range(r1, 0x0, 0x0, 0x6) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x300000000000000) 06:03:43 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x400000000000000) 06:03:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='/proc/self/exe\x00', 0x311603, 0x0) mmap(&(0x7f00001a0000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r2 = socket$unix(0x1, 0x5, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000140)="e9a692fa615b1d76177958889f34f3cc147330df6ec516177875409e9e33ac407c37ae368fea4b998fe9544eb3363ce1120df2516ef39ad6af20ceed4622d350bc1a88fec921d32ef0035bd44b01340dcc06220c31f8a774f68f26fa78b76847db6365878bf9028e02da783d550de794fafee8a0ded473c54a1eee6b5bd7d4ddf936061ac2866060e4bb82dae12d80eb49419f7101044402d9de173d83f26bc5610962a9c8fb997ed3b466742f1bec2ca0b4c2eedd31605bb814b0ba7e8e8fe4c7e565ecc6bbe54025a69edf6663e593ae", 0xd1}], 0x1) [ 1201.231418][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1201.239827][T15620] ref_ctr increment failed for inode: 0x361d offset: 0xe00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000001c0)={0x852c, 0x1, {0xffffffffffffffff, 0x0, 0xb43, 0x2, 0x9}, 0x4}) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x25a, @tick=0x4, 0x7, {0x7}}) sched_setaffinity(0x0, 0x36, &(0x7f0000000100)=0xbaa) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x80045300, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 06:03:43 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:43 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x1800000000000000) [ 1201.350727][T15643] loop2: detected capacity change from 0 to 131456 06:03:43 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@tipc, &(0x7f0000000100)=0x80, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46000) fallocate(r0, 0x8, 0x1000, 0x10000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x2f00000000000000) [ 1201.410150][T15643] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1201.448140][T15653] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 06:03:43 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000004000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x3f00000000000000) [ 1201.456577][T15653] ref_ctr increment failed for inode: 0x361d offset: 0x1100 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xfeffffff00000000) 06:03:43 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0xffffffff00000000) 06:03:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) chdir(&(0x7f0000000040)='./bus\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80000001) r7 = openat(r6, &(0x7f0000000080)='./bus\x00', 0x1, 0x194) sendfile(r0, r7, 0x0, 0x80000001) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 06:03:43 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1201.712386][T15697] loop2: detected capacity change from 0 to 131456 [ 1201.740973][T15697] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1201.826858][T15707] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1201.835266][T15707] ref_ctr increment failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1201.999250][T15715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1202.007756][T15715] ref_ctr increment failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) ptrace(0x11, r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x145042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) mount$9p_fd(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag'}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}], [{@context={'context', 0x3d, 'root'}}, {@obj_role={'obj_role'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)='S', 0x1}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000200)={0x1, 0x1}, &(0x7f0000000240)) sendfile(r4, r9, 0x0, 0x8400fffffffb) sendfile(r3, r3, 0x0, 0x8080ffffff7e) 06:03:44 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff070000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000005000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={r5, 0x0, 0x5}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000200)={0x0, 0x8001, @start={r5, 0x1, "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", "844e013f34546e4df46cc27197c7fdb3e61a6dd1b52401458dd5607258a0a64b9738f166d315c2dbba9fa78aed749f1b1820c21d2443cc1c3103f59b6b82f87e7843ee0f7cb2a8ceebba6114d098338e08ca90109147ed2434eb604d16c8d0513d1c8d08e3248407e5ff7da5d4087403f3c647e41c46cf8f47fcc831e558199e8d4145dccc8df39c1d45a3ba5413aa296e335a7f75aa0dbd8883b5192700caaa9700f3989aeb054431a8be7fe14a381f0341230d337f8989411a504b0d8ea56764f476f9e047358b337b7be90ee2c0b01921891af4dae5409f1e754424d0430286db3e13b56b08bc78773d290a3cbce78f2a56853da411d4599870339588b876a5d06aa13dbbc33ce949a7ec87c7656a5c929913f12f1e2e75db81d141358657481b476578f3a544de5531e6a833ab7c527b4bd017926ce5ae3047506c45d7c570c4ef06021b8f8f97336d9e2dfae4fb94eef550ccb65c6434ac2b282cf00704a617ab1649c9c267ac3f49ba1dc61cf2cec1951025e87210214f294315b1fae9dc0bfede430d3414f778db79a05d5579bf02ac4072eee5eee0a3f545aea04dbc5898cb9096c45ce7ea453cfe412225b66f1040261a7feba22c069fc7d8360f6a14738b77f07e519e741d32301c6ed4f209edcd116a151b21cac9bde4055c5b9dba24efefdb30aeff7049dfa89be52ff7c510f6162602851563017100d06f7440b2c3f42a2db5a32e49e937efeb051c5604b48424e4331d57bfa554a3690350e67d92866d7a3730add8df2680c2ac8f27fef05893d507318780db6cbcff5f46ddc7dc54160698f3cffacc0d5ff7cffb322b243aad46d1c8b2e1944bc70d4d376849952e29a53a0450d1f71dc2f02aa3ee1e13e9603a4b0f4f3c0db2a15ac312b32abf286826e7c32dafc9da16b7b4cd130a9f29222110296618ec1447fb98dccebcad1129f21abcd1a842b8c5dee12e5686e8a95dd784e990d34b9252c7127362d2fd18244a9f87d1a2a9ac73d04c3902305c57a8bebf0d989a3d4e1788360d61344fca999f5eb238666d8312f7b085cad014a4649ae9ee3683256206a96690c6f7b9a890012b47b6be2181534a098f7882d6d127a9b73fe4489935457d916c814b7aad656b19bf50d23b8f62852ab46a0807ac7a475f77d0cc4e244b5005af16023c040dffdec3a9febd0577f9bc47d6071e6191ba176c4c676bffa2e8b045a00395c67768090eb2fb8880d28f73b893fbe3a91f58c369792b53c95ff77681ec0966796154e090eea56ef45ad50640642f768f40fa92cc725df719465c8f7a3dd7f9a52b3eb1a0c199858b4241df9470bdb2fedddf4f7ff17ed36be5b6e5e5d56d32fef3279aeb96d01c05b019e3044224680d3d0cbdafa920cbedc225cb36160e2f3a9bb5f2d4041176b6ef75ddafcd64e18f3c88854c92dc5cb332b3456cdd62"}, [0x0, 0x80000000, 0x80000000, 0x8, 0x2, 0x1, 0x4, 0x3b, 0x3, 0x9, 0x7, 0x1, 0x6a9b2f8f, 0x1, 0x800, 0x1f, 0x6, 0x0, 0x1, 0x5, 0xf8f, 0x8000, 0x69, 0xfffffffffffffff9, 0x6, 0x41a, 0x9, 0xff, 0x2, 0x9, 0x6a4, 0x1, 0x6, 0x9, 0x8, 0x7, 0x5, 0xffffffffffffffe0, 0x5, 0x3f, 0x1, 0x0, 0xeb, 0x1, 0x4, 0x6, 0x7ff, 0x1, 0x9, 0x9, 0x1, 0xfffffffffffff801, 0x10000, 0x101, 0x5, 0x2, 0x1d7c, 0x5, 0x3, 0x1, 0x744, 0x6864df2f, 0x3f, 0x401]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x80000001) r7 = dup(r2) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000013bb26c98a83bff6a13f0d318e58187b0ed6632e69f9d31dc279ef47b7e5c299abc55626b36289d8364ce7f6fd83616598109f27cdebde69ef5756fa53a5af0d83711c2dc5abe6d80aab6358961516bc3f971221eba4e293189177824861c564ca8b5913c5a34526ede1b"], 0x80c0) r8 = dup3(r3, r2, 0x80000) r9 = openat$cgroup_int(r8, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000040)=0x81) flock(0xffffffffffffffff, 0xe) 06:03:44 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:44 executing program 5: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9a6e61f525d3b70fdf24bdbb3c84637eabb7461b67d02fbfe06a6fb1e9d676ce471757ce327f8a5ea7ac0dade602494f76ad8e6bda226cd9e7384d701cc8945e149a87d3cfed85ee10ca50a0a7a4689a395539a3a634ca1d7bcafa3b75d461f4e6e423d2e45ca70ce36967528076e2140ba191d32c", @ANYRES16=0x0, @ANYBLOB="000808007000fbdbdf25280000000c008c4e5a41426fe0beaaaa0cf6050002984fc360060e5c41ddd0fa3e71a7b6e60210612baaaef65b1d201f88ce41ce34db1583c200"/85], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x80) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400202, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r3, 0x101, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-.+\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080)='802.15.4 MAC\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r4, 0x0, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xad}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) mmap(&(0x7f0000126000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0xd7258000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 06:03:44 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1202.331795][T15728] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1202.340231][T15728] ref_ctr increment failed for inode: 0x361d offset: 0x1800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1202.360811][T15744] 9pnet: Insufficient options for proto=fd [ 1202.372424][T15743] loop2: detected capacity change from 0 to 131456 06:03:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='sysfs\x00', 0x0, &(0x7f00000001c0)='^!\x00') syz_mount_image$iso9660(&(0x7f0000000380)='iso9660\x00', &(0x7f00000003c0)='./bus\x00', 0x10002, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000680), 0x0, 0x1ff}, {&(0x7f0000000440)="08faa2324da67494cd3bba2d459285f5efc7ad6ee100854e54a25590b1e9bc5d835e53aede002463291c204a6a105205026a7f42a701adeb7fba57a2f85127616123cb42b68ee1d70de0be23501c578aa8bd10f2a7e3e467fee9a794bec8f5e135c6a81f1c999c1e8b824d49d8d2d20b247345015234ff29a3f2249113492932c8", 0x81, 0x4}, {&(0x7f0000000500)="c2603c64c6cb1777dc1075aca32296ac1c546e72df33568744af82b1d9d5844b91ec6e8b1e0f9bb4fd733d719f44b1177d53c4cef10ffaf3884294cc6a46760e9c5dd96003923784", 0x48, 0x6}, {&(0x7f0000000580)="e492e619b68f46c23682d615c050d4555c66b1fe4027bd7b3dfb606de637a77a20d2", 0x22, 0x7fff}], 0x100880, &(0x7f0000000740)=ANY=[@ANYBLOB="6e54b0e0e77e704743a075f4c71febf8116f726f6318636cdce2bc20a3f6b8cb3fa49615f7689b0a83eed9498637a8028f315e13e56b9649d168b53616565c979cb17a82960cfedacded358935a515c2426f0608622c7afdd8e8d3b475552ab2fbc139ea960e2e09b52bc517db6d10dd7cb5bbe6848a0582882b34359ad032385d"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x200000, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) sendto$unix(r1, &(0x7f0000000200)="d322fce1ef573aa7e90699278a749124d0f84e36048ea8f7d2ce959998aaae071bea125b234ced533dc4de45dae51086c599d9d999d8932e8fae88dc8d169aa46f2c4deeb5ac40f2260d32529a4613d562e5d77b451f049efe1e2dd0ef6c9d7dc5b1339b3edcde869a478c187ec6f0e6de67d6db79b324153aab0c5b1f96d372c620c79d114ccbbafcefc501c481655d779dc3ec55b386a874a941ee442cd5cf66287b045d2c762e81c91260d782ebb8ab5f418ce983ca3484c0fe94d27e2aec84c658ec56ee9c231bd69f79e75483975508f564d7c6e97654d0746638dd217a934ccdad74b8c89df613", 0xea, 0x4000000, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) r6 = syz_io_uring_complete(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./bus\x00', 0x91000608) lseek(r1, 0x9, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000006000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:44 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0xe1, 0x5, 0x9}, {0x0, 0x3, 0x2, 0x2}, {0x7, 0x3f, 0xda, 0x3}, {0x2, 0x7, 0x20, 0x4}]}, 0x10) [ 1202.389235][T15743] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1202.484856][T15759] sysfs: Unknown parameter '^!' 06:03:44 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:44 executing program 0: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1202.606819][T15776] loop2: detected capacity change from 0 to 131456 [ 1202.634550][T15776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1202.674185][T15759] sysfs: Unknown parameter '^!' [ 1203.194899][T15735] 9pnet: Insufficient options for proto=fd 06:03:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) ptrace(0x11, r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x145042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) mount$9p_fd(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag'}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}], [{@context={'context', 0x3d, 'root'}}, {@obj_role={'obj_role'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)='S', 0x1}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000200)={0x1, 0x1}, &(0x7f0000000240)) sendfile(r4, r9, 0x0, 0x8400fffffffb) sendfile(r3, r3, 0x0, 0x8080ffffff7e) 06:03:45 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:45 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB="08009167de6a62b8e619ce258f9598dc"], 0x0) 06:03:45 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff8c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000004c0)=0x3) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400000, 0x0) r3 = dup3(r0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140)='freezer.state\x00', 0x2, 0x0) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="dad0cb53f03a5a451d993cb72dee816e06ce123dcad9900f0680420e01e40030278cd03aeb6e0c8defbe36b14856bdbd064852b60a8777d95a5c7455794a7c86f654603d34390226ed80708a302bc66594b7d06b8262c34dea0010cba8276900392966d2f97fe471577162ee85f26aa0f368933685b86c520ca36ba5408e5ed258fad8c9db6baaae12d6db0d6744dc8fb836ef1bfbd29a33df9396fd3d570a723d3eb32a3f289c3d6d54ee950a2c2fe29e0dcd6a56646ee0a938bfd5edd754d80c056732065ed3cfb65eac81635cac205981261fcc09e7b98c", 0xd9}, {&(0x7f0000000380)="42655cf594cf8b429e9ead0000c8d98ad8319a666ebba732ac959e666878380601c0a6e22c1ff3dc2a440bdad4054c5169be907a2e9c6d87fa106208372569117f219c36895dbfbae7b1fbbf6b228fe44de8e587d4664f713b44aed37df44b7e53b124689494a4e521af2fe4e1fccc41184e345a98aa120569f4058e8be421ebbee75ec213c2bf6b1949ad0deb5423bfc348a311e3bcef84d680f8d3aa603b999b7b1e822c954573f11895ab7558d0d9dc74f8f9791af4626622bbf49d33d2db9c7c3e54a69cbbf7fba6456ce19dd68de763206186fb66ecc9ef6d8fc0ed0a6e1a064f717a9a0f4f20e49e05d754350e2a00ad53", 0xf4}], 0x2, 0x0) dup3(r2, r3, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x7, 0x1f, 0x0, 0xf8f5, 0x401, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x28, 0x2, @perf_bp={&(0x7f0000000080), 0x6}, 0x80, 0xfb, 0x3f, 0xa, 0x1, 0x4, 0x8}, r5, 0xb, 0xffffffffffffffff, 0x8) 06:03:45 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000007000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000}], 0x1, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:45 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) [ 1203.313074][T15814] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1203.321502][T15814] ref_ctr increment failed for inode: 0x361d offset: 0x2000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:45 executing program 0: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x8, 0x8, 0x8, 0x0, 0x16, "66685064f618864d"}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) open_by_handle_at(r0, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0xfff0001}}, 0x0) r2 = fsmount(r0, 0x0, 0x73) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x800, 0x0, 0x6, 0x6, 0x9, "209d65dd0ba6ecfe32915cc6ac8ab06dd0773f"}) [ 1203.354102][T15823] loop2: detected capacity change from 0 to 131456 [ 1203.372264][T15823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1203.385896][T15832] 9pnet: Insufficient options for proto=fd 06:03:45 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010000040200000000000000"], 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x3538c1, 0x5) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x1c1441, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x20010, r3, 0x789e8000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x8180, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x20) 06:03:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x20002, 0x0) r2 = shmget(0x2, 0x4000, 0x20, &(0x7f0000176000/0x4000)=nil) shmat(r2, &(0x7f000044e000/0x1000)=nil, 0x1000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5d}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 06:03:45 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000008000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1203.632321][T15863] loop2: detected capacity change from 0 to 131456 [ 1203.651003][T15863] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) ptrace(0x11, r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x145042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) mount$9p_fd(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag'}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}], [{@context={'context', 0x3d, 'root'}}, {@obj_role={'obj_role'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)='S', 0x1}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000200)={0x1, 0x1}, &(0x7f0000000240)) sendfile(r4, r9, 0x0, 0x8400fffffffb) sendfile(r3, r3, 0x0, 0x8080ffffff7e) 06:03:46 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000edffffff012e000000000000"], 0x0) 06:03:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000640)=""/257, 0x101}], 0x2, 0xffdfffff, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900)='ethtool\x00', 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="35a30e45a14b72226a5740000000841d75f06519e79463c022"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4056200", @ANYRES16=r3, @ANYBLOB="000128bd7000fbdbdf250300000028000180080003000100000014000200776c616e310000000000000000000000080003000200000005000500c0000000050003007400000005000200010000002800018008000300010000000800030002000000140002007465616d5f736c6176655f300000000005000200f9000000050005000700000020000180080003000300000014000200636169663000000000000000000000000500050001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4008080}, 0x240000c0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) openat$cgroup_ro(r6, &(0x7f0000000480)='memory.current\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x80000001) move_mount(r8, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:46 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfffffff6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:46 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2500}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:46 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000009000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:46 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfffffffe}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x401, 0x840) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) [ 1204.249188][T15884] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1204.257579][T15884] ref_ctr increment failed for inode: 0x361d offset: 0x2500 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:46 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x581202, 0x20) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1204.290058][T15894] loop2: detected capacity change from 0 to 131456 [ 1204.290649][T15884] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1204.304834][T15884] ref_ctr decrement failed for inode: 0x361d offset: 0x2500 ref_ctr_offset: 0x4 of mm: 0x00000000ec1b7669 [ 1204.306739][T15894] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1204.332175][T15900] 9pnet: Insufficient options for proto=fd 06:03:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/253, 0xfd}], 0x5, 0x8, 0x72030149) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:46 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000a000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:46 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400001, 0x0) [ 1204.546756][T15927] loop2: detected capacity change from 0 to 131456 [ 1204.567972][T15927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) ptrace(0x11, r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x145042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) mount$9p_fd(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag'}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}], [{@context={'context', 0x3d, 'root'}}, {@obj_role={'obj_role'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)='S', 0x1}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000200)={0x1, 0x1}, &(0x7f0000000240)) sendfile(r4, r9, 0x0, 0x8400fffffffb) sendfile(r3, r3, 0x0, 0x8080ffffff7e) 06:03:47 executing program 0: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0xc000) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) dup3(r0, r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x4001, 0x0) sendfile(r2, r1, 0x0, 0x3) ftruncate(r0, 0x9) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, [], [{0x3, 0x0, 0x7, 0xfffffffffffffffd, 0x8}, {0x138, 0x8, 0x249f, 0xffffffff, 0x1c6d, 0xfffffffffffffffb}], [[], [], [], []]}) 06:03:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0xd89bd000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index=0x7, 0x200, 0x1f7, 0x7fffffff, 0x18, 0x1, {0x2}}, 0x3f) syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmmsg$inet(r1, &(0x7f0000006440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x38}}], 0x2, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1c, r2, 0x1, 0xe1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) 06:03:47 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:47 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:47 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000b000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:47 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000400000000b100"/23], 0x8001) creat(&(0x7f0000000040)='./file0\x00', 0x30) 06:03:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/253, 0xfd}], 0x5, 0x8, 0x72030149) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/73) [ 1205.229601][T15949] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1205.238163][T15949] ref_ctr increment failed for inode: 0x361d offset: 0x2700 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1205.254974][T15956] loop2: detected capacity change from 0 to 131456 [ 1205.265846][T15956] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1205.277870][T15963] 9pnet: Insufficient options for proto=fd 06:03:47 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000c000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:47 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x5, 0xfdcfa73, 0x8, 0x100000001, 0x4}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000040)={0x19eecbde31b791c3, 0x1, {0x3cef, @struct={0x3, 0x80000000}, 0x0, 0x7, 0x0, 0xfca5378, 0xad1, 0x800, 0x12, @struct={0x940a, 0xffffff81}, 0xffffff5c, 0x4, [0x9, 0x81, 0x7, 0xfff, 0x800, 0x38b6]}, {0x100000001, @struct={0x8, 0x80000000}, 0x0, 0x4, 0x9d, 0x1, 0x9, 0x1, 0x9, @usage=0x8000, 0x100000, 0x7f, [0x4, 0x8001, 0x2, 0x7, 0x9, 0xdfe6]}, {0x7fff, @usage=0x4b5, 0x0, 0x14, 0xe30, 0x38e, 0x9, 0x8, 0x1, @usage=0xce8, 0x6f6, 0x6, [0x100000000, 0x7, 0x6, 0x6, 0x8, 0x6]}, {0x3, 0x0, 0x3}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000440)={r0, 0x2, 0x265, 0x1}) 06:03:47 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001340)=""/156, 0x9c}, 0x7}, {{&(0x7f0000001400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/198, 0xc6}, {&(0x7f0000001680)=""/116, 0x74}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x4, &(0x7f0000002740)=""/38, 0x26}, 0xd4b}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002780)=""/120, 0x78}, {&(0x7f0000002800)=""/245, 0xf5}], 0x2, &(0x7f0000002940)=""/173, 0xad}, 0x10001}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002a00)=""/98, 0x62}, {&(0x7f0000002a80)=""/191, 0xbf}, {&(0x7f0000002b40)=""/146, 0x92}, {&(0x7f0000002c00)=""/29, 0x1d}, {&(0x7f0000002c40)=""/75, 0x4b}], 0x5}, 0xd0}, {{&(0x7f0000002d40)=@pppoe, 0x80, &(0x7f0000003240)=[{&(0x7f0000002dc0)=""/55, 0x37}, {&(0x7f0000003680)=""/105, 0x69}, {&(0x7f0000002e80)=""/82, 0x52}, {&(0x7f0000002f00)=""/208, 0xd0}, {&(0x7f0000003000)=""/219, 0xdb}, {&(0x7f0000003100)}, {&(0x7f0000003140)=""/227, 0xe3}], 0x7}, 0x9840}, {{&(0x7f00000032c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003340)=""/78, 0x4e}], 0x1, &(0x7f0000003400)=""/82, 0x52}, 0x2}], 0x6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003640)={'gre0\x00', &(0x7f0000003600)=ANY=[@ANYBLOB='gre\"\x00'/16, @ANYRES32=r0, @ANYBLOB="00018000000000018000000046260018006700007f0490780a010101ac1414aa00000000"]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="08000010010000000240000000000000217d7704fe17b857b3"], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x6000, 0x0) [ 1205.443056][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1205.451776][T15980] ref_ctr increment failed for inode: 0x361d offset: 0x2700 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1205.452864][T15987] loop2: detected capacity change from 0 to 131456 [ 1205.480757][T15987] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1205.560685][T15986] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1205.569484][T15986] ref_ctr increment failed for inode: 0x361d offset: 0x1800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) ptrace(0x11, r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x145042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) mount$9p_fd(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag'}}, {@posixacl='posixacl'}, {@cache_none='cache=none'}], [{@context={'context', 0x3d, 'root'}}, {@obj_role={'obj_role'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000180)='S', 0x1}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000200)={0x1, 0x1}, &(0x7f0000000240)) sendfile(r4, r9, 0x0, 0x8400fffffffb) sendfile(r3, r3, 0x0, 0x8080ffffff7e) 06:03:48 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:48 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@fuse_with_parent={0x18, 0x82, {{0xb1, 0xffffffff, 0x2}, {0x7fffffff, 0x8, 0x7e0}}}, 0x4c0000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) flock(r0, 0x5) 06:03:48 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:48 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000d000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:48 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) pidfd_getfd(r2, r1, 0x0) fcntl$notify(r0, 0x402, 0x62) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x404000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 06:03:48 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1206.181898][T16016] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1206.190906][T16016] ref_ctr increment failed for inode: 0x361d offset: 0x2800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1206.202757][T16028] 9pnet: Insufficient options for proto=fd 06:03:48 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100000002400000000000007200002a219c4a7481c3df4930aa7e9bbd10c44e493973dc74f0a6eba7c3b54a802f21fe615f46cf3e19c232f3c0044cf012b7406f960b73ce31a3efd69e483dd012f42d396461247eb059a481f08c3b426d2fe43b6a4df9595b67862b45101ef23103bec00ad10e1c71795cd9d682636af7e07766287503701be5a8904f88258d80c3f3f60132569d447eabb5926254"], 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) pidfd_getfd(r0, r0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) ftruncate(r2, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 1206.232195][T16029] loop2: detected capacity change from 0 to 131456 06:03:48 executing program 0: preadv2(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/198, 0xc6}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000001240)=""/220, 0xdc}, {&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x6, 0x7, 0x1, 0xb6c724bb7e5e9175) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002480)={&(0x7f00000026c0)=ANY=[@ANYBLOB="5c0000000706010400000000000000000e00000805000100070000000900020073797a300000000008000640000001ff0900020073797a310000000008000640000000090800064000000004050001000700000005000100070000001c0d4e2f4d3329424668b4958caa5a87083245659e4e0185fe521edcbf2ac699e4feff343126c6ffb94c13c56ce3ea6b9db7461ee3a7196e6861a0947fdefa5deeb06ace9bee3594533e3163dfddbd1b8d261e60d7c9b377"], 