140 [ 206.119313][T18067] perf_try_init_event+0x21a/0x400 [ 206.124487][T18067] perf_event_alloc+0xa60/0x1790 [ 206.129412][T18067] __se_sys_perf_event_open+0x5db/0x2810 [ 206.135036][T18067] __x64_sys_perf_event_open+0x63/0x70 [ 206.140556][T18067] do_syscall_64+0x44/0xa0 [ 206.144998][T18067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.151003][T18067] RIP: 0033:0x7f4f170eca79 [ 206.155403][T18067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 206.175253][T18067] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 206.183648][T18067] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x11, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 206.191625][T18067] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 206.199592][T18067] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 206.207547][T18067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 206.215579][T18067] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x12, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 206.251827][T18065] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.259839][T18065] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 206.278545][T18065] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.286673][T18065] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:31 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4028800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) 16:18:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x12, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 206.308408][T18065] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.316438][T18065] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 206.329144][T18065] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.337176][T18065] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x7f, 0x0, 0x94, 0x0, 0x9, 0x40040, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdd6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4, 0x3, 0x7fffffff, 0x4, 0x800, 0x3, 0x200, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x1) unshare(0x40000400) r3 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x2000043, 0x5) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000080)=0x54) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) 16:18:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 29) [ 206.376068][T18077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.384098][T18077] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 206.396369][T18077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.404428][T18077] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 206.437219][T18077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.445263][T18077] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 206.456825][T18077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.464877][T18077] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 206.503154][T18090] FAULT_INJECTION: forcing a failure. [ 206.503154][T18090] name failslab, interval 1, probability 0, space 0, times 0 [ 206.515815][T18090] CPU: 0 PID: 18090 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 206.524581][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.534652][T18090] Call Trace: [ 206.537929][T18090] dump_stack_lvl+0xd6/0x122 [ 206.542519][T18090] dump_stack+0x11/0x1b [ 206.546677][T18090] should_fail+0x23c/0x250 16:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x21, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 206.551135][T18090] __should_failslab+0x81/0x90 [ 206.555908][T18090] ? register_for_each_vma+0x372/0x890 [ 206.561363][T18090] should_failslab+0x5/0x20 [ 206.565865][T18090] kmem_cache_alloc_trace+0x52/0x320 [ 206.571185][T18090] ? register_for_each_vma+0x372/0x890 [ 206.576640][T18090] ? vma_interval_tree_iter_next+0x24c/0x280 [ 206.582630][T18090] register_for_each_vma+0x372/0x890 [ 206.587919][T18090] __uprobe_register+0x404/0x8b0 [ 206.592854][T18090] uprobe_register_refctr+0x29/0x40 [ 206.598052][T18090] probe_event_enable+0x2be/0x7d0 [ 206.603076][T18090] ? __uprobe_trace_func+0x440/0x440 [ 206.608396][T18090] trace_uprobe_register+0x88/0x410 [ 206.613665][T18090] perf_trace_event_init+0x34e/0x790 [ 206.618933][T18090] perf_uprobe_init+0xf5/0x140 [ 206.623675][T18090] perf_uprobe_event_init+0xde/0x140 [ 206.628964][T18090] perf_try_init_event+0x21a/0x400 [ 206.634069][T18090] perf_event_alloc+0xa60/0x1790 [ 206.639128][T18090] __se_sys_perf_event_open+0x5db/0x2810 [ 206.644766][T18090] __x64_sys_perf_event_open+0x63/0x70 [ 206.650300][T18090] do_syscall_64+0x44/0xa0 [ 206.654733][T18090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.660693][T18090] RIP: 0033:0x7f4f170eca79 [ 206.665178][T18090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 206.684852][T18090] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 206.693339][T18090] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="e7fd6065483d8c531ccd30eb94d07c675673fdc198844b28781299b1005095d6ececcf3909b6d830d32c2c112edc832d1068e58787ed4941a0a45a7e14b6b9817e551908ed6dbbd9", 0x48}, {&(0x7f0000000340)="60ac0efab7c66631ab178140722af445e398fa00e4973a6bc4f174e85b13aaf61cdca9edbe9032951c580d38ffe60273de397e02b2069175d57d9df2d10253c32f795e88e1096fd5596333085883077c77e6570d87ac8af2d54677485b2cd7c2e3df4acc05de09882a1b2481da1a32604321d848664a2218149f148699e8e4f4a730640a28233d1e6fd5dac0d7e1b5a8489d6f9e7de45345d0fd17764c56f6fa76e78581da567c84c226134236a1fc0a05f81e1edfa4acf4b858d717fe1bc5823af8d946ace918d854a9", 0xca}, {&(0x7f0000000440)="0c5a2c3b930c28de0bffd0fd248051dd33a559de9acf8a524cf4f04cf0facbca4a80e6a7124bfcac3e73a01cd8ee460387515028e20eaab00c03d88af9aeecfb88d018e359d5da9297465509e82013e0df1b6680d7439e01028c30846040dba6051264333494d0ad429f83c209422147d791aaf14e02cbf9ae97084e02daf9bdfa85a32dc538f1fc", 0x88}, {&(0x7f0000000500)="a053471585b49cda9842efcb39c8b402e4bc7073adbb6aff6d55a44d53efc6d767e097a0428c1fcbb0337eccebbae31509774b69494ab8af99ec37826d603b8f24125b4435a74b1c7200986c4fd3fca601be4b1a7ad932a42b4e1301af2a115dbc5f706eed104fa374874f5a653872f0ba0dd02fb6c907f220a8759c7cbe9a12937000efefc980816dbf9c087e324ad217278ea44087949b664c538d259a868a7216a5caf861a4f3376dafd8a63cf553dcf4d7d63b155c139d1f8c5692ad6d6821c7860109c8b8bbadb3d63c30059408ee8e34498cf379cc66d16c1a8beed2c53a3a3870aed33224", 0xe8}], 0x4, 0x7, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x18340, 0x3) sendfile(r2, r1, 0x0, 0x100000002) [ 206.701304][T18090] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 206.709304][T18090] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 206.717264][T18090] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 206.725290][T18090] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x22, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 30) 16:18:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x13, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) 16:18:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r6, 0xfffffe98, 0x0}, 0x0) r7 = syz_io_uring_setup(0x1fda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r7, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0xb825) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 206.846474][T18109] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.854514][T18109] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 206.866646][T18109] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.874803][T18109] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0xa8, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xa8}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r5, 0xfffffe98, 0x0}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="07000000190693cc1ec36cff01478f000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r6, r1, 0x0, 0x100000002) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000003c0)=0xfff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 206.917811][T18109] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.925836][T18109] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 206.956956][T18109] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.965068][T18109] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 206.991846][T18119] FAULT_INJECTION: forcing a failure. [ 206.991846][T18119] name failslab, interval 1, probability 0, space 0, times 0 [ 207.004515][T18119] CPU: 0 PID: 18119 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 207.013284][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.023383][T18119] Call Trace: [ 207.026641][T18119] dump_stack_lvl+0xd6/0x122 [ 207.031242][T18119] dump_stack+0x11/0x1b [ 207.035380][T18119] should_fail+0x23c/0x250 [ 207.039784][T18119] __should_failslab+0x81/0x90 [ 207.044530][T18119] ? register_for_each_vma+0x372/0x890 [ 207.049970][T18119] should_failslab+0x5/0x20 [ 207.054508][T18119] kmem_cache_alloc_trace+0x52/0x320 [ 207.059774][T18119] ? register_for_each_vma+0x372/0x890 [ 207.065257][T18119] ? vma_interval_tree_iter_next+0x263/0x280 [ 207.071339][T18119] register_for_each_vma+0x372/0x890 [ 207.076605][T18119] __uprobe_register+0x404/0x8b0 [ 207.081525][T18119] uprobe_register_refctr+0x29/0x40 [ 207.086706][T18119] probe_event_enable+0x2be/0x7d0 [ 207.091723][T18119] ? __uprobe_trace_func+0x440/0x440 [ 207.097061][T18119] trace_uprobe_register+0x88/0x410 [ 207.102239][T18119] perf_trace_event_init+0x34e/0x790 [ 207.107515][T18119] perf_uprobe_init+0xf5/0x140 [ 207.112335][T18119] perf_uprobe_event_init+0xde/0x140 [ 207.117631][T18119] perf_try_init_event+0x21a/0x400 [ 207.122798][T18119] perf_event_alloc+0xa60/0x1790 [ 207.127721][T18119] __se_sys_perf_event_open+0x5db/0x2810 [ 207.133422][T18119] __x64_sys_perf_event_open+0x63/0x70 [ 207.138910][T18119] do_syscall_64+0x44/0xa0 [ 207.143412][T18119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.149325][T18119] RIP: 0033:0x7f4f170eca79 [ 207.153719][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.173376][T18119] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 207.181858][T18119] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 207.189814][T18119] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 207.197775][T18119] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 207.205765][T18119] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 207.213743][T18119] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x21, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 31) 16:18:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 207.263884][T18130] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.271916][T18130] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 207.290435][T18130] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.298456][T18130] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 207.326673][T18130] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.334692][T18130] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 207.361672][T18130] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.369711][T18130] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 207.393137][T18147] FAULT_INJECTION: forcing a failure. [ 207.393137][T18147] name failslab, interval 1, probability 0, space 0, times 0 [ 207.405775][T18147] CPU: 0 PID: 18147 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 207.414536][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.424627][T18147] Call Trace: [ 207.427901][T18147] dump_stack_lvl+0xd6/0x122 [ 207.432537][T18147] dump_stack+0x11/0x1b [ 207.436698][T18147] should_fail+0x23c/0x250 [ 207.441165][T18147] __should_failslab+0x81/0x90 [ 207.446093][T18147] ? register_for_each_vma+0x372/0x890 [ 207.451536][T18147] should_failslab+0x5/0x20 [ 207.456064][T18147] kmem_cache_alloc_trace+0x52/0x320 [ 207.461432][T18147] ? register_for_each_vma+0x372/0x890 [ 207.466927][T18147] ? vma_interval_tree_iter_next+0x24c/0x280 [ 207.472896][T18147] register_for_each_vma+0x372/0x890 [ 207.478175][T18147] __uprobe_register+0x404/0x8b0 [ 207.483095][T18147] uprobe_register_refctr+0x29/0x40 [ 207.488375][T18147] probe_event_enable+0x2be/0x7d0 [ 207.493555][T18147] ? __uprobe_trace_func+0x440/0x440 [ 207.498820][T18147] trace_uprobe_register+0x88/0x410 [ 207.503999][T18147] perf_trace_event_init+0x34e/0x790 [ 207.509341][T18147] perf_uprobe_init+0xf5/0x140 [ 207.514091][T18147] perf_uprobe_event_init+0xde/0x140 [ 207.519399][T18147] perf_try_init_event+0x21a/0x400 [ 207.524495][T18147] perf_event_alloc+0xa60/0x1790 [ 207.529433][T18147] __se_sys_perf_event_open+0x5db/0x2810 [ 207.535059][T18147] __x64_sys_perf_event_open+0x63/0x70 [ 207.540571][T18147] do_syscall_64+0x44/0xa0 [ 207.545006][T18147] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.550993][T18147] RIP: 0033:0x7f4f170eca79 [ 207.555389][T18147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:18:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 207.574983][T18147] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 207.583375][T18147] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 207.591335][T18147] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 207.599287][T18147] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 207.607239][T18147] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 207.615886][T18147] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x5, 0x5}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) 16:18:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 32) 16:18:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x22, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x200000c9) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') pidfd_getfd(r0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, '%$!\x7f'}, {0x20, '0000:00:10.0\x00'}, {0x20, 'pci\x00'}, {0x20, ')/-\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '[*}\xb1'}, {0x20, '#@,{*:}'}], 0xa, "9d7e29f018dc8b80e01d3555b88abbea969a57115cebd2a330f09b0a9efb53ec743ee042c99e55df3b5282f9097f7a37a9901e86b74a23ae4569f92fda7987ca3ff47a664cbf8d291c286e63a74885c20941884138813fa4a3537224e5c76bff155f1f9d7f4ad05a6b332014432f470839cb7432da64026defa88d6f104a19a3ddb7bc7f278153b8227e880588c1a0aebce6860f2d56e665581015bf7d0b3d70349c99ba11c530661df4c2f1a75bbb108999285e405252fbe29e389a7baa430f9dabdeb45abb5f3f477d43d7458490e5c23c"}, 0x11b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x1001100000002) [ 207.659119][T18144] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.667166][T18144] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 207.680479][T18144] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.688527][T18144] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 207.736764][T18144] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.744870][T18144] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 207.774801][T18144] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.782870][T18144] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 207.804915][T18164] FAULT_INJECTION: forcing a failure. [ 207.804915][T18164] name failslab, interval 1, probability 0, space 0, times 0 [ 207.817558][T18164] CPU: 1 PID: 18164 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 207.826323][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.836449][T18164] Call Trace: [ 207.839764][T18164] dump_stack_lvl+0xd6/0x122 [ 207.844333][T18164] dump_stack+0x11/0x1b [ 207.848481][T18164] should_fail+0x23c/0x250 [ 207.852880][T18164] __should_failslab+0x81/0x90 [ 207.857659][T18164] ? register_for_each_vma+0x372/0x890 [ 207.863103][T18164] should_failslab+0x5/0x20 [ 207.867694][T18164] kmem_cache_alloc_trace+0x52/0x320 [ 207.873105][T18164] ? register_for_each_vma+0x372/0x890 [ 207.878562][T18164] ? vma_interval_tree_iter_next+0x263/0x280 [ 207.884565][T18164] register_for_each_vma+0x372/0x890 [ 207.890020][T18164] __uprobe_register+0x404/0x8b0 [ 207.894941][T18164] uprobe_register_refctr+0x29/0x40 [ 207.900121][T18164] probe_event_enable+0x2be/0x7d0 [ 207.905149][T18164] ? __uprobe_trace_func+0x440/0x440 [ 207.910460][T18164] trace_uprobe_register+0x88/0x410 [ 207.915689][T18164] perf_trace_event_init+0x34e/0x790 [ 207.921036][T18164] perf_uprobe_init+0xf5/0x140 [ 207.925860][T18164] perf_uprobe_event_init+0xde/0x140 [ 207.931130][T18164] perf_try_init_event+0x21a/0x400 [ 207.936221][T18164] perf_event_alloc+0xa60/0x1790 [ 207.941197][T18164] __se_sys_perf_event_open+0x5db/0x2810 [ 207.946820][T18164] __x64_sys_perf_event_open+0x63/0x70 [ 207.952259][T18164] do_syscall_64+0x44/0xa0 [ 207.956711][T18164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.962591][T18164] RIP: 0033:0x7f4f170eca79 [ 207.966994][T18164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.986592][T18164] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 207.994981][T18164] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 208.002938][T18164] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 208.010886][T18164] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.018845][T18164] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 208.026808][T18164] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x32, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 33) [ 208.042804][T18160] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.127892][T18179] FAULT_INJECTION: forcing a failure. [ 208.127892][T18179] name failslab, interval 1, probability 0, space 0, times 0 [ 208.140570][T18179] CPU: 1 PID: 18179 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 208.149413][T18179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.159576][T18179] Call Trace: [ 208.162834][T18179] dump_stack_lvl+0xd6/0x122 [ 208.167497][T18179] dump_stack+0x11/0x1b [ 208.171660][T18179] should_fail+0x23c/0x250 [ 208.176064][T18179] __should_failslab+0x81/0x90 [ 208.180810][T18179] ? register_for_each_vma+0x372/0x890 [ 208.186257][T18179] should_failslab+0x5/0x20 [ 208.190757][T18179] kmem_cache_alloc_trace+0x52/0x320 [ 208.196080][T18179] ? register_for_each_vma+0x372/0x890 [ 208.201522][T18179] ? vma_interval_tree_iter_next+0x24c/0x280 [ 208.207486][T18179] register_for_each_vma+0x372/0x890 [ 208.212805][T18179] __uprobe_register+0x404/0x8b0 [ 208.217901][T18179] uprobe_register_refctr+0x29/0x40 [ 208.223084][T18179] probe_event_enable+0x2be/0x7d0 [ 208.228088][T18179] ? __uprobe_trace_func+0x440/0x440 [ 208.233354][T18179] trace_uprobe_register+0x88/0x410 [ 208.238552][T18179] perf_trace_event_init+0x34e/0x790 [ 208.243886][T18179] perf_uprobe_init+0xf5/0x140 [ 208.248731][T18179] perf_uprobe_event_init+0xde/0x140 [ 208.254004][T18179] perf_try_init_event+0x21a/0x400 [ 208.259172][T18179] perf_event_alloc+0xa60/0x1790 [ 208.264144][T18179] __se_sys_perf_event_open+0x5db/0x2810 [ 208.269847][T18179] __x64_sys_perf_event_open+0x63/0x70 [ 208.275379][T18179] do_syscall_64+0x44/0xa0 [ 208.279851][T18179] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.285743][T18179] RIP: 0033:0x7f4f170eca79 [ 208.290142][T18179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.309738][T18179] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 208.318130][T18179] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 34) [ 208.326092][T18179] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 208.334237][T18179] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.342211][T18179] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 208.350207][T18179] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) (fail_nth: 1) 16:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x48, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 208.381801][T18176] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.389786][T18176] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 208.404503][T18176] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.412539][T18176] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 208.433014][T18176] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.441063][T18176] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 208.455110][T18189] FAULT_INJECTION: forcing a failure. [ 208.455110][T18189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.457380][T18176] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.468190][T18189] CPU: 1 PID: 18189 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 208.476179][T18176] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 208.484879][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.484891][T18189] Call Trace: [ 208.484899][T18189] dump_stack_lvl+0xd6/0x122 [ 208.513781][T18189] dump_stack+0x11/0x1b [ 208.517994][T18189] should_fail+0x23c/0x250 [ 208.522457][T18189] should_fail_usercopy+0x16/0x20 [ 208.527496][T18189] _copy_from_user+0x1c/0xd0 [ 208.532148][T18189] io_submit_one+0x54/0x13b0 [ 208.536717][T18189] ? asm_exc_page_fault+0x1e/0x30 [ 208.541868][T18189] __se_sys_io_submit+0x105/0x270 [ 208.546895][T18189] __x64_sys_io_submit+0x3f/0x50 [ 208.551962][T18189] do_syscall_64+0x44/0xa0 [ 208.556466][T18189] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.562362][T18189] RIP: 0033:0x7fbfe6c25a79 [ 208.566755][T18189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.586341][T18189] RSP: 002b:00007fbfe499d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 208.594744][T18189] RAX: ffffffffffffffda RBX: 00007fbfe6d29f60 RCX: 00007fbfe6c25a79 [ 208.602715][T18189] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 00007fbfe6d0d000 [ 208.610699][T18189] RBP: 00007fbfe499d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.618937][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.626938][T18189] R13: 00007ffdce69fb8f R14: 00007fbfe499d300 R15: 0000000000022000 [ 208.638771][T18183] FAULT_INJECTION: forcing a failure. [ 208.638771][T18183] name failslab, interval 1, probability 0, space 0, times 0 [ 208.651412][T18183] CPU: 0 PID: 18183 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 208.660182][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.670320][T18183] Call Trace: [ 208.673632][T18183] dump_stack_lvl+0xd6/0x122 [ 208.678247][T18183] dump_stack+0x11/0x1b [ 208.682381][T18183] should_fail+0x23c/0x250 [ 208.686834][T18183] __should_failslab+0x81/0x90 [ 208.691639][T18183] ? register_for_each_vma+0x372/0x890 [ 208.697085][T18183] should_failslab+0x5/0x20 [ 208.701704][T18183] kmem_cache_alloc_trace+0x52/0x320 [ 208.707058][T18183] ? register_for_each_vma+0x372/0x890 [ 208.712516][T18183] ? vma_interval_tree_iter_next+0x263/0x280 [ 208.718505][T18183] register_for_each_vma+0x372/0x890 [ 208.723783][T18183] __uprobe_register+0x404/0x8b0 [ 208.728711][T18183] uprobe_register_refctr+0x29/0x40 [ 208.733902][T18183] probe_event_enable+0x2be/0x7d0 [ 208.738915][T18183] ? __uprobe_trace_func+0x440/0x440 [ 208.744177][T18183] trace_uprobe_register+0x88/0x410 [ 208.749355][T18183] perf_trace_event_init+0x34e/0x790 [ 208.754781][T18183] perf_uprobe_init+0xf5/0x140 [ 208.759529][T18183] perf_uprobe_event_init+0xde/0x140 [ 208.764858][T18183] perf_try_init_event+0x21a/0x400 [ 208.770078][T18183] perf_event_alloc+0xa60/0x1790 [ 208.775099][T18183] __se_sys_perf_event_open+0x5db/0x2810 [ 208.780751][T18183] __x64_sys_perf_event_open+0x63/0x70 [ 208.786462][T18183] do_syscall_64+0x44/0xa0 [ 208.790872][T18183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.796748][T18183] RIP: 0033:0x7f4f170eca79 [ 208.801140][T18183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.820800][T18183] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 16:18:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x32, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:34 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1008}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r6, 0xfffffe98, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0xe0000, 0x0) io_submit(0x0, 0x9, &(0x7f0000001cc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x59, r0, &(0x7f0000000080)="750f438889f3c460403790fff07db3289ea9c9cd69ba71932f831e5368698bba13e32bb31fdb", 0x26, 0x800}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x5a, 0xffffffffffffffff, &(0x7f0000000240)="b42a1915db1197a8226f86879d6107ce4c218d603f73adcff5454d0d20de5b2424da531e97adc471360d8af4291de0de6e948e726972829a307c6b7d04e732776a96546132d7aed8a4c75653b3db6bb724fb5871e49701b44a46b940d36914832ae0e4b465a7d36a30b9741b68b8258bb02a74de7e76daa15d65354d6a0ac2b775540bde7d3009c85692b8c33aa9bc098f7f2ac108faa6917e0fa760cce3c0478379ebfcd88eb5097554318c85a76bcdfad45f46ebe0f493011b63e24fa855f3ad24f5", 0xc3, 0x5, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x3b, 0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x1000, 0x20, 0x0, 0x2, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f0000000780)="2d0cc9dd62b5c5cf95c0b06bbb9a03c2190d1ae61d4c2dd6fa0f5283f57e6ea5213deb09ed69e20f57d32d502becfeeb2b4cae0ec9bcafc907312bdb02761b5b212242c8430b51bb93add7b78a4925f7e6f3038753f8e619dfb8", 0x5a, 0x8000}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000800)="e35eb715bc960505bb3e5184811dc2113d36ef5213ada405d0581cbb2154", 