0x5c}, 0x1, 0x0, 0x0, 0x48015}, 0x4000800) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x14, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000044) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000002580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x30, 0x6, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20048084) flock(0xffffffffffffffff, 0x3) [ 1206.281897][T16029] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:48 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000e000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:48 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x2100012, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_any='access=any'}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@aname={'aname'}}], [{@uid_eq={'uid', 0x3d, r0}}, {@appraise_type='appraise_type=imasig'}]}}) [ 1206.351658][T16017] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1206.361409][T16017] ref_ctr increment failed for inode: 0x361d offset: 0x1800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1206.538372][T16056] loop2: detected capacity change from 0 to 131456 [ 1206.580244][T16056] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:48 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) pidfd_getfd(r2, r1, 0x0) fcntl$notify(r0, 0x402, 0x62) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x404000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 06:03:48 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}]}}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {0x1, 0x2}, [{0x2, 0x4, r1}, {0x2, 0x3}, {0x2, 0x6, r3}, {0x2, 0x4, 0xee00}, {0x2, 0x2, 0xee01}, {0x2, 0x1, 0xee00}], {0x4, 0x1}, [{0x8, 0x7, r7}], {}, {0x20, 0x5}}, 0x5c, 0x2) 06:03:48 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:48 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:48 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3f00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:48 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000010000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:49 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x40000100000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) readlinkat(r2, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0) sendfile(r0, r1, 0x0, 0x80000001) fallocate(r1, 0x44, 0x596c, 0x81) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) sendmmsg(r5, &(0x7f00000087c0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @private2, 0x5, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="5b35a90a880df3af007c0df758fb6a0bcd6b5a7d49eea9f27d505067138b1dc3b38ec4598d203668951a1eaec10f8799db53c07f191e6aaf3e59d44015e252ac4b870d51ee9c1d47b81d7054", 0x4c}, {&(0x7f0000000240)="2c402c449151a7bb98787e64c9087c078fee2db1daa11c9ee431927c2b208a1a863b9f52240fb7fb9f64c1c4e784d6374a979e00e5f73b25bcae3bce4a44d9ff70dbd15509ed424a57068c187c8ba1fe8fe216af96a5debbe593ea5f", 0x5c}, {&(0x7f00000002c0)="0779ebb00912a7fabcdd1244569fa64f2ae076402f9df66f90b28674495aeed65ae29752ea792364de5d17834ad23be1fd89c1e31d18c07e0655fa0456eebe7cb95e2980339cbed47eb82d450b36cd76d8a209e04ff2d3d0e0155044a76328a5b21cbc61f69125a71d5f42a88cf93a75a9c0775c37c115865fbd", 0x7a}], 0x3, &(0x7f0000000340)=[{0xf0, 0x10f, 0x1, "f49cffaf0086fdea6de48550ec1acf40ae494f10174aaef888be6b432995da69a1c87350d40f895cabf8d8654c2d2bf0558a432478eeb04a8b6b3359ba361cd3427c05dad48c76410fcf6437572931a351068b0fe0e927b1e3c6ca2e8b86cde1d361c040bce2b79a4a5fe2284a9620eaa8274e4c83097cb289a17bbf65c5851bdfc844207e2da8eea301a63eeb2ffc73ddee1f425f31d23679494e7bda54ce202d1926dde621733081d130ef22025dc6734a8dab206b19418221bbded830731956bb995fd26c5acbe3d5d7cff05e58d9bf9dd38ba0fc397885ba800c629d6d17"}, {0xe0, 0x115, 0xfffffff9, "5266bee9249ff188dece325ec7ce9c407b37d040ff59d40e939f0f79a980c9729dc3bcf3021e48e55ada2a34f329644dc4c86ab9e5018831de6a333345f2d41aa1ec341ee75d51c9ef5dcb6784c6b7c543c0c976199a48089475df023c684f1ec11e14c33c0aaa121ff8834d85c9a9abb8f7d7424f0d0044e5e320fe09048f11523bdd746aff1b1adeb0100e0ef7769f0f6cdce8c8a5419fcdb14d12f9b91890a9704066a1bac4f9d79caa4d33082a3c4691103fb46e7c53e00647b6a86ec3e0ed7bc04c0946eac762ab3065"}, {0x68, 0x108, 0x101, "1ac49cf6ba401104d18d6ed652d43b4e84bf8e40d4d35cc188d8030652969daf18e23fa288a36530c03bff93dca8415af65a491e70261c991e3cdfe14e03fd080b29a06e3fc5575d23984f91be05aece12"}, {0x70, 0x105, 0x5, "7bc880d6762b6610f8aacbcb6e2d13ba3d8ac517d97585cd5cd9f70f917c987e5ac605bd94717b5705dc2e872e227b81defc7958ac80a70118cf568e80d65f62f4b7d9095a12a6f66ebb6a4ef997d2c617f0995d115c2f921986c870d23be7"}, {0x80, 0x109, 0x0, "b906cfdcec3c98cd3d53e96618bc61989d64ec724bdf8c13a91ebf9fcd6313ec5d026d61946fc2b391bbfa8c33ca2ef89a6f38f26c7449a1206a072b834562caafac1119f798641698c75f17d423404e7f5cbbd169971289b61a195bcdb2687ce4d67a9badb7d576e341b5df"}, {0x1010, 0x0, 0x7, "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"}], 0x1338}}, {{&(0x7f0000001680)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001700)="9bed221de2592a1871714ea5d29f477d9bdf4e4240d90b7b157afe6a238eeae3aa48752e4e2c4b78d890defd8a6de0a124e5d984fd96f1ef73f66506b2ef4644cd4c7bc1e461ff667da71212ea7d9931a00c2a699fae120b5815511cf69a6dff11b4aead96fb60d69280dcdbf53923c549367953ec899b093b4dee61ecb9e28523a7bc1cb0d86b5e84c7c4ceef", 0x8d}, {&(0x7f00000017c0)="81e7f75c32349eee5a2161d14ae14b23", 0x10}, {&(0x7f0000001800)="8075159aee8ed4d7338fa2b80e20744dadb2b960952251e980b164881e2c65ed3f0865119f60ffe0008d8cef7fe7a353c7516768feafab760c1d135c207523417656e0a633a5505fd849dd39fa37912fc4bcc4eb87636d072873b77da346ab8971558eee851a15e63b3bfbf959d5c338ca6a477b9943518dc6a49e7f96e8af3eaa824c7cbf718a73f98303eb68a3039565ee699599b9ddc9fc6816a4f8e369ee150e148703af466d9222e4f2654e5496bded84a54f", 0xb5}, {&(0x7f00000018c0)="bd361d0495e8afb940d30c2fbd0353fa2b27770628398d6e60f87cd35f3b9fca26507779917f0e14af1f711a64b0960fdfc866850dcf05f6acf09756079e5f53074800dd2be5f21a8e16ef6d1399ea4f9268c04681db1d4ea7", 0x59}, {&(0x7f0000001940)="a3ab10d7ae12228d4f188f3ebc8e994728a062cf6f6374850a15251074522dab85daf345b6a7cc90c24620733f35464684cd125bbdaaabd50fb9ab46228781", 0x3f}, {&(0x7f0000001980)="c04a7fb6cfc959e89ca6f33d268ae84b3c9854fd5a7e2a62d07779d96b1833123a919b42232dacbfd9685883efd5e05cdf3a24deca8839086cb75de6e4273eb790cecc4b67d8a9485953c9911c102c85a59aeff33527ff209fb0", 0x5a}], 0x6}}, {{&(0x7f0000001a80)=@llc={0x1a, 0x0, 0x9, 0x5, 0x0, 0x9, @dev={[], 0x2f}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)="3702be1eba125ab071aebcbc8c44f4acef1a9c559431199e775893124611608d5b169cc2ce0eab53594ac7db0eeffed4aeb0713d85e1327d370f5bba3d29fbc529ea0646", 0x44}], 0x1, &(0x7f0000001bc0)=[{0x58, 0xf5, 0xffffff4b, "2aa282768ec3bc2945faa9b2d241c14cbd8b2f4c9fc1355261dd12a93e7ca674d435a0a52fe4a59ef5cf0ea46f2cbc37226f136b32f4da216fdeeacd354a58ad9ebbad3a35bc"}, {0x1010, 0x117, 0x401, "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"}, {0x80, 0x10e, 0x10001, "2aaed2d8ad6ff9b531c8a98a839e005cc3b57997c09a4fbce8082ddd9c0bf48bf9d2ba533a54c0a20960435085e4605699a51a54932766027462f63868bcf8eaf7c424b60f81673a307d2194e0aef7da73df26b782226c088fb8f7b7fb93db6293241192ca1d324295"}, {0x70, 0x10c, 0x3, "ecf7c4342a77344466c4c91a4c48832c0e131f59d7b7c6314965f045445d6c3a10c31a45dd8aff8b0e0a679dbbbdb9dad5f0009d37833c37f0af44f6b9250b803917e86a410ac9b5059ed6b5aa2632d3765db311855c3eab53"}], 0x1158}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002d40)="5909f8e5dd36d073a67fe5e041ccdee7fee8859adaa008ad6a99aa9098e6c695513ca118de07e01db725e2f5fee16db864e4399bfd0eee82d6d03a44b079ac2f98e8fa4d09e83b851a192536411054f6865f2f038fdfe7968cf3024f18fcac53b79b80feda206c66fb9d8e1a9200cdf8dcaef640869dd788e985a0672a91702f6e3ed5e5a09ba08dff67122cbb85169d3b953c", 0x93}], 0x1, &(0x7f00000089c0)=[{0xd0, 0x118, 0xf8ae, "441aff28eee1d0cc7d4afa21efd0c736dccfdd10cadee8ef79c6b1aafcc2b864cbfb476dba2bf77dab78faebc61afd1bd6749ad0715d665915ce21e4fe176f08fa8a96106d3c5ce7894958dc4a10bbf9f3b16b1b5b14c55a5e741223945497be0890282f2947770c9598f778ddb3e3a1d9f7ffa4eef4d3bd1b1e215335ce024723b77c6b3e879b629e77ea0e49470bb1f66e61bd29b5f078bc6b6ef8aa0497f05efe4f9839d3ebdef4e6d73f4d0ab053f2e4051d4fd9ad938b43"}, {0x80, 0x88, 0x1ff, "865baf48fb14cffd5c81c2ea69653cfbe7e1228bd01c26b6917eaae62c66295cd9c1d0544042081baecf9ad1634a18820613897e3a9034fb308b89eee0c16646210e0cc40e28dbf6403b5d4e7b427974c5302216f0157583f82d395131d349339ae0da708ad6600b431f9ffb786801"}, {0x50, 0x88, 0x8, "6a24652c92876df141bba8f33377c935a14a900da6bc5c21d3874219b2c841d4f0236be6b0821fdddfa6a6f83e31a873f196bf575a798f38bd51f20531"}, {0x70, 0x0, 0x1e3, "7179d9d7fc2925cf9f7ea6f4b35beecb911cc3826a48613075f2013717c3c88ba623e29d416f08b7a876ba3cfaeb1279fa7ca97a314845f08e8ac258ab9c35baee5f6a2abd9dd51719dd8fdd165567001f4275dd4c5071153a88a207"}, {0x18, 0x100, 0x9, '_'}, {0x1010, 0x100, 0x101, "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"}, {0x138, 0x110, 0x6, "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"}, {0x10, 0x229, 0x8000}, {0x1010, 0x109, 0x8d9b, "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"}, {0x60, 0x1, 0x80000000, "e0737fa396ebea45d1648fc6f069c76cb866d73f515bd38c8cd3c980bf293988737111571de10eadb55893ddf6499300f73d9333b53728a41ae0d4d142c33a7ca0fd3c4c2fffcfe10b"}], 0x23f0}}, {{&(0x7f0000005180)=@x25={0x9, @remote={[], 0x3}}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005200)="49fb178b525083efa7a007fde46bcc4ec9712b3812e63463e22712cbdca1f7493205aeb1540055c8bf0d1da8516205", 0x2f}, {&(0x7f0000005240)="d9ec951033250b16b1247f6c5ee4cb074258eca9d32394dbcb003d4ced07c332583cff0531cd2b80c72d50474ca79f5ff2abe89a2107d809de1396e87ff4e42c850b973c224ff91480769a78bc959a523190e96635add4b93f9f62030b5d718659b0ff41df868bf77149a148de11b9369e06eb3bbe5117a053814032b944c4b4590a97c860b543038ab40952e053bcf7e0117470b686ee5cf403ee09ed63f151a41731c4ecf02210d48c73da3cb98fb06e4544f082ceedb808ac42c5e7cc2512cfcfc2c21f10a789d121525883efac1e7bccc3708a7f91427133ccaa07", 0xdd}, {&(0x7f0000005340)="2305972b0c4e7dc9946fabece2df8d1f232b26faeb781106d83fbaf9f7cd5d84d6e0900407d30bc975a187cc3013e27b3dd9bea7d2106b462a6b778e7878c57cc43c3fc06a2c19da75e223b273aad87017f50749", 0x54}], 0x3}}, {{&(0x7f0000005400)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005480)="f9a09167c7179def99f9fc462ad7da80707e942b4bf6b04d85e8586b686e4be924ee5d77dca72ff72612da870ca54e59673da45bd286382c245332519dea665b05d50b4ee2421f8b50d087f5c97241385055b1a42be2104d40752f4c247b4b9841d9cd5caa60d9b655ae6c474e4b69d3b194d2fc1adb97634d3053377be859ae2a9aa4ea58262de1b0d961accb77b75208e1bd43ffc19ccdd884b9d7e2c1a407d07c4d2cad058528f0c064d54a974646169fc3186013b15c49dde031144932e1e585ccbec174dc07168dc3b012cc21d8594ef0013d1b04a82adb3cadd187425362c0cad02fa7963b505a350e87f8602ac8", 0xf1}, {&(0x7f0000005580)="26d38ccd2c0cefc4c12cdff053ea97aec12a9bf1b1fde5eab47af77a2e458d982bf970daef9f2aca72aa9e08d1b8ca3ccaaae95b361f095f44714d5e800c6e515b082d3a8f633429812026c5f4dffa3af525b8c9158b88e025562a05be09e169c0699ccf8a91b00e81c1e38bda9934c35e618016397b338063c4cfccd9749211215eb9e34e1e0f218a52d61ddc047525b811bba8d8bee6d925d7dc5c9d348707dbaacb441374c551cfdc4b43c6e31d76d3b030e112c80688c49ac9514a96641a52bfd454eab2e0747cd46867986e23b3c57f8f7e20b9685fc256bb66ad908d97181698e29e4299112ddc6191834630", 0xef}, {&(0x7f0000005680)="3f2fce24c7b4bfd760810d5cb7982db37e77cc5562081a516d01b194c51bd1a210668bd3df003008574b68e26310733eefd731726811048ef0da9de0b938709b1065e2398e8afafa31bddb58b56d2455a7443b7ce7f3a2c6e87f60b2", 0x5c}], 0x3, &(0x7f0000005740)=[{0x108, 0x110, 0x2, "a5febed51e928eea0cdbdcab270c9f4723a64f70a9805d5936c887d8dae65b4254096fc47fba0eaf06fe92e79cefaeaef3bb37eb6fb95056dff628a61bc7d9ac3d5b815f47acf13de0fb0b0f84c48b32e232a9836949fb351b149a6a8fc410159c9977874859e3fd705741142a030f330b2b17f30e7a2b762a0257fa2fbfe5a719fb6a6b3d8e5ce3dcae73f0e3481b05e600517ae6be46f748bb00ef6589e52e6a72408a2f912b2a17b388fba97564df31fd5a88659eb3dc6f38302aad9f609784a075ad252e82fe59446c04f34a63e93cd034a1258450450565f4227bdd26664a288ee1f65474433a401ee65f123c4d947da529"}, {0x100, 0x116, 0x0, "02f0b01369a10836910acc35e4f3da77383d488f966c97492e809c0ac0c760a2041a766833e79ca2f13848d6f3514a858564130dd4ab8f29a469e52607f12b0d3d0d2e0029894778e68ae5422b52273cee9ea01d55bb556c64ba536b84eb35daee91f1eb141243d3e6cac0adc5a9eb51a79cef36cd3be6aad9f937ec8bc278efd3dc0d80be29146d340fc448127985819603841e7090234f4904bb9b954d16ba2578a21b87595691898a0bbd8151be41d528f54d90b75ddfc20d3ce0ba10c0443fb629c76275da257308c72218a5a68108c730f3c32873a4bd011e12accbc74906ca97cd5dccb93b1d32e4"}, {0x80, 0x1, 0xffff, "5393a4125f08d2a53772be5af0353e579893325c4d0178a5c05904a245d98472aa47f8959f15e524e2cf83a52bf3a6e0d53805b10e73d1ccee92deb857226c5837b3561a82647d4b44b6433f6cc341d0e4d1e8a4620efb94f2f5bc6ee0e18d8e83170f80145b76aa7431939d5ef2734e"}, {0x1010, 0x119, 0x5, "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"}, {0xd0, 0x109, 0x1000, "1a4febb19c2cd0f141e10365979ccaf9cf973d826996c30f2da989e38505e8d903261d5e3c2f117777598acf52aa9bf9ed44a2ac88c2721da2f9bf38bd557bbac330e85721c939da6f4dd645e33e49a42c6cee58e5f573b8173515e91cc53c3216accc14ff8bde5bbfba9d7d60f80ad7111f8a5a673ca3e2fddbecdd367224cf469c8c6e136ece79d4865eae08c13681cb3ead0dc1cc2aca741bc1ff98e2a248e8965b197e505f48f459bda4d4bb5e1b393f94bd4a33dbba80f5c698c56d58de"}], 0x1368}}, {{&(0x7f0000006ac0)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000006b40)="fa4ce02eeeff27664d53618e0bf5a89e3ed284e8f0c8643024b2d1402b7b44b398aafbe6fb458e134a82e0ca289652d4827b8f3984837cf4cfce32db725a333d54746f416553a1781e0c99344ab0ec490a7c17ce7bd8dc08859a89c787bd6165e639b62690c262a421eedd769a8320c978b9fa6c454124121b95481fd5f84f68646eff10ce994abd027f24abe7432e59d60d25dda5b6ba462b6865216971b78cf0c916b790da13cd26c70b32a1be1d54158843496dfbe10404e158a2e0be645b1fb8", 0xc2}, {&(0x7f0000006c40)="e27b8b640fc461610c6605147f1e913c36c936f658ff168f92516bfd69e74b0fc46fe7a7e4bf9c6a331622676e3badc3af62cc5e5aafe65520d32569e5203e92e1fc2ed22878bf6522d7e4060247ea44f2529afbbb6962277a93355e55a28b082d0db18a3a3cb5e51a9c506f5bfb438cb1636cfb", 0x74}, {&(0x7f0000006cc0)="3c367269845e527e977f2c66561a8468aec6a760f99e9629b31c26226bb8add42085acc3a9024bb71a31ca42e53db5efed111f9ae71510c94563b634643b3ec92837aff1bbb99bfdd1dddeee0ceb2c86a13f8f1377911788f4549e329606a5410a24733fd14d66b0acf760554019ad08cef13429a992c3d6ef4e308f88e9f8f489c387572e85d51a8f503a2aa9314e47fac6b4d81436ee488b90a7b7", 0x9c}, {&(0x7f0000006d80)="907660974560d33abb0f9d2fd40e07788a70f6cef54efa44d328463694b6ee814c0b7da2e49b3bf49a5bcb71984d2a985df316edfef0de00e13e2bc49f76babed3d9e472372dfb5b048e19adb0b535fafe2072ad6fefde4b6823ce9a669038dfe1efe21de03f29f257fe238323d5162d65864bf1d6dbd6ae50c56ff3845a1a71cf605189a2addacc8429db837375cc47b8cac823ea952eeb3b807f61eef5b77ee16a32c4b745e2fc0b0ed47701b7450566607a0b326c4af320814ed1", 0xbc}, {&(0x7f0000006e40)="c79ee1d57ce487e7d27ddc96ccbd3f303af0f1f66e7dbbe91be2888900e6f0c9e034c62f561a6360b9549852f2527d665f9278aa8c001029f11b5bb36255c0f25024404a2e18461347bce2d54eaa36e227a3d4a4ba6e5286b0df72c9e35a3c7329e1fb2882bebf64b1d5ad3c135d5bc220230a28d2b76cdf8561963ccf757aa6cc791b58720cb6247f74c4b9b629ae3b1b20e040ea86b64b8d983b584fa409b54b899172deaad8d62a5b2c93b5424b4fd54a150504844e7bd6b50760efe27d85fc82865a705bbbfb154132c29dc5acd3dad7f1373590a4f4c411767b757f2fdf2f6e335dfd824038b9f3698e30eb29326c64fb07823413412589bd7240735dede1419cd2e39090bec98b9fadb427c841a77565883676821d10869a03b83775ec045b759eba187f07a1361352cce524a6b8ce46e5c93d307429ffb84f86578dbb3087ca279b48baab27c3f839a16f40ec78f163d05da6aa5e9c3b118108e4b0dc2331c847e38bbbb9365dd7d21e2474ea7bf7d230522c51823ba123decb9c4653b7aae6927f013c42f914b2d06779a7c8eec73fcf308642a46d0b056c7174a46acc918077854a5af0079c356a2c5dac813fbc8060672ca51da953a163276c31cd9be0c7b7e9a0c04216318178f93d0c15e3f09873586139bcdd536df661147f6aa7b4bb636f638b00f9532a242c2bb429dd50e1e0cced618ca0ddc103f4c12408135b4619e7c25d059824ac409516898a53688d8da8be663f0f8ffb93310f42391007c6ee2ae3504fa239611d772d04bca5cf23998950466a4221b67541c29da28823000b9c0e202c8038d32f513d9c93219002d55a0892aecba811c9e75ead078b5ac7dfb4e48d7ddb79d1dd3e4715ebcc152836c49f74d79cbee7d7b90fed541f4227294bb68c0ad7d3f315304903a6e52f5573928f2a2e5d55c81526276bf7ed2f116ee8779a89614fe05316a856cc0ea0353ae5d8d10bd0796619c569d1d6623be4031e269157f2578fb5c0832f51f0a6099a6f567f46a4ad6e51ee73e4d98ffe480a7f0f85b930a10d231f10509b8a87f5a5ea25ae199834ac7ac935e0ffb36fc2bf8ba4c48be7cd7177464010fa5229614a9e363e33bba0849b23139b860dd9c2fee864b97c8041519858dee21d11013ffc7ecfd8156018b5d79ca60d342bd92c211cc988ff5eacafe6616af40906842b833fb05046b53daa13a2ae2b7ed5be62e566eac65c396b56c5f1af9f547cf0e3fd5536029e03767d8a15b4331a4642b3e24e44a6150eb011b4bdddb5a6236527f0677b2ab50a8f237a6dbd04332eaf57f0bb4d3b51f1558f69846614e4e950ff6e1492d537c572d1e838c7847afdd7e819c6a1920768a74c843d39544dcd356b362f70a9ccf915355a5207d6e7fcd738889bac98785b567ed5ca953cd2a0cece7991c2b3f2c4350d7f98c47b1c2c0bff7bf04516b6b5ce9fd8d775b720bc33cf2aeb31c26dde893098e4770dacdb1ae04aea5e7955653d197dd92f297f76a54d1b5f222096cfee38b3add84989d2cc65ae5f0acfd1698b3de10251d0eb840cb9f90f7d5628dd1fb0a4a8867308654d9d12469db5e86a617e40292c387ee6624b0ba4cd29d6eb35fe88d534e9b05c43de0ee0a685a4d76494f5b81a71d9e96adc3c3394afe937c42652765a803dca2471c4ff87a7aaedddbf74b8095126c33085b2f94efb06fa031f76c7316e9f3eb02fb353a20fb1b096500f2f4db2518f260dadb93b792ec6507e05942b8e738ff45fb6ecbb7b80a0ed2a66a355aebc17514acb18c6daf5cd236ba4fd358d2902b23cb7f02c4b1542a4892427ee908abd6246e554c150e72f1be86542a84b1a5ba036ee517c88b4c56d3ef11c13c9fe52e4b550a069a51d02d38e07f1bd08b87ebfb0cd2ae5db5038dd1157c4fd73d411c7724fd40e23680615050617e351835a47cb459ed3083ef54e97f6e4b881c632c6973b4885d17189eefda153c5b24557a961346f5d49aa173dcd5766b752fab29c3f5dddb8bbe6bd8c3b309bc54e9cb2168bf806bb940d95e6ab87bd6b6487c1f5a7b1744fcd5ce798f16223e38826e42516ec9cbfaa357251c911266786ea8f21ad85ea564012272e2166c36367f99343095cf1605188dfd7043ce349d2b1d9b6e5c63117718510c3679823a888dc6c6f4106185418cc4b5c8cf00b1119767a02205149c6641088138dc1ebac698e61a57c0c87e6c9b98e7ca0269e96f5194fc7d7665efa4981c9fbc890f9f2fac5d68b6d51fc38e2007480a9599d2e90a9864c38428fddd79f86455caa1b3f1aa0df10436394ebc4d937a6eedc7cce040db72971b7776041e7c726e77b6df2655ce11311829ac1da36aea26cd6d07d4529eba5c4c0568ff418984ff07b2faf4124c7174b9f68ac8a2471fb6e3e826cb1d2a96c0f9b755de3712d468a530e3174c9d45f08ee4e293837be66d81a8e5b616e893031bab9c695966a70d99e460f17e32d6e2f8e2c70fa1877bb23d980343d51636f803cf1a14a884d052a7b9663879cd54a7ae54dd9c15f62d03820a175cf4c0df2213b54145a12d06bd3542279b05827aab674f3597715a7d922bc0e9efef8b46f52354800158f090d8235522d09840eae7ec421da7be96ef4616ce5a7ae111621568617d72eb024e025a68e2b58925bc304296fdaf319430f6a8499abcad70326f59725e5d2f4f51f0b3085c7e85fadee18c334001406550518038f37f1b8409663b1ec3fdfdc0a3caa5e94d935c3e99c72eea531e02cf5aaa7b479a38453ec3a6720ae8b14903a76018522d3ef0b1975b2ad6e7e9bd9bfc43c6f0c8ff8a6906c9a5073209ac126bb072be041a1b917ea65a0180271add338c84055980aca806dcc0d47e757b8a4b3ecbf9fced1ef67ef6786f785aedf6ef98de8e6fbeb49927dfbef351b35a9f753335b032a9cb47123debefaff4acd63997df9bba864407ad430a0ca336c9f43c83fe6207697913cbdcb44959989f4660d49657e24dee23bf475b0db935f8cacd68c85156e841b8058276fda2fa4790db0d030b7a8a1d2947c144defd3eb7b2cd1d1553102392c7c7f327c7eee9e60709546aac77ae13827855476bd7d82dd021e9612f58afcc743aee85feacf40535db395478c2482bc0f22de01cb7dd067725254c3f4934363632f9dfc0b72644b3628537d5326e0a6358b2c290daf656200a740aa6172ecd9b9a1ee35124e5648639292d7a9256b8d5edbabbc300d1b0afdc4b4f7f097bdd1e1cb0d34b9d10cc8b312f16f2b51a07a5c768adde3dbf7db26f84c9b195bc5bfa89a6b4a186d52f40fcf6ec2b7659926e5a3dd97849096b53d3d37c309d38b91afaa635c11c54ce35b66a2bf1b5dc7fb01bcf9bce6df21d6fa9189e0c906c1b42db6d9c3899df2c25de5f62efae4ba910da2937c84354274e5e004f2aa6801c87d4af007a667e892544f8edff32ffbee9bcfb57b7d937da76ef2ca98d7d0ffefe7a64976513966f1d2638a7bbaa49b12e99a34ff37187f6434825a2473e5b7dd80144b4ddcbf961477dcd6ee6fbf6a478959c7c2e1dd675a6b4158d8453c868e954d4e612a22b6bb6818aacfe1532a2d701c53db75f12b60850ef026b1dfe95429d0c951ed113a11b4a4792d9a74eaaa0b49ecbbbfce61463fb59813421a5dbaf00f24f95b7fb4b6a06268592b1102552b43eadf6ab32f78b017fb4f03591eb0104a43f69af63e6aee057d8d5c139d0cff7bb7aa44687df0964825428eed4d2fea6942f04294bf8fcf87796fdbb44f533128a50edebf46ea169041fa5897982cb4ec608d7ccf02a60d62dac09b0ea87b9dadebbb3b12062b5b9436ae568bc137ab67144b140788e4b5b75849bdb5b33ae45c562409b0c513c75ee89fea3ebf1c6a110a0e2fdb928c1505b312cd14b74c5994613a21c73ac3e5483208f0a9ebe7c7bcd645b17f3ed7efb2ec1f532774ad13e9c40cdeacffb9d9fe2ba059dd1b6edb587c3daab64588141b567d4b339bf97608d295cebe78ac6309686ec1ded74ed9a945f72d241a986e9333eb3922c192461d3932a9c1e2b45de00dc9cb17ebbbf61a78fd2ec0fc930b42eea4756fe67d8cbc067403b5003b2ea2fd6d2419e57fd70caf717b5031300388b751942f68aaa6754626cb3970e5881c2293cba174f7ee9d72bd7c30b356b98552f860f1bd7ecf9283e41e128440e34425e39327a057260009fc8087f66292fe54510c1e86c2f3a423fa2b35de83753e98224f7e69e0f0bd1fdfc1fb7323f9be8ce384a5d0cdbefd8d8e437150786d1af85d7acfdd34974a9c08a209598f1273282537eb9786b77c3754d92e27accaba4ac3f053165b535c5f1545459dd11c637ae544f5ef04090f58b4562a1a7a0b6e3fc96202111c0dc256ae5464d3f0893af7d72d2c2661a7a16c27d5947e86dac76c7827bfb156e0947e63545f7c4acd08b0ee1df6445cd849f6eeef592182a1fb69a0835ec3104e560df4853dc6b4e0a8d098e10fc3f0c8c3c76f3fdd9770e59c9bfa6bf1ea58b9ca6ea2a680f01148f0764ea4cdf69f3ad97ddc71aba9636db5d556517fa2cec813881edb5d7c724660d181f631339fd3ddaa4d65fe788cabb841e23e594d702b3595658feac5ad0aeeae74d69fd29b0995ccfe9e08e689b33ab9e57a1dd184b91f8b0a5e45175dda47da936c234a7be28206d81ba934b52348227eb0f82242edccc84c5b6212dd6423040879a48efbb8aa8169c60b5865300503652404125a15131e8790e9b7307fbf810dde1a4f6bb06efd77758f28b838bb42e8801814ed1e7ee61da7136c6e38c6e7c09f9c6dc440a5a05c0f54185649f8a80acc386420b45587a1a434e2369df779b4d31f573a1921ecdbb3feea2abe49169176b95d9d9a0dbbf5945a7506041887d51d2d843075f2fd176388354ef255ba42659089edbab3d6ab9d6e3eb4a65c5a4ac538fc2f8acf878cd4db99ab1543cef69bdbb00bab834f269e962f7c156209d511a603f4e6725c619f00d04eca2d8179154b96c0387b53492e515f9f0f063219d6379ba1173d03a91ce286faa2ff2a6eba0c7b717beb7f8660120bc6b4779a2e9c36bb15e711c7f38239e5871bfc455486e3857fb9d88943653a2e5123bde9880af4d1d157a3a261f9e061244a771dfbdcbb4fe6b64c779f80cf1e3a2c60e17ad3179fcb6a56d2c04ccec036298389d813b6f8c1219fbbe6a1ac2635bac4deecffbc3d6d2f0d09ddcbbfaeeea5ddc0dbb7e43b64fc6fcf414086ee7365b62043be9d1b053e0634908913e050cd7091af95ce8465c4f3555177e0d30256a244d838aaec6137b0a2c504bff0e0af0ffcdda988494b8598c30dc99b907953e5dcb0055fcc78cf73f38f0335071518b05d74c6fbffbcbf551402e18f12193f417b26460cebd199b558c5f5d8b5cc55e45c8498790664b5a05bdf079955cc5b7481219feeab4e4e2639e485d89eb67ef559d988eaa7e64b7d7757de47e7ef76ca711cf3597e8e1585d6284b4bc4e28bdda264a5dc798af0e2ad00a7103d3b6c250a891f27363168bc259348b58541834edf9273f65a8d9832a32d225eab245a2e8b027ca1b1b16ba30981f2fa12563bbd2902f1121652814e949ac782ef2ead26ea9ef50650ecd3f9e645d0683e272fa79ea05cd28a3a832524dba4f6821916b530314b0392c40a655064a690361cfbfeac11109ccaa1b7be5146fae6f68ed729c4d0fd00c3626c7173770bb4c54ec36977536a63fc66868a6888e9793b0b2ea0867aa24a2c75afbc6d778b16dd046efa83e0b6cff9a5", 0x1000}], 0x5, &(0x7f0000007ec0)=[{0xb8, 0x116, 0x80, "90333c2c2fbaa0446a102a6a1dfc50f957d29d4cd77ab455b41987cb6b808cdf8e58a8de1657af96b21cf74386678a19b70a68cf057aaaebd3e8bef6799c417d90c7f48ccae32d0be03b9794c5959a98b21de84285a5547c39b81d7c7cc82e0c429e5f25256607e6c7219f8212e501216b8af5e66ebb214c3513244633f6c2e36ef623b08d7a28a73aa5cb22c75a44ed06394b986715eea36b87102272b8fc9ef49155e570aa652d"}, {0x78, 0x109, 0x0, "c54cf211ccc6f0e1d9ebaccd4e0af9afc19c1d06a8d49b6b98047cb53965bfd13bb3b4fdfa272a05e3ad36f086693b6dbb1bf29bc9c9097cbf501c4826aff168040ee4585e1934a6b3d2bc8aa3313056273565b624143c6a258dd8ab06e02e28f74af6cb"}, {0xe0, 0x116, 0xe5, "c52c500d81c96e6477fc91677f499ee36cabbfa669c8d5f3981e8a92525bb26d632ec4dd2f7740b745438ff2a2a5333023d3936338fa6754bdb834b341e9e7d856ccc85e440bfb2f12f70567701457bf16b6036d4df75d9192bb756b649036f0611d32b97f03d813b688ec10704dd451a324589eb8641460b05441ee917655c25edee11d9a3027b967a2956913893626348207cf568987da28a20ae69af530576d473fed232301ae0adcddbee4a18b48435b63a0f5d682c25636fa83052538b9b881831d3c2157d2a484"}, {0xf8, 0x10c, 0x7fffffff, "dfbeadf19c1fdbeaba57b969b4758e7b143353c4e3595445e9eea86e2f4cadb2eb652ff58bd86e684ca09c6e55aa9099dd01c83f45d478304e53334d16c9498df70eebf19fdc93f4f85a50e436d6846e37d07778d55a8cf8e122ce5961f86a8aa0efe66700249b32d86f5d538d33a8a20a92bedab584ad99bc84252e477cb3f82483fa7d779146fe6d009d2c0eb203ff1454d5192300851b9a9ec06697dda453ec970a2f242d8e0015c8dd6e0785aa98a0abf475eadc8743933e05e3833599d4e94536e36bc3755528954c59e90fb51dab265c3a880b07057f253ddc036039593626f4"}, {0xe8, 0x10e, 0x6, "8c48307c4ee41e903f700b5f8451209672c1a7a968f4163c06a76e52424602412515ca7f804cf1d9e0e48f4e80a3ac7b813c7f5cee1fff9231634ef4aa8bc574d721491e8369acabc43e2d3a8853516b50d2bb9ec0affe2fcc3db49e0a6f25e9e0935209b75f0839c58c855dfc69353c94efb814eaa23303798cbc4e08573410860ca6f5c67cbe120604c95bd0b9531ed84d3ff3f66d2f567e4c766481b1763bc946225d9b808ce5f6dae4e2daab5dd3777bd9f3ac735fac755b3888fdcc8444c754e50a31da9922c7d2c131399c71d13f8011ec5d"}, {0x10, 0x113, 0x9}, {0xe0, 0x1, 0x3f, "143e4c50c7370713ae3de2d2a6ed9b3df6e0436f958364126decafe14e43ed76a33bd350708df15c902ca2260c21b5c6cebd62333d30a2e861100b897f508fdd9587c54ed197af9da4a72356d874d615e6bcc7e3999fa43d2e67cbfcbd76d2ef963806ef666aaea40b75ba642fb0ea77e6f209d66ea871298d4245b907a98d2a142fa1300e07c37311b6a9fb2714b047dc17651eabcb1004ec67af858c58be75abf6768680bd38f70b25bc0797806f5169f73e0ffeaf712b41bb35b303cfaf9bca97cfc74084563e31498d1f"}, {0xc8, 0x110, 0x1f, "a96a2548ba386d3c5a56572e7cae52f4d4f198dabdbdf9ab318f8c2aa579e28aa3ab3818acd7c582f34218524af5c06518fe79b3cd90db45cdb26b5a02cb371b68835605d22b0836dcb647db4c3ad650a9771cd40edd44023e81a9dad61a26910785a28d0393654804d3a1e568d7058c2d97f3774df5a5b873e1e0af5d87b55ac401e2ab62e079553b2498cb43d3f9db6423a59e9c5fc96a9e8e0adb7bae9a2bf2f0934ba39fbc49fb38139f492f4f1a9282"}, {0x10, 0x0, 0x2}], 0x5b8}}, {{&(0x7f0000008480)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x88a1}}, 0x80, &(0x7f0000008680)=[{&(0x7f0000008500)="d9bc49aa5fd06a10ebf0b9647f41834da53abdb8a8d3d75ff69051c6e4f6fe49cfa967fc76230ffa9d4c9e28c146f5bb45b28a68b4895448bb51b0abe1c287557cebe2ab02f3b9d58011da8e97f94e2a04a4b8531b90171d01988a5eaaa775bd2078103ed27ea42ac8dbe3037b2e639033a93b8ca2a11fe18283103e9be19e753cdbf37a1a562c12ef6aadccbac90182320fa1e2ada96c088769d33d5325c2baf7bf31a8e6659a6498", 0xa9}, {&(0x7f00000085c0)="98fe1d6f367f942e4ea7e666c81304f4e189d56da572df7a696c0a2b5895169f6d58658a075d6c50d0ec18b02b9d0cd9d24f8bad6632a9037a05c176ea16b480f7b1228abb8f635d7f432479d3be0724b78ae03deb262522550d4612cc35d90017b74d959ce393b752d1faf85330a9c00e0c6b987d476acbc06b47e9169f8b79db953dda6034c712", 0x88}], 0x2, &(0x7f00000086c0)=[{0xd8, 0x82, 0xfffffff8, "d46cf8d872cf48668eb7f4d8957ab5efdf5a4495b8304e95ed239d3be86bbee78ad8b83bf496f4d21b5ecefc958dcf04c80598f4fce0cfbe27835aa3804cf4c44a62ebd76e0e8407001da1ce2e6b8f6c621934731d8002e8efaca6b4a134fa267e5ae16924f88fdde4e812d1258c14ee4f4cb59490fe11b1fa231a33d2a16a5da843d528d57845481e1459ce7707ff8f47e1078a2f608577ccc2166071075daf545aa631781f899c795da48481f47eccf502a1d1f03938025f807ca0d30149cdaf"}], 0xd8}}], 0x8, 0x800) [ 1207.089579][T16075] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1207.098692][T16075] ref_ctr increment failed for inode: 0x361d offset: 0x3f00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:49 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000005000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = pidfd_open(0x0, 0x0) pidfd_send_signal(r0, 0x10, &(0x7f0000000040)={0x29, 0xb5, 0x1}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2400, 0x20, 0x2}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0x6, 0x6, 