0x1e, 0x1, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1a90, r6, &(0x7f0000000880)="d9c19bff6db2a5a4b65fca45b45ffd643839f39341d6bc10c378b6377d204ccb7d27870e5a922e1c51d4c162cace18d9eb05f685dcf3bc001b31dfea469e7cfac6454f8a082979353ba891d0e1eee3e3eb32908026e1a8625058abc0e44a324864ed85c423b41401433c73d1da2395f92ea06cddb57fdd662aea5e034cd163b4dfdf1ce417f0", 0x86, 0x4, 0x0, 0x1, r7}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x5, r8, &(0x7f0000001ac0)="70c8981aef224702c6986ae95fdbb78fc8656d27e8877fada939c12e59a160af8b7048e9900a41f4150c9abf598bd1f7b1e0b876929855d2250f2be2ce430e097a299aca6891673100bc97fffcfb1aee848f48e0637a6e96da78297a67238c144f06d7100902d3bcf0878f488de98dcbe07d905cf2c41281e8549d82d70319e8e740116c86ab0dc786d4209605855cdf3a1f7dc453e25119f85bda27344998ae4bb2284a1c96f36232dd4e71a51dd0ca7da67667f2db9370620fb7bd231d2cf172b66340c484b0cfc0311b19118149845515030ad6e3394197da4699ea646304e03426335d8976dfff01", 0xea, 0x6, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000000a00)="c54b22fae03578f7b07a57a7f0b9470aa68e0861c2", 0x15, 0x8, 0x0, 0x1, r1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x3, 0x3, r2, &(0x7f0000001bc0)="e61e1c20bffd06dc7cd438140fb8c22b256c84f9920ffdadcbe7cc5e3ec9b8497f89555dc98ece06f7b1d0f9a82aa9370e41c6f20f8fcdb72fbaf62212426feaa4fa37817b6e726b64bcd3a062e58358a1ed71ef7cbe0c791fe00835ee2b0167563df3f172fb374054bd12675e60ce77a6158e267dc3a0de78587a26825d1008261311e899efac4b36c7ea1c3d9956873f4c61de6254", 0x96, 0x85dc, 0x0, 0x1, r1}]) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 208.829201][T18183] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 208.837259][T18183] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 208.845311][T18183] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.853367][T18183] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 208.861345][T18183] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) (fail_nth: 2) 16:18:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e7792d709dd9686f53ac6e59ba82928c3960d14453dd98dae4a2bd30056ad3b4a9aa340368e6a8", @ANYRES16=0x0, @ANYBLOB="000000000000000000000a000000080001007063690011aecb613cb841b25830433a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000800010070fd4995bce02ac5d43030303a30303a31302e30000000000800030000000000"], 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0x9, 0x0, [0x80000001, 0x0, 0x455, 0xffffffffffffff9c, 0x2], [0x8, 0x5, 0x185f, 0x3, 0x0, 0x100000001, 0x7ff, 0x200, 0x2, 0x4, 0x9, 0xf, 0x401, 0x2, 0x2, 0x7, 0xcff, 0xd0, 0x8000, 0x80000001, 0x9, 0x1f, 0x0, 0x85, 0x7fff, 0x9, 0x2, 0xffffffffffff3dec, 0x10001, 0x5, 0x200, 0x7f, 0xd3, 0x621, 0x6, 0xd6e2295, 0x4, 0x5, 0x0, 0x2, 0x1e43, 0x5, 0x3, 0xfff, 0x5, 0x7f, 0x10001, 0x0, 0x1, 0x7fff, 0x8, 0x6, 0x47, 0xb458, 0x100000000000007, 0x2, 0xa2, 0x0, 0x1, 0x4, 0x10000, 0x10003, 0x1be6, 0x8, 0x2, 0xffffffffffff9cfd, 0x28f2, 0xbf9, 0x3, 0x4, 0x6, 0x0, 0xaad, 0x0, 0x90c1, 0x3, 0x4, 0x81, 0x401, 0x8, 0xfc4, 0x9, 0x8, 0xdd, 0x5, 0x1, 0x9, 0x800080000, 0x7, 0x7c, 0x4, 0xefff, 0x1, 0x7fffffff, 0xffff, 0x3f, 0x40010000, 0x6, 0x6a5, 0x6, 0x80000000, 0x5, 0x7, 0x5, 0x4, 0x4, 0x32a, 0x10001, 0x9, 0x100, 0x4, 0x0, 0x1000, 0x6, 0x1f, 0x3c, 0x5, 0x10001, 0x1ff, 0x9, 0x8001]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000780)={r1, "983e25db5233d8c5e2d527d4cb927db7"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8042) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 16:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 208.896710][T18182] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.904750][T18182] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 208.922922][T18182] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.930957][T18182] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 208.961894][T18182] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.970070][T18182] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 208.974866][T18207] FAULT_INJECTION: forcing a failure. [ 208.974866][T18207] name failslab, interval 1, probability 0, space 0, times 0 [ 208.993753][T18207] CPU: 0 PID: 18207 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 209.001398][T18182] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.002517][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.002531][T18207] Call Trace: [ 209.002537][T18207] dump_stack_lvl+0xd6/0x122 [ 209.010541][T18182] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 209.020533][T18207] dump_stack+0x11/0x1b [ 209.020555][T18207] should_fail+0x23c/0x250 [ 209.048087][T18207] ? io_submit_one+0xc2/0x13b0 [ 209.052909][T18207] __should_failslab+0x81/0x90 [ 209.057726][T18207] should_failslab+0x5/0x20 [ 209.062236][T18207] kmem_cache_alloc+0x4f/0x300 [ 209.066993][T18207] io_submit_one+0xc2/0x13b0 [ 209.072112][T18207] ? asm_exc_page_fault+0x1e/0x30 [ 209.077188][T18207] __se_sys_io_submit+0x105/0x270 [ 209.082305][T18207] __x64_sys_io_submit+0x3f/0x50 [ 209.087365][T18207] do_syscall_64+0x44/0xa0 [ 209.092230][T18207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.098179][T18207] RIP: 0033:0x7fbfe6c25a79 [ 209.102657][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.105490][T18209] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.122413][T18207] RSP: 002b:00007fbfe499d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 209.122450][T18207] RAX: ffffffffffffffda RBX: 00007fbfe6d29f60 RCX: 00007fbfe6c25a79 [ 209.122462][T18207] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 00007fbfe6d0d000 16:18:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 35) 16:18:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) (fail_nth: 3) [ 209.122473][T18207] RBP: 00007fbfe499d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.164114][T18207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.172070][T18207] R13: 00007ffdce69fb8f R14: 00007fbfe499d300 R15: 0000000000022000 [ 209.193080][T18197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.201139][T18197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 209.213850][T18197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.221871][T18197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 209.350513][T18197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.358559][T18197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 209.359127][T18222] FAULT_INJECTION: forcing a failure. [ 209.359127][T18222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.383019][T18222] CPU: 1 PID: 18222 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 209.389154][T18197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.391786][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.391797][T18222] Call Trace: [ 209.391805][T18222] dump_stack_lvl+0xd6/0x122 [ 209.399756][T18197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 209.409788][T18222] dump_stack+0x11/0x1b [ 209.409807][T18222] should_fail+0x23c/0x250 [ 209.437282][T18222] should_fail_usercopy+0x16/0x20 [ 209.442679][T18222] _copy_to_user+0x1c/0x90 [ 209.447078][T18222] simple_read_from_buffer+0xab/0x120 [ 209.452438][T18222] proc_fail_nth_read+0x10d/0x150 [ 209.457510][T18222] ? proc_fault_inject_write+0x230/0x230 [ 209.463120][T18222] vfs_read+0x1e6/0x750 [ 209.467396][T18222] ? __fget_light+0x21b/0x260 [ 209.472147][T18222] ? __cond_resched+0x11/0x40 [ 209.476875][T18222] ksys_read+0xd9/0x190 [ 209.481034][T18222] __x64_sys_read+0x3e/0x50 [ 209.485529][T18222] do_syscall_64+0x44/0xa0 [ 209.490096][T18222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.496078][T18222] RIP: 0033:0x7fbfe6bd862c [ 209.500581][T18222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 209.520170][T18222] RSP: 002b:00007fbfe499d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.528560][T18222] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fbfe6bd862c [ 209.536706][T18222] RDX: 000000000000000f RSI: 00007fbfe499d1e0 RDI: 0000000000000004 16:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 209.544917][T18222] RBP: 00007fbfe499d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.552873][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.560840][T18222] R13: 00007ffdce69fb8f R14: 00007fbfe499d300 R15: 0000000000022000 [ 209.578574][T18198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.586649][T18198] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000480), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000004c0)={0x0, r2, 0x1, 0x5, 0x2, 0x80000001}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x84, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x84}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000540)={0x0, 0x0, 0x20}, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r7, 0xfffffe98, 0x0}, 0x0) fstat(r7, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c01000019ee0a00001000000008000002a6764577b056d0a3322b0d1129f9cea64bf7f590a77df01de118800037a9e7aa644dbc0e93f917fd1153c267d8bdab5b8dc09c8189c5ee9cf426bdfca6d5bec33d9caa5ac17227e888558df84473154901df3bc99078860b5333a4a2905b1945c495d7bb71dc74293a493d1e1c0486b34196fb3f2b313f1e165426201726d9a0ef5ca01ac22faf0dcbcf0bf52ad475b3ed1676ecb3ae9c7507bb488d7412837a1ff08d"], 0x11c}], 0x1}, 0x0) sendfile(r8, r3, 0x0, 0x100000002) 16:18:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 209.598462][T18198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.606484][T18198] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 209.639401][T18198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.647437][T18198] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 209.664311][T18198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.672333][T18198] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 209.687622][T18223] FAULT_INJECTION: forcing a failure. [ 209.687622][T18223] name failslab, interval 1, probability 0, space 0, times 0 [ 209.700324][T18223] CPU: 1 PID: 18223 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 209.709080][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.719244][T18223] Call Trace: [ 209.722518][T18223] dump_stack_lvl+0xd6/0x122 [ 209.727138][T18223] dump_stack+0x11/0x1b [ 209.731289][T18223] should_fail+0x23c/0x250 [ 209.735717][T18223] __should_failslab+0x81/0x90 [ 209.740513][T18223] ? register_for_each_vma+0x372/0x890 [ 209.746035][T18223] should_failslab+0x5/0x20 [ 209.750576][T18223] kmem_cache_alloc_trace+0x52/0x320 [ 209.755849][T18223] ? register_for_each_vma+0x372/0x890 [ 209.761390][T18223] ? vma_interval_tree_iter_next+0x24c/0x280 [ 209.767444][T18223] register_for_each_vma+0x372/0x890 [ 209.772722][T18223] __uprobe_register+0x404/0x8b0 [ 209.777731][T18223] uprobe_register_refctr+0x29/0x40 [ 209.783061][T18223] probe_event_enable+0x2be/0x7d0 [ 209.788078][T18223] ? __uprobe_trace_func+0x440/0x440 [ 209.793365][T18223] trace_uprobe_register+0x88/0x410 [ 209.798561][T18223] perf_trace_event_init+0x34e/0x790 [ 209.803846][T18223] perf_uprobe_init+0xf5/0x140 [ 209.808622][T18223] perf_uprobe_event_init+0xde/0x140 [ 209.813992][T18223] perf_try_init_event+0x21a/0x400 [ 209.819192][T18223] perf_event_alloc+0xa60/0x1790 [ 209.824125][T18223] __se_sys_perf_event_open+0x5db/0x2810 [ 209.829753][T18223] __x64_sys_perf_event_open+0x63/0x70 [ 209.835219][T18223] do_syscall_64+0x44/0xa0 [ 209.839632][T18223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.845611][T18223] RIP: 0033:0x7f4f170eca79 [ 209.850023][T18223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.869646][T18223] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 209.878063][T18223] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 209.886020][T18223] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 209.894001][T18223] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 16:18:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x48, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 209.901951][T18223] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 209.909907][T18223] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 [ 209.940959][T18220] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.948994][T18220] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 209.960862][T18220] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.969007][T18220] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:35 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) syz_io_uring_setup(0x5929, &(0x7f0000000040)={0x0, 0xa126, 0x2, 0x0, 0x158, 0x0, r0}, &(0x7f0000033000/0x2000)=nil, &(0x7f0000034000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x6323, 0x2) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xff, 0x3f, 0x3, 0x0, 0x80000000, 0x80408, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x54f}, 0x0, 0x80000001, 0xa4c1, 0x1, 0x6cf, 0x7fffffff, 0x800, 0x0, 0x0, 0x0, 0xf4f}, 0x0, 0x0, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x8001, 0x0, 0xfffffffc, 0x0, 0x1}, 0xfffffe84) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 210.003867][T18220] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.011901][T18220] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 210.023605][T18220] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.031651][T18220] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 36) 16:18:35 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x3, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 210.055453][T18238] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.063642][T18238] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 210.078184][T18238] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.086204][T18238] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:35 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x4, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 210.199350][T18238] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.207401][T18238] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 210.219389][T18238] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.227437][T18238] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 210.345814][T18257] FAULT_INJECTION: forcing a failure. [ 210.345814][T18257] name failslab, interval 1, probability 0, space 0, times 0 [ 210.358473][T18257] CPU: 0 PID: 18257 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 210.367287][T18257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.377328][T18257] Call Trace: [ 210.380603][T18257] dump_stack_lvl+0xd6/0x122 [ 210.385183][T18257] dump_stack+0x11/0x1b [ 210.389348][T18257] should_fail+0x23c/0x250 [ 210.393760][T18257] __should_failslab+0x81/0x90 [ 210.398560][T18257] ? register_for_each_vma+0x372/0x890 [ 210.404004][T18257] should_failslab+0x5/0x20 [ 210.408549][T18257] kmem_cache_alloc_trace+0x52/0x320 [ 210.413822][T18257] ? register_for_each_vma+0x372/0x890 [ 210.419281][T18257] ? vma_interval_tree_iter_next+0x263/0x280 [ 210.425411][T18257] register_for_each_vma+0x372/0x890 [ 210.430715][T18257] __uprobe_register+0x404/0x8b0 [ 210.435653][T18257] uprobe_register_refctr+0x29/0x40 [ 210.440853][T18257] probe_event_enable+0x2be/0x7d0 [ 210.445974][T18257] ? __uprobe_trace_func+0x440/0x440 [ 210.451259][T18257] trace_uprobe_register+0x88/0x410 [ 210.456470][T18257] perf_trace_event_init+0x34e/0x790 [ 210.461844][T18257] perf_uprobe_init+0xf5/0x140 [ 210.466609][T18257] perf_uprobe_event_init+0xde/0x140 [ 210.471930][T18257] perf_try_init_event+0x21a/0x400 [ 210.477062][T18257] perf_event_alloc+0xa60/0x1790 [ 210.482002][T18257] __se_sys_perf_event_open+0x5db/0x2810 [ 210.487632][T18257] __x64_sys_perf_event_open+0x63/0x70 [ 210.493151][T18257] do_syscall_64+0x44/0xa0 [ 210.497577][T18257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.503594][T18257] RIP: 0033:0x7f4f170eca79 [ 210.508005][T18257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.527609][T18257] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 210.536101][T18257] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x74, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x70bd28, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x20, 0x2) getdents64(r3, &(0x7f0000000080)=""/38, 0x26) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000140)='cgroup.controllers\x00', &(0x7f0000000240)='cgroup.controllers\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='cgroup.controllers\x00', &(0x7f0000000340)=')\x00'], 0x100) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 210.544054][T18257] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 210.552010][T18257] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.559959][T18257] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 210.567920][T18257] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 37) [ 210.608558][T18248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.616628][T18248] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 210.628579][T18248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.636649][T18248] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:35 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x5, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 210.665324][T18248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.673378][T18248] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 210.686256][T18248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.694322][T18248] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 210.730355][T18280] FAULT_INJECTION: forcing a failure. [ 210.730355][T18280] name failslab, interval 1, probability 0, space 0, times 0 [ 210.743079][T18280] CPU: 0 PID: 18280 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 210.751838][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.761884][T18280] Call Trace: [ 210.765243][T18280] dump_stack_lvl+0xd6/0x122 [ 210.769832][T18280] dump_stack+0x11/0x1b [ 210.773978][T18280] should_fail+0x23c/0x250 [ 210.778388][T18280] __should_failslab+0x81/0x90 [ 210.783224][T18280] ? register_for_each_vma+0x372/0x890 [ 210.788686][T18280] should_failslab+0x5/0x20 [ 210.793191][T18280] kmem_cache_alloc_trace+0x52/0x320 [ 210.798474][T18280] ? register_for_each_vma+0x372/0x890 [ 210.803930][T18280] ? vma_interval_tree_iter_next+0x263/0x280 [ 210.809913][T18280] register_for_each_vma+0x372/0x890 [ 210.815201][T18280] __uprobe_register+0x404/0x8b0 [ 210.820150][T18280] uprobe_register_refctr+0x29/0x40 [ 210.825440][T18280] probe_event_enable+0x2be/0x7d0 [ 210.830486][T18280] ? __uprobe_trace_func+0x440/0x440 [ 210.835767][T18280] trace_uprobe_register+0x88/0x410 [ 210.840952][T18280] perf_trace_event_init+0x34e/0x790 [ 210.846240][T18280] perf_uprobe_init+0xf5/0x140 [ 210.851012][T18280] perf_uprobe_event_init+0xde/0x140 [ 210.856378][T18280] perf_try_init_event+0x21a/0x400 [ 210.861552][T18280] perf_event_alloc+0xa60/0x1790 [ 210.866547][T18280] __se_sys_perf_event_open+0x5db/0x2810 [ 210.872175][T18280] __x64_sys_perf_event_open+0x63/0x70 [ 210.877647][T18280] do_syscall_64+0x44/0xa0 [ 210.882112][T18280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.888008][T18280] RIP: 0033:0x7f4f170eca79 [ 210.892439][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.909135][T18281] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.912136][T18280] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 16:18:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r5, 0xfffffe98, 0x0}, 0x0) vmsplice(r5, &(0x7f0000000800)=[{&(0x7f0000000040)="482918bea12e68470f94c6", 0xb}, {&(0x7f0000000080)="8ebe66cef709b37fb8f4025c29d0e4f2b086512c4bbdb351a02b30598eed46d331d9b9ee3229941c744335b90923ad825ee64675536bd0302829d332e97047ef4555c134bb3393a59f52b09e8849d4696f15", 0x52}, {&(0x7f0000000200)="2cb92587e2ab1b0d0f9648878fc775f5e08ca0288100b7dd6007f5515f30cfab7f79d7082c58b9772202890b16527b120a1a7871cc6112c664593bb2752d7a6f5e76ce6505eedf462cd84fe976c0f78ba0b76757be4f6468677d3c88eb670c8185b2230c8646be8c47fa99bbf9b1ceaabce5151c946c470a7645c85e6847d2d9c81281effef437866d", 0x89}, {&(0x7f00000002c0)="2f00575d5272683f9e5e7881f95f98722cfc6b44c3e29a76e472544be8a443420e066b7908700ebac40fca68bd9fba00edac24", 0x33}, {&(0x7f0000000300)="65fe9a86e32efa1a4fc1377c", 0xc}, {&(0x7f0000000340)="24992f2ad063137ab901ce04271380711db80c2c07edf77f83956fc7f384c69a6113751aaff71c724ca7600008cce748b79b8c24e4dfc4a0b6baf2a0bc153e0651fac0ee50efa19e0fcd9b90af7b6b6445d1950a401c4be29a5e0d992132a36ae60a2bb627d117ed2b2316b3b36c95bea5bd1163bd41b7514b7fa16184541b089303f208fb3cc98078970790999acb45ffcd9cb8eda3176dd00dd6c0cfc4eba09e7dea54f502faaa62d6c13251691cca645e40cd", 0xb4}, {&(0x7f0000000400)="3bca90eaf5399637", 0x8}], 0x7, 0x0) dup2(r0, r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 210.912160][T18280] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 210.912172][T18280] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 210.945813][T18280] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.953791][T18280] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 210.961763][T18280] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 210.993203][T18277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.001236][T18277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 211.012942][T18277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.020988][T18277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x7, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 38) [ 211.042982][T18277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.051028][T18277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 211.067121][T18277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.075279][T18277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 211.109802][T18295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.117855][T18295] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 211.133494][T18295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.141546][T18295] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x300, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 211.271785][T18295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.280261][T18295] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 211.296807][T18295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.304857][T18295] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 211.393423][T18305] FAULT_INJECTION: forcing a failure. [ 211.393423][T18305] name failslab, interval 1, probability 0, space 0, times 0 [ 211.406261][T18305] CPU: 0 PID: 18305 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 211.415006][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.425060][T18305] Call Trace: [ 211.428333][T18305] dump_stack_lvl+0xd6/0x122 [ 211.433019][T18305] dump_stack+0x11/0x1b [ 211.437268][T18305] should_fail+0x23c/0x250 [ 211.441699][T18305] __should_failslab+0x81/0x90 [ 211.446462][T18305] ? register_for_each_vma+0x372/0x890 [ 211.451968][T18305] should_failslab+0x5/0x20 [ 211.456471][T18305] kmem_cache_alloc_trace+0x52/0x320 [ 211.461831][T18305] ? register_for_each_vma+0x372/0x890 [ 211.467390][T18305] ? vma_interval_tree_iter_next+0x263/0x280 [ 211.473418][T18305] register_for_each_vma+0x372/0x890 [ 211.478707][T18305] __uprobe_register+0x404/0x8b0 [ 211.483801][T18305] uprobe_register_refctr+0x29/0x40 [ 211.489016][T18305] probe_event_enable+0x2be/0x7d0 [ 211.494036][T18305] ? __uprobe_trace_func+0x440/0x440 [ 211.499323][T18305] trace_uprobe_register+0x88/0x410 [ 211.504558][T18305] perf_trace_event_init+0x34e/0x790 [ 211.509868][T18305] perf_uprobe_init+0xf5/0x140 [ 211.514636][T18305] perf_uprobe_event_init+0xde/0x140 [ 211.519934][T18305] perf_try_init_event+0x21a/0x400 [ 211.525050][T18305] perf_event_alloc+0xa60/0x1790 [ 211.529995][T18305] __se_sys_perf_event_open+0x5db/0x2810 [ 211.535722][T18305] __x64_sys_perf_event_open+0x63/0x70 16:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 211.541189][T18305] do_syscall_64+0x44/0xa0 [ 211.545709][T18305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.551614][T18305] RIP: 0033:0x7f4f170eca79 [ 211.556030][T18305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.571581][T18320] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.575660][T18305] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 16:18:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c010000190001000000000000000000024d784975449fb13fcb3a69d02ace707614603ccdca7347adece1b59423dc216a60a5ef82ee98bfcdfa503fe7fe91910803c16d12c58fa908c044f1ac9c48782baa945e2b8934"], 0x11c}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0xfffffe98, 0x0}, 0x0) r3 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r3, 0xbf, 0x0, 0x0, 0x0, 0x0) r4 = accept4$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0x80800) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r8, 0xfffffe98, 0x0}, 0x0) r9 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r9, 0xbf, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[r1, r2, 0xffffffffffffffff, r1, r3, r2, r4, r8, r9], 0x9) [ 211.575685][T18305] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 211.602037][T18305] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 211.610005][T18305] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.617970][T18305] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 211.625938][T18305] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0xffffffffffffffff, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 39) [ 211.695766][T18290] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.703788][T18290] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 211.747943][T18334] FAULT_INJECTION: forcing a failure. [ 211.747943][T18334] name failslab, interval 1, probability 0, space 0, times 0 [ 211.760582][T18334] CPU: 0 PID: 18334 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 211.769502][T18334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.779559][T18334] Call Trace: [ 211.782895][T18334] dump_stack_lvl+0xd6/0x122 [ 211.787476][T18334] dump_stack+0x11/0x1b [ 211.791686][T18334] should_fail+0x23c/0x250 [ 211.796103][T18334] __should_failslab+0x81/0x90 [ 211.801106][T18334] ? register_for_each_vma+0x372/0x890 [ 211.806650][T18334] should_failslab+0x5/0x20 [ 211.811153][T18334] kmem_cache_alloc_trace+0x52/0x320 [ 211.816428][T18334] ? register_for_each_vma+0x372/0x890 [ 211.821963][T18334] ? vma_interval_tree_iter_next+0x24c/0x280 [ 211.827944][T18334] register_for_each_vma+0x372/0x890 [ 211.833223][T18334] __uprobe_register+0x404/0x8b0 [ 211.838267][T18334] uprobe_register_refctr+0x29/0x40 [ 211.843475][T18334] probe_event_enable+0x2be/0x7d0 [ 211.848517][T18334] ? __uprobe_trace_func+0x440/0x440 [ 211.853818][T18334] trace_uprobe_register+0x88/0x410 [ 211.859002][T18334] perf_trace_event_init+0x34e/0x790 [ 211.864313][T18334] perf_uprobe_init+0xf5/0x140 [ 211.869067][T18334] perf_uprobe_event_init+0xde/0x140 [ 211.874353][T18334] perf_try_init_event+0x21a/0x400 [ 211.879474][T18334] perf_event_alloc+0xa60/0x1790 [ 211.884432][T18334] __se_sys_perf_event_open+0x5db/0x2810 [ 211.890093][T18334] __x64_sys_perf_event_open+0x63/0x70 [ 211.895550][T18334] do_syscall_64+0x44/0xa0 [ 211.899955][T18334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.905856][T18334] RIP: 0033:0x7f4f170eca79 [ 211.910264][T18334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.929966][T18334] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 211.938372][T18334] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x74, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x2ac, r5, 0x300, 0x70bd2a, 0x9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xcfb}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x188, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7e, 0x1, "f4b06a40804eac00498c0a2a9242f9791b018f16b22e483386695c89227cc3f7c98f18f5f502afc85d27267158cd45fcd505011c414e6f821035350fcf3abfa1e2ed353148cb18d6cb49089db19c198be790b432815c1ddd17f22dfcdede32f311c5f700e81ca75c4a23eeca873051b1d1fef77ef13c2b317a92"}}, {0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfb, 0x1, "a64aa0cac8996099249eecbac6098dd9989eebc23df49ddaeffc0f56dd95c384f752f15583bd2dc4c5159a82b7ae6dd4bbc198f661e1236a7a1827fd887b491b4ae94380665ec4d47b03da78b07f621d365e19e15b58972b5d84c4220155f57051e324bedc114bf5f8aa953aa250bcd925febb91f670a17dd9989765a833206d2001af80b7acb5d1771f3119e45f8517226f6879e2bfae084e6ffe192acb8215d87347d4eeb79471d469ae50e3b14f85ad4a7174600e1b59fd30cfccd31a2f59556e57708e9ffbe6f0337adfc0afb0c4572c76bd081c1696cb49dcb1036e07aa60aa61c1a9da92acfd751ee219e99669ee97389545001d"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe0, 0x3, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd5, 0x1, "e41bab6a0cdd65ded9fc9924f474d2f6497b0c89824eb50375bf3c58414355ba8edee02303e9ad8e077d1522735c71a93c92030aca9061c7eb50c4cf834a13c94008af95b52d2c9b55170fc21d0c1622aa31ab062a5543eb0f899eb69fa9e51133308a211fcdb887059112a1c5e867bb9c418fb5668d6560a2356e6b3f3e6dd114ad613ca42e17898ee0fc7a1044f3c68bf28d0ceb6f7b97b39de29a9aabffc4000dcd8033964c9e6082153a566dd9ecef8abeca30ec630930f5e316b90dc93ec8903676170f07dc588dfbf5449758b18e"}}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x40, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) 16:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x88, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 211.946333][T18334] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 211.954284][T18334] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.962234][T18334] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 211.970183][T18334] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f000074f000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r0, 0xc5603000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x100000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x10e3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000640)={0x0, [], 0x0, "6ad0f778983883"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000005d2c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "30fc7c67d14296"}) sigaltstack(&(0x7f0000bdc000/0x4000)=nil, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) [ 211.995172][T18331] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.003222][T18331] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 212.018140][T18331] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.026197][T18331] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:37 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x2, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 212.053459][T18331] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.061533][T18331] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 212.086323][T18331] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 40) [ 212.094354][T18331] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xef, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 212.155999][T18361] FAULT_INJECTION: forcing a failure. [ 212.155999][T18361] name failslab, interval 1, probability 0, space 0, times 0 [ 212.168671][T18361] CPU: 1 PID: 18361 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 212.177430][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.187494][T18361] Call Trace: [ 212.190841][T18361] dump_stack_lvl+0xd6/0x122 [ 212.195434][T18361] dump_stack+0x11/0x1b [ 212.199596][T18361] should_fail+0x23c/0x250 16:18:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 212.204002][T18361] __should_failslab+0x81/0x90 [ 212.208763][T18361] ? register_for_each_vma+0x372/0x890 [ 212.214224][T18361] should_failslab+0x5/0x20 [ 212.218736][T18361] kmem_cache_alloc_trace+0x52/0x320 [ 212.224012][T18361] ? register_for_each_vma+0x372/0x890 [ 212.229530][T18361] ? vma_interval_tree_iter_next+0x24c/0x280 [ 212.235517][T18361] register_for_each_vma+0x372/0x890 [ 212.240809][T18361] __uprobe_register+0x404/0x8b0 [ 212.245812][T18361] uprobe_register_refctr+0x29/0x40 [ 212.251047][T18361] probe_event_enable+0x2be/0x7d0 [ 212.256056][T18361] ? __uprobe_trace_func+0x440/0x440 [ 212.261321][T18361] trace_uprobe_register+0x88/0x410 [ 212.266498][T18361] perf_trace_event_init+0x34e/0x790 [ 212.271847][T18361] perf_uprobe_init+0xf5/0x140 [ 212.276675][T18361] perf_uprobe_event_init+0xde/0x140 [ 212.282008][T18361] perf_try_init_event+0x21a/0x400 [ 212.287177][T18361] perf_event_alloc+0xa60/0x1790 [ 212.292116][T18361] __se_sys_perf_event_open+0x5db/0x2810 [ 212.297758][T18361] __x64_sys_perf_event_open+0x63/0x70 [ 212.303203][T18361] do_syscall_64+0x44/0xa0 [ 212.307607][T18361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.313570][T18361] RIP: 0033:0x7f4f170eca79 [ 212.318051][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.337662][T18361] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 212.346263][T18361] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 212.354244][T18361] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 212.362276][T18361] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.370229][T18361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 212.378195][T18361] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 41) 16:18:37 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x3, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 212.401212][T18360] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.409207][T18360] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 212.421709][T18360] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.429687][T18360] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:37 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:37 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x4, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 212.473513][T18360] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.481536][T18360] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 212.493520][T18360] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.501541][T18360] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 212.618836][T18375] FAULT_INJECTION: forcing a failure. [ 212.618836][T18375] name failslab, interval 1, probability 0, space 0, times 0 [ 212.631468][T18375] CPU: 1 PID: 18375 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 212.640228][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.650463][T18375] Call Trace: [ 212.653762][T18375] dump_stack_lvl+0xd6/0x122 [ 212.658712][T18375] dump_stack+0x11/0x1b [ 212.662859][T18375] should_fail+0x23c/0x250 [ 212.667261][T18375] __should_failslab+0x81/0x90 [ 212.672146][T18375] ? register_for_each_vma+0x372/0x890 [ 212.677646][T18375] should_failslab+0x5/0x20 [ 212.682134][T18375] kmem_cache_alloc_trace+0x52/0x320 [ 212.687406][T18375] ? register_for_each_vma+0x372/0x890 [ 212.692962][T18375] ? vma_interval_tree_iter_next+0x24c/0x280 [ 212.699007][T18375] register_for_each_vma+0x372/0x890 [ 212.704347][T18375] __uprobe_register+0x404/0x8b0 [ 212.709344][T18375] uprobe_register_refctr+0x29/0x40 [ 212.714533][T18375] probe_event_enable+0x2be/0x7d0 [ 212.719597][T18375] ? __uprobe_trace_func+0x440/0x440 [ 212.724865][T18375] trace_uprobe_register+0x88/0x410 [ 212.730051][T18375] perf_trace_event_init+0x34e/0x790 [ 212.735396][T18375] perf_uprobe_init+0xf5/0x140 [ 212.740212][T18375] perf_uprobe_event_init+0xde/0x140 [ 212.745492][T18375] perf_try_init_event+0x21a/0x400 [ 212.750589][T18375] perf_event_alloc+0xa60/0x1790 [ 212.755571][T18375] __se_sys_perf_event_open+0x5db/0x2810 [ 212.761205][T18375] __x64_sys_perf_event_open+0x63/0x70 [ 212.766640][T18375] do_syscall_64+0x44/0xa0 [ 212.771036][T18375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.776907][T18375] RIP: 0033:0x7f4f170eca79 [ 212.781352][T18375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.800941][T18375] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 212.809397][T18375] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffff, 0x400000) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000140)="e01a37542f746dd3d014c2b7eb1be680596b027f3d472afa168fe94d403f8fbde8f99c8bf69768b9669c2f496f44f293605d4eac3a31de872918d39ecc7e", 0x3e) sendfile(r2, r1, 0x0, 0x100000002) [ 212.817358][T18375] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 212.825325][T18375] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.833313][T18375] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 212.841265][T18375] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 42) 16:18:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f000074f000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r0, 0xc5603000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x100000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x10e3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000640)={0x0, [], 0x0, "6ad0f778983883"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000005d2c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "30fc7c67d14296"}) sigaltstack(&(0x7f0000bdc000/0x4000)=nil, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 16:18:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 212.885069][T18385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.893132][T18385] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 212.912332][T18385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.920383][T18385] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x10, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 212.955900][T18385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.963912][T18385] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 212.972973][T18390] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.975315][T18385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.992334][T18385] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 213.091823][T18396] FAULT_INJECTION: forcing a failure. [ 213.091823][T18396] name failslab, interval 1, probability 0, space 0, times 0 [ 213.104469][T18396] CPU: 1 PID: 18396 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 213.113226][T18396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.123349][T18396] Call Trace: [ 213.126629][T18396] dump_stack_lvl+0xd6/0x122 [ 213.131253][T18396] dump_stack+0x11/0x1b [ 213.135411][T18396] should_fail+0x23c/0x250 [ 213.139833][T18396] __should_failslab+0x81/0x90 [ 213.144641][T18396] ? register_for_each_vma+0x372/0x890 [ 213.150108][T18396] should_failslab+0x5/0x20 [ 213.154651][T18396] kmem_cache_alloc_trace+0x52/0x320 [ 213.160006][T18396] ? register_for_each_vma+0x372/0x890 [ 213.165468][T18396] ? vma_interval_tree_iter_next+0x263/0x280 [ 213.171528][T18396] register_for_each_vma+0x372/0x890 [ 213.176889][T18396] __uprobe_register+0x404/0x8b0 [ 213.181823][T18396] uprobe_register_refctr+0x29/0x40 [ 213.187025][T18396] probe_event_enable+0x2be/0x7d0 [ 213.192030][T18396] ? __uprobe_trace_func+0x440/0x440 [ 213.197293][T18396] trace_uprobe_register+0x88/0x410 [ 213.202478][T18396] perf_trace_event_init+0x34e/0x790 [ 213.207787][T18396] perf_uprobe_init+0xf5/0x140 [ 213.212545][T18396] perf_uprobe_event_init+0xde/0x140 [ 213.217842][T18396] perf_try_init_event+0x21a/0x400 [ 213.222937][T18396] perf_event_alloc+0xa60/0x1790 [ 213.227894][T18396] __se_sys_perf_event_open+0x5db/0x2810 [ 213.233510][T18396] __x64_sys_perf_event_open+0x63/0x70 [ 213.238992][T18396] do_syscall_64+0x44/0xa0 [ 213.243414][T18396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.249358][T18396] RIP: 0033:0x7f4f170eca79 [ 213.253766][T18396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.273368][T18396] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 213.281774][T18396] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x5, 0x5}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) 16:18:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 213.289727][T18396] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 213.297707][T18396] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 213.305664][T18396] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 213.313631][T18396] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf2, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x7ff, 0x0, 0x5}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffc}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES64=r5], 0x11c}], 0x1, 0x0, 0x4a, 0x4004004}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0xbf, 0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0x3, 0x2, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendfile(r3, r2, 0x0, 0x100000002) [ 213.396944][T18394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.405018][T18394] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 213.416515][T18394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.424643][T18394] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfe, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 213.460887][T18394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.468884][T18394] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 213.481371][T18394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.489369][T18394] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 43) 16:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 213.651547][T18420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.659562][T18420] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 213.673204][T18420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.681281][T18420] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 213.705550][T18420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.713577][T18420] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 213.737671][T18420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x300, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 213.745744][T18420] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 213.782049][T18443] FAULT_INJECTION: forcing a failure. [ 213.782049][T18443] name failslab, interval 1, probability 0, space 0, times 0 [ 213.794691][T18443] CPU: 0 PID: 18443 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 213.803471][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.813511][T18443] Call Trace: [ 213.816780][T18443] dump_stack_lvl+0xd6/0x122 [ 213.821358][T18443] dump_stack+0x11/0x1b [ 213.825506][T18443] should_fail+0x23c/0x250 [ 213.829916][T18443] __should_failslab+0x81/0x90 [ 213.834722][T18443] ? register_for_each_vma+0x372/0x890 [ 213.840269][T18443] should_failslab+0x5/0x20 [ 213.844754][T18443] kmem_cache_alloc_trace+0x52/0x320 [ 213.850022][T18443] ? register_for_each_vma+0x372/0x890 [ 213.855464][T18443] ? vma_interval_tree_iter_next+0x263/0x280 [ 213.861461][T18443] register_for_each_vma+0x372/0x890 [ 213.866806][T18443] __uprobe_register+0x404/0x8b0 [ 213.871723][T18443] uprobe_register_refctr+0x29/0x40 [ 213.876900][T18443] probe_event_enable+0x2be/0x7d0 [ 213.881910][T18443] ? __uprobe_trace_func+0x440/0x440 [ 213.887191][T18443] trace_uprobe_register+0x88/0x410 [ 213.892565][T18443] perf_trace_event_init+0x34e/0x790 [ 213.897888][T18443] perf_uprobe_init+0xf5/0x140 [ 213.902711][T18443] perf_uprobe_event_init+0xde/0x140 [ 213.907985][T18443] perf_try_init_event+0x21a/0x400 [ 213.913130][T18443] perf_event_alloc+0xa60/0x1790 [ 213.918051][T18443] __se_sys_perf_event_open+0x5db/0x2810 [ 213.923739][T18443] __x64_sys_perf_event_open+0x63/0x70 [ 213.929184][T18443] do_syscall_64+0x44/0xa0 [ 213.933604][T18443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.939487][T18443] RIP: 0033:0x7f4f170eca79 [ 213.943884][T18443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.963520][T18443] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 213.971913][T18443] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x5, 0x5}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 213.979864][T18443] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 213.987818][T18443] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 213.995857][T18443] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 214.003826][T18443] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf00, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 214.045729][T18439] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.053758][T18439] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 214.073339][T18439] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.081381][T18439] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 214.190361][T18439] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.198370][T18439] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 214.224601][T18439] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xeffd, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 214.232654][T18439] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 44) 16:18:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x5, 0x5}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE, 0x9) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x91) [ 214.469959][T18475] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.477966][T18475] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 214.509274][T18475] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf200, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 214.517357][T18475] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfcfd, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 214.568465][T18475] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.576494][T18475] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 214.622456][T18475] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.630472][T18475] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 214.774172][T18485] FAULT_INJECTION: forcing a failure. [ 214.774172][T18485] name failslab, interval 1, probability 0, space 0, times 0 [ 214.787284][T18485] CPU: 0 PID: 18485 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 214.796109][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.806170][T18485] Call Trace: [ 214.809462][T18485] dump_stack_lvl+0xd6/0x122 [ 214.814073][T18485] dump_stack+0x11/0x1b [ 214.818238][T18485] should_fail+0x23c/0x250 [ 214.822674][T18485] __should_failslab+0x81/0x90 [ 214.827498][T18485] ? register_for_each_vma+0x372/0x890 [ 214.832965][T18485] should_failslab+0x5/0x20 [ 214.837561][T18485] kmem_cache_alloc_trace+0x52/0x320 [ 214.842863][T18485] ? register_for_each_vma+0x372/0x890 [ 214.848357][T18485] ? vma_interval_tree_iter_next+0x24c/0x280 [ 214.854348][T18485] register_for_each_vma+0x372/0x890 [ 214.859640][T18485] __uprobe_register+0x404/0x8b0 [ 214.864621][T18485] uprobe_register_refctr+0x29/0x40 [ 214.869826][T18485] probe_event_enable+0x2be/0x7d0 [ 214.874859][T18485] ? __uprobe_trace_func+0x440/0x440 [ 214.880175][T18485] trace_uprobe_register+0x88/0x410 [ 214.885382][T18485] perf_trace_event_init+0x34e/0x790 [ 214.890688][T18485] perf_uprobe_init+0xf5/0x140 [ 214.895521][T18485] perf_uprobe_event_init+0xde/0x140 [ 214.900822][T18485] perf_try_init_event+0x21a/0x400 [ 214.906119][T18485] perf_event_alloc+0xa60/0x1790 [ 214.911064][T18485] __se_sys_perf_event_open+0x5db/0x2810 [ 214.916710][T18485] __x64_sys_perf_event_open+0x63/0x70 [ 214.922183][T18485] do_syscall_64+0x44/0xa0 [ 214.926618][T18485] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 214.932597][T18485] RIP: 0033:0x7f4f170eca79 [ 214.937072][T18485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 214.956713][T18485] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 214.965136][T18485] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 16:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 214.973115][T18485] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 214.981092][T18485] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 214.989087][T18485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 214.997067][T18485] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 16:18:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 45) 16:18:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) [ 215.087757][T18504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.095788][T18504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:40 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdef, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 215.130144][T18504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.138140][T18504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:40 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdfc, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 215.185422][T18504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.193452][T18504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 215.226701][T18504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.226894][T18521] FAULT_INJECTION: forcing a failure. [ 215.226894][T18521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.234714][T18504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 215.258876][T18521] CPU: 0 PID: 18521 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 215.267638][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.277863][T18521] Call Trace: [ 215.281136][T18521] dump_stack_lvl+0xd6/0x122 [ 215.285730][T18521] dump_stack+0x11/0x1b [ 215.289886][T18521] should_fail+0x23c/0x250 [ 215.294304][T18521] should_fail_usercopy+0x16/0x20 [ 215.299332][T18521] _copy_from_user+0x1c/0xd0 [ 215.303925][T18521] perf_copy_attr+0x156/0x650 [ 215.308634][T18521] __se_sys_perf_event_open+0xca/0x2810 [ 215.314281][T18521] ? proc_fail_nth_write+0x127/0x150 [ 215.319571][T18521] ? vfs_write+0x61a/0x900 [ 215.324038][T18521] __x64_sys_perf_event_open+0x63/0x70 [ 215.329562][T18521] do_syscall_64+0x44/0xa0 [ 215.333989][T18521] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.339991][T18521] RIP: 0033:0x7ffa67e11a79 [ 215.344403][T18521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 215.364017][T18521] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 215.372528][T18521] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 