0x6}) waitid$P_PIDFD(0x3, r3, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2000008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@nodevmap='nodevmap'}], [{@subj_type={'subj_type', 0x3d, '+'}}, {@dont_appraise='dont_appraise'}]}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x400, 0x1, 0xf6, 0x5, 0x1}) [ 1207.153821][T16086] loop2: detected capacity change from 0 to 131456 [ 1207.169500][T16086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:49 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000011000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="0800db32f80500000240000002000000e5e797c97da81757be68041dedd63b62fc73c339f099fd5aba08b1e6d6ce267f87ec2e9997"], 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) flock(r1, 0xc) [ 1207.271493][T16076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1207.279872][T16076] ref_ctr increment failed for inode: 0x361d offset: 0x1800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) 06:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) r4 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r5, 0x8, 0x1000, 0x10000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) r8 = open_tree(r0, &(0x7f0000000380)='./file0\x00', 0x10000) r9 = pidfd_open(0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x8001, 0xffffffffffffffff, &(0x7f0000000100)="5f8068cfa0be800eebabc3caeb50c2171c597e3f25e6138565a45feb5f34a9f0c69495d0aa3d0678ed9eb0a307a7c27694b56b755210a61c97d45af9f5a69ae5b96ec36bfeabcd852a68f01d2ba2473d477ca3c640bbd6f8dd3e2c68e8e7cdabaf51a10aac598f710c61fbf5941396f02fc52b88a29ead643363371bfda5aaadf08c7d64fd72e6c92f6feca7e8da66bb5c24ea6d915dbf0a55c28e2d055ba268481d57afc015096b1ea0eb6b80d27a8b", 0xb0, 0x8000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xd, 0x5, r2, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x101, r5, &(0x7f0000000280)="087cf48023f50e18e39e40dd24188b016c2794902006ae53413dba1ee951c5e31695a90d82f0aa7d4a92131546dc4c98cb90de9a50a5d26c7b5486ab0b8cb94f59ee4d7514cd3741f4f977ebba25342694c9bd4c36a0676862108034bf7cedea", 0x60, 0xfffffffffffffffd, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000006c0)="a3d0df743cd4b8ccc8fb80f64b2b194b9094b742aeccc727e31a461f2a840ba86405904848b0af89dee53eee7373996c4806e1900b7e0983e5481cc2d95cb4c872d99557d6c96ba23ee006d2bace127df791449b4c1f979d9b4643c48927bd0f0e1d470aa6284c4cca9e336532e62b6efc410cfa83246796c1bd7f49ef8ae2aef89e386ad7ac09a7b170d185950f09689fa6c71ce8bac3b0eac481c5f612512beb676b35d0700bb5b5c7988d5d01c900a331959790d00509cb49621fb9ad2bab55ff8468e258e3f5322b5cb30e8760e3c5921c72de2295b0f83208bd1b53d53d5c26ea884097bbea5e740bec24d3648fad2217a875965c689c9d8005699ca3b613fe1d6d125de3bac4970775e0b446725da33e4ed74e2eb395d7cd0088a996e8b2342ca73921ede112e1f0b77f0b89dff315f27685ece611ff7df0955d62ee0dd8136f45a00dad380b7fea46590c07e2096c34f7c4150d9abbe9362b34485980936c2373cb7adccbda7b20d745085ffa7a0b07a51b18e38dad27aad50704743a5eaa5c30ef5d4b4e422e233ca419261e35df7fd6920f67ed8e1234f7391cc749d96e4679c7294238ff9fa893444809f99bd729b864a76b6add13d37fe5d958cd43ced57e22c5f9fd2c277f427657cb3ca91c5b412f8231a8aed8346f52002d550c2c4b3bf03a2d3da9e7c5075b26349133f9791dd57b499fcf3c7ddc96b32d5bed99a198533b0e729612257e6b239a8c8a1484c201d6c82e78e3c86a87b23cd06a8e19972c10fd166d77a6978ab5b92f2bc858c177e14c91aadf28005272887151a83546ac62cf7c7d3355b5a578631eff21cabf8012264143482c6e0d96d5abb2e8e170cb7de1d5963bdf81564d94e9154aaed23f93a1c0e5219a4b5b51b0c4ff0a535055cba2c173ec161e49a071bd403f3a68aef8e130965ef1fc9859e298f7cb3756a0feb1a5ce94e4eec64b9abedb1d0a92995ec7de7e426331ba01571717e2e2cfe0b0f43509107905651047540f50c858a38a5cbabaab706fcc5805c4dae28632ee3829e219805eca7f5b69ccfcd34834f5b4eb18022aacbb19ad521ff99e2f498ee130ff6668cadbde60b4d08c833031685845d9bcf931df2b96ceef8c0f7c661be4cbfb5ad496d7f2e89502638601f7b9c2c0f5487535c1eb60f315551551995932cbab05b6cb4dd4b60135936950aadc08cb6c1afe38be51492f771d1c8fdd1c63ccead94abe0d225308324ef137b8bef93177ac643c682aed36471d42f2e7f32d74b3a1d6d81a57e431a3d9f181d93c3cdda23e6381748038ae49d1b085da755c31edb080a44a09a03ceb052cc2fb6bad986c8f05c018361fcc2d2afe90d60d7529a1599f1aa9391afbd2221f88fde8c43ea15db4e6800ada4ba6fe6b80b8b6eed89ee8dee71588f3773aa35ab918415525b8f44d7897e746a5423b424d105e38eceab7aabef00322a7edf7225793f1f94c0d133ae7afb5362df89e620153f7615571003b3ca836f6d3780ce751abe94c8c7ad48e44e9d71f3ea22eaec2f232e7ff69dc0e7d90e81ff1260fcf332614a3d29be7839262000112efcf3401a3e6ea7a617e3f7ca4e1ecd5ba8ba1df90b4e59244cea2b546bf5f2472c1688863c8bc109eef53fbc61de31c620f760469c940be1f93cad62b8ddf56824b0e382d3c0bb85bd5931827ede356ad6a9c7006ec9b9d7436dcefb2e0df4befd4e69c8e784d832ea76f861766cb08e278d8d1d069ae350fc2f4ea75fae9defbdd766fddc88b85b18d74d230217c988be539d32fb0971e6efcdadb806f6a8c6e05dab05917f2fbf44dd83c3ee38105805f45d5e66e25166b2d1bdb79f25b39bed0d9f13844e52f551e8c404dc0fd8b3c4867baa4de531c0f1c71aa09003bbaae5a93193fe3132fa6fb3259c44540eb3a7677e2b7a61d00019489c9963e3a3febc53e18c10845a23903b15f70c2b5d29f72006669fc2bc3365bb01ea73bafdc61c90708fa7480e1ec196579a72e556187f9c360422589b159142414e72611f97277600f5e9c94ebc4d55f17aae18f15eaeb9cb915360778d2590e516a701c5a74caf9798c6ab98677bff4e91206e81299e00b9f5b87aac42f92e3d7b1049d1226256ac0c4fede62d7e59b0f415a2b8db8ed5e4fab19a62dc4150fe85268cfc5693c6b13488be285ceefa124e421ab56919bc8d61c07af5f8bf90df1725eafaf2f7ff01be25b97c7700a47c51593ee2d5cde59d7dafc82878d09050d4b280ba38aa7c9207092b6f205ee048733fc77765e0813ac5b9509cb23f473ca400aea83277dc38741f09308b7ac5279ccb9e528370d1cd10abb5453b574eb6114a7f0ad710173545dca519cc4729758559e0e27e9491ab3f14701fab57b5e4e51c66df78f35bbb5922a25f28e6791b5fd0718370841ab8724016e30d34868c118acf47ee41eec409fffb168f611d5b2335746d6e515a9892e72fcfe551a743aa9712a5ad301696f68179848b3838eaaf59521ff219c29d48904bcfdf6a1bcc79c21b0aed8c7258c8bb7d20102582d36d536bf7d3005ac7100e42957bbabde5405c46c9a2a7837564f698add07fa8024583e6791280850c1849191a68a64f4bdc0fe72e90bd24d36a06582341401dc352fc7c09789c37af8d108b025eedfc985f69e88e67c39b96dc34e90fe19fc30b2adc1106be26c53aaf56706fe36d387cb6c28f3a4f910ff5416efebaa7242b4392111332cf6d8bb1732b1e761b8361da0589159bd827c625a970476a8f6e7d4229391b2a76d0618735cb02a2786173028f3374703fd465a6d8f69a4a83484a7d984cd7e93f0e585563ccac3e8c4a6307dede233a8a0ed1da4feae53e917ba941b69fed2b2539662ab95f2c9f15cd89875d0068e937781ab88701ef081d355b967a82b369a9a75803ac2932fa45a10aa98a7f19033472a7f39dcba6aa116b095f15aedd6067b361893def92db970ebd13229f6508db793c915bf62f4688c26743617eb8c2ad66922f9504692474923e92e9dff8c2ad3f4d7c384b38e7f159003aea6a2f41a81440fd57472ad1bf726eea3105c713fead38835068c2e76097d989c5f5a564f8252e8da51997678b3774fff612cb5bdd4bff82caae8a3ec4fbdbe509cd007b8c69628bdefa1d09a9c69b2142d7d15d925318d5a63f0b8e2d3d991fde1d9607e1119186429e4bd5a1c1fe5bc81747bef946439e3218d66885b5bfe861cfc0a1cf1bba10fecffa908657608e5e2d6f561e70f4bf4d5bae45758ee8e957de93e97d52308cf8adf4ec3c93c17d1139daa1ab987b51f3a73fc26b630c3ddefeec87648f1b3adabd8b8bfbb8bea3e628548a908e4a581ab7641e13dfe95c7c74af6712ae067521a7c60ea0a48ed1058c89a64f2fcf5aeb02347959f765abf655c7cbd2f7f66d8a7ad0a492af4e40872133d1f93b99a5f3efe50b516784b47e177ee99483b940cc79733b8dbfe3b589bd1446122cf89883fd3cd8b7a90ac7ec722c33e814fb8c9355b0e92cb1943b4ef24b784f17f03eb0c7f9fe996cd1c5fd63de9f74678db82c169efefb55aa4fd25d57d598f116e2e54148e309cd15807ceb4a171c8507b6b9508ef1fbf78fb571775b98c985415381362a79ff039999c77947e63680082a8a500e16b6f881681cdc4ec3bdd2f9098392e87834871159c9f91309a003fddf2eafe5cc0cce7aeb1bf229769646695b25cfec2d07a4fa7543d35379c406a903a7374679ebad57466cd56de6df3d669d8700bfd3440c3af963c8e6334da7236b841e0c7a2a6490f02b1f58fc3e7afb84292124e21f9c0e53ff64919b955ab4c78586cb8c1a0e8aa743d3105a52d1151536fbbffbfdf4f34524427fc1acb44c8daced21a16af64bf497e534c973259123c7dc3da2323cfc8ea57e43f39c80155775eb99b971085702cbc487dd3caceaee20fefe0f86d4df704587b24ffab77ebbfc7cb8d42a7ebd1ba3483717531c07d265438f43edd7dc998281f2e7f22c11204d9e4fc4409a24ec7198c6ea395f55ae5985ee2b5450085f85b2d42fe54f693b97cf788a4a22e2e96111b81c5ff3923ff805086b71bcb6dcaadca3f8924057582b1060627468235892a33971fab8c5e66f557ccbf8d486af14f0beeb390fca6f3b7bfcec7705794c333e7a91dbc9091712c3d067ed26a27fef07a6cd8b49b5c631b4bd20aade4ff48c53ff2219dfa2cf7ee9a4ef5bf35af72be33a32f8694646bd0d0a60908cc608c1bde8cee16c0f279fd1667ba8d092324a6fa107b169932baea880d051707d83bfd9503d2f262609376af6eb1105bcc52a4aae1c60f5fdb757942a8bcf6a8a693d59cdd46cf34ff2a93955608d2546a98dcf8c2f3c5ea8ab28162cbc0582032b8bde0a31fff26ad1e8479cd9311250125040384b41b71781c4f874d970fe9feabcdd887d20fc324e8ce0a272475fb36fc4ab38d49157ba4b8076f70452f172385406756d8dd393e89e458a5f761e01eac1ea997ff202d340366d7c33b48a4ca38b53c47cbe22194e0213e42173885f434556382a95c99827b6f88fdd365811be72188e3d13f4a4db962de1b4c5954383c7dfcdb328b2e359f6c553908cb349c7dc99ca19706ef6cd476ce04e6cdb8629d1b7e1366604d79335ac5b80e049c0cd51936bef82bcfdbc4cc38a907c5fd47cf84164e587e3fdbb8002e700f99bacf0984a9500ed760b34a317902870c2bfbeabad2b7a88b980fcefcaeac056c919de8eb288ff44cd72708765b86ee8f200a899cfc196b21549e0bd81f10dd198252be6d82d64f83c953870b307fbae507ed5727f2d83349fa82ecb35c4cce1046b56a80bc29bf0a92a1f9f0fcae4dc2f9af4ca46ee77999f03d176de19caf99b0a738398c4c2cf47b13cc61488c083cce9d2566f83a9bc176db11d7aae2e545661c054fd62981e37f9903ccf53f199fd34bc9b1601107d6b5ccfebf690662cf8fde636f141c86beea942bf73915c6513626ec88b74f3293ace323944595743e617b9585c59bcff7f2bfa57161438b782b9bfc4f860f73938733f7109f4257ebc4450c0e7737ec53aa37c9534f243045492d8d3d28d9d7a33bcc831ad7830b536db816c947c0ce697d120ce46468390f90b544e3fca4a68e7f91119083609ef6685b081fa0cf0cce81e814ba47d12038e5d4f6694f48e6ae5e3fcdcab4ec76628b9ac3f30439a8684924168109641f227bde916242b0eea99545225cbbbc076ef4b26c2c478ee7a0470fc1903b75aed59bd6ab3bbd41689e6c976254aee09cf23b796afdedcb495ee65ea91bfecf58e17b6367b8dc203efc8737a0723c3b6f30c3588c310839ef40143eb15765606842ed3bfc0c06143cb4f3edfa02bb745d6b1b6edc29d0833253288c0562d75ccdfa3296d1f9076ef869796e2e2d6f35a90c9312bc8532574ebee04196d52bec9cab2401c309e9aac31a884aa41f8c57ef64e1c6f62adebfdfc70f1042511fbd50c3b60bd394dcae211ce2b16cd19d726dd61b65cf7ba1f4cf766a445e4a3a8a269b3d37e01e6ef84d4ba93ae9432b566bdb07ee58a0b95e204661a97046cd3bf9a15d765595abacc440771821c42d0fd0b0c064cabaf237fdc5d19dbb7de2aa4c27787e4f6846b3af3b3e53e8e1a1198e302859432e120cc432f1f4a393d469c6a4e092a05dd6211543e1d2120568cde09e96e6e324e19c2bd19d81289d218afe69df10fdfb1881d3df7d2cac93f415fa18e9267588593308b8c7c04f438fc4b12b0840d4d4636b45a92e3963af45bda2341737e6a822885178", 0x1000, 0x5, 0x0, 0x1, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r9, &(0x7f0000000400)="23ce1428ea997218b5568a148857a96154fe8d9176ebe04a4557565b4bf883728e38685b9bb408952c817a91015b13e5c347c9d88f665a743f9c567916425283fd852d671f61660547c75e99c57c57e32d3ede81a0b483809eef3752813124530d2fb3c25173041fc29276f9bb2271bfbe57804acc513ea486a5967e895e68f8541b6a87f05b7c", 0x87, 0x55b, 0x0, 0x1, r0}]) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) [ 1207.407685][T16116] loop2: detected capacity change from 0 to 131456 06:03:49 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x6c, 0x8, 0x0, 0x8, 0x5, [{0x212d, 0xa1, 0x9}, {0x101, 0x3f, 0xa41, [], 0x280}, {0x8000, 0x5, 0x6, [], 0x881}, {0x4, 0x3, 0x7f, [], 0x80}, {0x81, 0x1000, 0x204b4659, [], 0x800}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB="080000eb000000000240000000000000"], 0x0) 06:03:49 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x416d}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:49 executing program 0: flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/90, 0x5a) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1207.457847][T16116] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:49 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:49 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce00000012000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:49 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x440040, 0x6, 0x15}, 0x18) eventfd(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="4effe103c466282dc10edf6c76ef057b1436db979a157803f710b6605fb78910a153ae42197c71a65aed84632c4d7b1bf47c7548b67d7213096789d06eac6b65f1261480ed44611f7bd79e63", 0x4c}, {&(0x7f00000000c0)="55cb11560f6aec17476131367781ed70311370fb2852cf52bc53d12594f52502bfdb23855a1e9801f2ad1b121883c183046539019e21c476e2cb8d5e58ae3dd8c19255f0091660649b9a6bd6b8f8b9deb17c8e963f881297906d072667cbb1ef0949e1fd2f0e71a5", 0x68}, {&(0x7f0000000140)="1677a95568a5782b856f11bf9694929222fa0d1364ffd75d1ebca1e6229736d288b17342665a89603b825bda11288859618a78afe5b5b3e24263466fcdb3b983b57fa4db1b6710d1c86254a8457b2c11074afa95f25162c282c3a07812def1e5adaaf95f2278486e92daddcfdad43924312b97d5968031b3b4766ed50f23d399ff859256fea11bd90fedc8e12464d473e4a0a7315894a1f11a3a3ae45697963e807634180c9e649d2dd38777de2030ffac624a9a1d66", 0xb6}, {&(0x7f0000000200)="3ef72a339613ac007ddb2332fec2cf3d9879faf11b26058272bca473df685125fe14c09a4b984bc665746163d68608062b1df7ebbb37e0b7a991fba65d3c499b7b2af460a7208ad6fdaf2071cd30d2c11751bb", 0x53}, {&(0x7f0000000340)="4d5cdd61374a59bc434f211f301e84bf522ed37e08dddf7f262c804363e61a551118ad631d8203547bf49576fdc4338148c9bd67718b262948cfc59040ef32ed4e372cccd9927d5183ff7d3bc7cca3266be94aa18dc59de346b657bd76e56d58b432cc2b6b51b9b7698b132415edb862b81e38f8f5cb3dbe770c4e08bf922015194c41a3a0acc7b79658e90dc5864a3d84d52c5f4f7da79483f4dea0631218a675abf666399320d54034c7e8007bd631e65f0b", 0xb3}, {&(0x7f0000000400)="beba45996cba69d18d8398102dca573e267b3718f416ec0dfa82afd6f11f280a64057cd1134276e0152337ae4b17dcb72fe8dc187018353f4ced6e583897012cbacd3772ed4a7db1b378451fcb22b2e04df0b52cdfb053adf26ac566e09fe43cb092bee270e69612e9111eabdd1156ca70356f2f42e1a8fe80862cca106741cfff91ebba7ca70d8e323ba7b0946e577bd4072677dd36353419e903c6e182347f0aa8d6f3103cd25b5f36", 0xaa}], 0x6, 0x0, 0x1, {0x1}}, 0x1f) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x3a, @empty, 0x4e23, 0x0, 'rr\x00', 0x10, 0x4, 0x2d}, 0x2c) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="f8db3fd700"/19], 0x0) [ 1207.556417][T16136] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1207.564809][T16136] ref_ctr increment failed for inode: 0x361d offset: 0x416d ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1207.600076][T16148] tmpfs: Unknown parameter 'îáÊ9úƒf.¦ [ 1207.600076][T16148] ½R\nØàÞ[Ç-æZ [ 1207.600076][T16148] ÞíÚ$*.ý2RZü ¾O%Å/k¾ÈéñXÚ#ËÅüM^ãüâˆVë ïÅñ¨?vq6&nf|§\ëWòE:;ªYÊ*/?BÈo$·€Ÿ‘ÒÒ3Œw)šIr#ß@ÿÛÝ!5e4+5¿)üí—pòhð(Ôa+­ëþËÓ«Z+' 06:03:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000004000)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)}], 0x9, &(0x7f00000007c0)=""/60, 0x3c}, 0x200}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/82, 0x52}, {&(0x7f00000009c0)=""/196, 0xc4}], 0x3, &(0x7f0000000b00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001b80)=""/16, 0x10}, {&(0x7f0000001bc0)=""/7, 0x7}, {&(0x7f0000001c00)=""/31, 0x1f}, {&(0x7f0000001c40)=""/181, 0xb5}, {&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/171, 0xab}, {&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/210, 0xd2}, {&(0x7f0000001fc0)=""/64, 0x40}], 0x9}, 0x5}, {{&(0x7f00000020c0)=@generic, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/144, 0x90}, {&(0x7f0000003200)=""/125, 0x7d}, {&(0x7f0000003280)=""/191, 0xbf}, {&(0x7f0000003340)=""/90, 0x5a}], 0x5, &(0x7f0000003440)=""/85, 0x55}, 0x9cf7}, {{&(0x7f00000034c0)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f0000003540)=""/248, 0xf8}, {&(0x7f0000003640)=""/58, 0x3a}, {&(0x7f0000003680)=""/128, 0x80}, {&(0x7f0000003700)=""/46, 0x2e}], 0x4, &(0x7f0000003780)=""/182, 0xb6}, 0x8}, {{&(0x7f0000003840)=@hci, 0x80, &(0x7f0000003a40)=[{&(0x7f00000038c0)=""/133, 0x85}, {&(0x7f0000003980)=""/107, 0x6b}, {&(0x7f0000003a00)=""/57, 0x39}], 0x3, &(0x7f0000003a80)=""/89, 0x59}, 0x1000}, {{&(0x7f0000003b00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003b80)=""/42, 0x2a}, {&(0x7f0000003bc0)=""/58, 0x3a}, {&(0x7f0000003c00)=""/91, 0x5b}, {&(0x7f0000003c80)=""/119, 0x77}, {&(0x7f0000003d00)=""/130, 0x82}, {&(0x7f0000003dc0)=""/55, 0x37}, {&(0x7f0000003e00)=""/71, 0x47}, {&(0x7f0000003e80)=""/92, 0x5c}], 0x8, &(0x7f0000003f80)=""/93, 0x5d}, 0x6}], 0x7, 0x20, &(0x7f00000041c0)={0x77359400}) 06:03:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0x102de5, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x3, r3}}, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f00004f3000/0x1000)=nil, 0x1000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x14) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x7) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x16) 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x44080) 06:03:49 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:49 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="20003300b2d653ef1a5f3c500000080211000001"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x17}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x40004) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xe0, r0, 0x800, 0x70bf2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x624c, 0x14}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a45ec06cc34e6ea75c3d48f5d8"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "69a968774b987efe81af2d46e7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "51092634002083f6b428303132"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x0, 0x7, "8ca8eeb5f5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x0, 0x7, "fd0cffd528023361eb6a280d1c"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "6862e37f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x48884) 06:03:49 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1207.774481][T16173] loop2: detected capacity change from 0 to 131456 [ 1207.786174][T16173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:49 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:49 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:49 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce000000fe000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:49 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x3000, 0x601, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) r2 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r3 = shmget(0x2, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000ffa000/0x5000)=nil, 0x7000) r4 = shmget$private(0x0, 0x4000, 0x54001801, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) [ 1207.887006][T16200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1207.895392][T16200] ref_ctr increment failed for inode: 0x361d offset: 0x4800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=@OVL_FILEID_V0={0x26, 0xfb, {0x0, 0xfb, 0x26, 0x4, 0x3f, "cc96facee45be1b2294cfdc9bf458989", "3270376d1806a5cf4e6264fcb09e969e14"}}, 0x187c80) 06:03:49 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007670fba67268ba26eccf23634a6aac96609d2353044b083d525e919e06768276c380bdefe8aad40e53012f97800d66754f89538244569a880edfd0193f0662b18b1243c89e25ef577a39908dd87dc6"], 0x0) [ 1208.020248][T16212] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1208.028613][T16212] ref_ctr increment failed for inode: 0x361d offset: 0x4800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1208.065311][T16218] loop2: detected capacity change from 0 to 131456 [ 1208.094394][T16218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:50 executing program 3: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000000)) 06:03:52 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:52 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=@orangefs_parent={0x0, 0x2, {{"6ab32c190490029d00dffe36a6eed5e0", 0x3}, {"1e1196f0ad3bafedd35cf300", 0x23}}}, 0x139880) 06:03:52 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:52 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000002000000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r1, r1, &(0x7f0000000000), 0x1) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88300, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3200c, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @rand_addr=0x8}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x108, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x2f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xbf) unshare(0x60000000) 06:03:52 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xff, 0x5, 0xfc, "6feecf2a7a5a5cb9cfdc0eeeaaf51bec", "ed45c103bcc704693b5a8b765693b57b5edb3987e9a5652fb8682059a0199cbd2e231bd73a8cdb704b3421dbdc5d47983f130da556c6225c7b7a9f6ac725878405c66e387d4a4bcaac391b94e6024411de1e7601ccda9102c638c8f08c7180178d69c2e234b0537c8c0bfd4485b99114b4baf83ff0fd2831bbf668337d219df946ff9421d3a6ef8fde3a0df2f353028f29cf6423e0469e073190ab689d1283740feaea4a9c9eb7070e41d4224dedfa8a111b412f5bd3f21059ecd47a6a60b37b07d421520bd731b3c53a6efab06682294a3e33343c0f3b04ea66936d1459a45336484421bab85d4ea076"}, 0xff, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x7, 0x4, 0x8, 0x76, 0x0, 0x80000000, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}, 0x424d5, 0x0, 0x101, 0x9, 0x0, 0xe793, 0x374c}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) 06:03:52 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00000001000004e8070000000400005dfbffff"], 0x202000) fallocate(0xffffffffffffffff, 0x1, 0x7, 0x100) 06:03:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) r6 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r5, r6, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x10) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:52 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="6b6be8b9282ee9df7a72ac2b37b57efe3758302ded1d715bdcfdf3544efdb4f51d624357bfb40eff226939a5b3aa02bfc221b23782c8519bf824e83e6d178eb3510b1e6f479c2ec74dcc9ecc197eda102f69c2e9f72816031cca55174ede2f876860ac0a1b7d810dfc119d8025ac46b87d9f84d6aee355396d697cbed9ec", 0x7e}, {&(0x7f00000001c0)="ec42df99d86c31352cda88788f26a5efaf030b7aee4473cada7de9746f571a1451d770dbfe31134a104a34ed9837f5e5ada3592d18460d642e7b0da723c12e54a7eeeb1316c1f2760346e946c45d221d0fde1ee72330c1c79f4c6b1ef6fe39f5ff9d821e64b189554a02f5a517e5d2c402843f7abe047eac71b09043ee86990f0ba1dc2a2622ea83390ed8bc8502d7e37bbd792b516f32b4c4d27a3612cf152fff53c94fc62058b796318a2dd769b1b3021bd5070c841f180fdf86692688cfe4d66a13753d43b3ad5528839c932464694d4d3f6613b2b77f0b157e6b7c141656f5", 0xe1}], 0x2) 06:03:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r1, r1, &(0x7f0000000000), 0x1) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88300, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3200c, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @rand_addr=0x8}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x108, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x2f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xbf) unshare(0x60000000) [ 1210.835542][T16258] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1210.844006][T16258] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1210.867152][T16269] loop2: detected capacity change from 0 to 131456 [ 1210.875450][T16269] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size 06:03:52 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x315101) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x9, 0x7}) r1 = memfd_create(&(0x7f00000000c0)='#\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x100000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x27}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@audit='audit'}]}}) 06:03:52 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1210.978919][T16289] loop2: detected capacity change from 0 to 131456 [ 1210.991159][T16289] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size 06:03:52 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0xb) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x69, 0x1, 0x1f, 0x40, 0x0, 0xfffffffffffffff8, 0x22040, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x5, 0x7f}, 0x10, 0x1f, 0x7ff, 0x9, 0x2, 0x81, 0x100}, r0, 0x2, 0xffffffffffffffff, 0x0) 06:03:52 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000004000000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:53 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:53 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000002000000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:53 executing program 0: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x40801, 0x8) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0) flock(0xffffffffffffffff, 0xc) 06:03:53 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:53 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT], 0x4140) open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x22) open(&(0x7f0000000040)='./file1\x00', 0x400004, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000080)={0x0, 0x3}) [ 1211.205496][T16320] loop2: detected capacity change from 0 to 131456 [ 1211.218689][T16320] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 1211.253403][T16327] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1211.261827][T16327] ref_ctr increment failed for inode: 0x361d offset: 0x6000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1211.349179][T16320] loop2: detected capacity change from 0 to 131456 [ 1211.356462][T16320] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 1211.406665][T16346] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1211.415044][T16346] ref_ctr increment failed for inode: 0x361d offset: 0x6000 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:53 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0002c4000000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:53 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) fallocate(r0, 0x0, 0x42, 0x81) 06:03:53 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) r6 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r5, r6, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x10) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x3}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {&(0x7f0000000140)="8081000000180000d4f4655fdd69655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000e16f102e8800", 0x3d, 0x4800}, {0x0, 0x0, 0x4000000000004880}, {&(0x7f0000012e00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000005aec127300000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x6c00}, {&(0x7f0000012f00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001", 0x1b, 0x7000}, {&(0x7f0000000500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013a00)="02", 0x1, 0x30400}, {&(0x7f0000013b00)="03", 0x1, 0x30800}, {&(0x7f0000000680)="0416", 0x2, 0x30c00}], 0x0, &(0x7f0000000380)={[], [{@fowner_lt={'fowner<', r1}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'eg\xa6\x86\xc2'}}, {@euid_gt={'euid>', r1}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) chdir(&(0x7f0000000040)='./file0/file0\x00') r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r4, 0x8, 0x1000, 0x10000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 06:03:53 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:53 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x8, 0x5, 0xc1, 0x80000000}, {0xfffd, 0x81, 0xfd, 0x7}]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="82bb7102cc6509f63760ce03d909390c0fdc0be3d5adfbdce3f54274ed3ad036aeefa21f2d9ff9ca165f990e1e886dfbbe040db65cebf070dd8be810d6b0f874133f05151008", 0x46}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x10000, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) kcmp(r0, r2, 0x2, r3, r5) tkill(r1, 0x28) exit_group(0x0) 06:03:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00', 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x801) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1211.808952][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1211.817462][T16361] ref_ctr increment failed for inode: 0x361d offset: 0x6800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:53 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@ceph_nfs_fh={0xfffffffffffffc67, 0x1, {0x4002}}, 0x0) [ 1211.857974][T16369] loop2: detected capacity change from 0 to 131456 [ 1211.867535][ T25] audit: type=1326 audit(1618985033.790:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16371 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466459 code=0x0 [ 1211.881398][T16369] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size 06:03:53 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:53 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0xb) syz_open_procfs(r0, &(0x7f0000000000)='net/udp6\x00') ptrace$cont(0x20, r0, 0xbe5, 0xfffffffffffff23e) ptrace$setregs(0xd, r0, 0x9760, &(0x7f0000000040)="789292ec24bfb37a8aea1a7278a1c446bf38046fc96fe6424571582b6dcea631f73100df159b91b82a2e0c16c3e9fb2e0831853cc44d1e24e043cb59e919cb431c06946403ebaa9c0671463349b9c615f40c69beba05a431d7658e1c264c211f9ebf7ea4cf92e308d2ae4e3d3b9eeea32e3f") ptrace$setregs(0xd, r0, 0x757, &(0x7f0000000240)="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") 06:03:53 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x4680, 0x7c18fd2fc9ad792b) inotify_init() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x92000040) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=@OVL_FILEID_V1={0x5d, 0xf8, {[], {0x0, 0xfb, 0x5a, 0x0, 0x20, "c68b5c8cf10fc306d0b6a93bfb3192ac", "05ff6dccbcd38e589fc3994ba1ba780f24d58026c89a00020000a1c0af29c1eec6b008b1abdbd4463de5f194dc6fb4d05828a96258a4eda3090200"/69}}}, 0x400000) [ 1211.971082][T16389] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1211.979520][T16389] ref_ctr increment failed for inode: 0x361d offset: 0x6800 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:54 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f020000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:54 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1212.028194][T16369] loop2: detected capacity change from 0 to 131456 [ 1212.038266][T16369] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size 06:03:54 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1212.121021][T16412] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1212.129424][T16412] ref_ctr increment failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1212.184286][T16415] loop2: detected capacity change from 0 to 131456 [ 1212.193254][T16417] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1212.201631][T16417] ref_ctr increment failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1212.239630][T16415] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:54 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@xfs_parent={0x1c, 0x82, {0x401, 0x88, 0x7fff, 0x2}}, 0x0) 06:03:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) r6 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r5, r6, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x10) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:54 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:56 executing program 5: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001", 0x4d, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="23d40ed0ee0f8e8e4d916e0d263a9ce0b3aa1cf80000000046"]) 06:03:56 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6d41}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:56 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f030000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:56 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="10f3c0e494b6cdfeed8748d471d5f8f809748c02d5ac2ad4cf1400cee1e458fff2c5a25adb76fe248e", 0x29, 0x100}], 0x931082, &(0x7f0000000100)={[{@nodots='nodots'}, {@nodots='nodots'}]}) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '-*@'}, {0x20, ')/\x87'}, {0x20, '*]'}, {0x20, '.