215.380500][T18521] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 215.388543][T18521] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 215.396514][T18521] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 215.404499][T18521] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) [ 215.519041][T18512] FAULT_INJECTION: forcing a failure. [ 215.519041][T18512] name failslab, interval 1, probability 0, space 0, times 0 [ 215.531771][T18512] CPU: 0 PID: 18512 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 215.540531][T18512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.550592][T18512] Call Trace: [ 215.553873][T18512] dump_stack_lvl+0xd6/0x122 [ 215.558476][T18512] dump_stack+0x11/0x1b [ 215.562709][T18512] should_fail+0x23c/0x250 16:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 215.567131][T18512] __should_failslab+0x81/0x90 [ 215.571899][T18512] ? register_for_each_vma+0x372/0x890 [ 215.577444][T18512] should_failslab+0x5/0x20 [ 215.580530][T18528] FAULT_INJECTION: forcing a failure. [ 215.580530][T18528] name failslab, interval 1, probability 0, space 0, times 0 [ 215.581947][T18512] kmem_cache_alloc_trace+0x52/0x320 [ 215.581970][T18512] ? register_for_each_vma+0x372/0x890 [ 215.605255][T18512] ? vma_interval_tree_iter_next+0x263/0x280 [ 215.611231][T18512] register_for_each_vma+0x372/0x890 [ 215.616501][T18512] __uprobe_register+0x404/0x8b0 [ 215.621423][T18512] uprobe_register_refctr+0x29/0x40 [ 215.626608][T18512] probe_event_enable+0x2be/0x7d0 [ 215.631639][T18512] ? __uprobe_trace_func+0x440/0x440 [ 215.636938][T18512] trace_uprobe_register+0x88/0x410 [ 215.642119][T18512] perf_trace_event_init+0x34e/0x790 [ 215.647403][T18512] perf_uprobe_init+0xf5/0x140 [ 215.652161][T18512] perf_uprobe_event_init+0xde/0x140 [ 215.657432][T18512] perf_try_init_event+0x21a/0x400 [ 215.662530][T18512] perf_event_alloc+0xa60/0x1790 [ 215.667455][T18512] __se_sys_perf_event_open+0x5db/0x2810 [ 215.673111][T18512] __x64_sys_perf_event_open+0x63/0x70 [ 215.678570][T18512] do_syscall_64+0x44/0xa0 [ 215.683157][T18512] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.689096][T18512] RIP: 0033:0x7f4f170eca79 [ 215.693495][T18512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 215.713267][T18512] RSP: 002b:00007f4f14e64188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 215.721666][T18512] RAX: ffffffffffffffda RBX: 00007f4f171f0f60 RCX: 00007f4f170eca79 [ 215.729621][T18512] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 215.737575][T18512] RBP: 00007f4f14e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 215.745649][T18512] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 215.753688][T18512] R13: 00007ffde22560af R14: 00007f4f14e64300 R15: 0000000000022000 [ 215.761654][T18528] CPU: 1 PID: 18528 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 16:18:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="800600000000fbdbdf250a0000000e0001006e657464657673696d000000fbff02006e657464657673696d3000000800030000000000080001007063690011000200303a31302e3000000000080003000200000408000100706369001122b5e5013c2ae3000200303030303a30303a31300900000000000800030000000000ee43b27c585159d94fb1ef8af9c83b281b197002e1e1851a096b4f3d9148beac61955f9f0d4a8838f013c51efffb2a41229a810b7173b51f1bfe6001522859fee79a79d7d620e5c2c1bd2c8530250cfd677bd0ee67e550b1648e2abad4a8bfd1711870bf83220259ecbd61cd"], 0x84}}, 0x4000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x54, r2, 0x100, 0x70bd2a, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4840}, 0x88030) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x410000, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4004810) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x1) [ 215.770411][T18528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.780466][T18528] Call Trace: [ 215.783770][T18528] dump_stack_lvl+0xd6/0x122 [ 215.788675][T18528] dump_stack+0x11/0x1b [ 215.792979][T18528] should_fail+0x23c/0x250 [ 215.797533][T18528] __should_failslab+0x81/0x90 [ 215.802299][T18528] should_failslab+0x5/0x20 [ 215.806804][T18528] kmem_cache_alloc_node+0x61/0x2c0 [ 215.812004][T18528] ? perf_event_alloc+0x160/0x1790 [ 215.817152][T18528] perf_event_alloc+0x160/0x1790 [ 215.822171][T18528] __se_sys_perf_event_open+0x5db/0x2810 [ 215.827816][T18528] __x64_sys_perf_event_open+0x63/0x70 [ 215.833276][T18528] do_syscall_64+0x44/0xa0 [ 215.837691][T18528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.843613][T18528] RIP: 0033:0x7ffa67e11a79 [ 215.848067][T18528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:18:41 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdfe, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) [ 215.867675][T18528] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 215.876150][T18528] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 215.884115][T18528] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 215.892073][T18528] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 215.900026][T18528] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 215.907983][T18528] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xee) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=ANY=[], 0x11c}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r3 = signalfd(r1, &(0x7f0000000000)={[0x6]}, 0x8) openat(r3, &(0x7f0000000040)='./file0\x00', 0x400, 0x0) [ 216.033761][T18531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.041851][T18531] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 216.058533][T18531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.066556][T18531] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 216.069728][T18548] FAULT_INJECTION: forcing a failure. [ 216.069728][T18548] name failslab, interval 1, probability 0, space 0, times 0 [ 216.090215][T18548] CPU: 1 PID: 18548 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 216.098971][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.109017][T18548] Call Trace: [ 216.112274][T18548] dump_stack_lvl+0xd6/0x122 [ 216.117011][T18548] dump_stack+0x11/0x1b [ 216.121212][T18548] should_fail+0x23c/0x250 [ 216.125635][T18548] ? perf_uprobe_init+0x45/0x140 [ 216.130757][T18548] __should_failslab+0x81/0x90 [ 216.135519][T18548] should_failslab+0x5/0x20 [ 216.140023][T18548] __kmalloc_track_caller+0x6d/0x350 [ 216.145337][T18548] ? strnlen_user+0x137/0x1c0 [ 216.150014][T18548] strndup_user+0x73/0x120 [ 216.153126][T18531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.154430][T18548] perf_uprobe_init+0x45/0x140 [ 216.162408][T18531] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 216.167112][T18548] perf_uprobe_event_init+0xde/0x140 [ 216.182140][T18531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.183545][T18548] perf_try_init_event+0x21a/0x400 [ 216.183573][T18548] perf_event_alloc+0xa60/0x1790 [ 216.191723][T18531] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 216.196785][T18548] __se_sys_perf_event_open+0x5db/0x2810 [ 216.218286][T18548] __x64_sys_perf_event_open+0x63/0x70 [ 216.223740][T18548] do_syscall_64+0x44/0xa0 [ 216.228139][T18548] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.234099][T18548] RIP: 0033:0x7ffa67e11a79 [ 216.238503][T18548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.258189][T18548] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 216.266624][T18548] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 216.274588][T18548] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 216.282551][T18548] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.290518][T18548] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 216.298571][T18548] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 216.321560][T18550] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) 16:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:41 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 216.329647][T18550] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 216.356010][T18550] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.364261][T18550] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:41 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfe00, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 216.405096][T18550] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.413223][T18550] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 216.433689][T18550] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.441725][T18550] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 216.450101][T18570] FAULT_INJECTION: forcing a failure. [ 216.450101][T18570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.465839][T18570] CPU: 0 PID: 18570 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 216.474607][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.484660][T18570] Call Trace: [ 216.487935][T18570] dump_stack_lvl+0xd6/0x122 [ 216.492537][T18570] dump_stack+0x11/0x1b [ 216.496815][T18570] should_fail+0x23c/0x250 [ 216.501230][T18570] should_fail_usercopy+0x16/0x20 [ 216.506251][T18570] _copy_from_user+0x1c/0xd0 [ 216.510826][T18570] strndup_user+0xb0/0x120 [ 216.515255][T18570] perf_uprobe_init+0x45/0x140 [ 216.520026][T18570] perf_uprobe_event_init+0xde/0x140 [ 216.525307][T18570] perf_try_init_event+0x21a/0x400 [ 216.530473][T18570] perf_event_alloc+0xa60/0x1790 [ 216.535402][T18570] __se_sys_perf_event_open+0x5db/0x2810 [ 216.541068][T18570] __x64_sys_perf_event_open+0x63/0x70 [ 216.546516][T18570] do_syscall_64+0x44/0xa0 [ 216.550937][T18570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.557041][T18570] RIP: 0033:0x7ffa67e11a79 [ 216.561451][T18570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.581350][T18570] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 216.589819][T18570] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 216.597793][T18570] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:18:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000003c0)=""/154, &(0x7f0000000040)=0x9a) recvfrom(r0, &(0x7f0000000240)=""/141, 0x8d, 0x10000, &(0x7f0000000340)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x80) sendfile(r2, r1, 0x0, 0x100000002) 16:18:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) [ 216.605789][T18570] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.613739][T18570] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 216.621685][T18570] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 216.738823][T18579] FAULT_INJECTION: forcing a failure. [ 216.738823][T18579] name failslab, interval 1, probability 0, space 0, times 0 [ 216.751469][T18579] CPU: 0 PID: 18579 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 216.760271][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.770403][T18579] Call Trace: [ 216.773675][T18579] dump_stack_lvl+0xd6/0x122 [ 216.778266][T18579] dump_stack+0x11/0x1b [ 216.782422][T18579] should_fail+0x23c/0x250 [ 216.786844][T18579] ? getname_kernel+0x37/0x1d0 [ 216.791664][T18579] __should_failslab+0x81/0x90 [ 216.796422][T18579] should_failslab+0x5/0x20 [ 216.800915][T18579] kmem_cache_alloc+0x4f/0x300 [ 216.805723][T18579] getname_kernel+0x37/0x1d0 [ 216.810311][T18579] kern_path+0x1d/0x100 [ 216.814456][T18579] create_local_trace_uprobe+0x51/0x3d0 [ 216.820004][T18579] perf_uprobe_init+0xbe/0x140 [ 216.824824][T18579] perf_uprobe_event_init+0xde/0x140 [ 216.830169][T18579] perf_try_init_event+0x21a/0x400 [ 216.835309][T18579] perf_event_alloc+0xa60/0x1790 [ 216.840232][T18579] __se_sys_perf_event_open+0x5db/0x2810 [ 216.845852][T18579] __x64_sys_perf_event_open+0x63/0x70 [ 216.851309][T18579] do_syscall_64+0x44/0xa0 [ 216.855766][T18579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.861651][T18579] RIP: 0033:0x7ffa67e11a79 [ 216.866050][T18579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:18:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 216.885643][T18579] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 216.894202][T18579] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 216.902166][T18579] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 216.910125][T18579] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.918087][T18579] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 216.926053][T18579] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:42 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfefd, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) 16:18:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 216.952027][T18578] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.968370][T18563] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.976643][T18563] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 216.987874][T18563] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.995960][T18563] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 217.138880][T18563] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.146949][T18563] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 217.172104][T18563] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.180134][T18563] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 217.184066][T18601] FAULT_INJECTION: forcing a failure. [ 217.184066][T18601] name failslab, interval 1, probability 0, space 0, times 0 [ 217.203797][T18601] CPU: 0 PID: 18601 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 217.212616][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.222945][T18601] Call Trace: [ 217.226214][T18601] dump_stack_lvl+0xd6/0x122 [ 217.230850][T18601] dump_stack+0x11/0x1b [ 217.235011][T18601] should_fail+0x23c/0x250 [ 217.239462][T18601] __should_failslab+0x81/0x90 [ 217.244301][T18601] ? proc_self_get_link+0x90/0x100 [ 217.249446][T18601] should_failslab+0x5/0x20 [ 217.253992][T18601] kmem_cache_alloc_trace+0x52/0x320 [ 217.259328][T18601] proc_self_get_link+0x90/0x100 [ 217.264285][T18601] ? proc_setup_self+0x1d0/0x1d0 [ 217.269316][T18601] step_into+0x9dc/0xee0 [ 217.273550][T18601] walk_component+0x1a1/0x360 [ 217.278217][T18601] link_path_walk+0x4ae/0x770 [ 217.282886][T18601] path_lookupat+0x8b/0x3d0 [ 217.287420][T18601] filename_lookup+0x130/0x310 [ 217.292235][T18601] kern_path+0x35/0x100 [ 217.296410][T18601] create_local_trace_uprobe+0x51/0x3d0 [ 217.302025][T18601] perf_uprobe_init+0xbe/0x140 [ 217.306775][T18601] perf_uprobe_event_init+0xde/0x140 [ 217.312164][T18601] perf_try_init_event+0x21a/0x400 [ 217.317279][T18601] perf_event_alloc+0xa60/0x1790 [ 217.322374][T18601] __se_sys_perf_event_open+0x5db/0x2810 [ 217.328371][T18601] __x64_sys_perf_event_open+0x63/0x70 [ 217.333915][T18601] do_syscall_64+0x44/0xa0 [ 217.338542][T18601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 217.344555][T18601] RIP: 0033:0x7ffa67e11a79 [ 217.348956][T18601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 217.368549][T18601] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 217.376944][T18601] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 217.384959][T18601] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 217.392952][T18601] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 217.400970][T18601] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 217.408946][T18601] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:42 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffd, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0153f0bad8877200040000c15325eafc"], 0x11c}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 16:18:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:42 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf0ff7f, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 217.517130][T18594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.525236][T18594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 217.558667][T18594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.566725][T18594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:42 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfeffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 217.662595][T18594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.670631][T18594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 217.687919][T18594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.696017][T18594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000140)) sendfile(r2, r1, 0x0, 0x100000002) 16:18:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) 16:18:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:43 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x1000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 217.852800][T18611] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.860831][T18611] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 217.878712][T18611] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.886771][T18611] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 217.932413][T18611] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.940453][T18611] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 217.949699][T18636] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.967165][T18646] FAULT_INJECTION: forcing a failure. [ 217.967165][T18646] name failslab, interval 1, probability 0, space 0, times 0 [ 217.969771][T18611] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 217.979796][T18646] CPU: 0 PID: 18646 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 217.979817][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.987778][T18611] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 217.996515][T18646] Call Trace: [ 217.996523][T18646] dump_stack_lvl+0xd6/0x122 [ 217.996544][T18646] dump_stack+0x11/0x1b [ 218.029672][T18646] should_fail+0x23c/0x250 [ 218.034095][T18646] __should_failslab+0x81/0x90 [ 218.038948][T18646] ? create_local_trace_uprobe+0xbb/0x3d0 [ 218.044677][T18646] should_failslab+0x5/0x20 [ 218.049218][T18646] kmem_cache_alloc_trace+0x52/0x320 [ 218.054507][T18646] create_local_trace_uprobe+0xbb/0x3d0 [ 218.060166][T18646] perf_uprobe_init+0xbe/0x140 [ 218.065028][T18646] perf_uprobe_event_init+0xde/0x140 [ 218.070415][T18646] perf_try_init_event+0x21a/0x400 [ 218.075622][T18646] perf_event_alloc+0xa60/0x1790 [ 218.080908][T18646] __se_sys_perf_event_open+0x5db/0x2810 [ 218.086567][T18646] __x64_sys_perf_event_open+0x63/0x70 [ 218.092028][T18646] do_syscall_64+0x44/0xa0 [ 218.096430][T18646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.102318][T18646] RIP: 0033:0x7ffa67e11a79 [ 218.106729][T18646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:18:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) [ 218.126512][T18646] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 218.134913][T18646] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 218.142877][T18646] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 218.150830][T18646] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 218.158796][T18646] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 218.166815][T18646] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 218.174847][T18646] trace_uprobe: Failed to allocate trace_uprobe.(-12) 16:18:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000008000000000002"], 0x11c}], 0x1}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r7, 0xfffffe98, 0x0}, 0x0) readahead(r3, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x100000002) [ 218.200660][T18629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.208664][T18629] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 218.219947][T18629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.227932][T18629] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 218.259276][T18653] FAULT_INJECTION: forcing a failure. [ 218.259276][T18653] name failslab, interval 1, probability 0, space 0, times 0 [ 218.271924][T18653] CPU: 0 PID: 18653 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 218.280683][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.290748][T18653] Call Trace: [ 218.294049][T18653] dump_stack_lvl+0xd6/0x122 [ 218.298627][T18653] dump_stack+0x11/0x1b [ 218.303190][T18653] should_fail+0x23c/0x250 [ 218.307595][T18653] ? kzalloc+0x16/0x20 [ 218.311670][T18653] __should_failslab+0x81/0x90 [ 218.316490][T18653] should_failslab+0x5/0x20 [ 218.321100][T18653] __kmalloc+0x6f/0x350 [ 218.325252][T18653] ? should_fail+0xd6/0x250 [ 218.329783][T18653] kzalloc+0x16/0x20 [ 218.333698][T18653] trace_probe_init+0x41/0x250 [ 218.338446][T18653] create_local_trace_uprobe+0xe3/0x3d0 [ 218.343993][T18653] perf_uprobe_init+0xbe/0x140 [ 218.348795][T18653] perf_uprobe_event_init+0xde/0x140 [ 218.354077][T18653] perf_try_init_event+0x21a/0x400 [ 218.359210][T18653] perf_event_alloc+0xa60/0x1790 [ 218.364194][T18653] __se_sys_perf_event_open+0x5db/0x2810 [ 218.369890][T18653] __x64_sys_perf_event_open+0x63/0x70 [ 218.375328][T18653] do_syscall_64+0x44/0xa0 [ 218.379771][T18653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.385644][T18653] RIP: 0033:0x7ffa67e11a79 [ 218.390036][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 218.409627][T18653] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 218.418033][T18653] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 218.425987][T18653] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 218.433950][T18653] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 218.441898][T18653] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 218.449851][T18653] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:43 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x2000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) [ 218.457953][T18653] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 218.465098][T18629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.473087][T18629] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 218.487110][T18629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.495144][T18629] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 218.533348][T18655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.541359][T18655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 218.568850][T18655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 218.576865][T18655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 218.589213][T18665] FAULT_INJECTION: forcing a failure. [ 218.589213][T18665] name failslab, interval 1, probability 0, space 0, times 0 [ 218.601852][T18665] CPU: 0 PID: 18665 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 218.610629][T18665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.620709][T18665] Call Trace: [ 218.623983][T18665] dump_stack_lvl+0xd6/0x122 [ 218.628570][T18665] dump_stack+0x11/0x1b [ 218.632714][T18665] should_fail+0x23c/0x250 [ 218.637138][T18665] ? trace_probe_init+0x1bd/0x250 [ 218.642209][T18665] __should_failslab+0x81/0x90 [ 218.646977][T18665] should_failslab+0x5/0x20 [ 218.651502][T18665] __kmalloc_track_caller+0x6d/0x350 [ 218.656790][T18665] ? __kmalloc+0x249/0x350 [ 218.661201][T18665] ? kzalloc+0x16/0x20 [ 218.665254][T18665] kstrdup+0x31/0x70 [ 218.669142][T18665] trace_probe_init+0x1bd/0x250 [ 218.674017][T18665] create_local_trace_uprobe+0xe3/0x3d0 [ 218.679557][T18665] perf_uprobe_init+0xbe/0x140 [ 218.684386][T18665] perf_uprobe_event_init+0xde/0x140 [ 218.684417][T18665] perf_try_init_event+0x21a/0x400 [ 218.694847][T18665] perf_event_alloc+0xa60/0x1790 [ 218.699797][T18665] __se_sys_perf_event_open+0x5db/0x2810 [ 218.705450][T18665] __x64_sys_perf_event_open+0x63/0x70 [ 218.710904][T18665] do_syscall_64+0x44/0xa0 [ 218.715321][T18665] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.721278][T18665] RIP: 0033:0x7ffa67e11a79 [ 218.725677][T18665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 218.745300][T18665] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 218.753708][T18665] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 218.761671][T18665] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 218.769666][T18665] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 16:18:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) [ 218.777627][T18665] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 218.785595][T18665] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 218.793625][T18665] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 218.802661][T18655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.810740][T18655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 218.839637][T18655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.847838][T18655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 218.885903][T18680] FAULT_INJECTION: forcing a failure. [ 218.885903][T18680] name failslab, interval 1, probability 0, space 0, times 0 [ 218.898674][T18680] CPU: 0 PID: 18680 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 218.900275][T18667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.907478][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.915466][T18667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 218.925546][T18680] Call Trace: [ 218.925555][T18680] dump_stack_lvl+0xd6/0x122 [ 218.925579][T18680] dump_stack+0x11/0x1b [ 218.948519][T18680] should_fail+0x23c/0x250 [ 218.950888][T18667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 218.953007][T18680] ? trace_probe_init+0x1e1/0x250 [ 218.960980][T18667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 218.965961][T18680] __should_failslab+0x81/0x90 [ 218.981695][T18680] should_failslab+0x5/0x20 [ 218.986188][T18680] __kmalloc_track_caller+0x6d/0x350 [ 218.991458][T18680] ? trace_probe_init+0x1bd/0x250 [ 218.996464][T18680] kstrdup+0x31/0x70 [ 219.000381][T18680] trace_probe_init+0x1e1/0x250 [ 219.005211][T18680] create_local_trace_uprobe+0xe3/0x3d0 [ 219.010796][T18680] perf_uprobe_init+0xbe/0x140 [ 219.015557][T18680] perf_uprobe_event_init+0xde/0x140 [ 219.020828][T18680] perf_try_init_event+0x21a/0x400 [ 219.025925][T18680] perf_event_alloc+0xa60/0x1790 [ 219.030874][T18680] __se_sys_perf_event_open+0x5db/0x2810 [ 219.036500][T18680] __x64_sys_perf_event_open+0x63/0x70 [ 219.042059][T18680] do_syscall_64+0x44/0xa0 [ 219.046463][T18680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 219.052399][T18680] RIP: 0033:0x7ffa67e11a79 [ 219.056795][T18680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 219.076383][T18680] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 16:18:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 219.084786][T18680] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 219.092743][T18680] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 219.100696][T18680] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 219.108720][T18680] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 219.116712][T18680] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 219.124707][T18680] trace_uprobe: Failed to allocate trace_uprobe.(-12) 16:18:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x4000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) [ 219.144808][T18667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.152854][T18667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 219.176397][T18667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.184428][T18667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xa, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 219.318300][T18695] FAULT_INJECTION: forcing a failure. [ 219.318300][T18695] name failslab, interval 1, probability 0, space 0, times 0 [ 219.330966][T18695] CPU: 1 PID: 18695 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 219.336300][T18677] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.339721][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.339733][T18695] Call Trace: [ 219.339739][T18695] dump_stack_lvl+0xd6/0x122 [ 219.339763][T18695] dump_stack+0x11/0x1b [ 219.347723][T18677] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 219.357760][T18695] should_fail+0x23c/0x250 [ 219.357782][T18695] ? create_local_trace_uprobe+0x247/0x3d0 [ 219.357800][T18695] __should_failslab+0x81/0x90 [ 219.372252][T18677] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.380743][T18695] should_failslab+0x5/0x20 [ 219.380770][T18695] __kmalloc_track_caller+0x6d/0x350 [ 219.385171][T18677] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 219.390946][T18695] kstrdup+0x31/0x70 [ 219.428211][T18695] create_local_trace_uprobe+0x247/0x3d0 [ 219.433904][T18695] perf_uprobe_init+0xbe/0x140 [ 219.438772][T18695] perf_uprobe_event_init+0xde/0x140 [ 219.444149][T18695] perf_try_init_event+0x21a/0x400 [ 219.449266][T18695] perf_event_alloc+0xa60/0x1790 [ 219.454218][T18695] __se_sys_perf_event_open+0x5db/0x2810 [ 219.459917][T18695] __x64_sys_perf_event_open+0x63/0x70 [ 219.465360][T18695] do_syscall_64+0x44/0xa0 [ 219.469764][T18695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 219.475644][T18695] RIP: 0033:0x7ffa67e11a79 [ 219.480040][T18695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 219.499643][T18695] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 219.508036][T18695] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xa, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0xd0, 0x0, 0xcf56dbb667a091ae, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0xfffffd53}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd0}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 219.515989][T18695] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 219.523941][T18695] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 219.531893][T18695] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 219.539848][T18695] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 219.664121][T18677] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.672158][T18677] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 219.699838][T18677] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x10000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 219.707849][T18677] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 219.736011][T18708] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. 16:18:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xb, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xb, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:45 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x7ffff000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 219.846023][T18692] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.854068][T18692] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 219.876278][T18692] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.884374][T18692] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x84, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x84}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendfile(r0, r0, &(0x7f0000000040)=0xff80000000000000, 0x80000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000000c0)={0x14, 0x26, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0x10}]}, 0x14}], 0x2}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 219.982541][T18692] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 219.990561][T18692] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 220.017889][T18692] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.025937][T18692] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) 16:18:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xc, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 220.061867][T18727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.069886][T18727] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 220.089631][T18728] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.098172][T18727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:45 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xeffdffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 220.107008][T18727] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 220.136209][T18727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.144245][T18727] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 220.145596][T18746] FAULT_INJECTION: forcing a failure. [ 220.145596][T18746] name failslab, interval 1, probability 0, space 0, times 0 [ 220.163033][T18727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.168133][T18746] CPU: 0 PID: 18746 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 220.176067][T18727] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 220.184781][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.184792][T18746] Call Trace: [ 220.184799][T18746] dump_stack_lvl+0xd6/0x122 [ 220.213655][T18746] dump_stack+0x11/0x1b [ 220.217820][T18746] should_fail+0x23c/0x250 [ 220.222239][T18746] ? traceprobe_set_print_fmt+0x45/0x90 [ 220.227827][T18746] __should_failslab+0x81/0x90 [ 220.232601][T18746] should_failslab+0x5/0x20 [ 220.237108][T18746] __kmalloc+0x6f/0x350 [ 220.241338][T18746] ? __kmalloc_track_caller+0x247/0x350 [ 220.246877][T18746] traceprobe_set_print_fmt+0x45/0x90 [ 220.252316][T18746] create_local_trace_uprobe+0x2fd/0x3d0 [ 220.257952][T18746] perf_uprobe_init+0xbe/0x140 [ 220.262918][T18746] perf_uprobe_event_init+0xde/0x140 [ 220.268266][T18746] perf_try_init_event+0x21a/0x400 [ 220.273554][T18746] perf_event_alloc+0xa60/0x1790 [ 220.278487][T18746] __se_sys_perf_event_open+0x5db/0x2810 [ 220.284131][T18746] __x64_sys_perf_event_open+0x63/0x70 [ 220.289834][T18746] do_syscall_64+0x44/0xa0 [ 220.294262][T18746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 220.300151][T18746] RIP: 0033:0x7ffa67e11a79 [ 220.304556][T18746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 220.324177][T18746] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 220.333071][T18746] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 220.341041][T18746] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 220.349006][T18746] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 16:18:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) 16:18:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xc, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 220.357005][T18746] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 220.364965][T18746] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 220.382325][T18741] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.390865][T18741] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 220.404157][T18741] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.412166][T18741] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 220.445588][T18741] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000a000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302eb000000000080003690011000200303030303a30303a31302e30000000000800030000000000", @ANYRES64=r0, @ANYRESHEX], 0x80}}, 0x4) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB="03008500", @ANYRES16=r4, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x2, 0x3, 0x1, 0x4}]}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB="bfa50008", @ANYRES16=r6, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000640)={0x53, 0x4, 0xd2, 0x1, @buffer={0x0, 0x9f, &(0x7f0000000440)=""/159}, &(0x7f0000000880)="8286d0bd6f72f617de4ce630258ca2a4432bf445f770300aea1d422ef36add72e72fdae7308fd0e21213a3dc1d270dc9d66dd3d2705d5a216baaa52e5b9afaf1a39000dd540babf57fda1e1f92542053e309000000000000001d5ef14d1636eb6623f4d0b7f58b02833ce0867e8545d476dc32bb4f85bcff16a63397880d27828d15f987d5dc014d7c8c51791f2542bf8cc8b5698e82e50b3ac9118240071cbc2e0bedba3cf028bab9cb35df2923b81ee5f988f1cda72cce83446df9743aa0e573f5a32bea66c51e3c9e2941893422e4bbbc", &(0x7f00000005c0)=""/46, 0x100, 0x40, 0x3, &(0x7f00000000c0)}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0xe}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70b929, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004801}, 0x8800) sendfile(r2, r1, 0x0, 0x100000002) 16:18:45 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf2000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 220.453615][T18741] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 220.475468][T18741] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.483499][T18741] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 220.503644][T18759] FAULT_INJECTION: forcing a failure. [ 220.503644][T18759] name failslab, interval 1, probability 0, space 0, times 0 [ 220.516308][T18759] CPU: 1 PID: 18759 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 220.525089][T18759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.535147][T18759] Call Trace: [ 220.538422][T18759] dump_stack_lvl+0xd6/0x122 [ 220.543103][T18759] dump_stack+0x11/0x1b [ 220.547259][T18759] should_fail+0x23c/0x250 [ 220.551672][T18759] __should_failslab+0x81/0x90 [ 220.556432][T18759] ? __uprobe_register+0xfe/0x8b0 16:18:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 220.561517][T18759] should_failslab+0x5/0x20 [ 220.566036][T18759] kmem_cache_alloc_trace+0x52/0x320 [ 220.571328][T18759] __uprobe_register+0xfe/0x8b0 [ 220.576240][T18759] ? _find_next_bit+0x188/0x190 [ 220.581125][T18759] uprobe_register_refctr+0x29/0x40 [ 220.586333][T18759] probe_event_enable+0x2be/0x7d0 [ 220.591367][T18759] ? __uprobe_trace_func+0x440/0x440 [ 220.596653][T18759] trace_uprobe_register+0x88/0x410 [ 220.601849][T18759] perf_trace_event_init+0x34e/0x790 [ 220.607182][T18759] perf_uprobe_init+0xf5/0x140 [ 220.611939][T18759] perf_uprobe_event_init+0xde/0x140 [ 220.617346][T18759] perf_try_init_event+0x21a/0x400 [ 220.622475][T18759] perf_event_alloc+0xa60/0x1790 [ 220.627403][T18759] __se_sys_perf_event_open+0x5db/0x2810 [ 220.633066][T18759] __x64_sys_perf_event_open+0x63/0x70 [ 220.638527][T18759] do_syscall_64+0x44/0xa0 [ 220.642929][T18759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 220.648849][T18759] RIP: 0033:0x7ffa67e11a79 [ 220.653305][T18759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 220.673105][T18759] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 220.681516][T18759] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 220.689506][T18759] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 220.697477][T18759] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 220.705588][T18759] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 16:18:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) 16:18:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 220.713559][T18759] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 220.726761][T18756] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.734868][T18756] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 220.747078][T18766] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.760485][T18756] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.768487][T18756] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 220.790011][T18756] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.798108][T18756] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfcfdffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 220.821980][T18756] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 220.830079][T18756] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 220.861422][T18778] FAULT_INJECTION: forcing a failure. [ 220.861422][T18778] name failslab, interval 1, probability 0, space 0, times 0 [ 220.874141][T18778] CPU: 1 PID: 18778 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 220.882969][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.893075][T18778] Call Trace: [ 220.896353][T18778] dump_stack_lvl+0xd6/0x122 [ 220.900941][T18778] dump_stack+0x11/0x1b [ 220.905074][T18778] should_fail+0x23c/0x250 [ 220.909605][T18778] __should_failslab+0x81/0x90 [ 220.914384][T18778] ? register_for_each_vma+0x372/0x890 [ 220.919835][T18778] should_failslab+0x5/0x20 [ 220.924320][T18778] kmem_cache_alloc_trace+0x52/0x320 [ 220.929620][T18778] register_for_each_vma+0x372/0x890 [ 220.934885][T18778] __uprobe_register+0x404/0x8b0 [ 220.939867][T18778] uprobe_register_refctr+0x29/0x40 [ 220.945060][T18778] probe_event_enable+0x2be/0x7d0 [ 220.950135][T18778] ? __uprobe_trace_func+0x440/0x440 [ 220.955437][T18778] trace_uprobe_register+0x88/0x410 [ 220.960626][T18778] perf_trace_event_init+0x34e/0x790 [ 220.966009][T18778] perf_uprobe_init+0xf5/0x140 [ 220.970865][T18778] perf_uprobe_event_init+0xde/0x140 [ 220.976176][T18778] perf_try_init_event+0x21a/0x400 [ 220.981348][T18778] perf_event_alloc+0xa60/0x1790 [ 220.986315][T18778] __se_sys_perf_event_open+0x5db/0x2810 [ 220.992004][T18778] __x64_sys_perf_event_open+0x63/0x70 [ 220.997550][T18778] do_syscall_64+0x44/0xa0 [ 221.001999][T18778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.007920][T18778] RIP: 0033:0x7ffa67e11a79 [ 221.012369][T18778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 221.031957][T18778] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 221.040395][T18778] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 221.048346][T18778] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 221.056306][T18778] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 221.064278][T18778] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 16:18:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 221.072229][T18778] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 221.092757][T18775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.100818][T18775] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 221.112191][T18775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfefdffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 221.120228][T18775] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 221.141877][T18775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.150019][T18775] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 15) 16:18:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x10, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 221.166969][T18775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.174981][T18775] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r3 = fsmount(r1, 0x1, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1a8, r4, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x61}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac616360bc2009e6408a473c62a6a01c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b565f11560b99231edefb578a52a2fe241cc53f4d1de6b6c06c0d42a013c7695"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="77502dfbc0d184a368c55a18557516e0"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3421034d9fb1a178f418b3550cb8ba49147dac0041d1e13b4e962f3a88d2d342"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f108b8c36e3f5dadcd3e158118f4ba0d70f71c76a73ffea0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5d7fc9c77c2a0b3bd298343d83b0779e4b99ad4e272b7b26"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9c64adc7b8197a1ebd151846c725fa02fc223749fff959e6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c7477d898e832193b0726756ac01ccc59e1fcca3625d8834"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c8fddb2a2ed3e59649bb93310fb8dc69"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b7e590beb2075428808f1b5d4a3e54a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "874fec692d078a87"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bdcf2b7e6a0ce745"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "69e92b5afdc847b0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a084feebf680e9225f02fdf22cbb268e06f28965e7d573bd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="87ba2f762fbbb3b27cdf2eec1a584306"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc000000}, 0x20042840) 16:18:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffdffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 221.249057][T18787] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.257097][T18787] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 221.271869][T18787] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.280033][T18787] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdef, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 221.312478][T18787] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.320531][T18787] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 221.337804][T18787] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.345898][T18787] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 221.398646][T18812] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.461656][T18804] FAULT_INJECTION: forcing a failure. [ 221.461656][T18804] name failslab, interval 1, probability 0, space 0, times 0 [ 221.474323][T18804] CPU: 0 PID: 18804 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 221.483083][T18804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.493129][T18804] Call Trace: [ 221.496407][T18804] dump_stack_lvl+0xd6/0x122 [ 221.500994][T18804] dump_stack+0x11/0x1b [ 221.505137][T18804] should_fail+0x23c/0x250 [ 221.509543][T18804] __should_failslab+0x81/0x90 [ 221.514298][T18804] ? register_for_each_vma+0x372/0x890 [ 221.519788][T18804] should_failslab+0x5/0x20 [ 221.524327][T18804] kmem_cache_alloc_trace+0x52/0x320 [ 221.529615][T18804] ? register_for_each_vma+0x372/0x890 [ 221.535199][T18804] ? vma_interval_tree_iter_next+0x24c/0x280 [ 221.541211][T18804] register_for_each_vma+0x372/0x890 [ 221.546479][T18804] __uprobe_register+0x404/0x8b0 [ 221.551430][T18804] uprobe_register_refctr+0x29/0x40 [ 221.556611][T18804] probe_event_enable+0x2be/0x7d0 [ 221.561654][T18804] ? __uprobe_trace_func+0x440/0x440 [ 221.566923][T18804] trace_uprobe_register+0x88/0x410 [ 221.572107][T18804] perf_trace_event_init+0x34e/0x790 [ 221.577422][T18804] perf_uprobe_init+0xf5/0x140 [ 221.582171][T18804] perf_uprobe_event_init+0xde/0x140 [ 221.587442][T18804] perf_try_init_event+0x21a/0x400 [ 221.592539][T18804] perf_event_alloc+0xa60/0x1790 [ 221.597516][T18804] __se_sys_perf_event_open+0x5db/0x2810 [ 221.603136][T18804] __x64_sys_perf_event_open+0x63/0x70 [ 221.608766][T18804] do_syscall_64+0x44/0xa0 [ 221.613168][T18804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.619051][T18804] RIP: 0033:0x7ffa67e11a79 [ 221.623446][T18804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 221.643038][T18804] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 221.651606][T18804] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 221.659993][T18804] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 221.668153][T18804] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 221.676111][T18804] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 221.684100][T18804] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x11, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 221.717097][T18799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.725214][T18799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 221.737111][T18799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.745124][T18799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdfc, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 221.768492][T18799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.776514][T18799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 221.799678][T18799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.807720][T18799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) 16:18:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdfe, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x2, 0x80800) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r6, 0xfffffe98, 0x0}, 0x0) r7 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r7, 0xbf, 0x0, 0x2, 0x0, 0x0) sendfile(r6, r7, &(0x7f0000000340)=0x1, 0xa0eb) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0xff, 0x86, "b0220d8484c7c730dc7f85d2a31e19009f7853543307e83c5b056b1e84d7700f6d072bacad596c291b3dbd7ff3ca2b0fb267ac6e27d750e1112426c23a8be64958e6484a772ffa4a4eef2fe3c266b77355316bf525eaafa98937edcb12895f03d89c1e708b21dc38fd9918e0e45c2147fe2584cdd27bd40d93190e9bca1b3c8296222403d748"}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendfile(r2, r1, 0x0, 0x100000002) 16:18:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 221.973862][T18823] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 221.981991][T18823] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 221.998152][T18823] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.006186][T18823] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 222.021193][T18823] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.029187][T18823] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 222.040647][T18823] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.048666][T18823] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 222.048709][T18843] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.074583][T18842] FAULT_INJECTION: forcing a failure. [ 222.074583][T18842] name failslab, interval 1, probability 0, space 0, times 0 [ 222.087229][T18842] CPU: 1 PID: 18842 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 222.095975][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.106210][T18842] Call Trace: [ 222.109488][T18842] dump_stack_lvl+0xd6/0x122 [ 222.114102][T18842] dump_stack+0x11/0x1b [ 222.118260][T18842] should_fail+0x23c/0x250 [ 222.122712][T18842] __should_failslab+0x81/0x90 [ 222.127671][T18842] ? register_for_each_vma+0x372/0x890 [ 222.133107][T18842] should_failslab+0x5/0x20 [ 222.137621][T18842] kmem_cache_alloc_trace+0x52/0x320 [ 222.143231][T18842] ? register_for_each_vma+0x372/0x890 [ 222.148736][T18842] ? vma_interval_tree_iter_next+0x263/0x280 [ 222.154708][T18842] register_for_each_vma+0x372/0x890 [ 222.160036][T18842] __uprobe_register+0x404/0x8b0 [ 222.164964][T18842] uprobe_register_refctr+0x29/0x40 [ 222.170377][T18842] probe_event_enable+0x2be/0x7d0 [ 222.175380][T18842] ? __uprobe_trace_func+0x440/0x440 [ 222.180693][T18842] trace_uprobe_register+0x88/0x410 [ 