*'}, {0x20, '.-'}, {}], 0xa, "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"}, 0x101d) 06:03:56 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) r6 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r5, r6, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x10) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:56 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:56 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x4442) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) 06:03:56 executing program 5: unshare(0x40040400) unshare(0x40000480) unshare(0x68040600) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1214.953717][T16451] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1214.962117][T16451] ref_ctr increment failed for inode: 0x361d offset: 0x6d41 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1214.975678][T16455] loop2: detected capacity change from 0 to 131456 06:03:56 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB='\b?\x00'], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x440480, 0x0) fallocate(r1, 0x1, 0x0, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x4100) dup(r2) flock(r2, 0x9) flock(r0, 0xb) 06:03:56 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="78e5a2742d5968d2a31561080000001f0000000240000000000000"], 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) dup2(0xffffffffffffffff, r1) [ 1215.010366][T16455] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:57 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f040000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:57 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:57 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) 06:03:57 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:57 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) mmap(&(0x7f00005f1000/0x13000)=nil, 0x13000, 0x6, 0x82010, r2, 0xe4894000) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0x7) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgrp(0x0) sendmmsg$unix(r3, &(0x7f0000000940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, {&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000840)}], 0x2, 0x0) 06:03:57 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1215.250401][T16531] loop2: detected capacity change from 0 to 131456 [ 1215.287812][T16531] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1215.365845][T16540] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1215.374297][T16540] ref_ctr increment failed for inode: 0x361d offset: 0x7400 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1215.380512][T16550] EXT4-fs warning (device sda1): __ext4_ioctl:883: Setting inode version is not supported with metadata_csum enabled. [ 1215.512286][T16559] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1215.520759][T16559] ref_ctr increment failed for inode: 0x361d offset: 0x7400 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 06:03:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) r6 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r5, r6, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x10) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:57 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) signalfd4(r0, &(0x7f0000000040), 0x8, 0x800) 06:03:57 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:57 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x26e8e32c, 0x81) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 06:03:57 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f050000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:57 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:57 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010000006b5525938399c80294fb75bbff0b40f5750da150c4eaf3e4b1309d81fd213cb01c664b23dcdd44bb3661"], 0x0) 06:03:57 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f040000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1215.818589][T16569] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1215.827100][T16569] ref_ctr increment failed for inode: 0x361d offset: 0x7a00 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1215.844249][T16583] loop2: detected capacity change from 0 to 131456 [ 1215.861881][T16583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:57 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f040000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:57 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f060000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:58 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:58 executing program 0: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r0) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000a, r0) pkey_free(0xffffffffffffffff) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000019713dc8c5f0ecde7b663f878c10c09875e4a0a23fb086c1e2310d65198c6f6dfe165ae519141bdea350861a11a9031e66ee195179103adecbd31244acde003088d3944e3ec82239aa8fd53a85528d7d5853e540066dbe3411c930d3e2c36e89720be47021e188fe8454b6e6dcc4937a641bb2fed062d50880044ad467c0867935da32d83bc622c6f48506d4195ef14ce379ddc7dba08bb1e54de29248c3bb95dbd3e1231965be036d90a591a561a227de304e96092e3e518115251b0913a49fea902fd8bbfceafae870ad9850c405d487e453f23a1a7184a2b9f3c9ad240dc84d2799033ded6e7b00712a58efe3bb1ea6a44d1a19a34c8be5f50b00fbdb707ad5b990de000"/276], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) [ 1216.192923][T16622] loop2: detected capacity change from 0 to 131456 [ 1216.251503][T16622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) r6 = openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r5, r6, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:58 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff07}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:58 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x182b1b0000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:58 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f040000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:58 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[], 0x0) 06:03:58 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f070000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:58 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, 0xffffffffffffffff, 0xc8b3c000) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB='\b\x00'/16], 0x200000) 06:03:58 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:58 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xfd, 0xffff, 0xff, 0x6}, 0xde, 0xdb3}}, 0x0) [ 1216.710638][T16648] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1216.719108][T16648] ref_ctr increment failed for inode: 0x361d offset: 0xff07 ref_ctr_offset: 0x4 of mm: 0x000000006a316dc7 [ 1216.745204][T16655] loop2: detected capacity change from 0 to 131456 06:03:58 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0xf2, 0x40, 0xfe5a}}, 0x0) [ 1216.763847][T16655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:58 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="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") r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000010c0)=0x6) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vcsa\x00', 0x48040, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000001140)='security.selinux\x00', &(0x7f0000001180)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x0) openat(r1, &(0x7f00000011c0)='./file0\x00', 0x40, 0x1c4) flock(r2, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000001200)) write$P9_RWSTAT(r2, &(0x7f0000001240)={0x7, 0x7f, 0x1}, 0x7) fcntl$lock(r1, 0x6, &(0x7f0000001280)={0x2, 0x3, 0x1000}) r4 = openat2(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x14}, 0x18) write$9p(r4, &(0x7f0000001340)="e8626231b2a105f84cfa7bea47c31e536c9b17aeeca7ccf73cd8c73146fdaa2289d22ca30e8abc1c38", 0x29) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ttyS3\x00', 0x2000, 0x0) ioctl$TIOCSBRK(r5, 0x5427) r6 = syz_open_pts(r1, 0x141001) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f00000013c0)) 06:03:58 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f080000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1216.940335][T16684] loop2: detected capacity change from 0 to 131456 [ 1216.949850][T16684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:59 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2500000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:59 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f00000005c0)=ANY=[@ANYBLOB="d7cfac161b191ad119ada2df00000000000000000000000000006d56f016d37ad870ce01bb79d92d3343d587841845ad9360f866d26b3ee40878644e1cc8b3c05cad78ae89a2ae0dcd6ad958bb10caee90e921923289afb5fedb39270a7344c253d450dd957b45605f682c23c3e612dc0751001d567ee10391910b5cbbbad57612c2d115ffaee010a7790da6ea"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ca3776d5f5cbb874d535a570", 0xc}, {&(0x7f0000000040)="826fec56d941777129f31dbb7a6dcc5ff2425a0fdecd37b8636658fa65370157c226d6c44dc6ab5f7c7b7544273e12f1db506cf2ee6367ba137db1252292779a8b08472dc41a399aeb469d0306f54542bded65b23c714d3b7f54306f0be91848bccd13", 0x63}, {&(0x7f00000000c0)="1f6b94", 0x3}, {&(0x7f0000000100)="280ea1097787d11acfac8d66296a3e19f70355982a354e6a6d3e8de740ec76d3e16d2880b7ba416bdcadd831a9f2d2b890da975811f84cac118d85c7932c11ac320f0e6b2f040acd99f02be1a2a41f0e11f756b2428c61a373a5d82e58aaecfbb57cb5227784d57ee858d9870d09d27dc10862cb5b6c822196b4bee94c989d20ff658b615518088f598b5abde25774a8948f241b6a4d640c14aa2f348b0d5b", 0x9f}, {&(0x7f0000000240)="01dde41e29b6be944f7f1f4fcab6c85a3f234006c6cd9f6758986a21d01b81a36769d5085c7da27dd9e55e5d6c4e5a0a6b0b06a248ba3a2be1dd26621d0fcb4cee8d9c2d5f548972ae0f665780eddb2c39cda271fc394eda52e77d9f868e765e9115698f78cc95039df62a8bf6ff091c964920429e5ffb4b6b0ab072aa8f75fe801fb42111d08349e3d1662b6383d3d8bca81a20c00c775dfc3e5bebae33cf94", 0xa0}, {&(0x7f0000000300)="ef4bbc6fdaf4af66d028b105ec1954a759b3e923623d1865b4df0410cbf86774724043731dd2930ed0ab244a2cdb550dc93e047215196bc7e2b49404c8c9aa86cd3510fd5a4a5f3b2a1afea860bb0a5fe254af5234eedb3c49503206bf5d0e623b6fa4ea41b8ae814a2904b08a93b339d2d3a3b95ef1523ff783d4dde3ca426191fbe056bff590e5db1178efda4b242f51d852fbc694f37c282a49ad7a7277d53d191eb005e356b25c088d9082b071fd8883399601e3d8028313fa5aa88c2c10fc81db068592b54dd69aebc677b5543c3f54c693416219719fcf1e3e1b0d729a8d348dc263057e886198cd21ed990b", 0xef}, {&(0x7f0000000400)="d6ebbde4cf17032e6a78191b799580d2fd7dc4987c938c5aba1ce7dda5ed02d605c08e45885ec26f50bfa6f591db79748296b0c86682a4cdd6076564239cc2dcae820004138085a48c9173ad93104f", 0x4f}, {&(0x7f0000000480)="4a46c25e9a9b456f9c21daa3d37a479e8222de8c4dd64d0db6ccea0e6ab0eea07d1591805b58612a5c72a09bc3dee34ac26f11586d46de8066ac0b370e50bcfc93e6fe5b127445dd3fae26afe3b2919415a9412883fc11de7b3ba13c37e032dd5683764bf0d1bfd8d296dcc53a4a2dc8df3a6f640e984c2d925f958f263f42cde5800328cd3adc5599cccd32d6ca20435e1dfdd71ef21b8f2de08b5d98bcf7436c27c177deee2929aa271415e3486eb8a4", 0xb1}], 0x8) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) splice(r0, &(0x7f00000001c0)=0x8, r1, &(0x7f0000000200), 0x7a, 0x9) 06:03:59 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:03:59 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f090000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:03:59 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x6, &(0x7f0000001580)=[{&(0x7f00000001c0)="d6023474529044a35159a56aac268ab6d69a7cb24ea3d561c7243fa7cc88fee5b297359915a57ddd36261abbf419", 0x2e, 0x9}, {&(0x7f00000002c0)="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", 0xff, 0x8001}, {&(0x7f00000003c0)="5e9dd9fbf2b64e3fce4847c15a74baa23b8c517da1979d262b767c8b50ee4d4b1d5c564484ad138160be1c8cd032bd12904d6ecdb99ffd00983030ac2726558257a4acd69065c5dc4509cc06494c25e4cb3228f7355112e0dc16c0877e5866bf567fddd21a858cfaa806e735bfc3ee063b3d248cc2811e4cffc07ce27df8da7f4b", 0x81, 0x5}, {&(0x7f0000000480)="efed93fd7eb1be418fb190246e2e7542a9e3b566fac908b61265d9f37573088f4f34301ad093d1e6cde63a71149ed3b876b6123d1bce458892b42cb6db5f1fbe93010a8734688bce01dc9605b6e6257de50c6739d62e5dbab9ab28812fc3b01fd253292e47f95fcb5fa1f68737e0cf42b99b58c43d166d3fcb9d65d1207d1a21977011c8e89ee7d82cffe39a5018f1287bd4487bbf67143c1a6a6353b116ea2e6bcec7d530ba9b73d5d432f0c037fbb756c28540cb78ff451075ff050253b5a37e766657c7", 0xc5, 0x7fffffff}, {&(0x7f0000000200)="6564545c4025c3fd53b8c33de7735dc1eff9c3e2b50b00ce50586bc3a8b9fef3733b6e692ef02d90a1c8936469c7e8d711f1", 0x32, 0x4}, {&(0x7f0000000580)="beff485655e5375fbb2180ebd2652968cf5dbd75c065d89753d06ba1033f7d6f74c96865c745c3830ff20e586be621f2050f5025b13d01b03424d3f64f30a27997c54645fcf27ed63d69024a1b110cf7cbf1f151f302c1f1dd4664a263adec9b4c0878eb2c1bc4fa8eb6ba3c538ab2f00973a6733b77d02d9ef295847467c0b0d571068f7d2dbfbcaf8f07f58dabeba88695698483c224db74bc8807684ebd03875364526b20703c34120aabfa85fabdb88d6041e8437c8e550219eb35b81a939e32e2225be9efd5612070ee38b8c563790cadf6b666fd7233ac9c1e9a9a7d9f8f4514ba890bfbe81a6f406d06f94e1a6eb5c2072c661274d4f98af5ff22eaa2311502322267e6d7aa22c36e34694a0e0e63ab1fe6bbaa13a4c4ee86351e8a0e330186b5ab1177b9746991f31f5ba53dc5f3a63b804dd2bd2c16d944182ed5272e4233dce7335b4db0f5a1b674480b22c520f2cd5f3a1e44c52afc00c9cdd04d867c8215c02178049bc1fbca9c2cb6a2adb2e26b60a0245349c3e7d50de75b98bef0ae1787d94a88a45505d39f43ac4942899ebc6bdc4d7d4fb1998e29f537baa9632c6e3a6ae7a1c08023c1dd97ab77bc327ce6822fd1900f873b38f3f4e4c61c5984e879c913be48f15bde294b255a5f3c98b442d804106cd23139d7d79f9d9079ef4847cf5725ee08f418dd01afbabaf9a9686b9ff52953e936169ec195c1f042e7b2c86362c9ca967ecbc0772230b3a7150834751c8a5620891a351784b9e209275cce19210e6801041349327243d171e8f9126d01707c561f9cf3eeacfea9899b603a74c00d2c9544ca71a8d09ebb92acfbc5bf444ddf7103e4ab00ffca210e7748b29699da664516cf65f2359fab44f2427b98b9cbd50763fe0a1a9c2a6c1617a9b124243345581b53bc2ed961a80e155f5589897fad784b550442bc440e89cf9aafe9b28ae652fcb5a036ec02ab9bb51f71fb5cc5e82422866ec932f880351da80246296046c9c48fc3a5e5ee3ac3cdbf5f49f7b1b1dd76d046eafcfacb65cb16e10195b4a074c8bee4c27f2633fafd730a6baacbe2760f5d669a04360d1f4b1588dcdb293b5d95319c997e4d4f5084d0f645f2b8cce482b483db0bc16295c970f2244b7dabc70fc2d2fa7bfec590ffddc2cc8c54ba051f9faec7d10189e52b72040d551cdfbdc4259642081ab36b90c8c64ce99407b68b44ed5c4a02b3bdc5ce62ac96ee6fa2df384df60f0d2ecd2d5d035caa3e9f54cc4beef00168a131f99d54f2512e3466fa825aaf57611e125198f783e250491f9c3482915508a3dbebfd92b0d639744e2ebf9e0f64816501562ed5cd2e78b5e352c6827184737e2db17541e900f787e4efbfb3256ce0aa62a07e49279a73232e9fd2761f3ea3dee9db5598aad29b07b6b11614f3333e846a2137f32f7ee5653a03f1b41c7d29895f6937def20d6a4b0537ecf41212c1688a06ce445a6cebb07796882581609ba7d338fd9a0a033aa928c3abffa9356afdfb4a0b49f734b750dd00e79971970b77b5d846ac19f27a5dae1dfda05d828cfa334d9711fa37a90516d362e62b03f85d9b1e592b2916b42b86814cbc0f8cfea9c9c6fa447e37ed0ff9bc154fd2aff1175529fc76246b1340a468167e6034d2da8a2b0c0a5563ce855403ee7107ae01eab9728b0db8900ee68ee90edc522f119b4fd7b1bcd7feb6ab7733d9c09dda868fdc4909c56ea894beccb3b8b9b8112fb770702c0efbb5d5feeae2f9d94f4fd8f6c20c51a26d5adfcb3f815b005080e6b1f44830de22298013520cb558d03742c85404d021a6ba653762efa428a11e28c43e7fda333ab8f58f6d8ba6b5260a92f7863208156ebab3b575065a2e0a6f9a5e7492984791bcb5181ff90995fca401cfc9122b0cdeabd42c189be5aa1897cb057429e3b256e5d4f06c0c8498a5938fab4648d674ed2372079a4870fb65795348e16c149e1ee1e399ad3a0527c7d0ef947339b91e8ffce2b41fbb8f0fcad075821632ebc902792519604316dd5061beb805fc301a6072428c49799a307a22616c7b8139d8f64d98c471d3d66b2754e3ce601e395e53c66e598bb081cfcfab0853bd394d6570ad47e88a17a1a8ba21b261b10ec41f5f29ea3cf96d3da931b06deb475a03d484bda4fe687304ec565824c29df1dbe1b55c9ecf4112aac5bd529c431f82d99e4f1f6f488a287215ac159c5676b4c1c433323fd97f2c3ecc2207b4f497047b30afe2dee254477d796cae4e843ac92b421a2dc36cc9350efcc93a296bf101055b8bc4110e2f0950012742212b6fac07d6bfc130d928580096aa67fc19b1148d30e1d8d4e99e236ef15c00202681de061fa1588a0c5c583aaf5c32ceebde7e83b052474cbfb5065400a7d6482a5a5ddf05bb7dd6d4375de4745fdc5cf1059d0e2a510a785960ab60c634727ffc8ad4ad62efaa781e46bd8fe6f825feac955a63b89540d56716a0ff537fc1c25d7cb9b072d083eeec50a09501dc8cfb3d8dbd191a822eae3e3fe7de4457329b275ed368bc6592a333e87650561c67f474994faeb2df6b0716021bd347a043e1788d28484847e3dd3bfb42e12b26dccc0dc6a2c2bc79083129bc79068e1bfbfd7600e9a6e98a8ead1d63af48cdfa536042cc6aa84e6b9a4116787f8ede330b037d70c222ac15f0fb73fed332f11f500760ab4adf428eb5519e65cf0e27a03c5e824cba2afbea948e49eff8517861f75f94b9192698db5770aa0665ee36545d0298fe0a8b615b2673645b9ab06d9872dcbc543e0f36ea8f6e43e0bbf68908ef87a23adc12fb4dc31113a1d0a7c53f87bb60689f72cc44d34326584ce457b7e8ba71e64e78f3b478f5f422a5afca24f443d9906883b3ecf69d4e2f677ee6639b44013abdd8798dc5bbf7b8da185866b99f16a998ab5e09fd571506bee277ab00365492d2ad01784dc593c683eaa3f3a8979fb2da8db8f68fcc68539deb9b4cd93e7e1b8bc222e663442a96fa23373e89e645d104be2ba72f8d1691689c9e261e15fd34a74c5daa0969822922444b30cf4f2200496171cb8439869c71e8df06bca67d146c0e1374cd8ed0caa49b302e5531f687c8ead9ddc876e2916c72be27b07b995ee55b40c69ec33adf1461b7717dc8f499046516256c35a36eab9cd8afb99e4b685c14cef81b69969be151a0f1040939b7c70cf3d422adb0360fc204c65fae3d3f6fbf1424cfe09f7e92fb408986d398f069feca3b0137abfb76a557a16c1f9e376f6e3e31c3cad4ac13dcdec2bf8d4a9f48e72984051f1ba318a04ccbe6b62aeb57fb9b09811b9ed296a5da9daaadccaff68b42424db4db33c5d76964b5061459634d5e3ce47b1c09e99ec8284816cb3b34a6455094a28412753f7b6adab045183ac023be4b63758de1bfb9061a92af4ce2592cc8b2206b9efc6ae48f1248dc4a4892a954a9c035c87d9c0ebbd3c96d20d729881ba6f64b4ad132b72c2bcc32df2db275678be6da92d93a6c1287f347040634c7da07b53bb96df395c374fb38b7bbb07a0621e03376a19dbc28b61a4995489ea28449b9cf66aa08f2dd4f8756f3e1c3f788626b9ca8888824fb26f3675665089a6b9579e7056dc94f9e8c1ed1a37bcb5af1af669346ace43eca7e2873dd46a658ce9f06ab8fa29de4cd4a62c727b14435ed9618c0ec4bdedfd487461eca5d233f6e4da774eab6ed5cc2581c941a27e93fba3842d780e390fb5ea88f967cdc173954d933ab8487cf02636d49508814ae330a0c8c5a5e2bcea6340af059ddc498c92116606a346f596bba3d6f2581fae4d2798d45e6ef899f5d8d27b2fab7d7008938201114d2b319e9e7f951e4f8e2f90fec60d18d466d08714012719e369d5959a5f5a277432e77608a278527ef5063dfd1448ade5efeb924641296fb82182d7cff40a77ca45f80a478ce332eb5a45b1370131a847302db36480e450e1fddbaa1c0ff45fc091a47afd476c0524db2a6ce392ecf58fb66253acd6780b8d50892f1c72652d53ee28494f768c991d0f1159e733836a18ce1428ee8d7831a8f34a418579a464ed0ae4fa53f82c4858e8972470e4fed2606e6f776e296f10cfe19f22541f2e33e4e263a32687d47c606ea1a48fc1faddfbf606592c1f0b8e899703d323829273073ff779a8cea34dbb0d95fa24b3db43200da4af71568091e1b0c3c26202e6979acc7f30413933b0b5e04363c6db43d1bfd717b4131fec58d199f274aa48ee5e40385e8734bf15889d8f7c117a5086b2f5902e77e7b1dd6d10a497d2c91f1af28dbc8e24937adefe04315c18125c07570fa406d3b77423b5406de2d77ba675e6455a5b907621540253cd152222da7d9d7d644865937c7bec458817a80d5ee6988c6effce8aec8a0377486839812a759c976dc9eac4a12b15fda6e9499e82d079c4c94d41fde702e76fb532c2d7bc337efd759d24bcb33e91beb9724dddd8836f294d036960201689488c973e4d4a88529ea326405b091f1240dac43e9e702ca3d815c4433dc23b8df9adda62bc951ea137c52df4b21d209ff39d419ceeff3b29fe9ed360c4f32fc2346054cf75f6206ea5c3cc251ada229b7e7753d8b16a05fc2a2cd73dfaf7a4f4ea1c7d2325631e9440fd22c1c7d3b4b364d71c1e32d05729f9fb26da2bbea4258ccee1bf7b9d7d89fb17b267070e9a7a7b8449efaa237d4472413295535c9273436ffee1ad78bf4a5d25e16fa1ad3b377c2952bf817cf1f1c054da51181bceead15bb604cc45fcdc8867f1360fb44c32350a10283d8ba24fe28f680177b7e416704358204ac02b17a9e27cb1c2d247e4d54b6f4ed2cc0c0410a1f09a6c18b8537cd91655d0cade03259b90a03fe83b93d9d1aba3a0a267dc40c6ec65c6d7a23c115234ab7211da4571ec4eb2d0b5f3d48143ff6fec50fa0bac1ccf71ecde6589888ab1c271ddc1ab986e16418a2403efa3d382a8eea42a15410976f2bcef4692fa202bd3aabc3801e23085f34cf6863e8bfdffa0b5c7d625c43866cb807b217fc0fad130d21e1387279e9aa830ac4095e6509153b2523508466a47f3a03abf405abee800caee052d2b9a0555b54fb5640d35e4992a8bd6ff82abad161ec725d8c6e84acd00082ff781fedcc202e578ef9f692e7f23e7487a89169c94a0deb250738112328434e2b1e3f9632f85ab6d2474632ac3c6b0b670620582e2e316e49bb1ea7d92294059796859178406d7f50ddb848123a4c7635a72155a1b8cb9eba2dc420b3cde264f0f3a1ab1b116f1fdafd30aabd32e429b9f0ebf2e3ca9e39d5399b406c71c1fdfe77149417c352b701432fac88f9b053cfae89bc77671a0ad5c7c4b11cff36706c8b86759c1fbcbf1876dce6eba43c7500017b683c3b588847fdc5650ac35c4691deae23d28e8b11b150d0287b0200d3812260b0f6fab506e84f63b200749e2c0dadc129f62ddd2d63dc7ae97a97ad0da3f5a02c7f05d5a349f808a691a0c492017eca56d74f9d37a8aafd2f67dad573229e2b8c90870a70b05ae71189a1c916133923b7da3933b592dd4bd70bc65f18954f3269ec68c181eb0946344c84c860b0396436534801e5e50c50499ff1f1b3229de42aa2f9fc5c2c66991994d79a1a3ebc2734b69dfd8fc20bcfc6a48c88066318e921c2968fb086de32b2ae6a3595a35818b70f11ee1c8629f0902d9832823e09961d3bd84fd7efcfd5940a94a69085296793c076ead34872e27feb2726b33478fa4dd20a99df812e9a269d0dc1e1cd1fc56795489b96d05c3cbc64d0d3fd0153aaa642a074e4a9", 0x1000, 0x10000}], 0x25000, &(0x7f0000001640)={[{@uid={'uid'}}, {@size={'size', 0x3d, [0x33]}}], [{@subj_role={'subj_role', 0x3d, '/proc/diskstats\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, '/proc/diskstats\x00'}}, {@fowner_eq={'fowner'}}, {@smackfsroot={'smackfsroot', 0x3d, '%[\x0f\xb4#:%\''}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x61, 0x32, 0x62, 0x33, 0x62, 0x34, 0x32], 0x2d, [0x0, 0x37, 0x36, 0x66], 0x2d, [0x39, 0x63, 0x62, 0x35], 0x2d, [0x32, 0x66, 0x34, 0x61], 0x2d, [0x61, 0x67, 0x30, 0x5d, 0x38, 0x37, 0x36, 0x62]}}}, {@obj_type={'obj_type', 0x3d, ')!