222.185869][T18842] perf_trace_event_init+0x34e/0x790 [ 222.191152][T18842] perf_uprobe_init+0xf5/0x140 [ 222.196080][T18842] perf_uprobe_event_init+0xde/0x140 [ 222.201519][T18842] perf_try_init_event+0x21a/0x400 [ 222.206610][T18842] perf_event_alloc+0xa60/0x1790 [ 222.211624][T18842] __se_sys_perf_event_open+0x5db/0x2810 [ 222.217264][T18842] __x64_sys_perf_event_open+0x63/0x70 [ 222.222725][T18842] do_syscall_64+0x44/0xa0 [ 222.227194][T18842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.233091][T18842] RIP: 0033:0x7ffa67e11a79 [ 222.237762][T18842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.257625][T18842] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 222.266130][T18842] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x12, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 222.274122][T18842] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 222.282084][T18842] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 222.290369][T18842] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 222.298359][T18842] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xf, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 17) 16:18:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffe00, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 222.330985][T18845] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.339009][T18845] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 222.353565][T18845] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.361641][T18845] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x10000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 222.437312][T18845] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.445714][T18845] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 222.460516][T18845] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.468604][T18845] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x7ffffffff000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x40001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) [ 222.569539][T18852] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.577774][T18852] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 222.590307][T18852] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.598295][T18852] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x1000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 222.694556][T18852] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.702621][T18852] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 222.725458][T18852] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 222.733592][T18852] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 222.763883][T18878] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.847921][T18863] FAULT_INJECTION: forcing a failure. [ 222.847921][T18863] name failslab, interval 1, probability 0, space 0, times 0 [ 222.860735][T18863] CPU: 0 PID: 18863 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 222.869572][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.879767][T18863] Call Trace: [ 222.883248][T18863] dump_stack_lvl+0xd6/0x122 [ 222.887846][T18863] dump_stack+0x11/0x1b [ 222.892006][T18863] should_fail+0x23c/0x250 [ 222.896424][T18863] __should_failslab+0x81/0x90 [ 222.901190][T18863] ? register_for_each_vma+0x372/0x890 [ 222.906735][T18863] should_failslab+0x5/0x20 [ 222.911254][T18863] kmem_cache_alloc_trace+0x52/0x320 [ 222.916543][T18863] ? register_for_each_vma+0x372/0x890 [ 222.922031][T18863] ? vma_interval_tree_iter_next+0x24c/0x280 [ 222.928025][T18863] register_for_each_vma+0x372/0x890 [ 222.933312][T18863] __uprobe_register+0x404/0x8b0 [ 222.938323][T18863] uprobe_register_refctr+0x29/0x40 [ 222.943522][T18863] probe_event_enable+0x2be/0x7d0 [ 222.948549][T18863] ? __uprobe_trace_func+0x440/0x440 [ 222.953841][T18863] trace_uprobe_register+0x88/0x410 [ 222.959157][T18863] perf_trace_event_init+0x34e/0x790 [ 222.964451][T18863] perf_uprobe_init+0xf5/0x140 [ 222.969266][T18863] perf_uprobe_event_init+0xde/0x140 [ 222.974634][T18863] perf_try_init_event+0x21a/0x400 [ 222.979771][T18863] perf_event_alloc+0xa60/0x1790 [ 222.984707][T18863] __se_sys_perf_event_open+0x5db/0x2810 [ 222.990377][T18863] __x64_sys_perf_event_open+0x63/0x70 [ 222.995835][T18863] do_syscall_64+0x44/0xa0 [ 223.000272][T18863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.006155][T18863] RIP: 0033:0x7ffa67e11a79 [ 223.010549][T18863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.030156][T18863] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 223.038611][T18863] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x13, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0103f3ffffff02000000000000000000"], 0x11c}], 0x1}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 223.046560][T18863] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 223.054509][T18863] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 223.062510][T18863] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 223.070501][T18863] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 18) [ 223.097048][T18858] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.105067][T18858] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 223.116409][T18858] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.124422][T18858] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:48 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf0ff7f00000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 223.152561][T18858] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.160620][T18858] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 223.184465][T18858] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.192576][T18858] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 223.218082][T18895] FAULT_INJECTION: forcing a failure. [ 223.218082][T18895] name failslab, interval 1, probability 0, space 0, times 0 [ 223.230790][T18895] CPU: 1 PID: 18895 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 223.239568][T18895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.249613][T18895] Call Trace: [ 223.252881][T18895] dump_stack_lvl+0xd6/0x122 [ 223.257465][T18895] dump_stack+0x11/0x1b [ 223.261617][T18895] should_fail+0x23c/0x250 [ 223.266069][T18895] __should_failslab+0x81/0x90 [ 223.270947][T18895] ? register_for_each_vma+0x372/0x890 [ 223.276432][T18895] should_failslab+0x5/0x20 [ 223.280953][T18895] kmem_cache_alloc_trace+0x52/0x320 [ 223.286235][T18895] ? register_for_each_vma+0x372/0x890 [ 223.291702][T18895] ? vma_interval_tree_iter_next+0x24c/0x280 [ 223.297793][T18895] register_for_each_vma+0x372/0x890 [ 223.303079][T18895] __uprobe_register+0x404/0x8b0 [ 223.308067][T18895] uprobe_register_refctr+0x29/0x40 [ 223.313261][T18895] probe_event_enable+0x2be/0x7d0 [ 223.318370][T18895] ? __uprobe_trace_func+0x440/0x440 [ 223.323639][T18895] trace_uprobe_register+0x88/0x410 [ 223.328830][T18895] perf_trace_event_init+0x34e/0x790 [ 223.334112][T18895] perf_uprobe_init+0xf5/0x140 [ 223.338880][T18895] perf_uprobe_event_init+0xde/0x140 [ 223.344168][T18895] perf_try_init_event+0x21a/0x400 [ 223.349335][T18895] perf_event_alloc+0xa60/0x1790 [ 223.354342][T18895] __se_sys_perf_event_open+0x5db/0x2810 [ 223.359979][T18895] __x64_sys_perf_event_open+0x63/0x70 [ 223.365436][T18895] do_syscall_64+0x44/0xa0 [ 223.369939][T18895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.375916][T18895] RIP: 0033:0x7ffa67e11a79 [ 223.380391][T18895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:18:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x10, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 19) [ 223.399994][T18895] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 223.408833][T18895] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 223.416811][T18895] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 223.424945][T18895] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 223.432902][T18895] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 223.440854][T18895] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 223.475089][T18889] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.483104][T18889] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 223.495270][T18889] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.503374][T18889] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 223.518175][T18889] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.526180][T18889] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 223.538089][T18889] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.546125][T18889] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 223.558992][T18912] FAULT_INJECTION: forcing a failure. [ 223.558992][T18912] name failslab, interval 1, probability 0, space 0, times 0 [ 223.571647][T18912] CPU: 1 PID: 18912 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 223.580385][T18912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.590415][T18912] Call Trace: [ 223.593708][T18912] dump_stack_lvl+0xd6/0x122 [ 223.598296][T18912] dump_stack+0x11/0x1b [ 223.602506][T18912] should_fail+0x23c/0x250 [ 223.606927][T18912] __should_failslab+0x81/0x90 [ 223.611670][T18912] ? register_for_each_vma+0x372/0x890 [ 223.617108][T18912] should_failslab+0x5/0x20 [ 223.621779][T18912] kmem_cache_alloc_trace+0x52/0x320 [ 223.627053][T18912] ? register_for_each_vma+0x372/0x890 [ 223.632579][T18912] ? vma_interval_tree_iter_next+0x24c/0x280 [ 223.638555][T18912] register_for_each_vma+0x372/0x890 [ 223.643914][T18912] __uprobe_register+0x404/0x8b0 [ 223.648826][T18912] uprobe_register_refctr+0x29/0x40 [ 223.654064][T18912] probe_event_enable+0x2be/0x7d0 [ 223.659074][T18912] ? __uprobe_trace_func+0x440/0x440 [ 223.664346][T18912] trace_uprobe_register+0x88/0x410 [ 223.669527][T18912] perf_trace_event_init+0x34e/0x790 [ 223.674811][T18912] perf_uprobe_init+0xf5/0x140 [ 223.679593][T18912] perf_uprobe_event_init+0xde/0x140 [ 223.684869][T18912] perf_try_init_event+0x21a/0x400 [ 223.690008][T18912] perf_event_alloc+0xa60/0x1790 [ 223.694968][T18912] __se_sys_perf_event_open+0x5db/0x2810 [ 223.700631][T18912] __x64_sys_perf_event_open+0x63/0x70 [ 223.706121][T18912] do_syscall_64+0x44/0xa0 [ 223.710609][T18912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.716485][T18912] RIP: 0033:0x7ffa67e11a79 [ 223.720934][T18912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.740544][T18912] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 223.749014][T18912] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 223.756973][T18912] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 223.764934][T18912] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 16:18:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xa, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 223.772888][T18912] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 223.780847][T18912] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 223.813693][T18909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x11, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x21, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:49 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf0ffffff7f0000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 223.821716][T18909] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 223.832832][T18909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.840926][T18909] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 223.864989][T18909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:49 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfeffffffffffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 223.873026][T18909] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 223.895285][T18909] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 223.903320][T18909] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:49 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 20) [ 224.020982][T18915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.028978][T18915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 224.043347][T18915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.051366][T18915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xb, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:49 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x100000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='rdma.current\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x24}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x91, 0x68}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xa0}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000199a9f00000000210000020000"], 0x11c}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYRES16=r7, @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x5384cdc1afdb8edb}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 224.231685][T18915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.239778][T18915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 224.253872][T18915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.261887][T18915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 224.278797][T18941] FAULT_INJECTION: forcing a failure. [ 224.278797][T18941] name failslab, interval 1, probability 0, space 0, times 0 [ 224.291410][T18941] CPU: 1 PID: 18941 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 224.300175][T18941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.310221][T18941] Call Trace: [ 224.313493][T18941] dump_stack_lvl+0xd6/0x122 [ 224.318089][T18941] dump_stack+0x11/0x1b [ 224.322237][T18941] should_fail+0x23c/0x250 [ 224.326667][T18941] __should_failslab+0x81/0x90 [ 224.331435][T18941] ? register_for_each_vma+0x372/0x890 [ 224.336888][T18941] should_failslab+0x5/0x20 [ 224.341386][T18941] kmem_cache_alloc_trace+0x52/0x320 [ 224.346736][T18941] ? register_for_each_vma+0x372/0x890 [ 224.352198][T18941] ? vma_interval_tree_iter_next+0x24c/0x280 [ 224.358179][T18941] register_for_each_vma+0x372/0x890 [ 224.363463][T18941] __uprobe_register+0x404/0x8b0 [ 224.368419][T18941] uprobe_register_refctr+0x29/0x40 [ 224.373609][T18941] probe_event_enable+0x2be/0x7d0 [ 224.378626][T18941] ? __uprobe_trace_func+0x440/0x440 [ 224.383912][T18941] trace_uprobe_register+0x88/0x410 [ 224.389107][T18941] perf_trace_event_init+0x34e/0x790 [ 224.394395][T18941] perf_uprobe_init+0xf5/0x140 [ 224.399177][T18941] perf_uprobe_event_init+0xde/0x140 [ 224.404464][T18941] perf_try_init_event+0x21a/0x400 [ 224.409601][T18941] perf_event_alloc+0xa60/0x1790 [ 224.414691][T18941] __se_sys_perf_event_open+0x5db/0x2810 [ 224.420316][T18941] __x64_sys_perf_event_open+0x63/0x70 [ 224.425767][T18941] do_syscall_64+0x44/0xa0 [ 224.430258][T18941] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.436587][T18941] RIP: 0033:0x7ffa67e11a79 [ 224.440998][T18941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.460601][T18941] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 224.469020][T18941] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x12, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xc, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x22, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 224.477050][T18941] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 224.485021][T18941] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.492994][T18941] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 224.501019][T18941] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:49 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 21) 16:18:49 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 224.548833][T18951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.556863][T18951] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 224.578886][T18951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.586926][T18951] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:49 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 224.618039][T18951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.626172][T18951] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 224.648201][T18951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 224.656226][T18951] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 224.775971][T18964] FAULT_INJECTION: forcing a failure. [ 224.775971][T18964] name failslab, interval 1, probability 0, space 0, times 0 [ 224.788674][T18964] CPU: 1 PID: 18964 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 224.797446][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.807501][T18964] Call Trace: [ 224.810778][T18964] dump_stack_lvl+0xd6/0x122 [ 224.815436][T18964] dump_stack+0x11/0x1b [ 224.819646][T18964] should_fail+0x23c/0x250 [ 224.824065][T18964] __should_failslab+0x81/0x90 [ 224.828830][T18964] ? register_for_each_vma+0x372/0x890 [ 224.834291][T18964] should_failslab+0x5/0x20 [ 224.838876][T18964] kmem_cache_alloc_trace+0x52/0x320 [ 224.844163][T18964] ? register_for_each_vma+0x372/0x890 [ 224.849622][T18964] ? vma_interval_tree_iter_next+0x24c/0x280 [ 224.855610][T18964] register_for_each_vma+0x372/0x890 [ 224.860895][T18964] __uprobe_register+0x404/0x8b0 [ 224.865841][T18964] uprobe_register_refctr+0x29/0x40 [ 224.871150][T18964] probe_event_enable+0x2be/0x7d0 [ 224.876243][T18964] ? __uprobe_trace_func+0x440/0x440 [ 224.881677][T18964] trace_uprobe_register+0x88/0x410 [ 224.886943][T18964] perf_trace_event_init+0x34e/0x790 [ 224.892325][T18964] perf_uprobe_init+0xf5/0x140 [ 224.897094][T18964] perf_uprobe_event_init+0xde/0x140 [ 224.902499][T18964] perf_try_init_event+0x21a/0x400 [ 224.907614][T18964] perf_event_alloc+0xa60/0x1790 [ 224.912556][T18964] __se_sys_perf_event_open+0x5db/0x2810 [ 224.918201][T18964] __x64_sys_perf_event_open+0x63/0x70 [ 224.923731][T18964] do_syscall_64+0x44/0xa0 [ 224.928147][T18964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.934045][T18964] RIP: 0033:0x7ffa67e11a79 [ 224.938470][T18964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.958139][T18964] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 224.966579][T18964] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 224.974553][T18964] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 224.982542][T18964] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.990518][T18964] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 224.998492][T18964] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x27, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x21, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 225.033761][T18960] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.041796][T18960] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 225.056086][T18960] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.064139][T18960] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:50 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x400000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 225.090940][T18960] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.098945][T18960] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 225.132671][T18960] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.140699][T18960] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x32, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 22) 16:18:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xe, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 225.179182][T18974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.187213][T18974] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:50 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf00000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003e000033397f00030001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f63617374000500830000"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x88, r2, 0x0, 0x0, 0x1, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 225.222329][T18974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.230360][T18974] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:50 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x1000000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 225.352892][T18974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.360977][T18974] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 225.373557][T18974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.381567][T18974] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 225.459424][T19000] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.489503][T18996] FAULT_INJECTION: forcing a failure. [ 225.489503][T18996] name failslab, interval 1, probability 0, space 0, times 0 16:18:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x22, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 225.502119][T18996] CPU: 1 PID: 18996 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 225.510892][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.520945][T18996] Call Trace: [ 225.524207][T18996] dump_stack_lvl+0xd6/0x122 [ 225.528844][T18996] dump_stack+0x11/0x1b [ 225.532997][T18996] should_fail+0x23c/0x250 [ 225.537395][T18996] __should_failslab+0x81/0x90 [ 225.542173][T18996] ? register_for_each_vma+0x372/0x890 [ 225.547610][T18996] should_failslab+0x5/0x20 [ 225.552221][T18996] kmem_cache_alloc_trace+0x52/0x320 [ 225.557502][T18996] ? register_for_each_vma+0x372/0x890 [ 225.562942][T18996] ? vma_interval_tree_iter_next+0x263/0x280 [ 225.568969][T18996] register_for_each_vma+0x372/0x890 [ 225.574248][T18996] __uprobe_register+0x404/0x8b0 [ 225.579165][T18996] uprobe_register_refctr+0x29/0x40 [ 225.584359][T18996] probe_event_enable+0x2be/0x7d0 [ 225.589375][T18996] ? __uprobe_trace_func+0x440/0x440 [ 225.594718][T18996] trace_uprobe_register+0x88/0x410 [ 225.599904][T18996] perf_trace_event_init+0x34e/0x790 [ 225.605183][T18996] perf_uprobe_init+0xf5/0x140 [ 225.609936][T18996] perf_uprobe_event_init+0xde/0x140 [ 225.615205][T18996] perf_try_init_event+0x21a/0x400 [ 225.620339][T18996] perf_event_alloc+0xa60/0x1790 [ 225.625259][T18996] __se_sys_perf_event_open+0x5db/0x2810 [ 225.630947][T18996] __x64_sys_perf_event_open+0x63/0x70 [ 225.636383][T18996] do_syscall_64+0x44/0xa0 [ 225.640837][T18996] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.646780][T18996] RIP: 0033:0x7ffa67e11a79 [ 225.651186][T18996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.670858][T18996] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 225.679285][T18996] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 225.687284][T18996] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 225.695251][T18996] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 225.703221][T18996] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 225.711188][T18996] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 225.744192][T18989] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x10, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 23) 16:18:50 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xeffdffffffffffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 225.752207][T18989] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 225.763821][T18989] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.771884][T18989] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 225.811407][T18989] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.819432][T18989] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 225.845667][T18989] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf200000000000000, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 225.853710][T18989] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x27, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfcfdffffffffffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 225.963458][T19015] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 225.971465][T19015] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:51 executing program 1: syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r1, 0xfffffe98, 0x0}, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r5, 0xfffffe98, 0x0}, 0x0) sendmmsg(r1, &(0x7f000000a900)=[{{&(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)="a0437635afc9655250ed0112fedb39e37d922b9d5cb666a6cc68975f7103cb1613d042315ec0a7ff2e", 0x29}, {&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000440)="11aa68812b0751c78ad70a9f43367b442b3efc49992f626d1a297882be5887c702ea9936b1b0e856cd01ee7278a8ef5a09f2f3ad5e8eb8dc54947da68565b9aa3848678232cdfbbae8257d9eecdd3c6f4d36b1ee15ac9138202cba37e5755514be4a21682cd94544cf8093624bca6309b3c8588291a46725aa54ad4c1ab7013a54fec19fb8c1eb1f871f81949bb83cd5489eebf51e41413bff5c0a3d103a85523cbbe7060888404b2b9fdf16b3d6a17d3b921cb11ac9fb63be7fb981d1", 0xbd}, {&(0x7f0000000500)="8481e1b636bb0a1d13cf9dfeea6b90b8dfa9b37e7b4e8f1f0bf7a296393c63eeb69402e3367b3c51262a4d870430189463d003bb28063cc839e81aa16cfbcd91166702af73848f8b0ebec55a567a22e3924850e13967f068e2d5224dca870097eea204870de78378dddbe0df375ab267f1a32d0f6b60794ea81deef0847784283d86841f4abb", 