^'}}, {@euid_eq={'euid'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2220, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmmsg$inet(r3, &(0x7f0000006440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x38}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000001740)={'syztnl2\x00', r4, 0x6, 0xfd, 0xc6, 0x7fffffff, 0x4, @remote, @local, 0x8, 0x80, 0x3, 0x906}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000080)=""/183, 0xb7}], 0x1, 0x1, 0x0) 06:03:59 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1b) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=@reiserfs_3={0xc, 0x3, {0x3, 0x7ff, 0x2a}}, 0x0) 06:03:59 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x28000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="0659c9e931172df7", 0x8}, {&(0x7f0000000080)="f83b3086cbc244dfa0f0b980be4e3b6d172c7dfcd9a40c3d9a744b40462946eba16505cafa9059b5bdbb112b108a627653262f18818645774cd54245313cd4fdf43712ffd2f90a96edb4a004706846a04995bb5e423ce3d4c0fccb0afaa5bca0ebcde9264b1f529fd9272579d22c03e4ee07f88b36524eaa3b84d25709d2dbb46669882185d5fbe6c1187fbcca0f22", 0x8f}, {&(0x7f0000000140)="8ae108840a0ef3a1214af1c8256a9b6383f35e20e94cb1d70e4caff0ad494a49b3e788dfe4342f35882b1d236c0bbbf7b6f7250ee6870d108980969c7770c37c7e84339034a7238ec9b15c345a2002504deef3a564c9a152be446edc5ccb5dfc6bf5a30b472bc0142ac7b134d30e2e7072cbd798638ea46429bf6ad5c2805a79bb3051834cb5173009f215efd9e1fff1170f1274993c8bfb29e5c5aa5f9c176f1d0af84a170419", 0xa7}, {&(0x7f0000000200)="30e49791bfbb1e5ac2131a58155873da36a162b1b75db8c0e9f2d07afe645fd5c1182fd28c3f63", 0x27}, {&(0x7f0000000240)="87381621a999768fedc1396e27fb2304d92cf55ac8f1c187391532a7c3b5408e", 0x20}], 0x5) 06:03:59 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)='}', 0x1, 0x7fffffff}, {&(0x7f00000000c0)="486ab4397397732eaf37ca0638a792f87d347169407620c9f13ed64a62a243864d3c9b236cab548f6f90d7641ee647f0dc79ecfbed7e9a1a83de22c0797f49b7aa948f5f8aa2cda186e21ce217645e04cf78c01d06ea52fba2e66c0bd71a65fc514e7818cbeb1db22ad013c06a2465a6c0a838156644ea7ceeee8c53006d1cc081997e91e2ca2508bdd1e515f78880192bd269269268078a1223b66d9d6b88e788d1522788c598067aed", 0xaa, 0x9}], 0x1400, &(0x7f0000000240)={[], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, '#\'{#\'/:'}}, {@fowner_eq={'fowner'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x38, 0x35, 0x61, 0x31, 0x66, 0x29, 0x61], 0x2d, [0x39, 0x63, 0x34, 0x32], 0x2d, [0x9b, 0x0, 0x64, 0x58], 0x2d, [0x33, 0x57, 0x61, 0x34], 0x2d, [0x30, 0x39, 0x62, 0x32, 0x62, 0x64, 0x34]}}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@seclabel='seclabel'}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x5437, &(0x7f0000000100)) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001300)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000002c0)={r2, 0x0, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={r2, "45413f727cd887a7122172c519519c05"}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1217.651249][T16718] loop2: detected capacity change from 0 to 131456 06:03:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x14040, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040807}, 0x40) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000000000010000a64cd33ec9ba347049edad39e7ffe0811f0aa977c7707e0b453fdbc02719b1606c237a91817dd0a7ed8b57c67da312d315d9e06fec3f7036519eaea8"], 0x400) r2 = fsmount(r0, 0x1, 0xb) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) signalfd4(r5, &(0x7f0000000340), 0x8, 0x80800) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x2000, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) 06:03:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)=';\'', 0xfffffc5f) truncate(&(0x7f0000000180)='./file0\x00', 0x7fff) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) unlinkat(r1, &(0x7f0000000100)='\x00', 0x0) [ 1217.693434][T16718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:03:59 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b2b18}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:59 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:03:59 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0a0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1217.969469][T16770] loop2: detected capacity change from 0 to 131456 [ 1217.983550][T16770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:00 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:00 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:00 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000015b0c3f8a65ffffff000000d68c23c57fdc91b8dec88309cb67ca04c5cdc46b1b9b0b5948714b"], 0x0) r0 = memfd_create(&(0x7f0000000000)='^#-\\+{&\x00', 0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6) 06:04:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482081, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0b0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:00 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c4764656661751f743d3374617469633a330a00"]) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="112f3c8baa3050b557cbd72d4823d471be0daf4272a8cd0e082483be99f395dcdaff056572eae83aa7625283ed8fc91355536a7dd9f4d960bbf0669e8f2e6b5b87b30ed7ffe30b013fd2e8dcb50c19a233e5b888e294a2625ca6a28b428dd9ec077e2db41ce39ee390fe96d8b750d3096b4b9276f5f1e9f12bcb4a358514c762c1374080c2a6d9b8e3190dc1d26cdda6225756a443981736", 0x98}, {&(0x7f0000000540)="c022eef82c845ca9334d471a449d20190ca9647537a8ed24e05ca7219cd2bafcd05758f2a05c29c340cf4020597c5f76b380e6719a69c2b28fe23faff657d3e67d08a74453e04f035aad38ac60dedda18189fd5bf8e7ae74bfdc45601c485f1f769738fd038c72247094f3f5cbf42054bb2f8ed469479a7903300e94f8cedd058dc3fc62603e67b05ea2597ad62787515d262b739f164fb2b2dec026001a3a3b7ba804711660278a429fb40c778b80c111322af47c31a79c5471f98b", 0xbc}, {&(0x7f00000001c0)="bdffeeecf09f4ba23dd06209e4a823aace08481cca3fde00495bc54c7a9bb6bf84ec71254d2154481c67efddf3b30ade9c51c43398b81678f71f5f1701134b89abc42a08413e2f48338bfc7925d9b9fe2ce75f49d924fa69e01fb2cb5679758472ba35", 0x63}], 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='9p\x00', 0x800, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport='privport'}], [{@subj_user={'subj_user'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_lt={'uid<', r1}}]}}) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r3) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, &(0x7f0000000340)={[{@gid={'gid', 0x3d, r0}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r3}}], [{@uid_eq={'uid', 0x3d, r1}}, {@uid_lt={'uid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x19}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@fowner_lt={'fowner<', 0xee00}}]}) 06:04:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6d5d4bba3394267c5ae1f1eacc1a1848708e590bf8ae0e8931f785ba873a19d5b7bc158fbb3cd2db4b8a0222b200546b79755fef11de4767f248ba57852705d28f03fc7585bc80580def7adc7833a38914967e8960aa4e46ceb1dff2500913ab86692da460b260d02bac"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="2ea0000000000000090000000000000006000000000200000500000000000000001000000000000000000000000000000700002a00000000000000000000000000000000000000000011000000000000000000000000000003000000000000000500000000000000680b00000000000000000000000000000000000000000000800000000000000000000016000000000bf2ffffffffffffff7f000000000000a00f00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000080000000000000005000000000000000000000000000000000000000000000000180000000000000000000000000000020000000000000035000000000000000400000000000000000000000000000000000000000000000200"/312]) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 06:04:00 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1218.462058][T16786] tmpfs: Unknown parameter 'mpolGdefaut' [ 1218.470130][T16794] tmpfs: Unknown parameter 'mpolGdefaut' 06:04:00 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000010000000000000022888b2fa4b333d7"], 0x618422) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "dd1170"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x44080) 06:04:00 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:00 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1218.536860][T16806] loop2: detected capacity change from 0 to 131456 [ 1218.554391][T16806] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0c0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:00 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:00 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1004000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:00 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x3ffe}}, 0x20240) [ 1218.793419][T16845] loop2: detected capacity change from 0 to 131456 [ 1218.805941][T16845] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:01 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000800000023473bbc8faf000240"], 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) dup2(0xffffffffffffffff, r0) 06:04:01 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:01 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:01 executing program 5: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x3ffe}}, 0x20240) 06:04:01 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0d0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:01 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c1042, 0x0) fallocate(r1, 0x28, 0x0, 0xfffffeff000) creat(&(0x7f00000000c0)='./bus\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) pipe(&(0x7f0000000900)) fallocate(r1, 0x3, 0x0, 0xffff) 06:04:01 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:01 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:01 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1219.418881][T16884] loop2: detected capacity change from 0 to 131456 06:04:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) close_range(r0, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xd9f, 0x1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000001100)='system_u:object_r:crack_exec_t:s0\x00', 0x22) mmap(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0xc3363000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r4, 0x0) 06:04:01 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1219.461093][T16884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:01 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:01 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0xc47d, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="f656b7f3e97b4c8354d892614be85f72e0cf45eccfec4350d7ea3bc9145ad351ce505f32eeda5af73b37dbbfd2e20d6f9b040a3c26a49824fdc156617eff97e4cde928a2cf6e288039cdcec22cf6936361d8924284052ee94f4a46b4ec10182bba828c836be5bb5ac56a71d575025be0a2f159c5df45eafedc3a75868ac1ccff5598", 0x82, 0x6}, {&(0x7f00000002c0)="189a873ccbd5021e58be29ae9db1bf78b43460be588a006f30d7864b6a4d7fa16ab799dfe3fe47e338ba6bf680e68291a723a8582b8e38cfbd627435fb44fe364fc2ff9c44b19f4989391a9aa7a9bf00e2388e9989988136405c4d10db4e5d539d1d57577d55754cb455b8d7e073d63cdc5feaa1cd4c9f02edfdf4b9b37797a2cb423a4c777e37dc014e660172ac43090e60cc7a219f1b876f8a82beab38cd52fa9d3b1e80d349b1bd613d7a56cca2b193bc03c5a572106b118ac6bc7eb1889fd939890507132d62564ad3f1153cd95f2c1ed7d5d87cfc91063945a25431db8e7e127cec57818497dedd393e94269f9ccbe5f837635dbd968650737aa4d75e", 0xff, 0x1}, {&(0x7f0000000200)="34adcf1af25079e57f2c299c30d16684fc6c56e65faca527663c5841b8fa4bce104f49b21e4cf72f3605111b604e53c9a1261784ef110ee3c9dd9e", 0x3b, 0x3}], 0x180040, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x40}}, {@huge_never='huge=never'}, {@huge_always='huge=always'}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x30]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x65, 0xa3]}}, {@mode={'mode', 0x3d, 0xf49}}, {@huge_always='huge=always'}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@audit='audit'}, {@uid_lt={'uid<'}}, {@appraise_type='appraise_type=imasig'}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x74) r1 = openat(r0, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) preadv(r2, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000280)=""/35, 0x23}], 0x2, 0x0, 0x0) 06:04:01 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0e0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1219.720421][T16925] loop2: detected capacity change from 0 to 131456 [ 1219.730474][T16925] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:02 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="5837f44b9a5b33ddef8be85fec732e73594d9fa0816bfb3718ff107e663b3067a8ba67b7bbae4f1dc08881bed335b7bc47d33f6d5b3bbe32844484f542ecfe67e2", 0x41}, {&(0x7f0000001c80)="4743b4f944a4e9ea2b8cb1d3638b9bd99087f4c987a0eb8a1395dfaa87e45e169875bef5ebc0782722baa17cb6465681035de58dfaa0799f41552e2c492b9ab3460e2c3461132ce586f6023ce706a1f291e060df35171eabbce349e5a9186a57c964d1e783a759cd8f650d000000000000e76281b13da2bbb42c52885a2bc134df9362b66cd4281a901bb44a31ba63ce62382fcd34b2aa4f529675265e9c165dd7311c8161ba1c4b927fb7b6135c2d6afd02b065ce7e8c1130f29e86683bc79cfc8b8c2602eea1adf481d5cb4d81ac019e6cd19c4c3dd20426fa3c73b1218043d291e6914212102cff48f2ba6d32efaa40826a78b4291d81f7426225747bd16fa6966f03853cd966dce033bb6bc56a912a9ae418bfcae3626c990a3e9af5e3d9e6a07abc387208f33283aa30837df2a49ffe0506b30eaf62aeea1eadddb108d94c21", 0x142}, {&(0x7f0000000640)="6281c1a93723f59033d236ee27e17cd71a784c4c88d26faf213a78efb8028bdb3436c44e80b52ba9b9599a73f9fa8b362b8ddd249dea43cd73549c789c302e38cabb9efda3ad5d4eb4ea75a3acb33de40175fac19e47663c7daf7937d854f6301b015837fecd8438aff530f9b67a2f1e33c2704c6e8cb53573aca7a833e1440d5d2e255a7eb56269e2f8c5fbffc1aa4677016c90b9879b44a3f08696e0f78e9113bb068537503c32e547c2bc0367b9ccb74d2f29a2d83263609edad8213b179ace9d4684bcb9", 0xc6}], 0x3) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000008c0)='iso9660\x00', &(0x7f0000000900)='./bus\x00', 0x7a, 0x3, &(0x7f0000001a80)=[{&(0x7f0000000940)="26d642d5de19c23d9e78c12d19e799b11cb7d18429880a1c6b277337eb1b46250be8c1333f590ccf8a735255", 0x2c, 0x7}, {&(0x7f0000000980)="d7a698f799df06b0f9f3a72c3e28dbcf10da55be4c59e1366b0577ca80a5df87d98c66995a1d352c45f2e7466bd3cf4cb2f22964762e0dff1b41506039f21b309c82332ee18a9afcc8938b111954b01f47bc12ac94299810596f18c97f29045acf8b2705c8e840acb93ea45bfbec1e4f8da3a1929f457c38a27d41627dee9bcc1e2d3c6c444f486f5b4f79e9cce12a442957f2a1429cc5eac820f85b9b4fb94679d6c0630a7f6634fc40cdd1ece7927557ccb254ae633e6cc8158abbcb836837a777f1", 0xc3, 0x7fffffff}, {&(0x7f0000000a80)="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", 0x1000, 0x3ff}], 0x40000, &(0x7f0000001b00)={[{@map_acorn='map=acorn'}, {@uid={'uid', 0x3d, 0xee01}}, {@map_off='map=off'}, {@hide='hide'}], [{@subj_type={'subj_type'}}, {@appraise='appraise'}]}) preadv(r1, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/136, 0x88}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) sendmsg$nl_generic(r2, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x1f, 0x10, 0x70bd27, 0x25dfdbfe, {0x16}, [@typed={0x8, 0x47, 0x0, 0x0, @fd=r4}, @typed={0xd, 0x30, 0x0, 0x0, @str='7+{:,*@@\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vga_arbiter\x00', 0x480000, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000840)=""/29, 0x1d}], 0x1, 0x4, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x20) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000001e00)={0x0, r9, "4d983742e23ee50caa262745d7e8a93cbed84c6436dbc3c51711535b72253ef2f7bb75db5de56f9cd861157412d6458c614f9f93184480bf64e66bfe384bda4cc7ac718cabf9608ce8ff18fab9e2144e9026c5e10717400232ad4232b32947504a0a19b902d60b7c505038ec3de2aaf4c13c4c2dc60618671dc35fe690dd1ff566a047d60acf586668ae5ace1663eb9407ed347921b5f50485d3e359a622246975eefc3809e349c98bbd250bf879902408d3d573d155f710eae9bbcd3b72c43ff6482b2473bc7dd8f09efcd786b1bd974e38ec933b6763b3d7aa8eb10ff529dd38440b0a6ae95e3172618729f9a0ce387f39e3f86406e4c9e650c233bf58a829", "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"}) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0xc, 0x1bd, &(0x7f0000000240)="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"}) 06:04:02 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0f0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:02 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:02 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x43e69000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x40, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@debug={'debug', 0x3d, 0x2}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '#'}}, {@audit='audit'}, {@fowner_gt={'fowner>', r1}}, {@dont_hash='dont_hash'}]}}) syz_read_part_table(0x200000000001, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="820d2ec912778893dccd1d040751f5a077e69062a9346b9380dc6335fc0cc0045224df4c47d78ff555788aa700527d8eac2d1bb760e25fccf5297d228a7c82b66ebd5b8aa170226ed85e09a8d71a349d8fce8d7a8081c00acc261c6a6627a69eaf7069d02628faf347a50a64cecdc45192ae361efdae3e58aab1c139744891096861986f06eaeb9c964b92d64c64478379adc18640c588792cb9c4fb989f470596b72cec2ea75d93d7c15d755a0ad15d40", 0xffffffffffffff2e, 0x1}, {&(0x7f00000000c0)="348b23e03a3df6937b505d4e543e0a4b677ff5c89a68ae59795f23a860605f68a963ff9d53584a6a", 0x28, 0x20139d}]) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000480)='.log\x00', 0x80a00, 0x1a1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500)='ethtool\x00', 0xffffffffffffffff) setxattr$security_evm(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@v1={0x2, "cdad836bbb308c3d8271145a62ce19007f84"}, 0x13, 0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x9001) 06:04:02 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:02 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:02 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=@OVL_FILEID_V1={0x44, 0xf8, {[], {0x0, 0xfb, 0x41, 0x1, 0x3, "048c58fd34e4d42ceb2d23da4bd51aa8", "060329132a11c816f33da9f6f75b38421af84f83ed1e6f5b268393b4b6003496709dd2e2c983086efa173d63"}}}, 0x0) ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000000)="d996a540aace72fc4b1599c21312225d89dd7dd6b416ede3addd13a38c2aefb28bf3558bbbbcfb0d1591c38ab9e642dbd0873039e9d3b6141000214d") 06:04:02 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:02 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = epoll_create(0x4a) fstatfs(r0, &(0x7f0000000000)=""/141) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x480200) openat(r1, &(0x7f0000000140)='./file0\x00', 0x80000, 0x4) 06:04:02 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:02 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1220.281468][T16938] loop2: detected capacity change from 0 to 131456 [ 1220.307348][T16938] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:02 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f100000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1220.486664][T16986] loop2: detected capacity change from 0 to 131456 [ 1220.496181][T16986] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:03 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@OVL_FILEID_V1={0x89, 0xf8, {[], {0x0, 0xfb, 0x86, 0x2, 0x0, "b7f4ac8f5250c82f7fa45c32f6935306", "68b9cd7ddf8d41d8c7e78496d688b5fbb3dfc0f3edbd31a83f9349f7d8d8c76739e1e6dd9816cd27a6e859e7d558bc1a3f7a81c72f905a393bc87865095635f7be93e4843553cc1853a93d48b75e2374b5c5d2adfa87148ae35a4499eb156dd27e4a47ad5ddf8a32661f40e95db7fe2cb3"}}}, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000000c0)={0x3, "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"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x10000, 0x0) 06:04:03 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff07000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:03 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f110000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:03 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ptype\x00') socket(0x11, 0xa, 0x4) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/82, 0x52}, {&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000140)=""/80, 0x50}, {&(0x7f00000001c0)=""/180, 0xb4}], 0x5, 0x8e, 0x0) socket(0xb, 0x800, 0x9) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) 06:04:03 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1221.162246][T17014] loop2: detected capacity change from 0 to 131456 [ 1221.201116][T17014] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:03 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffffffffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x3}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) 06:04:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:03 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x82, 0x54, 0x7f, 0x0, 0x2, 0x3, 0x5, 0x209, 0x40, 0x113, 0x3, 0x20, 0x38, 0x1, 0x5, 0x6}, [{0x5, 0x2, 0x100000000, 0x1, 0x0, 0x8, 0x6, 0x6}, {0x60000000, 0x9, 0xb1a1b03, 0x6, 0x4, 0xd56b, 0x7, 0x8}], "7575504074afa919211f5006c92a6a0a704d149baa70c33ac5f9c305bf35246d7331362f1a11e7ade0c7d4c2ec5b1b16496c1c8604c4456972216b383f92de3ff0dcee7a4646bcae1143becb5c0371432e52e2252742c34578982d30611d03a76ee060d371e2bce18b2ed8e79a63add12a14c3a7aa972abf9e4c6dfee87ccab2820affb29ea00fd1b30e9e58baa8fd604b84e37ef0b64124467ee107645e9ace412d4e6b93016e4bd995987e4e53938068d9083ce1facff373fafc22de40e04a2dd95b3cce54ec468a424d1195339ec4536f33ce8a78616b052673cc8cad879fb79b74db2873c61389", [[], [], [], [], [], [], []]}, 0x899) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x4400, 0x48) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r5}], 0x1, 0xfffffffb) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r0, &(0x7f0000000b00)={0x2b00, 0x18, 0x7}, &(0x7f0000000b40)='./bus\x00', 0x18, 0x0, 0x12345}, 0xffffffc1) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r2}, {r2, 0xa024}], 0x2, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000001) flock(r6, 0x0) 06:04:03 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f120000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:03 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:03 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1221.976807][T17073] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1222.002652][T17080] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:04 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1222.054156][T17089] loop2: detected capacity change from 0 to 131456 [ 1222.083362][T17089] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1222.109889][T17105] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1222.141836][T17119] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:04 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f140000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:04 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)=ANY=[@ANYBLOB="080000000100000002400000000000007c7c9f3e560052d0a8776290f2d186c0dc9c059e671ef6b02a875802b3c69365414002f01571d104639c363ff97ee3bd7196a3811faaea5381e3362dd7ece472067e3d0277e9a4f901b6548ff0a78236eb130cc63a15938c4157ba9a65e2ed7eb2b31ed074f02381f1dabdb1ba5252b69e7ee2025b897d100c65a350bcbc7c19aea0d0f8f00a306f60f2"], 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) fallocate(r0, 0x0, 0x100, 0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x242, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}, {@fscache='fscache'}, {@afid={'afid', 0x3d, 0xad4}}], [{@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise_type='appraise_type=imasig'}, {@fsname={'fsname', 0x3d, ')$@G!$'}}, {@hash='hash'}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000180)=""/88) 06:04:04 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x492000) flock(0xffffffffffffffff, 0x6) 06:04:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1222.847068][T17155] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1222.860915][T17156] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:04 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x12000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:04 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x88004}, 0x1) flock(r0, 0x3) [ 1222.914468][T17165] loop2: detected capacity change from 0 to 131456 [ 1222.933012][T17165] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:04 executing program 5: set_mempolicy(0x0, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1222.981700][T17188] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1223.019341][T17195] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:05 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x18000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:05 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000240)) 06:04:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) 06:04:05 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f180000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:05 executing program 5: set_mempolicy(0x0, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:05 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:05 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX=0x0], 0x0) 06:04:05 executing program 5: set_mempolicy(0x0, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:05 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1223.739878][T17210] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1223.767919][T17216] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:05 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x182b1b00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:05 executing program 5: set_mempolicy(0x1, 0x0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:05 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000010000000248140000000000"], 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x9) ftruncate(r0, 0x8) fallocate(r0, 0x18, 0x1010, 0x10000) ioctl$FITHAW(r0, 0xc0045878) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r3, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x2775d000) sendfile(r1, r2, 0x0, 0x80000001) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4009095}, 0x80) fgetxattr(r1, &(0x7f0000000380)=@random={'trusted.', '\x00'}, &(0x7f00000003c0)=""/191, 0xbf) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x4c842, 0x82) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000001) fallocate(0xffffffffffffffff, 0x30, 0x0, 0x20) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x21ba}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x5, 0x0, 0xfffff531, 0xfffffffe, 0x9, 0x772d}) [ 1223.823898][T17226] loop2: detected capacity change from 0 to 131456 [ 1223.857003][T17232] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:05 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1223.869892][T17226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:05 executing program 5: set_mempolicy(0x1, 0x0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1223.922813][T17251] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) 06:04:06 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8000, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0xf8}, 0xf) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@reiserfs_4={0x10, 0x4, {0x8001, 0x81, 0x800, 0x6}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) 06:04:06 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:06 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f190000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:06 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x25000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:06 executing program 5: set_mempolicy(0x1, 0x0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:06 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4001}}, 0x309000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x81, 0x6, 0x0, @private0={0xfc, 0x0, [], 0x1}, @mcast2, 0x700, 0x40, 0xff, 0xe73}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x2f, 0x7, 0x4, 0xfffffffa, 0x5c, @empty, @mcast2, 0x700, 0x20, 0x8, 0x6}}) 06:04:06 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0), 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1224.631736][T17282] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1224.643967][T17283] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:06 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:06 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x27000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:06 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0), 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1224.687123][T17289] loop2: detected capacity change from 0 to 131456 06:04:06 executing program 0: read(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x9, 0x7, 0x1, 0x80, 0x0, 0x0, 0x85001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0x4}, 0x40021, 0x8001, 0xffffe7ec, 0x5, 0x1ff, 0xd, 0x613c}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x5437, &(0x7f0000000100)) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x517) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f00000000c0)={0x3, 0x1, 0x1, 0x1d, 0x1cb, &(0x7f0000000f80)}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000002c0)={r3, 0x0, 0x5}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000240)={0x2, 0x6, @start={r3, 0x1, "4d39189bf5884414fa87f9a5869042d5a69735bf3abe89e8cc60ddcf31b2650d8bd58f400f14c6beae4bd6dca670f1a4630ff4f83b87df68a01da90e79237cf791f7b75a3a16c9598d09aa87acacac1822bfa13df790056c703ec4347d9c27b732d9fc210689542eb12c8d0fd81945acabf5e8bfd06696a3c94e9e8e2b545ef781b311d6a8b2375c75c1a1b699f08250bfca318dad5c303aeae5fa0d2b6fc44d8c14d239dcff0142a36cf41765664db5fd319525737a49c0de19c0b6ab443487e7a6cbe46ebeb5b5fa1978436cb3c7e090cba1fca799f625170b4962e039cc0f713f0fef69e31669e3f103bcddc411b710aeef27ddbd6b5d6c2e3877f7a4a1088cf1c68457e15c16948a90bb7b03dc4de9ec50d6c56b58b0a916c76f5239c13597bb3543e22afa441f4287fa3e34a0dfed767c3b97535af069287e842e4796ef87e72558e8cc385259dccbac284132a2ab2f4e7773210de890720e33f6004d67b65f1b234b89516c449070935c2eb24ee9fc58d7982ffb9aee88799c2a5981a125d015e7a686c32abbe12c19faefac1dac1a25dee422912a220eb6cbc00fc01776506049e85612fb4cd8e67ee31cb304fd5afa23d2b7bed14b5a63b917d5dabd8cb1f6b988ceb0ef84ad1a08a5540a4e4bfb5f56e1319c38f0787b0fb3d4a390b4a9eca2764924592d82e26e47ba9db2011567ebd06625359c0cebcb1f6380f560bbe965246224fdfa7e7529493c645a243b56c46368c4342f7c1d67905c15aa68ecd1de4a4f4f048ac33536318e8d881f96694d41dd33110a4b34e7b946d680f5cf7d9c7b8d568b2520247f763a8f2463f50bb78b6a01a7c37aebc9a1140980dcc4cb4300b8350770891794c338d5f4feeb1e56e1d5711dcd225fa146c13c3d23783c67eb5eeda9e6c4651f0c1cfee5b019c8506f86ef644865efa63d76e63e15647460f5ae7b1f33cc9662776c27e2d6178e58d9edc28339100d641b0ad4e6defa7b01ac26e670fdd9693cd25d8185b27570c7201f717a3e233b455c034b8b025dd20809198e12f9922e15003624625ae53799ffa6840f3e28900edd0c082ac6d34f44ead2a9c8a2902451326c187e27f6e15ddf6d220216ba34216d7dc44b01f01fc583181dbf4da8bf891a573ca6750ae9797841746610d326166ffe9dffc72f85d231574616030d0811accbfee62fe5f65b5ae7ebc3b95e971c2418431c162a796398e7819631543567cd7e61f26c2d9b90ae5868df1d37f86ace856e6caf342e0180db19915f551d9ed5e7a029b39fb4d3bb464f57d264499466a30b85ccd672b01da7d84940131118e86f19926e63dbe88102970b9141008c63c5d4de42f23ad9e22b5a0714aaa46992cd58bde337d11431a8c1d5f97675949554ffa655c75c174de4492d5b6b3c36340920f8a5283bb72a9a43b020b05dee25c14d9ab3", "ef12a1d0e724a7732b91100684c1f721fba9a3f422064a3c260c29a52f1daf692b905da7b030c3d97577cc0f47614600f620510d37c9b8735dbee8f14f62ac5fc39c9aa2e9f3426ed10db19f142e1a5638568de223eed927742dc15ea2194a1bbd7fe4e5412f87e159897268576cefddcb5d1cb0124ebbc5c4e229cadf3e0be5e0fe5df2a3536d29f85c0d8e0318816fdeb4ed24dd933cd7e5ac6896f9313c2f6112d17478f6e4c0cef6c76f7bd88dfd1a1e4e9bc32cdcb32cf1eff55739a7dba0b70a0794a8d6c4c538b9d3c960481bae54482729744cea2bce0a7c361f9fbd731f51a8995f9582b0933ab0c01d18cb9d3d4892924a1179ac1b47355c1a883165a6b9777db613d55b4da324b14114090db296dbe1f489c27e0077ef0000c3a448e21aa0cd8c421c9aa891dc1aa0e4cf899d0a9bcaeb761fddc103cf6c1a69501a85324ba066dfb8a9812142d786fbac0647abd8ca7a01207ad937777364720528e21f307248400b948dabe85483762989e082fba07651f55e1dd57458763273f5e81d6a58d2d7d61d01899fd4c8b7842754656dc6c96add28965bd4be88ebb3c724cbf132e5a5e9a2e492977bf08c97174cd58bd2101209d81112dd99f53b26e59bb480f0f893a9328ee35b23f2ca56340896283f8c12a54a34a46907f762c9f7c8e6a87c461321d1cbf8be1ceaf35a03c277230ce3f3fc25bc19068632ce3573758688a5a463f9e8c5aeb59938030a33fdb24bb97d43769a302be616ec1af63467b9ab85855e1b90d7be5b27d114f44c09b714174320d871994fe7a477b732b4d3ca65060722ab28fdb9a9f7a8d294ea5d3553fbfd550479f61cd4fe06a5ebbea81793fd72ed2db28bdfbc396a856eafcbd64236bd846617be32da0604eda2b9e688322c634fc76d2b2d1dd59f77289347f654341145359506f2d80181287b21c2f64e6109383bead9357003d9df24095506efdf0b0d1a16644234b1c50c4916fb3216bb5af16b924b7a6a4a88d20784024cc6ceacbe588c5b58c3992fd8aa5491fb397cadb60b0157c2a7828967407ee5ecc33cb91ef9ce3962f2ef581a556cd537ef1af1a3c1f3ec2b95df1430e953c11149b5825790ebd8bb05ef4014a4c13e0447f48f4208af5403f4475f08c94a7c8fe21fd17089ea9b53f47ac68e87139db15173adc5d06cab4a0f05bc43546ffc655db01880cec6703316c480d9383aa4d4b20a0fd3b1511d1bce16120fb39d5583f88886346c2d2a7bdfbdfc0ece51c96ca4ce79da1e0ea99a4d7aead4763fc382521ea2822d8871fb99373fef91aec69296ba13caeeb7b649ca5ffd2d2ec2cc9ac1c96329b2142251a8d475de0706288579372016a1a7c14c97b827ef952a98f7d28c0c4f508867c0d2e07cfcc8efa16ca599a682db5915fa2d8c51b300ffb9ffc203e68adfa15d2b80306d3c2f65"}, [0xd0, 0x6, 0x11600, 0x0, 0x80000001, 0x8, 0x5, 0x2, 0x4, 0x9c, 0x1, 0x69a1, 0x7fffffff, 0x2, 0x59, 0xa54a, 0x1, 0x9, 0x2, 0x6, 0x1e5, 0xffffffffffff8001, 0x9, 0x0, 0x6, 0x9, 0x0, 0x200, 0xadf, 0x80000001, 0x800, 0x20, 0x1211c940, 0x200, 0x6, 0x7ff, 0x7, 0x9, 0x400, 0x0, 0xd61d, 0x7, 0x80, 0x2, 0x5, 0xffff, 0x1f, 0xffffffffffffff01, 0x9, 0xffffffff, 0x1, 0x8dfe, 0xffffffff, 0x8001, 0x6, 0x5, 0x2, 0x7, 0x1, 0x5, 0x8, 0x1, 0x5e, 0x71a1]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) [ 1224.743974][T17289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1224.767482][T17305] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1224.791872][T17316] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) 06:04:07 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4003}}, 0x0) 06:04:07 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x28000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:07 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:07 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f1b0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:07 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0), 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:07 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000001410e7ec300000002400000000000425ad3e91e6807005904bfe49ffd00000000000000"], 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 06:04:07 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1225.524431][T17333] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1225.547876][T17338] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:07 executing program 0: semctl$IPC_RMID(0x0, 0x0, 0x0) 06:04:07 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3f000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:07 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1225.588412][T17344] loop2: detected capacity change from 0 to 131456 06:04:07 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1225.640324][T17344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1225.664867][T17361] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1225.697049][T17367] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:08 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x0, 0xf0, 0x80000001, 0x4, 0x8000}}, 0xc02) clone3(&(0x7f0000000300)={0x80, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x13}, &(0x7f0000000100)=""/249, 0xf9, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}]}}) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x5, r5}], {0x10, 0xc}, {0x20, 0x4}}, 0x3c, 0x0) 06:04:08 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:08 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f220000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:08 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:08 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x48000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:08 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:08 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:08 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1226.384527][T17380] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1226.400651][T17386] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:08 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="eca599720c70a7cf00400000000032c77cf41fc6334b00000000"], 0x0) [ 1226.453182][T17392] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1226.464726][T17391] loop2: detected capacity change from 0 to 131456 [ 1226.481843][T17391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:08 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:08 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x60000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1226.520274][T17406] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:09 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:09 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f250000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:09 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:09 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x68000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140)='TIPC\x00', r2) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x400c0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20004800) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000001000000024000000004"], 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r5, 0x8, 0x1000, 0x10000) fallocate(r5, 0x9, 0xef, 0x1) 06:04:09 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x800000, &(0x7f0000000240)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose='cache=loose'}, {@msize={'msize'}}, {@msize={'msize', 0x3d, 0x800}}], [{@hash='hash'}, {@subj_type={'subj_type', 0x3d, ']^@'}}, {@smackfsfloor={'smackfsfloor'}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@obj_type={'obj_type', 0x3d, '\x96$\x85'}}, {@uid_eq={'uid', 0x3d, r1}}]}}) 06:04:09 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:09 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1227.277250][T17430] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1227.307656][T17442] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:09 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:09 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:09 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000021000000024000000000000048b735f042dfd92dd07a32a38232e195a7eef3a318e5cbeb2f1ea21d1aa4670896d83bd6bea9f803699f0373a1d0ae2f523c6201565c4984324e41162b8c"], 0x0) flock(0xffffffffffffffff, 0x8) [ 1227.385340][T17453] loop2: detected capacity change from 0 to 131456 [ 1227.404341][T17463] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1227.419831][T17453] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1227.432473][T17465] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 06:04:10 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6d410000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=@fuse_with_parent={0x18, 0x82, {{0x2b6a, 0x100, 0x803}, {0x2, 0x6, 0x8001}}}, 0x40) flock(0xffffffffffffffff, 0x0) 06:04:10 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f2e0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:10 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) 06:04:10 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x74000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1228.165914][T17484] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1228.181674][T17490] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0xd, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x1) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) 06:04:10 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1228.250406][T17493] loop2: detected capacity change from 0 to 131456 [ 1228.287839][T17510] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1228.319556][T17493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1228.345972][T17524] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 06:04:10 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=ANY=[@ANYBLOB="080000000200fd000240000200000000"], 0x0) 06:04:10 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:10 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f480000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:11 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) ftruncate(0xffffffffffffffff, 0x10000) 06:04:11 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1229.060473][T17544] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1229.086962][T17550] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:11 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x1c803) 06:04:11 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1229.113885][T17554] loop2: detected capacity change from 0 to 131456 [ 1229.175700][T17554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1229.197728][T17571] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1229.216686][T17575] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:11 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4002}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x7, 0x7fff8000}) 06:04:11 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 06:04:11 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f4c0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:11 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff070000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:11 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="4f638b0892ee81ea4d3fe62ef3d82524021f19c07eb983c286bee3aadcf958214ca398b07238153ce447cafac46bafd8b0c6edc0e0a2eedbf741ce18a3e52f324e2ebfac7de91de6284100000000c9368c56eb841c35c6e1c1e36d30e624c27d1e887e5ba2af02d41f1393000000000000"], 0x0) [ 1229.929733][T17590] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1229.956937][T17595] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:11 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1230.004505][T17603] loop2: detected capacity change from 0 to 131456 [ 1230.035810][T17603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:12 executing program 0: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x4003}}, 0x0) 06:04:12 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1230.050715][T17617] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.070602][T17618] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.127063][T17625] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.158136][T17631] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.176444][T17634] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 06:04:12 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff8c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f5e0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:12 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bed7dc9dc16fd5f0"}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "8bebeb894f74c3"}) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000003c0)={r11, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000013c0)={0x0, r15, "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", "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"}) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r16, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "7b0ba22c04ee6c212ef8fa089d6d0c593291ee"}) 06:04:12 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) fcntl$setown(r1, 0x8, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/491]) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x5010, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400201, 0x8d) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 1230.823451][T17654] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.839094][T17655] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:12 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfffffff6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1230.888586][T17663] loop2: detected capacity change from 0 to 131456 [ 1230.899392][T17668] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.920518][T17663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:12 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1230.931236][T17665] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:12 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfffffffe}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) fcntl$setown(r1, 0x8, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/491]) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x5010, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400201, 0x8d) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 1230.973301][T17679] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1230.988618][T17681] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:13 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f5f0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:13 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:13 executing program 5 (fault-call:2 fault-nth:0): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:13 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) fcntl$setown(r1, 0x8, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x8, 0x1000, 0x10000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/491]) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x5010, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400201, 0x8d) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 1231.674938][T17701] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1231.687061][T17702] FAULT_INJECTION: forcing a failure. [ 1231.687061][T17702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.700195][T17702] CPU: 0 PID: 17702 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1231.710358][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.720636][T17702] Call Trace: [ 1231.723921][T17702] dump_stack+0x137/0x19d [ 1231.728266][T17702] should_fail+0x23c/0x250 [ 1231.732701][T17702] should_fail_usercopy+0x16/0x20 [ 1231.737744][T17702] _copy_from_user+0x1c/0xd0 [ 1231.742406][T17702] perf_copy_attr+0x14c/0x5c0 [ 1231.747187][T17702] __se_sys_perf_event_open+0xb6/0x25c0 [ 1231.752804][T17702] ? vfs_write+0x50c/0x770 [ 1231.757233][T17702] ? __fget_light+0x21b/0x260 [ 1231.761926][T17702] __x64_sys_perf_event_open+0x63/0x70 [ 1231.768017][T17702] do_syscall_64+0x34/0x50 [ 1231.772475][T17702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1231.778396][T17702] RIP: 0033:0x466459 [ 1231.782296][T17702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.803407][T17702] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1231.811847][T17702] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 06:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1231.819827][T17702] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1231.827820][T17702] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.835807][T17702] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1231.845614][T17702] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 06:04:13 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:13 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:13 executing program 5 (fault-call:2 fault-nth:1): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1231.869017][T17714] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1231.881310][T17710] loop2: detected capacity change from 0 to 131456 06:04:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r1, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1231.942624][T17710] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1231.947826][T17725] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1231.976640][T17729] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) mmap(&(0x7f0000051000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0xfffff000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 06:04:13 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.006132][T17730] FAULT_INJECTION: forcing a failure. [ 1232.006132][T17730] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.020474][T17730] CPU: 1 PID: 17730 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1232.030675][T17730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.040735][T17730] Call Trace: [ 1232.044120][T17730] dump_stack+0x137/0x19d [ 1232.048461][T17730] should_fail+0x23c/0x250 [ 1232.053048][T17730] __should_failslab+0x81/0x90 [ 1232.057814][T17730] ? perf_event_alloc+0x95/0x14d0 [ 1232.062856][T17730] should_failslab+0x5/0x20 [ 1232.067401][T17730] kmem_cache_alloc_trace+0x49/0x320 [ 1232.072689][T17730] ? avc_has_perm+0xc8/0x150 [ 1232.077300][T17730] perf_event_alloc+0x95/0x14d0 [ 1232.082170][T17730] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1232.087815][T17730] ? __fget_light+0x21b/0x260 [ 1232.092506][T17730] __x64_sys_perf_event_open+0x63/0x70 [ 1232.097995][T17730] do_syscall_64+0x34/0x50 [ 1232.102425][T17730] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1232.108332][T17730] RIP: 0033:0x466459 [ 1232.112228][T17730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.132016][T17730] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1232.140452][T17730] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1232.148428][T17730] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 06:04:14 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f600000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:14 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.156405][T17730] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.164459][T17730] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1232.172504][T17730] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 06:04:14 executing program 5 (fault-call:2 fault-nth:2): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.246390][T17743] FAULT_INJECTION: forcing a failure. [ 1232.246390][T17743] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.247579][T17739] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.259872][T17743] CPU: 0 PID: 17743 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1232.284603][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.288253][T17746] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.295372][T17743] Call Trace: [ 1232.295387][T17743] dump_stack+0x137/0x19d [ 1232.315025][T17743] should_fail+0x23c/0x250 [ 1232.319775][T17743] __should_failslab+0x81/0x90 [ 1232.324836][T17743] ? perf_uprobe_init+0x45/0x140 [ 1232.329896][T17743] should_failslab+0x5/0x20 [ 1232.336224][T17743] __kmalloc_track_caller+0x64/0x360 06:04:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:14 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:14 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.341140][T17748] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.342189][T17743] ? strnlen_user+0x137/0x1c0 [ 1232.360287][T17743] strndup_user+0x73/0x120 [ 1232.364745][T17743] perf_uprobe_init+0x45/0x140 [ 1232.389009][T17743] perf_uprobe_event_init+0xde/0x140 06:04:14 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.394356][T17743] perf_try_init_event+0x21a/0x400 [ 1232.399658][T17743] perf_event_alloc+0x7eb/0x14d0 [ 1232.399864][T17749] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.404840][T17743] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1232.435704][T17743] ? __fget_light+0x21b/0x260 [ 1232.475127][T17743] __x64_sys_perf_event_open+0x63/0x70 [ 1232.483560][T17743] do_syscall_64+0x34/0x50 [ 1232.488240][T17743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1232.494199][T17743] RIP: 0033:0x466459 [ 1232.499039][T17759] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.501574][T17743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.501602][T17743] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 06:04:14 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x20000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:14 executing program 5 (fault-call:2 fault-nth:3): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.501623][T17743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1232.501636][T17743] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1232.523126][T17761] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.545315][T17743] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.545405][T17743] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1232.545417][T17743] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1232.575991][T17762] loop2: detected capacity change from 0 to 131456 [ 1232.675982][T17771] FAULT_INJECTION: forcing a failure. [ 1232.675982][T17771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.692274][T17771] CPU: 1 PID: 17771 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 06:04:14 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1232.702645][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.712701][T17771] Call Trace: [ 1232.715984][T17771] dump_stack+0x137/0x19d [ 1232.720533][T17771] should_fail+0x23c/0x250 [ 1232.724960][T17771] should_fail_usercopy+0x16/0x20 [ 1232.729990][T17771] _copy_from_user+0x1c/0xd0 [ 1232.734685][T17771] strndup_user+0xb0/0x120 [ 1232.739114][T17771] perf_uprobe_init+0x45/0x140 [ 1232.743906][T17771] perf_uprobe_event_init+0xde/0x140 [ 1232.749261][T17771] perf_try_init_event+0x21a/0x400 [ 1232.754370][T17771] perf_event_alloc+0x7eb/0x14d0 [ 1232.754592][T17762] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1232.759400][T17771] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1232.775566][T17771] ? __fget_light+0x21b/0x260 [ 1232.780290][T17771] __x64_sys_perf_event_open+0x63/0x70 [ 1232.785855][T17771] do_syscall_64+0x34/0x50 [ 1232.790279][T17771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1232.796187][T17771] RIP: 0033:0x466459 [ 1232.800081][T17771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.819688][T17771] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1232.822779][T17779] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1232.828112][T17771] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1232.828130][T17771] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1232.828142][T17771] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.828168][T17771] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1232.828180][T17771] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1232.842432][T17783] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:14 executing program 5 (fault-call:2 fault-nth:4): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:14 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x40000100000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x1000, 0x10000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 06:04:14 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f610000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:14 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1233.076728][T17802] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.089633][T17803] FAULT_INJECTION: forcing a failure. [ 1233.089633][T17803] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.102684][T17803] CPU: 0 PID: 17803 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1233.113438][T17803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.123959][T17803] Call Trace: [ 1233.127428][T17803] dump_stack+0x137/0x19d [ 1233.132033][T17803] should_fail+0x23c/0x250 [ 1233.136545][T17803] ? getname_kernel+0x37/0x1d0 [ 1233.148131][T17803] __should_failslab+0x81/0x90 [ 1233.153615][T17803] should_failslab+0x5/0x20 [ 1233.158136][T17803] kmem_cache_alloc+0x46/0x300 [ 1233.162960][T17803] getname_kernel+0x37/0x1d0 [ 1233.167883][T17803] kern_path+0x19/0x40 06:04:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:15 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:15 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1233.172196][T17803] create_local_trace_uprobe+0x3f/0x3c0 [ 1233.178016][T17803] perf_uprobe_init+0xbe/0x140 [ 1233.182851][T17803] perf_uprobe_event_init+0xde/0x140 [ 1233.188762][T17803] perf_try_init_event+0x21a/0x400 [ 1233.194582][T17803] perf_event_alloc+0x7eb/0x14d0 [ 1233.200267][T17803] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1233.206808][T17803] ? __fget_light+0x21b/0x260 [ 1233.211604][T17803] __x64_sys_perf_event_open+0x63/0x70 [ 1233.217267][T17803] do_syscall_64+0x34/0x50 [ 1233.221879][T17803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1233.227797][T17803] RIP: 0033:0x466459 [ 1233.231710][T17803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1233.238659][T17820] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.251480][T17803] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 06:04:15 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1233.251510][T17803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1233.251523][T17803] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1233.251535][T17803] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.251548][T17803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1233.266779][T17822] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.271150][T17803] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 06:04:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:15 executing program 5 (fault-call:2 fault-nth:5): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:15 