0x86}, {&(0x7f00000005c0)="20fd1405f76885c04b19aab4918da2b9178b939de3706faae9157b1e587b7d8bebeaeb07fea17238e950360eb9450af4c016c68ac3c046e6c8f7aa22464f395e142357aab4b40045b335d7af5efd21b93f53b95cdc92036ac7f0b0118fa9bbebd1f67485c78deb6bb08dec29e11388cad23d7f403b7006062aa011972db44f13f017", 0x82}, {&(0x7f0000000680)="31544523e1f24e51021f6600ddf54d3fb9225e4dfaecf9886f58b13f52da8d20e7772d7bcf0bd0fa26707c247668795e3bc93005fddfca8cb0e574963b3ee103fb19d92d30e5027558116128b2935b7ce9b58757d22d6ae0d0", 0x59}, {&(0x7f0000000700)="447f3e52248a0b712f58038cdf3fbebf4468871852db50e30fe7d13d3a519efe1bd5ce36470981ffb69e02f643387e0d5722e5f3b57a3029cc44b10658187ac4b7cec919289cada632afab81", 0x4c}, {&(0x7f0000000780)="046da9448fc6a45dd12002e6f710120be3328e6e791dca38d9755639db22a3cedcbaa9bc645fed49ad3667a4aa18e64636dd4096984bdf391cb6055da2c7cae8a608dbeadadb4c358c18bac56f25e3085e35884aa44523ce5fad32b6ff525fa3c13c310f8d94865206c29ab43a718a3fe89479ad891502c14a42192e3ac36eb4bc7d6314127223321481d7941046520f5c3a293e1adb765c4cb717a9c5f06f652d170da87e8980", 0xa7}, {&(0x7f0000000840)="66a10c936be1fe279dfeec34c85f3bd64e7cfa00dcec98e27dbba141db1e0d5565d340dd05690c4748989fadb5ab549f38ee0e05743ab8a088d19bc75d7084af2a22928152f64367ad9c07d647c2810b06aca16e3bed9d128256cab1163fb22d3f962ff9a47088e4a403f6f6b7478ae08c626045b92ff9d3b705f3a15b51bdf8bf117dfaa5c4ccf1bfa024e920386257eaf8324cd2fdd2ca7b230708f6c94f97d45ed82053b5d29110da8c4c143586c327730b791aa31e24bf4c0bea2becc609cf780538b173c718e7e6c48eda3988dd72f8b25b2bc992a1f056408d7fc9b1fb54a8d8f6", 0xe4}, {&(0x7f0000000940)="31022aa2fdddd3bf01abb9a79811244ddc7b65ae21e1a1fc5d4e455e15045f7c85a366dad3cea47cad33b8a42cfa6bbef374ddb70f93155927cfd6ec52b21b3f72709ea3196e57ed192560fab05a29e074c0a6d369ddbba93369c59ef4790a75f7818bcdb4a08ba16ab1a07aa3e27aa9d7c32a85bd5e9f95af75e77c966588311c51d57b54bc886e0b31cc756eb764b5f06cbd56d2479b5772b2c99db1e3b74bcfa1ee4cfc235a085bfbb6", 0xab}], 0xa, &(0x7f0000000ac0)=[{0x18, 0x10a, 0x7fff, "f0514ac797b5a194"}], 0x18}}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b80)="256dc758227bd59fa030a9e55688a91e831d84fed6ad933969d52304611c42ab9ba9078e2d70d44b45b1d7876ff0821c1198a261a7d33889a220c79b7fb658f76fa2de5549861bdc06ee336aec79c61adf8aa06f5a", 0x55}], 0x1, &(0x7f0000000c40)=[{0xd0, 0x119, 0x7, "b9c59cad9431fb6026d56716626d2a2e6be20038a1fef2b9d0dd5773560a9a5b076e98a2868311c64b82d8c5ad36a74cc0b7640ab2db814ac52972c1dd2fb60d59a72282a000154e4f5b6f080bbe33e685e1a147d6b05e4d1c9a75e32b6fe75982fd6aafd8f2165773caded4de72aa7bd8c3abfd880c6b0b7e9b3a9060c1ce11eb9c57d3a13db6aa6da809327e8d37a7acbd1ac98bde899d619b540b53aa5f8c3864a937f85e4563e368ca3b95714ec9de4f3dc77fcc95577834c6e2eb"}], 0xd0}}, {{&(0x7f0000000d40)=@caif=@rfm={0x25, 0x8, "26e1fd212ec0a6406dd37fed10f93565"}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="b569e396742c22f7409198e9173354153117c358b0e65960a7291a24ba2e13edd293fa2ebf941a21320ad6beb64a1ea619864a3081dd849458bfd59aaeb3d90e14c955f8fe84f08ee28c728381d8ac1b2e00499bb29f9bcd2981ef9a0b83837e55cfb8710d93e06f61fc63ebc186c1073b45ba6dd62cc6e97bd3e4f2cb09a3c1afea2d5243d516248ebff26376c245b917c29974c16fdb4e7b0c85ae60e30435d82205a5b9386ca45b7548c728cfa456ffb5481c6194d95e6ff256350e12bad2f8311a225595ddf3109be83cf74acaf2cf41c4146a80fa0c73b201eb5173fc070be0062d9440a985d5", 0xe9}, {&(0x7f0000000ec0)="d0a678ab88bb47f4984e737cff83fe1f2e3df9d7837520f389c2559f66984fafefe0e74b3aff307a4b16c0b743e44734e51675a93a9fdf1b7b2cbcf801d8d3007a43d83171ef18f8046c28538b072edb1fd28dca42c28ed85ef1b2cfd90a975c099e35f61fad6bb7a0d1bd7a3002530e033831a38bd1de9ee438bb77d417b45a86854a9d5de06f28cbe3ba001a34eba43af09a0fa0f9fe7f0a84c1f7e4dbfab959e16c10ebde5510527c771417488fcfbbe9184f5473c9070d64f65e5f4257088626903adc24e3bc0ac3ea4726a63b7239e9acd30c0d0ff03ee334da74bd41b2a5171e7806dfb6fcc49d6c8e525eb782b2da", 0xf2}], 0x2, &(0x7f0000001000)=[{0x38, 0x10c, 0x0, "526eb287b9cad992c8b6f0e11c782d6107397a99a7e34c6bf0b132aaf0a62861bb860f2b22dd"}, {0x110, 0x10e, 0x5, "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"}, {0x88, 0x105, 0xd91, "eb465dce1140f136ceed03d370daa1151e8f81d1ff921924fb28b6c7ff31126f02c881266b4b22ae3f07b69edca3d5e53e0f1f322d6f5d4dd21884c39076b923adea694454eee3b123afc2ea907e8ff6a37a0ce253fdd081b70188019a6aa4bc41369a3b74efb6b260cae40c4950139be53a90"}, {0x20, 0x117, 0x10e6, "5df2244f178047a229102d45f8772452"}, {0x10, 0x29, 0x54c}], 0x200}}, {{&(0x7f0000001200)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)="a802c679be61d40beb4d802f2eccec930991e21747856addfbb28ba81108ef2859c4adb844847648efd943dc147d165c47e801c67babea28b8c81750b000ad4008384f74733735ed8c5cca67abe12ef3a5c313feb3f3ecac003e1ce43b8415d75b3a946e261214df7999bc8693f2ccac09c82c973259bb6f0cb34df7cb5c3f7669da3d80ca0aa437b8b86243e37883b579825045bff041d5ef41c922d497be095927b0e56e840c71e0136c3e3ff2dee4b45a882126a21204c277b2aa03fcf12d9efa8c7fc9c2e768cac4f38d7cb512e1435f9249e11a", 0xd6}, {&(0x7f0000001380)="69e02349a55376c9935ba6861bd474bc6230182053e4cf8d89137126dc3aed51c9054760da27963bc5de40bec2314dc5c0f4730331fc5af3da5ad5a97b47d9f8f63e73d11c2483469f7c0c97a41382f7b36c01517e3bdfa93305840bd9c782a190630fedbbe41ba397870f4123531b489817f4b33c0b522712cde466c422683acfe65c63a4dc20dcbe8a8de4cff8ba5baf96cbf2", 0x94}], 0x2, &(0x7f0000001480)=[{0x58, 0x41, 0x2, "055bc67e7b2a9aa1fa916af3cd4fda5ce4f20b882a493abb6845064e38160c3592caa9218d7af2be1152fe5de26f52cfaf25ac2f75c0cbe888ca63c33bc1a286947644c4"}, {0xd8, 0x11, 0x3, "b0eaf02f3faf2af51a98e13b361ec658b4dbc696508097786cfb8d23d15faac8bfdd00b61efbd1769391771a91001d80b5f9331c0217e291281f3c6048e57a0467e80135e329b692c73e0024abe84461816aed2f0a854699475cbcc3409509b571741c028481982064efd779fefc302c85befd85fcde3694efabbac6c402f58673217f2cc1579a13b354ed8c8c463acf0db5baff14285038e6b2bed6d1134eadf36ce758a8d4e12026b25277b249df40dcb01da3f2fcca3531493bcbb774078d6cec5b560b"}, {0x38, 0x111, 0x4, "badc37264b9dedb61deffece67f8fa3be4174b5177062e3765d62c5280781072c1e9eb8b36b89ffc"}, {0xe0, 0x11, 0x3, "55d38b42a0039e60f422e6c4c835717d694d3312b733e06e9de927fb26609c47f6a5e96be83ea0d194ab7292556c1ba9d34a3ef511dab62aed199940331321422dabde1ffe090f2f23abbb290bcde3ce2cdc8fb1993c98d527d14905c68e00f6ea4b1079b0d9bc62dab863495b697d71d4a53422d76568adee0348a0db371d7d4ec344e6d606cccfb589fb848734434b3415f230f253f5078eafc335088e14c804f42dd0314dd47f852fcb6e7627d1a5a7d9e8a92610c0c95ab8d7828c1162e26d142c90aee0e6d8c8d04b0ddb"}, {0xb0, 0x117, 0x20d, "d5d5c9c491f4ac1e82af42c9d7faad895c4bc8f2f540c7e21d69fefc250b959b18e970fd499bb0c90aea91895c5ccfcfde3d6171a3efd2b09a09bdcb9e3f5b868dd9911810cd615b58bc3d016e9cd6e2ef76333d6cd1dac14e0af862305ee3e6a9d074c5beea58f8f76e6bd1a69eb3b77c5d7cf4b5a8d7a4f0a247f623f4951d694c62d07dcdbf5c1b3edb8e5731b6630868cb1f43dbbc819b90102946b7f0fe"}, {0x60, 0x1, 0xe5, "f8f925089449bd5bec17b16ac65cc8672eeb0c15d2e1ff8b9b2b4d69f91ce6851b3307b25bab7a69107eb533ffb317ca94313b496f60772c9846c2a95e6a424775b0a0d4b7d4b3b99620e0f210"}, {0x18, 0x6, 0x0, 'a;D'}], 0x370}}, {{&(0x7f0000001800)=@isdn={0x22, 0x1c, 0x40, 0x1f}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001880)="271f8af24a1e22d85d0c4e61c9b1d9f9b854bb06b5c6baa6979b875345efde904a29bc623578fe712fcb8b2f024cf447f3adf845725bf06d6b3ddbeab11854b72351c77d415e395db1635eb94236afaa758eb1966a8c9b39b3d2b439dc27c20a7c62", 0x62}, {&(0x7f0000001900)="e65617177ce13282d34ee61af36ed372bbfcf41ade5e2ec968663980a6ec83ceb0fada636391e02f0fccfca5b080d50aaa78e612be49c85cde9e1ac38f8ac565d8965197c73fddaee25ac807dc1a92587f5b420551b7213a7a5ffbc9c5adb08dd32d6fea9e93cbcaf59d6cecf6cc35cfaaf563b3e874920bd136e4e424d9e6109312851b8f141b8246ad705a4961b8fa9a621582930735aa2461d63bdd7c65f8d5f935b883f1", 0xa6}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="b1743c9402f1fc", 0x7}, {&(0x7f0000002a00)="b8", 0x1}], 0x5, &(0x7f0000002ac0)=[{0xf8, 0x12, 0x7, "5f67a7a9303a8e5dcb3648d9a8da401433f2ca8028144317b38518b0739dd3a767456957cf2a88479ed6814ee352965ebadc0f6c7cfab60c7b50db2fe128fca8859d9cfe6ed1d3a6abd00b27fa2164c003f8acd45434f7f96f8a139637df83b56d93fc978dcf6969254f6c09518ef47ffcaa9545be444863c6142c23bf50440f841e55fbaf6978a82579c57527bc1136defd5acbdf273a03dfb22903bf85ff10760abb2690a434b215830791edea9ab71f54d5a881d7669f10319f69157e2d3ab1f61ae562964e474198982c7571ae436367bdbc68a46a481d39e12f8f54a8c8a6a563"}, {0x88, 0x10a, 0x8, "81ebdb2288e9602cdfe67157f53fcdf039946e68eb895d08cfa023c3da30cf60c82de76d63499832f1986ab7b011e279c8a34adb4eca13ad992b0cebd8ac457b03e1baf54da7e9d8702b6be6ec7f4e0e1ae36bc77c6f1211bc6679b4ea3bef4ddff800fdd910a4cbc4e2d3485c156543661bfc"}], 0x180}}, {{&(0x7f0000002c40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002cc0)="d6ca36af98fc6e195dc1f5206c075a918681ba827c24ce13c2d4f8c6acc74c876d395be1716d5cfefbd7cc32c4ad33dcec6a297b532cc099256038eaf3a84d22fb0f31b5beb8c23b827d8a5be79aad9de9a3816e29d435876209e25a36d5bcefe4d2166fbc57", 0x66}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="1a4805a0385ef78ae31c2e137a3f4bf701b0df49144cb8f8917a0b3b5b2082a60315faf4cb5e36c3c41ec1d1644d0869", 0x30}, {&(0x7f0000003d80)="cfdf739c6e61fc50a02b1f1d34487d8988fba437696cc5e22289809bee35d2b93c1794f54fca8737443cb2bee8edcfa6c207c87c53b6b5b62e0dc3432555b4879a3d471b9d5fed216f3e7c697778c832c2db43ed3c032cc96359e063790e009bcff763685fb947144ae766c1c7a4cd2c44444b45a5f79c45fd442751dc947f587652ee2ad0e2e0730b3e4004ca", 0x8d}, {&(0x7f0000003e40)="a4328b94ea149ca20e34ce9a19c4337e8eafe0cbad6d006da3c11e401641b354c16eb18c", 0x24}, {&(0x7f0000003e80)="34697236e156337dc2a530cc2db2adf6a0010687030b5e6ab3e3c008bb4781f84dab26f82ad85b3e72dced2b7589f189fc65948246f75c0fea2f70dc6b761f47692eb1f975e61db2484fb0cfa845a8616ccb2852f8ab43b8bb18a198200a9e3b8301c6ba2f764acdebe64150f7d06c323e42fbbdd19e7df8eaae1f302fba6a386e406c3a4cef740066191e3220e56c7a7cf01442902f7e81c76653aadb", 0x9d}], 0x6, &(0x7f0000003fc0)=[{0x60, 0x10c, 0x8, "cbc12c604618785e041246e0db92bb2947d288fdc36771151018c3309575fd733ebe11541bff3ed8783e775fe8d1b989c43fbcc3783b506f358f2d97db109db686a1af34254a5675100c"}, {0xd8, 0x183, 0x9, "bdb5ac323c3578394e714438c87b95ddb1cd663f573d0a30cfc08a485a29e6e82c26dacbf68267b56269eda6196ce44c41dcafa87e8c2b492ceacd8c242761919fc27707319ed312b6c2b589cdca02c1d4f5dc32899e229632d4786ed6ea49be4f6e234538dadbed9b46b98146b4d24e5d41fefbd828c0357674ca60efe14f056ef5327755f6e4032d4be03e1dab52480c51a7d9f0193c4868782c1d741c059b2d96d1030215b691a34fe9c7b46794d7cb82f770880bf3ce09cd3a76265902dfbf8537"}], 0x138}}, {{&(0x7f0000004100)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004180)="ec57e8b2612b02f5a4c8e8fdc1f0731efed9bab26b138e05aecf8410a858aeb276c6c6f7008f8147806fd9dfcc61eb", 0x2f}, {&(0x7f00000041c0)="e48adf96bc6b99f1b5f51b33089a5d0d1859ad59b0843c927a71025600f1d34151a6d3def458e273ed1966bbd5bb96a3ef6722062b0ce62fad97a1034b6134d132c87d965d046d7b5bdf5345f34334e44ccab3b7c93c8cd9296c74b8b5e5edd11f1ae4ddfb7199af4687312c5b4ebbc2cc64e900da3cc83e11e2398cb1da664e47089fa526c3d6d6fe014dbda502209b9e466ff9743336c8ee0a0324f23ff9fab878cb6a3ee64c", 0xa7}], 0x2, &(0x7f00000042c0)=[{0x100, 0x0, 0x2, "d0e64aa69852e58cc179a2289f43762c3c4a3a74c215ce0346d8a4697ed7bea4706553a36f72e2aef42b66470a3970c0b25f82eab2c26bf6d221bb2068ca9ae612b12c0664b2e1caf184eb69dbbd994ef5c3f6f35c90889d0f62d7e9b5f565f6dffa96fb4311302d550404c224214dd41d259500f47122a809dd669da859e301dbf8294acef38076d0b5c93cc84790330103c5d341f7d0cb3e97754d4e236acc41c1de7224e33e189400773079ad1d9a3cf7f092b822b7db39daf70c22f701efda6e25569a7f9872ad0cf752d122772ecdd7a6f4a9ac8b53bfe8352f66929774f36c314aeb38679ec3"}, {0x58, 0x101, 0xfffffffb, "fd388ac3ffe0567cdd1b91ea4c44d915d196a9b640a95910fcd6c01d2f8967915b6ba142cebf747a516078eca106ab2956111a3cf8784ff96063daecf050a3704f"}, {0x48, 0x117, 0x7f, "df7df706b75d988da324be351f5b3e36fb79e06ef889ad4de9f47475ce8ca21c2f3a1c4c5f70472247c0ca3bdfe9da3540d9d95f713df540"}, {0x80, 0x115, 0x3ff00, "e4987cfc6576620c4e1569fed81a520428cf7e6740038f3e90c2834a45431bd79c2d2ad92cf433ae4962fe2d7764dad95a4b9d9bd43d9107caf4ec7c2d243293ba3139cccb4d749ed4cdcfc608c98899fe2e83c88ef6c0899a35f9e38c2457442c560a496a01995b150a50709fc646"}, {0x78, 0x10d, 0x2, "0cd3620f1b27a5fe7cb5c6434dfc3675c748b572c4171ddbe29cf814d2c83aaa1d09c630d06c4edbce809adbc899691892c7ca8200551368fa9d7a7095fea94ae56484da393ecbbf13f2dafe5019bf4d4477c6cae16d8ae4ac65c51f92b8092b24"}, {0x28, 0x103, 0x3, "94b7ebfbc9ed56a4fc321b62b61fc6b03ea1"}, {0x30, 0x114, 0x1, "3221a63a3e2b8ace860e830acdfd34d44205539c652f11491e004170628bfc1c"}], 0x2f0}}, {{&(0x7f00000045c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x4, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="c311ed156312aeea74bb7f8f51d6d4d6039d9ccab3c58e3da36fcdef27eea8170f49467425b11c", 0x27}, {&(0x7f0000005680)="dd328be9a28250ba9bee202fc4ba3a344a586ce7bc0f43486566bc78452cbebffe6f8c5e27f989f3fdc8680edf2d25072b72a9e75a47114900bca2fe3878", 0x3e}, {&(0x7f00000056c0)="01d78d1f40d3eefc8233afde67207dff8357309b376020f8c2f0d10ec6dc88945ac48743570d804f06065898d6938b7b49e3db6fb61e364c81dd414d6003951c33fcf51ee73fb3bab3e1b3dc6da90ab1acf3e488ddc5e26e09f5287581a56d92bb4aba48208e5526f823bf1afbc1105ffc8bc9f8dec7e2c6962be0980a0fcda4e23808c4fdcb1ffb9ad36a95", 0x8c}], 0x4, &(0x7f00000057c0)=[{0x40, 0x88, 0x3, "c5917077599fc4ed0219e03241e4b509caf470761cc21f03179bd311b1ab2aca57ff98e942e44e60c0bfd6"}, {0x28, 0x111, 0x8, "e8768755ad11320d3ea8022a310f6acb41a49bb9f86798a5"}, {0x60, 0x119, 0x1, "7d0e063df54805c068dfe3cedf05e0ea813a5bea5dc98d12be5fb16b91279e10a7447c2d415620ed0dd1de2a29c1d96d2a1fe9670fdb2c5a1e3145ca30dd33a1b576a8f2ac4addbdd3e854"}, {0x1010, 0x9, 0x0, "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"}, {0x58, 0x108, 0x6b101e43, "81cfeb7e9e3da3182e0b5bf45e4cb4ab790cf4685f4099fa101a2a87cd49befaed0f916cab7b393e8d63cdb9d0bc632ba08bc25790380206bb311ea28337ad1aa8cedb32af55"}], 0x1130}}, {{&(0x7f0000006900)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006980)="63ac3bf5c64cae40fcc4e76378784d34472c37bd2a0b35ab4c1fe68dc655fb590f6cbe67323f1b0222a3456f695febdca3944c1412c2548c4a3932", 0x3b}, {&(0x7f00000069c0)="450aaa4b3b43ebc2dac4d5a14fd3d5e80e62e9275016d4b8381e46fef9524d4005bd359648c0c1975f2c031c8e5678051d31cc225e51a975a8de6b06cc7ae2a583f9a82ac2179f86989a771bd7058c52b1c805bafcc51dccea1babc24b0966c481317bcd742fc29397555249fc50be74415a3a09f1d59436116582427661f36c1e8eca3489bf454fc6f7cfa220c5e950deac0511a82e6798589d8c77cad9c0bf30d188e435b6d12a1ec35eaa3d565b99dc509b17753b7f235408ad98b449ade58a0d98fc9706a692b02563b4d7f5a46c4312f5479d5242d4f1c35ec607", 0xdd}, {&(0x7f0000006ac0)="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", 0xfd}, {&(0x7f0000006bc0)="96cae03f05984051655d6eda0046095dca48bdc1eb27a608c51b014d0f981efb17ab087c97124479a16c7c166c2e57ab39a325c8327871be44ad39d3b2a77119b39feb6765d2b1faf33c36a8c705030f62cf02175751745906d97ea4407d8af29f7630bbceded16e5ec12e5e9f9880862115e961cc4040743d67399048494914ef33c158c9f23195a560ac4cba8b9d660116e66488cc56b2407aac7f3b022f445052b22274ad19fd0489750da91a4c6f17645c23453b568219a0f1994243", 0xbe}, {&(0x7f0000006c80)="4de4c0ec61320467792e8c0a383171b6029bd3488f8984cb310ab2fb0d776a5a5760e3d48771f425b77239ab2bed5df970baf097fdf2cdb490151d4b303996470bb3f5a4f59246aa56bba6693823e36b9bdb886e6d3099eef1d438b4c105392f532df278bc51c5cb23c63fa46a31fa4bb2c27db7163698814e05305f1a13e2b8d19fbdced90b22e4a76211c85713b42ba9e689baa8a6", 0x96}, {&(0x7f0000006d40)="033d23c20291fc6757fd1dd55437c91ce610070a779377e45f295679a40b3b1f9379323c07fb3159926fb767838acc60b53d8ec4c184541ca4cdbd16a4710765c539d77cb9253ce1b00dccac28e312fe2c", 0x51}, {&(0x7f0000006dc0)="4896084dba5eb3c709b7881db9a42e445fbec42c1c8ba065ec728177160105122908e0b3d2ea2fa742bd0f645fe34163d75d", 0x32}, {&(0x7f0000006e00)="9471c2b1bd32511abfa03a9f9386340b4c647260f74da40a1480fc118498be634cd1723826b7805776f634cdde5046df76a110c394585e5c688429251fc5431e4d46081db6e055e37beb9deae2cc9ef8f2d0d58cb6ee087f32b7c00a67ab4a752b397365446b283941fed6d3546024b64f004e8c", 0x74}], 0x8, &(0x7f0000006f00)=[{0x100, 0x100, 0x6, "21fbf90b002d2b03842c20cddab9294225c3dd1a52cb69f6a826058f3e8061f63c9bf24577b835ffa889e7419e5722c4e82926c737063468e500dd74243f84099f6e1197ad3e0d8c3eda8c1cf53ef8085e40052fbd90a36de03f25e70c3808883c85366779b77b593dafcb81d4ad8de8cbe1da29dabb075e4a4e27193ca10b9cdd603ce71ebbb11a6fdfcad874172efd61c775f237dfd155c2d07ff0e6385680f97e706481c3b2b32fcd6c29e9f4e1a88727f451c6a81a9aba759f632b3407cbd7d3142a0d86ea67a1b59bdc22601767ddd08de9e8eb07de89620745392c81cc7a41c9b16d61412a5ea41e03"}, {0x98, 0x111, 0x8001, "71386d1a5f141a5a45929436e8f710b5e806b182455b94565a5294e8fdd566dfc589664f2107aba1fe7689a93e180a0d61da20514101fd190d723374947de9951abb6ba0133e14f19df44b0a6f9917fcc0f9b4091d0ac83eb24511cfe9b17b314f416c88844c3c15ddb377cf4ba4a1aa7758d39dcc6c615f02e09072860c31ae9545aafcdb"}, {0x110, 0x10c, 0x0, "96230bd37b35e06fc8b382d2444de4f48896290506b92424faa989ab87f1644286880b66883da0960a470336f8823a67e1f88f8c3055057f820d739a76c8ddaa1face37e8016fe1e36721991248f6d692cca7913cca697f489298f8ec03a02aaa81829f58d794578e63fda3917567876c2277029b6c13ab10c7f6151f89a2df73db93f16bd613f8abc6b0827ec95456094de0e2676c563a9db5f7709753de051517caf6b32ee19f97c768a2d77b2bd4bc2cd6b41cc9cb72d378d72b79f9ccebee76ced0fccc4ca8d153f29868773ba4afacad6a3341406f7ea3aab5011fd14b5005d6f0e4642ad8e61d9bbceca9ab49a49d07de7121e2e639e"}, {0x90, 0x110, 0x3, "864954fe2a056e7616a3adbff8de960180f7bab9ea0e37c41a80825a7033632245fa44b22c833aaeb8691894d223c6aef373c04529d38f7d6aafb0fe93a490c31060dde3ed4b63e79d7431d03cf56dd3fcbb22219bfc97af00b0df4087d90c945187e3d49456519f81c59f0b586d799819dcc6cfc57264af3ebada08"}, {0x48, 0x10b, 0x6, "3473b318a1b4c7b1b359a242f1680a618f8033347380ac024979eb49d7ddca86abec60f16145bedab384f5a55e6fe673bd403c9bd9f4e7a9"}, {0xa0, 0x6, 0x74, "1fe353301fd9086ee1df24d3a7d45f6f7f837033017c59e88fa95c513ccf944de763f47a89c3bf304eee4f8dd862640ce2a5c2fb24f1ce29131c4870102e68ba8513522694a31c998769efc7f9ba80853dc4bbb8d74b0a9d0283f89c5448940331fe8bc074d0abc94781c80a37b27e040db93f497b994cbfdf22a52bb41feff1bbe1ac29e93bc0ecc7fa283d"}, {0x50, 0x117, 0x7, "4e329b91ea4e7e69f44e94d4c91d02119b0bac08ce3edffd26722ae292e178df20567c5dd90d759aa8c0f541e924341dc3ef182a25f0accee97cf54cd3739431"}, {0x10, 0x117}, {0xe0, 0x10d, 0x6, "66f41639ad9bf40beed703a9126eebd756254df65792134fb70f1991a23054e2e443b8b4c726b916200d6f369669ad6b9b8fdccec1f5b4e0184e4227f31e4b3884bcc94645d12e38b4712af5f5ae49476ac61705da17ca2e678f6765be6ae04053d5e3c7cd058843fabe13a370e164157e2ff18041f44087bf868e7a7f1fa4f96e3248a55a9118e6fee9308316ed77d5e2a2c5067c18b9a80210c662ab6aed43c09f1fda2719adc8bae3a5708414eaf20097b3b0723ce7fc08fd60813809ec86a0211398e977a805082d4047"}], 0x560}}, {{&(0x7f0000007480)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80, &(0x7f000000a780)=[{&(0x7f0000007500)="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", 0x1000}, {&(0x7f0000008500)="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", 0x1000}, {&(0x7f0000009500)="fe9fad4d85c690595916996cefa98500d063c978fdb457f78d0805383c441176087b09f656a5031acb872aef4b85b6df296d2f55e521eb40e25ebde97958840ad11cbae9448c9a8ee50e55478fbb6a4c616d57f274d903cfde8f985a0c7a37a4ff086bdc60b01aa9ed31856fe5203d742579c09b85da64a54ad905c8d8604ad1e4fe20b32955b0365c0c70d79777ebc10f1063d441ab2a28", 0x98}, {&(0x7f00000095c0)="a1806b070cbe1eaff79de582064544d321cbe041e74da20297cd0581da463d49d05bd56c8785b8fd9cd1af1708e4ce14ed79362906c5e8301ec2524ed92887a8569e487980c90b83f85befd89c2a875bb60680b2316d587590fbc299112cb7165f0984e856d6036a61340ac7ba4acf36f5e37f2a93a354e06ee4e05961b55b62c8cf703a438ef899d20888c72516e70b79", 0x91}, {&(0x7f0000009680)="c29513838a07970408655d8b248a6d61e9a5c8eb1817355bb85faf045a72c393e8eef73f180436d94beed8dd4393a2419c814a80b01794ea3089c848a0c078febbe4ab3f25aaa2811e49f0203f706319b70938eca39b63fab5b329aee556ad29038727110ce9dcbd4875b5a72b10d8c93ebe555e34dd69be99684c54d41c91dd08956aa7dcea2669383f0ce4e2fbc75e5bdc705112b46f7b8a31692bf8", 0x9d}, {&(0x7f0000009740)="93bbf474bd7ce3605552c53d83d6f6653b33f1cb57f0199b", 0x18}, {&(0x7f0000009780)="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", 0x1000}], 0x7, &(0x7f000000a800)=[{0xa8, 0x10f, 0x64c80000, "4cc79ead26c3ab5eb4e9aad2629babdea87ced4ece22a81a84e4cd0ba9feefa4c61242e392e1662fb6b020fa248e4a026912fe2c52286b23150872fd408d213e1749f19d49b8e3f6bc0b8e264af1b8cd9eea64f30b7cce93899602bd05648117769563cc6f06f7f99b58926650d5327f115acb37a3f2e0d5904b34cae57279f0d0ad4810c385929009e62373cf0e3499f0192737f1"}, {0x40, 0x112, 0x0, "97a6785b719990bdaba70430fa3b300af57ec4b00f5148fefdf0219de325a0cc16835dda34d64d68df48595dfc9e0495"}], 0xe8}}], 0xa, 0x4000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r6, 0x0, 0x4, 0x3}) openat$cgroup_ro(r7, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) [ 226.010386][T19015] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.018417][T19015] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfefdffffffffffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 226.134832][T19015] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.142882][T19015] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 226.158376][T19015] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.166523][T19015] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 226.233704][T19042] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.261700][T19020] FAULT_INJECTION: forcing a failure. [ 226.261700][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 226.274331][T19020] CPU: 1 PID: 19020 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 226.283088][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.293133][T19020] Call Trace: [ 226.296442][T19020] dump_stack_lvl+0xd6/0x122 [ 226.301089][T19020] dump_stack+0x11/0x1b [ 226.305236][T19020] should_fail+0x23c/0x250 [ 226.309631][T19020] __should_failslab+0x81/0x90 [ 226.314380][T19020] ? register_for_each_vma+0x372/0x890 [ 226.319816][T19020] should_failslab+0x5/0x20 [ 226.324295][T19020] kmem_cache_alloc_trace+0x52/0x320 [ 226.329610][T19020] ? register_for_each_vma+0x372/0x890 [ 226.335060][T19020] ? vma_interval_tree_iter_next+0x24c/0x280 [ 226.341017][T19020] register_for_each_vma+0x372/0x890 [ 226.346287][T19020] __uprobe_register+0x404/0x8b0 [ 226.351265][T19020] uprobe_register_refctr+0x29/0x40 [ 226.356516][T19020] probe_event_enable+0x2be/0x7d0 [ 226.361551][T19020] ? __uprobe_trace_func+0x440/0x440 [ 226.366829][T19020] trace_uprobe_register+0x88/0x410 [ 226.372013][T19020] perf_trace_event_init+0x34e/0x790 [ 226.377346][T19020] perf_uprobe_init+0xf5/0x140 [ 226.382103][T19020] perf_uprobe_event_init+0xde/0x140 [ 226.387371][T19020] perf_try_init_event+0x21a/0x400 [ 226.392529][T19020] perf_event_alloc+0xa60/0x1790 [ 226.397447][T19020] __se_sys_perf_event_open+0x5db/0x2810 [ 226.403130][T19020] __x64_sys_perf_event_open+0x63/0x70 [ 226.408570][T19020] do_syscall_64+0x44/0xa0 [ 226.412966][T19020] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.418935][T19020] RIP: 0033:0x7ffa67e11a79 [ 226.423340][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 226.442941][T19020] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 226.451347][T19020] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 226.459297][T19020] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 226.467327][T19020] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 226.475355][T19020] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 16:18:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x11, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 226.483347][T19020] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x32, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffdffffffffffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 226.525658][T19014] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.533689][T19014] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 226.552842][T19014] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.560857][T19014] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 226.599849][T19014] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.607861][T19014] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 226.638026][T19014] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.646156][T19014] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 24) 16:18:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdef, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) syz_io_uring_setup(0x3dc4, &(0x7f0000001740), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r4, 0xfffffe98, 0x0}, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000040)='./file0/bus\x00', r6, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)={0x194, 0x15, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xc, 0x54, 0x0, 0x0, @u64=0xef}, @nested={0x176, 0x2c, 0x0, 0x1, [@generic="bd0757e63ce8", @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x78, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="41e84245ad0135dca49e3919694e2c0a8657fc9685bda5689c684a1ba08dd9880c028bfb525507816c74b6585d036effeca7ebbd6414056609ead0b1fc30b0820723d95676a5b9bec5a40298d7b9088be2b5b88c6f8e9a45c89091ed475cc24f7a", @typed={0x8, 0x71, 0x0, 0x0, @uid=r6}, @generic="b172fbb61648d015a1f2473ded1ccf87f9d0ed493c43a0aa3bee862b42676014d70dce86d62230a56e862aad3dd0f796f474c1663c2e065f06ed24a35ea0772752bca8303cc369b141013f20e5a47f04be8928a79c90df318750dfce64f5290cdbdf49fb3c2519284b3c6a8f7bdb0730264e3d8e4c6e1661000f651326f4eea2e65a10b627326e3f0685a215e04806fb207df0c807f025dde3b6f923085b9bb2e15ba96969e94c9b4111cea52ff104b07bbcef24dea7fdf378cbaaa8ccca5c9a67e82c994cc44f1631756eef1c0b3e5a1c7c0ad3276adb5ed3870686745617"]}]}, 0x194}, {&(0x7f0000000500)={0x1b8, 0x1c, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x11, 0x44, 0x0, 0x0, @str='0000:00:10.0\x00'}, @generic="1c79ca0472ceade452275cb22563ce024a0cc67bd2050519249a38cd52aa87ec6900413ed29777357f76937ef150a91fed839cbb6e4f8e739e9d715c11472d5d58a62703177a781ad86a4b9b7db12e0c28bbe12c3403b227bd5eb4a88c7c8082eb4307c07995ea6cfabf1548c0c13e148e8e80be287d904bd0bd4a064e178f6c4106f705dc7416b76e2381274d6bb311128678c3033a109d2e567fae977eb810b70350bc9e97cc58cfc5dff01fdecb3dddb637708fca9fde78f7261da24670ac417695b7649fb5abdcde373e4d81b0c24ca1250fbfb993c411bf57992e16d037df320915ec2b1a18e1de27", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x10001}, @nested={0x71, 0x5, 0x0, 0x1, [@generic="542bb9925a0c1c8cd413ee60efcff2379b243b9ac5ba3c9548cfd40ac24ac9c4c6f25a343da0ae3e6b9d79e266609878bd3fc78076662b646ce70f4b74c9901b500d8443e374a0763ca40ac1b608f43ad2954e9f78486c5c8b672389dd6925bec97f9a4b07590e73ac", @typed={0x4, 0x6d}]}, @typed={0x11, 0x91, 0x0, 0x0, @str='0000:00:10.0\x00'}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x1b8}, {&(0x7f00000006c0)={0x1048, 0x2f, 0x8, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x2b, 0x0, 0x0, @u32=0x9}, @generic="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", @typed={0x2d, 0x70, 0x0, 0x0, @binary="e369ff8b9c0fa7388a997c81ac44d42cb9f8e3049f9c30e10ee2fb3d2f733354bd773aaa44656eb33b"}]}, 0x1048}], 0x3, 0x0, 0x0, 0x10}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 16:18:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdfc, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x12, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 226.782366][T19054] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.790491][T19054] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 226.808172][T19054] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.816225][T19054] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 226.878135][T19078] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. 