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1233.332089][T17806] loop2: detected capacity change from 0 to 131456 [ 1233.362523][T17831] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.403620][T17806] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1233.419885][T17839] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.437248][T17841] FAULT_INJECTION: forcing a failure. [ 1233.437248][T17841] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.450003][T17841] CPU: 1 PID: 17841 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1233.460165][T17841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.470224][T17841] Call Trace: [ 1233.473510][T17841] dump_stack+0x137/0x19d [ 1233.477884][T17841] should_fail+0x23c/0x250 [ 1233.482374][T17841] __should_failslab+0x81/0x90 [ 1233.487182][T17841] ? proc_self_get_link+0x90/0x100 [ 1233.492318][T17841] should_failslab+0x5/0x20 [ 1233.496839][T17841] kmem_cache_alloc_trace+0x49/0x320 [ 1233.502243][T17841] proc_self_get_link+0x90/0x100 [ 1233.507189][T17841] ? proc_setup_self+0x1d0/0x1d0 [ 1233.512133][T17841] step_into+0x9b4/0xec0 [ 1233.516567][T17841] walk_component+0x190/0x350 [ 1233.521282][T17841] link_path_walk+0x4ba/0x780 [ 1233.525958][T17841] path_lookupat+0x7b/0x570 [ 1233.530608][T17841] filename_lookup+0xff/0x390 [ 1233.535568][T17841] ? getname_kernel+0x37/0x1d0 [ 1233.540346][T17841] ? kmem_cache_alloc+0x1af/0x300 [ 1233.545387][T17841] ? getname_kernel+0x37/0x1d0 [ 1233.550172][T17841] kern_path+0x2e/0x40 [ 1233.554239][T17841] create_local_trace_uprobe+0x3f/0x3c0 [ 1233.559839][T17841] perf_uprobe_init+0xbe/0x140 [ 1233.565241][T17841] perf_uprobe_event_init+0xde/0x140 [ 1233.570656][T17841] perf_try_init_event+0x21a/0x400 [ 1233.575770][T17841] perf_event_alloc+0x7eb/0x14d0 [ 1233.580757][T17841] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1233.586651][T17841] ? __fget_light+0x21b/0x260 [ 1233.591561][T17841] __x64_sys_perf_event_open+0x63/0x70 [ 1233.597473][T17841] do_syscall_64+0x34/0x50 [ 1233.602116][T17841] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1233.608119][T17841] RIP: 0033:0x466459 [ 1233.612030][T17841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1233.632810][T17841] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1233.641560][T17841] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1233.649744][T17841] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1233.657937][T17841] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.667676][T17841] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1233.675790][T17841] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 06:04:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:15 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:15 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f620000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:15 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:15 executing program 5 (fault-call:2 fault-nth:6): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1233.974631][T17859] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.993130][T17862] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1233.999852][T17863] FAULT_INJECTION: forcing a failure. [ 1233.999852][T17863] name failslab, interval 1, probability 0, space 0, times 0 06:04:15 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:16 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1234.018599][T17863] CPU: 1 PID: 17863 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1234.028930][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.040317][T17863] Call Trace: [ 1234.043933][T17863] dump_stack+0x137/0x19d [ 1234.048709][T17863] should_fail+0x23c/0x250 [ 1234.053511][T17863] __should_failslab+0x81/0x90 [ 1234.058536][T17863] ? create_local_trace_uprobe+0xa9/0x3c0 [ 1234.064734][T17863] should_failslab+0x5/0x20 [ 1234.069370][T17863] kmem_cache_alloc_trace+0x49/0x320 06:04:16 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1234.074758][T17863] create_local_trace_uprobe+0xa9/0x3c0 [ 1234.080707][T17863] perf_uprobe_init+0xbe/0x140 [ 1234.085734][T17863] perf_uprobe_event_init+0xde/0x140 [ 1234.091124][T17863] perf_try_init_event+0x21a/0x400 [ 1234.096327][T17863] perf_event_alloc+0x7eb/0x14d0 [ 1234.101280][T17863] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1234.106959][T17863] ? __fget_light+0x21b/0x260 [ 1234.111651][T17863] __x64_sys_perf_event_open+0x63/0x70 [ 1234.117117][T17863] do_syscall_64+0x34/0x50 [ 1234.120499][T17876] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1234.121563][T17863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1234.121594][T17863] RIP: 0033:0x466459 [ 1234.142344][T17863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.142517][T17867] loop2: detected capacity change from 0 to 131456 06:04:16 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:16 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1234.162549][T17863] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1234.162579][T17863] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1234.162591][T17863] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1234.162601][T17863] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.162613][T17863] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1234.162624][T17863] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1234.162689][T17863] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1234.240797][T17867] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1234.251774][T17887] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1234.272801][T17889] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:16 executing program 5 (fault-call:2 fault-nth:7): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:16 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:16 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:16 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:16 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f660000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1234.874924][T17908] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1234.889710][T17913] FAULT_INJECTION: forcing a failure. [ 1234.889710][T17913] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.902360][T17913] CPU: 0 PID: 17913 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1234.912587][T17913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.922667][T17913] Call Trace: [ 1234.925948][T17913] dump_stack+0x137/0x19d [ 1234.928964][T17908] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1234.930281][T17913] should_fail+0x23c/0x250 [ 1234.930307][T17913] __should_failslab+0x81/0x90 [ 1234.930331][T17913] ? kzalloc+0x16/0x20 [ 1234.930348][T17913] should_failslab+0x5/0x20 [ 1234.959190][T17913] __kmalloc+0x66/0x360 [ 1234.963352][T17913] kzalloc+0x16/0x20 [ 1234.967336][T17913] trace_probe_init+0x41/0x250 06:04:16 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:16 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1234.972178][T17913] create_local_trace_uprobe+0xd1/0x3c0 [ 1234.977786][T17913] perf_uprobe_init+0xbe/0x140 [ 1234.982572][T17913] perf_uprobe_event_init+0xde/0x140 [ 1234.987864][T17913] perf_try_init_event+0x21a/0x400 [ 1234.993061][T17913] perf_event_alloc+0x7eb/0x14d0 [ 1234.998005][T17913] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1235.003656][T17913] ? __fget_light+0x21b/0x260 [ 1235.008340][T17913] __x64_sys_perf_event_open+0x63/0x70 [ 1235.013858][T17913] do_syscall_64+0x34/0x50 [ 1235.018284][T17913] entry_SYSCALL_64_after_hwframe+0x44/0xae 06:04:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1235.024179][T17913] RIP: 0033:0x466459 [ 1235.028066][T17913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.047674][T17913] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1235.056095][T17913] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1235.064082][T17913] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 06:04:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1235.072154][T17913] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.080127][T17913] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1235.088441][T17913] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1235.096469][T17913] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1235.103654][T17910] loop2: detected capacity change from 0 to 131456 [ 1235.110932][T17922] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:17 executing program 5 (fault-call:2 fault-nth:8): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:17 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1235.134022][T17928] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1235.135808][T17910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1235.211792][T17942] FAULT_INJECTION: forcing a failure. [ 1235.211792][T17942] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.224476][T17942] CPU: 0 PID: 17942 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1235.235728][T17942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.245789][T17942] Call Trace: [ 1235.249065][T17942] dump_stack+0x137/0x19d [ 1235.253506][T17942] should_fail+0x23c/0x250 [ 1235.257982][T17942] __should_failslab+0x81/0x90 [ 1235.262788][T17942] ? trace_probe_init+0x1bd/0x250 [ 1235.267876][T17942] should_failslab+0x5/0x20 [ 1235.272463][T17942] __kmalloc_track_caller+0x64/0x360 [ 1235.277730][T17942] ? __kmalloc+0x1e0/0x360 [ 1235.282162][T17942] ? kzalloc+0x16/0x20 [ 1235.286210][T17942] kstrdup+0x31/0x70 [ 1235.290179][T17942] trace_probe_init+0x1bd/0x250 [ 1235.295019][T17942] create_local_trace_uprobe+0xd1/0x3c0 [ 1235.300630][T17942] perf_uprobe_init+0xbe/0x140 [ 1235.305380][T17942] perf_uprobe_event_init+0xde/0x140 [ 1235.310667][T17942] perf_try_init_event+0x21a/0x400 [ 1235.315854][T17942] perf_event_alloc+0x7eb/0x14d0 [ 1235.320789][T17942] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1235.326441][T17942] ? __fget_light+0x21b/0x260 [ 1235.331109][T17942] __x64_sys_perf_event_open+0x63/0x70 [ 1235.336575][T17942] do_syscall_64+0x34/0x50 [ 1235.340983][T17942] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1235.346977][T17942] RIP: 0033:0x466459 [ 1235.350869][T17942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.370549][T17942] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1235.378968][T17942] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1235.386925][T17942] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1235.394881][T17942] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.402924][T17942] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1235.410880][T17942] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1235.419628][T17942] trace_uprobe: Failed to allocate trace_uprobe.(-12) 06:04:17 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:17 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:17 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f670000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:17 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:17 executing program 5 (fault-call:2 fault-nth:9): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1235.765890][T17959] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1235.771509][T17961] FAULT_INJECTION: forcing a failure. [ 1235.771509][T17961] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.787991][T17965] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1235.790286][T17961] CPU: 1 PID: 17961 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 06:04:17 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1235.811419][T17961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.821473][T17961] Call Trace: [ 1235.824754][T17961] dump_stack+0x137/0x19d [ 1235.829085][T17961] should_fail+0x23c/0x250 [ 1235.833501][T17961] __should_failslab+0x81/0x90 [ 1235.838269][T17961] ? trace_probe_init+0x1e1/0x250 [ 1235.843307][T17961] should_failslab+0x5/0x20 [ 1235.847864][T17961] __kmalloc_track_caller+0x64/0x360 [ 1235.853229][T17961] ? trace_probe_init+0x1bd/0x250 [ 1235.854011][T17969] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1235.858282][T17961] kstrdup+0x31/0x70 [ 1235.858310][T17961] trace_probe_init+0x1e1/0x250 [ 1235.858330][T17961] create_local_trace_uprobe+0xd1/0x3c0 [ 1235.883941][T17961] perf_uprobe_init+0xbe/0x140 [ 1235.888719][T17961] perf_uprobe_event_init+0xde/0x140 [ 1235.894036][T17961] perf_try_init_event+0x21a/0x400 [ 1235.899155][T17961] perf_event_alloc+0x7eb/0x14d0 [ 1235.904128][T17961] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1235.909828][T17961] ? __fget_light+0x21b/0x260 06:04:17 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:17 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:17 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1235.915393][T17961] __x64_sys_perf_event_open+0x63/0x70 [ 1235.920883][T17961] do_syscall_64+0x34/0x50 [ 1235.925307][T17961] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1235.931215][T17961] RIP: 0033:0x466459 [ 1235.935140][T17961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.954772][T17961] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1235.963195][T17961] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1235.966367][T17977] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1235.971196][T17961] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1235.971215][T17961] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.971227][T17961] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1235.971238][T17961] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 06:04:17 executing program 5 (fault-call:2 fault-nth:10): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140), 0x0, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1235.971338][T17961] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1235.987049][T17980] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1236.032195][T17979] loop2: detected capacity change from 0 to 131456 [ 1236.065186][T17979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1236.085860][T17996] FAULT_INJECTION: forcing a failure. [ 1236.085860][T17996] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.098615][T17996] CPU: 1 PID: 17996 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 06:04:18 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140), 0x0, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1236.108782][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.118850][T17996] Call Trace: [ 1236.122136][T17996] dump_stack+0x137/0x19d [ 1236.126472][T17996] should_fail+0x23c/0x250 [ 1236.130891][T17996] __should_failslab+0x81/0x90 [ 1236.135665][T17996] ? create_local_trace_uprobe+0x235/0x3c0 [ 1236.141483][T17996] should_failslab+0x5/0x20 [ 1236.146000][T17996] __kmalloc_track_caller+0x64/0x360 [ 1236.151301][T17996] ? kstrdup+0x4c/0x70 [ 1236.155388][T17996] kstrdup+0x31/0x70 [ 1236.159318][T17996] create_local_trace_uprobe+0x235/0x3c0 [ 1236.164961][T17996] perf_uprobe_init+0xbe/0x140 [ 1236.169747][T17996] perf_uprobe_event_init+0xde/0x140 [ 1236.175043][T17996] perf_try_init_event+0x21a/0x400 [ 1236.180159][T17996] perf_event_alloc+0x7eb/0x14d0 [ 1236.185146][T17996] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1236.190900][T17996] ? __fget_light+0x21b/0x260 [ 1236.195587][T17996] __x64_sys_perf_event_open+0x63/0x70 [ 1236.201061][T17996] do_syscall_64+0x34/0x50 [ 1236.204609][T18001] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1236.205483][T17996] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.222388][T17996] RIP: 0033:0x466459 [ 1236.225937][T18003] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1236.226353][T17996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.256963][T17996] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1236.265382][T17996] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1236.273348][T17996] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1236.281305][T17996] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.289271][T17996] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1236.297229][T17996] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 06:04:18 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f680000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:18 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140), 0x0, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:18 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:18 executing program 5 (fault-call:2 fault-nth:11): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1236.380768][T18014] FAULT_INJECTION: forcing a failure. [ 1236.380768][T18014] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.388858][T18018] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1236.393410][T18014] CPU: 1 PID: 18014 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1236.407912][T18019] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1236.414559][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.414574][T18014] Call Trace: [ 1236.414582][T18014] dump_stack+0x137/0x19d [ 1236.443291][T18014] should_fail+0x23c/0x250 [ 1236.448688][T18014] __should_failslab+0x81/0x90 [ 1236.453464][T18014] ? traceprobe_set_print_fmt+0x45/0xa0 [ 1236.459056][T18014] should_failslab+0x5/0x20 [ 1236.463558][T18014] __kmalloc+0x66/0x360 [ 1236.467711][T18014] traceprobe_set_print_fmt+0x45/0xa0 [ 1236.473107][T18014] create_local_trace_uprobe+0x2eb/0x3c0 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1236.478794][T18014] perf_uprobe_init+0xbe/0x140 [ 1236.483566][T18014] perf_uprobe_event_init+0xde/0x140 [ 1236.488852][T18014] perf_try_init_event+0x21a/0x400 [ 1236.493971][T18014] perf_event_alloc+0x7eb/0x14d0 [ 1236.498988][T18014] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1236.504628][T18014] ? __fget_light+0x21b/0x260 [ 1236.509309][T18014] __x64_sys_perf_event_open+0x63/0x70 [ 1236.514767][T18014] do_syscall_64+0x34/0x50 [ 1236.519356][T18014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.525299][T18014] RIP: 0033:0x466459 [ 1236.529224][T18014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.548817][T18014] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1236.557274][T18014] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1236.565317][T18014] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1236.573303][T18014] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.581272][T18014] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1236.589263][T18014] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1236.614763][T18031] loop2: detected capacity change from 0 to 131456 [ 1236.626930][T18031] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:18 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:18 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 06:04:18 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:18 executing program 5 (fault-call:2 fault-nth:12): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:18 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f6c0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:18 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 1236.887361][T18051] FAULT_INJECTION: forcing a failure. [ 1236.887361][T18051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1236.900627][T18051] CPU: 1 PID: 18051 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1236.910791][T18051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.920849][T18051] Call Trace: [ 1236.924131][T18051] dump_stack+0x137/0x19d [ 1236.928490][T18051] should_fail+0x23c/0x250 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1236.932937][T18051] __alloc_pages_nodemask+0xe7/0x310 [ 1236.938299][T18051] probe_event_enable+0x421/0x7d0 [ 1236.943327][T18051] ? __uprobe_trace_func+0x420/0x420 [ 1236.948622][T18051] trace_uprobe_register+0x88/0x410 [ 1236.953835][T18051] ? find_next_bit+0xa7/0xf0 [ 1236.958429][T18051] ? cpumask_next+0xc/0x30 [ 1236.962910][T18051] perf_trace_event_init+0x34e/0x790 [ 1236.968340][T18051] perf_uprobe_init+0xf5/0x140 [ 1236.973126][T18051] perf_uprobe_event_init+0xde/0x140 [ 1236.978408][T18051] perf_try_init_event+0x21a/0x400 06:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1236.983624][T18051] perf_event_alloc+0x7eb/0x14d0 [ 1236.988654][T18051] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1236.994296][T18051] ? __fget_light+0x21b/0x260 [ 1236.998981][T18051] __x64_sys_perf_event_open+0x63/0x70 [ 1237.004533][T18051] do_syscall_64+0x34/0x50 [ 1237.009065][T18051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1237.015012][T18051] RIP: 0033:0x466459 06:04:18 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1237.018910][T18051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.038519][T18051] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1237.046962][T18051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1237.055002][T18051] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1237.062978][T18051] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.071041][T18051] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1237.079079][T18051] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1237.093494][T18075] loop2: detected capacity change from 0 to 131456 [ 1237.127537][T18075] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:19 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:19 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:19 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:19 executing program 5 (fault-call:2 fault-nth:13): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1237.138964][T18059] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1237.157649][T18087] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:19 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f740000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1237.221061][T18095] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1237.250126][T18097] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:19 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1237.270855][T18101] FAULT_INJECTION: forcing a failure. [ 1237.270855][T18101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1237.284125][T18101] CPU: 1 PID: 18101 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1237.294282][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.304342][T18101] Call Trace: [ 1237.307640][T18101] dump_stack+0x137/0x19d [ 1237.311998][T18101] should_fail+0x23c/0x250 [ 1237.316532][T18101] __alloc_pages_nodemask+0xe7/0x310 [ 1237.321878][T18101] probe_event_enable+0x421/0x7d0 [ 1237.326956][T18101] ? __uprobe_trace_func+0x420/0x420 [ 1237.332307][T18101] trace_uprobe_register+0x88/0x410 [ 1237.337514][T18101] ? find_next_bit+0xa7/0xf0 [ 1237.342110][T18101] ? cpumask_next+0xc/0x30 [ 1237.346528][T18101] perf_trace_event_init+0x34e/0x790 [ 1237.351829][T18101] perf_uprobe_init+0xf5/0x140 [ 1237.356667][T18101] perf_uprobe_event_init+0xde/0x140 [ 1237.362123][T18101] perf_try_init_event+0x21a/0x400 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1237.367246][T18101] perf_event_alloc+0x7eb/0x14d0 [ 1237.372259][T18101] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1237.377909][T18101] ? __fget_light+0x21b/0x260 [ 1237.382598][T18101] __x64_sys_perf_event_open+0x63/0x70 [ 1237.388145][T18101] do_syscall_64+0x34/0x50 [ 1237.392563][T18101] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1237.398462][T18101] RIP: 0033:0x466459 [ 1237.402466][T18101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.422076][T18101] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1237.430496][T18101] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1237.438599][T18101] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1237.446660][T18101] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.447590][T18116] loop2: detected capacity change from 0 to 131456 [ 1237.454681][T18101] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 06:04:19 executing program 5 (fault-call:2 fault-nth:14): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1237.454698][T18101] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1237.477283][T18113] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1237.514207][T18129] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1237.526572][T18116] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:19 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:19 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1237.561580][T18135] FAULT_INJECTION: forcing a failure. [ 1237.561580][T18135] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.574236][T18135] CPU: 1 PID: 18135 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1237.584456][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.594519][T18135] Call Trace: [ 1237.597801][T18135] dump_stack+0x137/0x19d [ 1237.602133][T18135] should_fail+0x23c/0x250 [ 1237.606549][T18135] __should_failslab+0x81/0x90 06:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 1237.611359][T18135] ? __uprobe_register+0xf8/0x8a0 [ 1237.616405][T18135] should_failslab+0x5/0x20 [ 1237.620989][T18135] kmem_cache_alloc_trace+0x49/0x320 [ 1237.626278][T18135] ? get_page_from_freelist+0x4fe/0x7b0 [ 1237.631831][T18135] __uprobe_register+0xf8/0x8a0 [ 1237.636757][T18135] ? __alloc_pages_nodemask+0x17a/0x310 [ 1237.642311][T18135] uprobe_register_refctr+0x29/0x40 [ 1237.647576][T18135] probe_event_enable+0x2be/0x7d0 [ 1237.652779][T18135] ? __uprobe_trace_func+0x420/0x420 [ 1237.658136][T18135] trace_uprobe_register+0x88/0x410 [ 1237.663359][T18135] ? find_next_bit+0xa7/0xf0 [ 1237.668026][T18135] ? cpumask_next+0xc/0x30 [ 1237.672480][T18135] perf_trace_event_init+0x34e/0x790 [ 1237.677775][T18135] perf_uprobe_init+0xf5/0x140 [ 1237.682555][T18135] perf_uprobe_event_init+0xde/0x140 [ 1237.687864][T18135] perf_try_init_event+0x21a/0x400 [ 1237.692979][T18135] perf_event_alloc+0x7eb/0x14d0 [ 1237.697928][T18135] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1237.703596][T18135] ? __fget_light+0x21b/0x260 [ 1237.708278][T18135] __x64_sys_perf_event_open+0x63/0x70 [ 1237.713751][T18135] do_syscall_64+0x34/0x50 [ 1237.718246][T18135] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1237.724234][T18135] RIP: 0033:0x466459 [ 1237.728273][T18135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.748161][T18135] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1237.756573][T18135] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1237.764703][T18135] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1237.772702][T18135] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.780697][T18135] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1237.791706][T18135] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1237.807088][T18149] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1237.824515][T18152] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:20 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 06:04:20 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f7a0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:20 executing program 5 (fault-call:2 fault-nth:15): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:20 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:20 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1238.130253][T18164] FAULT_INJECTION: forcing a failure. [ 1238.130253][T18164] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.139801][T18171] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1238.142986][T18164] CPU: 1 PID: 18164 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1238.164134][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:04:20 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xff07}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 1238.170109][T18174] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1238.174214][T18164] Call Trace: [ 1238.174226][T18164] dump_stack+0x137/0x19d [ 1238.174249][T18164] should_fail+0x23c/0x250 [ 1238.197239][T18164] __should_failslab+0x81/0x90 [ 1238.202010][T18164] ? selinux_perf_event_alloc+0x31/0xc0 [ 1238.207644][T18164] should_failslab+0x5/0x20 [ 1238.212176][T18164] kmem_cache_alloc_trace+0x49/0x320 [ 1238.217461][T18164] selinux_perf_event_alloc+0x31/0xc0 [ 1238.222893][T18164] security_perf_event_alloc+0x3f/0x90 06:04:20 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1238.228356][T18164] perf_event_alloc+0xcd6/0x14d0 [ 1238.233361][T18164] __se_sys_perf_event_open+0x5c9/0x25c0 [ 1238.239037][T18164] ? __fget_light+0x21b/0x260 [ 1238.243770][T18164] __x64_sys_perf_event_open+0x63/0x70 [ 1238.249236][T18164] do_syscall_64+0x34/0x50 [ 1238.253778][T18164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.259827][T18164] RIP: 0033:0x466459 [ 1238.263718][T18164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.281629][T18177] loop2: detected capacity change from 0 to 131456 [ 1238.283326][T18164] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1238.283350][T18164] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1238.306184][T18164] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1238.312916][T18183] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 06:04:20 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1238.314203][T18164] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.314219][T18164] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1238.314233][T18164] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1238.350433][T18177] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1238.355734][T18194] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:04:20 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:20 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940), 0x0, 0x0) 06:04:20 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f9b0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:20 executing program 5 (fault-call:2 fault-nth:16): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:20 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940), 0x0, 0x0) [ 1239.049074][T18217] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.062177][T18222] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.076951][T18216] FAULT_INJECTION: forcing a failure. [ 1239.076951][T18216] name failslab, interval 1, probability 0, space 0, times 0 06:04:21 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:21 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1b2b18}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940), 0x0, 0x0) [ 1239.089696][T18216] CPU: 1 PID: 18216 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1239.099888][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.109943][T18216] Call Trace: [ 1239.113240][T18216] dump_stack+0x137/0x19d [ 1239.117641][T18216] should_fail+0x23c/0x250 [ 1239.122055][T18216] ? __d_alloc+0x36/0x370 [ 1239.126437][T18216] __should_failslab+0x81/0x90 [ 1239.131208][T18216] should_failslab+0x5/0x20 [ 1239.135717][T18216] kmem_cache_alloc+0x46/0x300 [ 1239.140481][T18216] __d_alloc+0x36/0x370 [ 1239.144643][T18216] d_alloc_pseudo+0x1a/0x50 06:04:21 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x182b1b0000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1239.149168][T18216] alloc_file_pseudo+0x63/0x130 [ 1239.154030][T18216] ? security_perf_event_open+0x7c/0x90 [ 1239.159581][T18216] anon_inode_getfile+0x9f/0x120 [ 1239.164527][T18216] __se_sys_perf_event_open+0xb20/0x25c0 [ 1239.170171][T18216] ? __fget_light+0x21b/0x260 [ 1239.174911][T18216] __x64_sys_perf_event_open+0x63/0x70 [ 1239.175399][T18227] loop2: detected capacity change from 0 to 131456 [ 1239.180378][T18216] do_syscall_64+0x34/0x50 [ 1239.180405][T18216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1239.180431][T18216] RIP: 0033:0x466459 [ 1239.201065][T18216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1239.220787][T18216] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1239.229228][T18216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1239.237205][T18216] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 06:04:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f740000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1239.243654][T18227] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1239.245177][T18216] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1239.245194][T18216] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1239.245207][T18216] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1239.262385][T18234] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:21 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1239.291976][T18241] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.360157][T18252] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.372292][T18253] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.446365][ T1764] ================================================================== [ 1239.454469][ T1764] BUG: KCSAN: data-race in lru_add_drain_all / lru_cache_add_inactive_or_unevictable [ 1239.463914][ T1764] [ 1239.466232][ T1764] write to 0xffff888237c26468 of 1 bytes by task 18255 on cpu 0: [ 1239.473922][ T1764] lru_cache_add_inactive_or_unevictable+0xa9/0x250 [ 1239.480551][ T1764] wp_page_copy+0x7f8/0x10c0 [ 1239.485125][ T1764] do_wp_page+0x5a8/0xba0 [ 1239.489453][ T1764] handle_mm_fault+0xb31/0x1a70 [ 1239.494283][ T1764] do_user_addr_fault+0x60c/0xc00 [ 1239.499306][ T1764] exc_page_fault+0x94/0x230 [ 1239.503986][ T1764] asm_exc_page_fault+0x1e/0x30 [ 1239.508816][ T1764] [ 1239.511119][ T1764] read to 0xffff888237c26468 of 1 bytes by task 1764 on cpu 1: [ 1239.518636][ T1764] lru_add_drain_all+0x108/0x3c0 [ 1239.523593][ T1764] invalidate_bdev+0x50/0x70 [ 1239.528166][ T1764] ext4_put_super+0x5d0/0x8e0 [ 1239.532831][ T1764] generic_shutdown_super+0xd5/0x220 [ 1239.538122][ T1764] kill_block_super+0x4a/0x90 [ 1239.542796][ T1764] deactivate_locked_super+0x65/0xd0 [ 1239.548066][ T1764] deactivate_super+0x85/0x90 [ 1239.552746][ T1764] cleanup_mnt+0x277/0x2e0 [ 1239.557185][ T1764] __cleanup_mnt+0x15/0x20 [ 1239.561587][ T1764] task_work_run+0xae/0x130 [ 1239.566092][ T1764] exit_to_user_mode_prepare+0x151/0x170 [ 1239.571739][ T1764] syscall_exit_to_user_mode+0x20/0x40 [ 1239.577180][ T1764] do_syscall_64+0x40/0x50 [ 1239.581576][ T1764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1239.587470][ T1764] [ 1239.589772][ T1764] Reported by Kernel Concurrency Sanitizer on: [ 1239.595907][ T1764] CPU: 1 PID: 1764 Comm: syz-executor.2 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1239.605962][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.616018][ T1764] ================================================================== 06:04:21 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 06:04:21 executing program 5 (fault-call:2 fault-nth:17): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:21 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f740000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:21 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:21 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f9c0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:21 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1004000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1239.932760][T18269] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.945298][T18275] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1239.959695][T18268] FAULT_INJECTION: forcing a failure. [ 1239.959695][T18268] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.972369][T18268] CPU: 0 PID: 18268 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 06:04:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f740000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:21 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2500000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1239.982622][T18268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.992733][T18268] Call Trace: [ 1239.996037][T18268] dump_stack+0x137/0x19d [ 1240.000420][T18268] should_fail+0x23c/0x250 [ 1240.004864][T18268] ? __alloc_file+0x2e/0x1a0 [ 1240.009524][T18268] __should_failslab+0x81/0x90 [ 1240.014304][T18268] should_failslab+0x5/0x20 [ 1240.018827][T18268] kmem_cache_alloc+0x46/0x300 [ 1240.023657][T18268] ? __d_alloc+0x36/0x370 [ 1240.027992][T18268] __alloc_file+0x2e/0x1a0 [ 1240.032419][T18268] alloc_empty_file+0xcd/0x1c0 [ 1240.037191][T18268] alloc_file+0x3a/0x280 [ 1240.041438][T18268] alloc_file_pseudo+0xe2/0x130 [ 1240.046317][T18268] anon_inode_getfile+0x9f/0x120 [ 1240.051283][T18268] __se_sys_perf_event_open+0xb20/0x25c0 [ 1240.055292][T18280] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1240.056952][T18268] ? __fget_light+0x21b/0x260 [ 1240.072641][T18268] __x64_sys_perf_event_open+0x63/0x70 [ 1240.078114][T18268] do_syscall_64+0x34/0x50 06:04:22 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1240.082535][T18268] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1240.088431][T18268] RIP: 0033:0x466459 [ 1240.092093][T18284] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1240.092345][T18268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1240.092365][T18268] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 06:04:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:22 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1240.111565][T18270] loop2: detected capacity change from 0 to 131456 [ 1240.123070][T18268] ORIG_RAX: 000000000000012a [ 1240.123084][T18268] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1240.123098][T18268] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1240.123110][T18268] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1240.123120][T18268] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1240.123132][T18268] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1240.185501][T18270] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1240.206895][T18297] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1240.221670][T18303] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:22 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 06:04:22 executing program 5 (fault-call:2 fault-nth:18): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:22 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f9d0000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:04:22 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:04:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3f00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1240.816982][T18318] FAULT_INJECTION: forcing a failure. [ 1240.816982][T18318] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.829672][T18318] CPU: 0 PID: 18318 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1240.840344][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.850533][T18318] Call Trace: [ 1240.853820][T18318] dump_stack+0x137/0x19d [ 1240.858161][T18318] should_fail+0x23c/0x250 06:04:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x2, 0x0}}], 0x1, 0x0) [ 1240.862583][T18318] ? security_file_alloc+0x30/0x190 [ 1240.868045][T18318] __should_failslab+0x81/0x90 [ 1240.872914][T18318] should_failslab+0x5/0x20 [ 1240.877431][T18318] kmem_cache_alloc+0x46/0x300 [ 1240.882204][T18318] ? __alloc_file+0x2e/0x1a0 [ 1240.887134][T18318] security_file_alloc+0x30/0x190 [ 1240.892219][T18318] __alloc_file+0x83/0x1a0 [ 1240.896664][T18318] alloc_empty_file+0xcd/0x1c0 [ 1240.901454][T18318] alloc_file+0x3a/0x280 [ 1240.905758][T18318] alloc_file_pseudo+0xe2/0x130 [ 1240.910615][T18318] anon_inode_getfile+0x9f/0x120 06:04:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1240.915639][T18318] __se_sys_perf_event_open+0xb20/0x25c0 [ 1240.921322][T18318] ? __fget_light+0x21b/0x260 [ 1240.926077][T18318] __x64_sys_perf_event_open+0x63/0x70 [ 1240.931549][T18318] do_syscall_64+0x34/0x50 [ 1240.936137][T18318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1240.942119][T18318] RIP: 0033:0x466459 [ 1240.946007][T18318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:04:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x3, 0x0}}], 0x1, 0x0) 06:04:22 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1240.965613][T18318] RSP: 002b:00007f3ad9d2a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1240.974048][T18318] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1240.982023][T18318] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 1240.990034][T18318] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1240.998012][T18318] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1241.005987][T18318] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1241.017610][T18324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1241.035706][T18351] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1241.081439][T18345] loop2: detected capacity change from 0 to 131456 [ 1241.094071][T18345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:23 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 06:04:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0) 06:04:23 executing program 5 (fault-call:2 fault-nth:19): set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:23 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:23 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:23 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f6e0100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x8, 0x0}}], 0x1, 0x0) 06:04:23 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1241.710277][T18380] FAULT_INJECTION: forcing a failure. [ 1241.710277][T18380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.723568][T18380] CPU: 0 PID: 18380 Comm: syz-executor.5 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 1241.733856][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.744027][T18380] Call Trace: [ 1241.747757][T18380] dump_stack+0x137/0x19d [ 1241.752144][T18380] should_fail+0x23c/0x250 [ 1241.756567][T18380] should_fail_usercopy+0x16/0x20 [ 1241.761617][T18380] _copy_to_user+0x1c/0x90 [ 1241.764343][T18385] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1241.766059][T18380] simple_read_from_buffer+0xab/0x120 [ 1241.766115][T18380] proc_fail_nth_read+0xf6/0x140 [ 1241.787833][T18380] ? rw_verify_area+0x136/0x250 [ 1241.792696][T18380] ? proc_fault_inject_write+0x200/0x200 [ 1241.798369][T18380] vfs_read+0x154/0x5d0 [ 1241.802536][T18380] ? __fget_light+0x21b/0x260 06:04:23 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1241.805019][T18391] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1241.807307][T18380] ? __cond_resched+0x11/0x40 [ 1241.807332][T18380] ksys_read+0xce/0x180 [ 1241.807387][T18380] __x64_sys_read+0x3e/0x50 [ 1241.831760][T18380] do_syscall_64+0x34/0x50 [ 1241.836184][T18380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1241.842083][T18380] RIP: 0033:0x4191dc [ 1241.845974][T18380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1241.864499][T18399] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1241.865592][T18380] RSP: 002b:00007f3ad9d2a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1241.865616][T18380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004191dc [ 1241.865629][T18380] RDX: 000000000000000f RSI: 00007f3ad9d2a1e0 RDI: 0000000000000004 [ 1241.882932][T18387] loop2: detected capacity change from 0 to 131456 06:04:23 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:23 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1241.885077][T18380] RBP: 00007f3ad9d2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.885094][T18380] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1241.923693][T18380] R13: 00007ffe6e2bbd4f R14: 00007f3ad9d2a300 R15: 0000000000022000 [ 1241.926745][T18401] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x30, 0x0}}], 0x1, 0x0) [ 1241.963711][T18387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1241.991093][T18410] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1242.011050][T18417] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x60, 0x0}}], 0x1, 0x0) 06:04:24 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:24 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:24 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:24 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6d41000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:24 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f6f0100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x300, 0x0}}], 0x1, 0x0) 06:04:24 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:24 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1242.571546][T18438] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1242.604730][T18445] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:24 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:24 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x3000, 0x0}}], 0x1, 0x0) [ 1242.650135][T18453] loop2: detected capacity change from 0 to 131456 [ 1242.681771][T18453] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:24 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1242.724563][T18473] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1242.773174][T18480] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:25 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:25 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x6000, 0x0}}], 0x1, 0x0) 06:04:25 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fd60100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:25 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:25 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:25 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xff00, 0x0}}], 0x1, 0x0) 06:04:25 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:25 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1243.509695][T18506] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1243.547843][T18516] loop2: detected capacity change from 0 to 131456 06:04:25 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:25 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1243.574743][T18516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1243.589010][T18528] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:26 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:26 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:26 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:26 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fd80100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:26 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff07000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x40000, 0x0}}], 0x1, 0x0) 06:04:26 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x1000000, 0x0}}], 0x1, 0x0) 06:04:26 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:26 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x200001f0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1244.378729][T18551] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1244.402673][T18560] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:26 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x2000000, 0x0}}], 0x1, 0x0) [ 1244.462516][T18577] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1244.463163][T18563] loop2: detected capacity change from 0 to 131456 [ 1244.497919][T18579] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:26 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1244.530508][T18563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1244.593047][T18595] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1244.624067][T18597] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:27 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:27 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x3000000, 0x0}}], 0x1, 0x0) 06:04:27 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffffffffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:27 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fd90100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:27 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x8000000, 0x0}}], 0x1, 0x0) 06:04:27 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:27 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1245.286609][T18615] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1245.301136][T18618] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:27 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1245.359158][T18624] loop2: detected capacity change from 0 to 131456 [ 1245.388387][T18624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x30000000, 0x0}}], 0x1, 0x0) 06:04:27 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1245.392216][T18639] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1245.425142][T18641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1245.440105][T18643] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1245.465472][T18647] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:28 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fe30100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:28 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x60000000, 0x0}}], 0x1, 0x0) 06:04:28 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x7ffffff7, 0x0}}], 0x1, 0x0) 06:04:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x97ffffff, 0x0}}], 0x1, 0x0) [ 1246.179669][T18669] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.195599][T18670] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.207434][T18679] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:28 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1246.223937][T18680] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.236768][T18682] loop2: detected capacity change from 0 to 131456 06:04:28 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xeffdffff, 0x0}}], 0x1, 0x0) 06:04:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fe50100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1246.298897][T18682] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1246.311751][T18695] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.330016][T18700] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.375769][T18708] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.405339][T18717] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1246.494356][T18723] loop2: detected capacity change from 0 to 131456 [ 1246.509507][T18723] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 06:04:28 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 06:04:28 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xf7ffff7f, 0x0}}], 0x1, 0x0) 06:04:28 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:28 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fe60100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xff000000, 0x0}}], 0x1, 0x0) [ 1247.072250][T18740] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1247.084840][T18739] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1247.098634][T18749] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:29 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:29 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:29 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x182b1b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1247.115891][T18746] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xfffffdef, 0x0}}], 0x1, 0x0) 06:04:29 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1247.177381][T18753] loop2: detected capacity change from 0 to 131456 [ 1247.196492][T18753] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1247.208572][T18767] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1247.233939][T18761] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1247.263928][T18773] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1247.278915][T18777] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:29 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 06:04:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xffffff7f, 0x0}}], 0x1, 0x0) 06:04:29 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:29 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:29 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000fe70100010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xffffff97, 0x0}}], 0x1, 0x0) 06:04:29 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1247.967023][T18800] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1247.980993][T18799] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0) 06:04:30 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1248.010169][T18807] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.025724][T18814] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.046769][T18821] loop2: detected capacity change from 0 to 131456 06:04:30 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x25000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:30 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1248.082579][T18821] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1248.146385][T18836] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.157905][T18840] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.171857][T18843] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.197826][T18846] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:30 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0xa) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 06:04:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0) 06:04:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f040200010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000200000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 06:04:30 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:30 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:30 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:04:30 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1248.839520][T18863] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.854641][T18864] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1248.875819][T18871] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 06:04:30 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1248.892477][T18873] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x404c045) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0) 06:04:30 executing program 1: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1248.936978][T18879] loop2: detected capacity change from 0 to 131456 [ 1248.970072][T18888] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 06:04:30 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0xd7, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1248.989892][T18879] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1249.013026][T18895] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1249.031300][T18896] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4 [ 1249.054600][T18903] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0xc ref_ctr_offset(new): 0x4