16:18:52 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdfe, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 226.944204][T19054] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.952240][T19054] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 226.976675][T19054] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 226.984696][T19054] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 227.085494][T19076] FAULT_INJECTION: forcing a failure. [ 227.085494][T19076] name failslab, interval 1, probability 0, space 0, times 0 [ 227.098169][T19076] CPU: 1 PID: 19076 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 227.106927][T19076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.116964][T19076] Call Trace: [ 227.120240][T19076] dump_stack_lvl+0xd6/0x122 [ 227.124826][T19076] dump_stack+0x11/0x1b [ 227.128962][T19076] should_fail+0x23c/0x250 [ 227.133461][T19076] __should_failslab+0x81/0x90 [ 227.138222][T19076] ? register_for_each_vma+0x372/0x890 [ 227.143671][T19076] should_failslab+0x5/0x20 [ 227.148244][T19076] kmem_cache_alloc_trace+0x52/0x320 [ 227.153515][T19076] ? register_for_each_vma+0x372/0x890 [ 227.159086][T19076] ? vma_interval_tree_iter_next+0x24c/0x280 [ 227.165050][T19076] register_for_each_vma+0x372/0x890 [ 227.170365][T19076] __uprobe_register+0x404/0x8b0 [ 227.175285][T19076] uprobe_register_refctr+0x29/0x40 [ 227.180469][T19076] probe_event_enable+0x2be/0x7d0 [ 227.185682][T19076] ? __uprobe_trace_func+0x440/0x440 [ 227.191100][T19076] trace_uprobe_register+0x88/0x410 [ 227.196287][T19076] perf_trace_event_init+0x34e/0x790 [ 227.201563][T19076] perf_uprobe_init+0xf5/0x140 [ 227.206381][T19076] perf_uprobe_event_init+0xde/0x140 [ 227.211693][T19076] perf_try_init_event+0x21a/0x400 [ 227.216806][T19076] perf_event_alloc+0xa60/0x1790 [ 227.221784][T19076] __se_sys_perf_event_open+0x5db/0x2810 [ 227.227442][T19076] __x64_sys_perf_event_open+0x63/0x70 [ 227.232885][T19076] do_syscall_64+0x44/0xa0 [ 227.237285][T19076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.243166][T19076] RIP: 0033:0x7ffa67e11a79 [ 227.247583][T19076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.267172][T19076] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 227.275602][T19076] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 227.283565][T19076] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 227.291616][T19076] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.299590][T19076] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 227.307613][T19076] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 227.324126][T19072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 227.332136][T19072] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 227.344632][T19072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 227.352727][T19072] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 227.373904][T19072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:52 executing program 1: syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r1, 0xfffffe98, 0x0}, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r5, 0xfffffe98, 0x0}, 0x0) sendmmsg(r1, &(0x7f000000a900)=[{{&(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)="a0437635afc9655250ed0112fedb39e37d922b9d5cb666a6cc68975f7103cb1613d042315ec0a7ff2e", 0x29}, {&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000440)="11aa68812b0751c78ad70a9f43367b442b3efc49992f626d1a297882be5887c702ea9936b1b0e856cd01ee7278a8ef5a09f2f3ad5e8eb8dc54947da68565b9aa3848678232cdfbbae8257d9eecdd3c6f4d36b1ee15ac9138202cba37e5755514be4a21682cd94544cf8093624bca6309b3c8588291a46725aa54ad4c1ab7013a54fec19fb8c1eb1f871f81949bb83cd5489eebf51e41413bff5c0a3d103a85523cbbe7060888404b2b9fdf16b3d6a17d3b921cb11ac9fb63be7fb981d1", 0xbd}, {&(0x7f0000000500)="8481e1b636bb0a1d13cf9dfeea6b90b8dfa9b37e7b4e8f1f0bf7a296393c63eeb69402e3367b3c51262a4d870430189463d003bb28063cc839e81aa16cfbcd91166702af73848f8b0ebec55a567a22e3924850e13967f068e2d5224dca870097eea204870de78378dddbe0df375ab267f1a32d0f6b60794ea81deef0847784283d86841f4abb", 0x86}, {&(0x7f00000005c0)="20fd1405f76885c04b19aab4918da2b9178b939de3706faae9157b1e587b7d8bebeaeb07fea17238e950360eb9450af4c016c68ac3c046e6c8f7aa22464f395e142357aab4b40045b335d7af5efd21b93f53b95cdc92036ac7f0b0118fa9bbebd1f67485c78deb6bb08dec29e11388cad23d7f403b7006062aa011972db44f13f017", 0x82}, {&(0x7f0000000680)="31544523e1f24e51021f6600ddf54d3fb9225e4dfaecf9886f58b13f52da8d20e7772d7bcf0bd0fa26707c247668795e3bc93005fddfca8cb0e574963b3ee103fb19d92d30e5027558116128b2935b7ce9b58757d22d6ae0d0", 0x59}, {&(0x7f0000000700)="447f3e52248a0b712f58038cdf3fbebf4468871852db50e30fe7d13d3a519efe1bd5ce36470981ffb69e02f643387e0d5722e5f3b57a3029cc44b10658187ac4b7cec919289cada632afab81", 0x4c}, {&(0x7f0000000780)="046da9448fc6a45dd12002e6f710120be3328e6e791dca38d9755639db22a3cedcbaa9bc645fed49ad3667a4aa18e64636dd4096984bdf391cb6055da2c7cae8a608dbeadadb4c358c18bac56f25e3085e35884aa44523ce5fad32b6ff525fa3c13c310f8d94865206c29ab43a718a3fe89479ad891502c14a42192e3ac36eb4bc7d6314127223321481d7941046520f5c3a293e1adb765c4cb717a9c5f06f652d170da87e8980", 0xa7}, {&(0x7f0000000840)="66a10c936be1fe279dfeec34c85f3bd64e7cfa00dcec98e27dbba141db1e0d5565d340dd05690c4748989fadb5ab549f38ee0e05743ab8a088d19bc75d7084af2a22928152f64367ad9c07d647c2810b06aca16e3bed9d128256cab1163fb22d3f962ff9a47088e4a403f6f6b7478ae08c626045b92ff9d3b705f3a15b51bdf8bf117dfaa5c4ccf1bfa024e920386257eaf8324cd2fdd2ca7b230708f6c94f97d45ed82053b5d29110da8c4c143586c327730b791aa31e24bf4c0bea2becc609cf780538b173c718e7e6c48eda3988dd72f8b25b2bc992a1f056408d7fc9b1fb54a8d8f6", 0xe4}, {&(0x7f0000000940)="31022aa2fdddd3bf01abb9a79811244ddc7b65ae21e1a1fc5d4e455e15045f7c85a366dad3cea47cad33b8a42cfa6bbef374ddb70f93155927cfd6ec52b21b3f72709ea3196e57ed192560fab05a29e074c0a6d369ddbba93369c59ef4790a75f7818bcdb4a08ba16ab1a07aa3e27aa9d7c32a85bd5e9f95af75e77c966588311c51d57b54bc886e0b31cc756eb764b5f06cbd56d2479b5772b2c99db1e3b74bcfa1ee4cfc235a085bfbb6", 0xab}], 0xa, &(0x7f0000000ac0)=[{0x18, 0x10a, 0x7fff, "f0514ac797b5a194"}], 0x18}}, {{&(0x7f0000000b00)=@caif, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b80)="256dc758227bd59fa030a9e55688a91e831d84fed6ad933969d52304611c42ab9ba9078e2d70d44b45b1d7876ff0821c1198a261a7d33889a220c79b7fb658f76fa2de5549861bdc06ee336aec79c61adf8aa06f5a", 0x55}], 0x1, &(0x7f0000000c40)=[{0xd0, 0x119, 0x7, "b9c59cad9431fb6026d56716626d2a2e6be20038a1fef2b9d0dd5773560a9a5b076e98a2868311c64b82d8c5ad36a74cc0b7640ab2db814ac52972c1dd2fb60d59a72282a000154e4f5b6f080bbe33e685e1a147d6b05e4d1c9a75e32b6fe75982fd6aafd8f2165773caded4de72aa7bd8c3abfd880c6b0b7e9b3a9060c1ce11eb9c57d3a13db6aa6da809327e8d37a7acbd1ac98bde899d619b540b53aa5f8c3864a937f85e4563e368ca3b95714ec9de4f3dc77fcc95577834c6e2eb"}], 0xd0}}, {{&(0x7f0000000d40)=@caif=@rfm={0x25, 0x8, "26e1fd212ec0a6406dd37fed10f93565"}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="b569e396742c22f7409198e9173354153117c358b0e65960a7291a24ba2e13edd293fa2ebf941a21320ad6beb64a1ea619864a3081dd849458bfd59aaeb3d90e14c955f8fe84f08ee28c728381d8ac1b2e00499bb29f9bcd2981ef9a0b83837e55cfb8710d93e06f61fc63ebc186c1073b45ba6dd62cc6e97bd3e4f2cb09a3c1afea2d5243d516248ebff26376c245b917c29974c16fdb4e7b0c85ae60e30435d82205a5b9386ca45b7548c728cfa456ffb5481c6194d95e6ff256350e12bad2f8311a225595ddf3109be83cf74acaf2cf41c4146a80fa0c73b201eb5173fc070be0062d9440a985d5", 0xe9}, {&(0x7f0000000ec0)="d0a678ab88bb47f4984e737cff83fe1f2e3df9d7837520f389c2559f66984fafefe0e74b3aff307a4b16c0b743e44734e51675a93a9fdf1b7b2cbcf801d8d3007a43d83171ef18f8046c28538b072edb1fd28dca42c28ed85ef1b2cfd90a975c099e35f61fad6bb7a0d1bd7a3002530e033831a38bd1de9ee438bb77d417b45a86854a9d5de06f28cbe3ba001a34eba43af09a0fa0f9fe7f0a84c1f7e4dbfab959e16c10ebde5510527c771417488fcfbbe9184f5473c9070d64f65e5f4257088626903adc24e3bc0ac3ea4726a63b7239e9acd30c0d0ff03ee334da74bd41b2a5171e7806dfb6fcc49d6c8e525eb782b2da", 0xf2}], 0x2, &(0x7f0000001000)=[{0x38, 0x10c, 0x0, "526eb287b9cad992c8b6f0e11c782d6107397a99a7e34c6bf0b132aaf0a62861bb860f2b22dd"}, {0x110, 0x10e, 0x5, "3391abc6379524830e1efda6c7b0fe20abe7f8047d2f5843ac888e585107c65c2ee294ae3c97ca921faf2e502e10d941014d70823061574b02ab043ef4d13b6387ea600343e0e3c3c8fe0bc8eb6b41574d62bb4e298f853d9963a0ee3b6f8899721c31580e2fbde605ed0af1f2a2ee5896b395ea2a7f5d8e181ab7ba76a86c32f080da41d75395430b59a18acc10a7670446509e0e7ba7a8311fdf4fdc628b0aa4e6099595f150eb324c438991fcf9faf1e819c77ae51c04cdafae58af0dbc48d8ce623431fad1dac1fa4d44c22d44f7948efc739d86325a68d4f9a87986afce5b2a91b72c72024536242b39a84447d1b706efc3b5087826ca5f"}, {0x88, 0x105, 0xd91, "eb465dce1140f136ceed03d370daa1151e8f81d1ff921924fb28b6c7ff31126f02c881266b4b22ae3f07b69edca3d5e53e0f1f322d6f5d4dd21884c39076b923adea694454eee3b123afc2ea907e8ff6a37a0ce253fdd081b70188019a6aa4bc41369a3b74efb6b260cae40c4950139be53a90"}, {0x20, 0x117, 0x10e6, "5df2244f178047a229102d45f8772452"}, {0x10, 0x29, 0x54c}], 0x200}}, {{&(0x7f0000001200)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)="a802c679be61d40beb4d802f2eccec930991e21747856addfbb28ba81108ef2859c4adb844847648efd943dc147d165c47e801c67babea28b8c81750b000ad4008384f74733735ed8c5cca67abe12ef3a5c313feb3f3ecac003e1ce43b8415d75b3a946e261214df7999bc8693f2ccac09c82c973259bb6f0cb34df7cb5c3f7669da3d80ca0aa437b8b86243e37883b579825045bff041d5ef41c922d497be095927b0e56e840c71e0136c3e3ff2dee4b45a882126a21204c277b2aa03fcf12d9efa8c7fc9c2e768cac4f38d7cb512e1435f9249e11a", 0xd6}, {&(0x7f0000001380)="69e02349a55376c9935ba6861bd474bc6230182053e4cf8d89137126dc3aed51c9054760da27963bc5de40bec2314dc5c0f4730331fc5af3da5ad5a97b47d9f8f63e73d11c2483469f7c0c97a41382f7b36c01517e3bdfa93305840bd9c782a190630fedbbe41ba397870f4123531b489817f4b33c0b522712cde466c422683acfe65c63a4dc20dcbe8a8de4cff8ba5baf96cbf2", 0x94}], 0x2, &(0x7f0000001480)=[{0x58, 0x41, 0x2, "055bc67e7b2a9aa1fa916af3cd4fda5ce4f20b882a493abb6845064e38160c3592caa9218d7af2be1152fe5de26f52cfaf25ac2f75c0cbe888ca63c33bc1a286947644c4"}, {0xd8, 0x11, 0x3, "b0eaf02f3faf2af51a98e13b361ec658b4dbc696508097786cfb8d23d15faac8bfdd00b61efbd1769391771a91001d80b5f9331c0217e291281f3c6048e57a0467e80135e329b692c73e0024abe84461816aed2f0a854699475cbcc3409509b571741c028481982064efd779fefc302c85befd85fcde3694efabbac6c402f58673217f2cc1579a13b354ed8c8c463acf0db5baff14285038e6b2bed6d1134eadf36ce758a8d4e12026b25277b249df40dcb01da3f2fcca3531493bcbb774078d6cec5b560b"}, {0x38, 0x111, 0x4, "badc37264b9dedb61deffece67f8fa3be4174b5177062e3765d62c5280781072c1e9eb8b36b89ffc"}, {0xe0, 0x11, 0x3, "55d38b42a0039e60f422e6c4c835717d694d3312b733e06e9de927fb26609c47f6a5e96be83ea0d194ab7292556c1ba9d34a3ef511dab62aed199940331321422dabde1ffe090f2f23abbb290bcde3ce2cdc8fb1993c98d527d14905c68e00f6ea4b1079b0d9bc62dab863495b697d71d4a53422d76568adee0348a0db371d7d4ec344e6d606cccfb589fb848734434b3415f230f253f5078eafc335088e14c804f42dd0314dd47f852fcb6e7627d1a5a7d9e8a92610c0c95ab8d7828c1162e26d142c90aee0e6d8c8d04b0ddb"}, {0xb0, 0x117, 0x20d, "d5d5c9c491f4ac1e82af42c9d7faad895c4bc8f2f540c7e21d69fefc250b959b18e970fd499bb0c90aea91895c5ccfcfde3d6171a3efd2b09a09bdcb9e3f5b868dd9911810cd615b58bc3d016e9cd6e2ef76333d6cd1dac14e0af862305ee3e6a9d074c5beea58f8f76e6bd1a69eb3b77c5d7cf4b5a8d7a4f0a247f623f4951d694c62d07dcdbf5c1b3edb8e5731b6630868cb1f43dbbc819b90102946b7f0fe"}, {0x60, 0x1, 0xe5, "f8f925089449bd5bec17b16ac65cc8672eeb0c15d2e1ff8b9b2b4d69f91ce6851b3307b25bab7a69107eb533ffb317ca94313b496f60772c9846c2a95e6a424775b0a0d4b7d4b3b99620e0f210"}, {0x18, 0x6, 0x0, 'a;D'}], 0x370}}, {{&(0x7f0000001800)=@isdn={0x22, 0x1c, 0x40, 0x1f}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001880)="271f8af24a1e22d85d0c4e61c9b1d9f9b854bb06b5c6baa6979b875345efde904a29bc623578fe712fcb8b2f024cf447f3adf845725bf06d6b3ddbeab11854b72351c77d415e395db1635eb94236afaa758eb1966a8c9b39b3d2b439dc27c20a7c62", 0x62}, {&(0x7f0000001900)="e65617177ce13282d34ee61af36ed372bbfcf41ade5e2ec968663980a6ec83ceb0fada636391e02f0fccfca5b080d50aaa78e612be49c85cde9e1ac38f8ac565d8965197c73fddaee25ac807dc1a92587f5b420551b7213a7a5ffbc9c5adb08dd32d6fea9e93cbcaf59d6cecf6cc35cfaaf563b3e874920bd136e4e424d9e6109312851b8f141b8246ad705a4961b8fa9a621582930735aa2461d63bdd7c65f8d5f935b883f1", 0xa6}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="b1743c9402f1fc", 0x7}, {&(0x7f0000002a00)="b8", 0x1}], 0x5, &(0x7f0000002ac0)=[{0xf8, 0x12, 0x7, "5f67a7a9303a8e5dcb3648d9a8da401433f2ca8028144317b38518b0739dd3a767456957cf2a88479ed6814ee352965ebadc0f6c7cfab60c7b50db2fe128fca8859d9cfe6ed1d3a6abd00b27fa2164c003f8acd45434f7f96f8a139637df83b56d93fc978dcf6969254f6c09518ef47ffcaa9545be444863c6142c23bf50440f841e55fbaf6978a82579c57527bc1136defd5acbdf273a03dfb22903bf85ff10760abb2690a434b215830791edea9ab71f54d5a881d7669f10319f69157e2d3ab1f61ae562964e474198982c7571ae436367bdbc68a46a481d39e12f8f54a8c8a6a563"}, {0x88, 0x10a, 0x8, "81ebdb2288e9602cdfe67157f53fcdf039946e68eb895d08cfa023c3da30cf60c82de76d63499832f1986ab7b011e279c8a34adb4eca13ad992b0cebd8ac457b03e1baf54da7e9d8702b6be6ec7f4e0e1ae36bc77c6f1211bc6679b4ea3bef4ddff800fdd910a4cbc4e2d3485c156543661bfc"}], 0x180}}, {{&(0x7f0000002c40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002cc0)="d6ca36af98fc6e195dc1f5206c075a918681ba827c24ce13c2d4f8c6acc74c876d395be1716d5cfefbd7cc32c4ad33dcec6a297b532cc099256038eaf3a84d22fb0f31b5beb8c23b827d8a5be79aad9de9a3816e29d435876209e25a36d5bcefe4d2166fbc57", 0x66}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="1a4805a0385ef78ae31c2e137a3f4bf701b0df49144cb8f8917a0b3b5b2082a60315faf4cb5e36c3c41ec1d1644d0869", 0x30}, {&(0x7f0000003d80)="cfdf739c6e61fc50a02b1f1d34487d8988fba437696cc5e22289809bee35d2b93c1794f54fca8737443cb2bee8edcfa6c207c87c53b6b5b62e0dc3432555b4879a3d471b9d5fed216f3e7c697778c832c2db43ed3c032cc96359e063790e009bcff763685fb947144ae766c1c7a4cd2c44444b45a5f79c45fd442751dc947f587652ee2ad0e2e0730b3e4004ca", 0x8d}, {&(0x7f0000003e40)="a4328b94ea149ca20e34ce9a19c4337e8eafe0cbad6d006da3c11e401641b354c16eb18c", 0x24}, {&(0x7f0000003e80)="34697236e156337dc2a530cc2db2adf6a0010687030b5e6ab3e3c008bb4781f84dab26f82ad85b3e72dced2b7589f189fc65948246f75c0fea2f70dc6b761f47692eb1f975e61db2484fb0cfa845a8616ccb2852f8ab43b8bb18a198200a9e3b8301c6ba2f764acdebe64150f7d06c323e42fbbdd19e7df8eaae1f302fba6a386e406c3a4cef740066191e3220e56c7a7cf01442902f7e81c76653aadb", 0x9d}], 0x6, &(0x7f0000003fc0)=[{0x60, 0x10c, 0x8, "cbc12c604618785e041246e0db92bb2947d288fdc36771151018c3309575fd733ebe11541bff3ed8783e775fe8d1b989c43fbcc3783b506f358f2d97db109db686a1af34254a5675100c"}, {0xd8, 0x183, 0x9, "bdb5ac323c3578394e714438c87b95ddb1cd663f573d0a30cfc08a485a29e6e82c26dacbf68267b56269eda6196ce44c41dcafa87e8c2b492ceacd8c242761919fc27707319ed312b6c2b589cdca02c1d4f5dc32899e229632d4786ed6ea49be4f6e234538dadbed9b46b98146b4d24e5d41fefbd828c0357674ca60efe14f056ef5327755f6e4032d4be03e1dab52480c51a7d9f0193c4868782c1d741c059b2d96d1030215b691a34fe9c7b46794d7cb82f770880bf3ce09cd3a76265902dfbf8537"}], 0x138}}, {{&(0x7f0000004100)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004180)="ec57e8b2612b02f5a4c8e8fdc1f0731efed9bab26b138e05aecf8410a858aeb276c6c6f7008f8147806fd9dfcc61eb", 0x2f}, {&(0x7f00000041c0)="e48adf96bc6b99f1b5f51b33089a5d0d1859ad59b0843c927a71025600f1d34151a6d3def458e273ed1966bbd5bb96a3ef6722062b0ce62fad97a1034b6134d132c87d965d046d7b5bdf5345f34334e44ccab3b7c93c8cd9296c74b8b5e5edd11f1ae4ddfb7199af4687312c5b4ebbc2cc64e900da3cc83e11e2398cb1da664e47089fa526c3d6d6fe014dbda502209b9e466ff9743336c8ee0a0324f23ff9fab878cb6a3ee64c", 0xa7}], 0x2, &(0x7f00000042c0)=[{0x100, 0x0, 0x2, "d0e64aa69852e58cc179a2289f43762c3c4a3a74c215ce0346d8a4697ed7bea4706553a36f72e2aef42b66470a3970c0b25f82eab2c26bf6d221bb2068ca9ae612b12c0664b2e1caf184eb69dbbd994ef5c3f6f35c90889d0f62d7e9b5f565f6dffa96fb4311302d550404c224214dd41d259500f47122a809dd669da859e301dbf8294acef38076d0b5c93cc84790330103c5d341f7d0cb3e97754d4e236acc41c1de7224e33e189400773079ad1d9a3cf7f092b822b7db39daf70c22f701efda6e25569a7f9872ad0cf752d122772ecdd7a6f4a9ac8b53bfe8352f66929774f36c314aeb38679ec3"}, {0x58, 0x101, 0xfffffffb, "fd388ac3ffe0567cdd1b91ea4c44d915d196a9b640a95910fcd6c01d2f8967915b6ba142cebf747a516078eca106ab2956111a3cf8784ff96063daecf050a3704f"}, {0x48, 0x117, 0x7f, "df7df706b75d988da324be351f5b3e36fb79e06ef889ad4de9f47475ce8ca21c2f3a1c4c5f70472247c0ca3bdfe9da3540d9d95f713df540"}, {0x80, 0x115, 0x3ff00, "e4987cfc6576620c4e1569fed81a520428cf7e6740038f3e90c2834a45431bd79c2d2ad92cf433ae4962fe2d7764dad95a4b9d9bd43d9107caf4ec7c2d243293ba3139cccb4d749ed4cdcfc608c98899fe2e83c88ef6c0899a35f9e38c2457442c560a496a01995b150a50709fc646"}, {0x78, 0x10d, 0x2, "0cd3620f1b27a5fe7cb5c6434dfc3675c748b572c4171ddbe29cf814d2c83aaa1d09c630d06c4edbce809adbc899691892c7ca8200551368fa9d7a7095fea94ae56484da393ecbbf13f2dafe5019bf4d4477c6cae16d8ae4ac65c51f92b8092b24"}, {0x28, 0x103, 0x3, "94b7ebfbc9ed56a4fc321b62b61fc6b03ea1"}, {0x30, 0x114, 0x1, "3221a63a3e2b8ace860e830acdfd34d44205539c652f11491e004170628bfc1c"}], 0x2f0}}, {{&(0x7f00000045c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x4, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="c311ed156312aeea74bb7f8f51d6d4d6039d9ccab3c58e3da36fcdef27eea8170f49467425b11c", 0x27}, {&(0x7f0000005680)="dd328be9a28250ba9bee202fc4ba3a344a586ce7bc0f43486566bc78452cbebffe6f8c5e27f989f3fdc8680edf2d25072b72a9e75a47114900bca2fe3878", 0x3e}, {&(0x7f00000056c0)="01d78d1f40d3eefc8233afde67207dff8357309b376020f8c2f0d10ec6dc88945ac48743570d804f06065898d6938b7b49e3db6fb61e364c81dd414d6003951c33fcf51ee73fb3bab3e1b3dc6da90ab1acf3e488ddc5e26e09f5287581a56d92bb4aba48208e5526f823bf1afbc1105ffc8bc9f8dec7e2c6962be0980a0fcda4e23808c4fdcb1ffb9ad36a95", 0x8c}], 0x4, &(0x7f00000057c0)=[{0x40, 0x88, 0x3, "c5917077599fc4ed0219e03241e4b509caf470761cc21f03179bd311b1ab2aca57ff98e942e44e60c0bfd6"}, {0x28, 0x111, 0x8, "e8768755ad11320d3ea8022a310f6acb41a49bb9f86798a5"}, {0x60, 0x119, 0x1, "7d0e063df54805c068dfe3cedf05e0ea813a5bea5dc98d12be5fb16b91279e10a7447c2d415620ed0dd1de2a29c1d96d2a1fe9670fdb2c5a1e3145ca30dd33a1b576a8f2ac4addbdd3e854"}, {0x1010, 0x9, 0x0, "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"}, {0x58, 0x108, 0x6b101e43, "81cfeb7e9e3da3182e0b5bf45e4cb4ab790cf4685f4099fa101a2a87cd49befaed0f916cab7b393e8d63cdb9d0bc632ba08bc25790380206bb311ea28337ad1aa8cedb32af55"}], 0x1130}}, {{&(0x7f0000006900)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006980)="63ac3bf5c64cae40fcc4e76378784d34472c37bd2a0b35ab4c1fe68dc655fb590f6cbe67323f1b0222a3456f695febdca3944c1412c2548c4a3932", 0x3b}, {&(0x7f00000069c0)="450aaa4b3b43ebc2dac4d5a14fd3d5e80e62e9275016d4b8381e46fef9524d4005bd359648c0c1975f2c031c8e5678051d31cc225e51a975a8de6b06cc7ae2a583f9a82ac2179f86989a771bd7058c52b1c805bafcc51dccea1babc24b0966c481317bcd742fc29397555249fc50be74415a3a09f1d59436116582427661f36c1e8eca3489bf454fc6f7cfa220c5e950deac0511a82e6798589d8c77cad9c0bf30d188e435b6d12a1ec35eaa3d565b99dc509b17753b7f235408ad98b449ade58a0d98fc9706a692b02563b4d7f5a46c4312f5479d5242d4f1c35ec607", 0xdd}, {&(0x7f0000006ac0)="8eec0587fb057d03c370150c9162c9f9088445e9f89baac53acdc1d14bd39c6f7aab377c86569b424a58234e04fd7c773b3f2c700c644cb23f71c0648d8ac12e88d5e09a2768235b8d5fbeb2b735f74567c3fd67ab91525b9e8b182f2e219b45715414b72e7d20b11cff5d76106bcfe589751c85066ebbe08b0afce6b5b5589e2cbf1371f89e7a2133ae86e8b5ee3f921c1bd9b3ec819ed886597e52a24751e6973ac4f392e0da3a34eaccc761d9e89ca4b9fed4c2ab6ccd0112b405acdebfedfce1d78372bd9aaf854766f1a6b2e829dc926ea4c5dd5ccf64293c5b6c781c9f35b0ffc268bbbc4e0ed2a6ea3ccd77b8407e6ce4b0427fb3871985a34e", 0xfd}, {&(0x7f0000006bc0)="96cae03f05984051655d6eda0046095dca48bdc1eb27a608c51b014d0f981efb17ab087c97124479a16c7c166c2e57ab39a325c8327871be44ad39d3b2a77119b39feb6765d2b1faf33c36a8c705030f62cf02175751745906d97ea4407d8af29f7630bbceded16e5ec12e5e9f9880862115e961cc4040743d67399048494914ef33c158c9f23195a560ac4cba8b9d660116e66488cc56b2407aac7f3b022f445052b22274ad19fd0489750da91a4c6f17645c23453b568219a0f1994243", 0xbe}, {&(0x7f0000006c80)="4de4c0ec61320467792e8c0a383171b6029bd3488f8984cb310ab2fb0d776a5a5760e3d48771f425b77239ab2bed5df970baf097fdf2cdb490151d4b303996470bb3f5a4f59246aa56bba6693823e36b9bdb886e6d3099eef1d438b4c105392f532df278bc51c5cb23c63fa46a31fa4bb2c27db7163698814e05305f1a13e2b8d19fbdced90b22e4a76211c85713b42ba9e689baa8a6", 0x96}, {&(0x7f0000006d40)="033d23c20291fc6757fd1dd55437c91ce610070a779377e45f295679a40b3b1f9379323c07fb3159926fb767838acc60b53d8ec4c184541ca4cdbd16a4710765c539d77cb9253ce1b00dccac28e312fe2c", 0x51}, {&(0x7f0000006dc0)="4896084dba5eb3c709b7881db9a42e445fbec42c1c8ba065ec728177160105122908e0b3d2ea2fa742bd0f645fe34163d75d", 0x32}, {&(0x7f0000006e00)="9471c2b1bd32511abfa03a9f9386340b4c647260f74da40a1480fc118498be634cd1723826b7805776f634cdde5046df76a110c394585e5c688429251fc5431e4d46081db6e055e37beb9deae2cc9ef8f2d0d58cb6ee087f32b7c00a67ab4a752b397365446b283941fed6d3546024b64f004e8c", 0x74}], 0x8, &(0x7f0000006f00)=[{0x100, 0x100, 0x6, "21fbf90b002d2b03842c20cddab9294225c3dd1a52cb69f6a826058f3e8061f63c9bf24577b835ffa889e7419e5722c4e82926c737063468e500dd74243f84099f6e1197ad3e0d8c3eda8c1cf53ef8085e40052fbd90a36de03f25e70c3808883c85366779b77b593dafcb81d4ad8de8cbe1da29dabb075e4a4e27193ca10b9cdd603ce71ebbb11a6fdfcad874172efd61c775f237dfd155c2d07ff0e6385680f97e706481c3b2b32fcd6c29e9f4e1a88727f451c6a81a9aba759f632b3407cbd7d3142a0d86ea67a1b59bdc22601767ddd08de9e8eb07de89620745392c81cc7a41c9b16d61412a5ea41e03"}, {0x98, 0x111, 0x8001, "71386d1a5f141a5a45929436e8f710b5e806b182455b94565a5294e8fdd566dfc589664f2107aba1fe7689a93e180a0d61da20514101fd190d723374947de9951abb6ba0133e14f19df44b0a6f9917fcc0f9b4091d0ac83eb24511cfe9b17b314f416c88844c3c15ddb377cf4ba4a1aa7758d39dcc6c615f02e09072860c31ae9545aafcdb"}, {0x110, 0x10c, 0x0, "96230bd37b35e06fc8b382d2444de4f48896290506b92424faa989ab87f1644286880b66883da0960a470336f8823a67e1f88f8c3055057f820d739a76c8ddaa1face37e8016fe1e36721991248f6d692cca7913cca697f489298f8ec03a02aaa81829f58d794578e63fda3917567876c2277029b6c13ab10c7f6151f89a2df73db93f16bd613f8abc6b0827ec95456094de0e2676c563a9db5f7709753de051517caf6b32ee19f97c768a2d77b2bd4bc2cd6b41cc9cb72d378d72b79f9ccebee76ced0fccc4ca8d153f29868773ba4afacad6a3341406f7ea3aab5011fd14b5005d6f0e4642ad8e61d9bbceca9ab49a49d07de7121e2e639e"}, {0x90, 0x110, 0x3, "864954fe2a056e7616a3adbff8de960180f7bab9ea0e37c41a80825a7033632245fa44b22c833aaeb8691894d223c6aef373c04529d38f7d6aafb0fe93a490c31060dde3ed4b63e79d7431d03cf56dd3fcbb22219bfc97af00b0df4087d90c945187e3d49456519f81c59f0b586d799819dcc6cfc57264af3ebada08"}, {0x48, 0x10b, 0x6, "3473b318a1b4c7b1b359a242f1680a618f8033347380ac024979eb49d7ddca86abec60f16145bedab384f5a55e6fe673bd403c9bd9f4e7a9"}, {0xa0, 0x6, 0x74, "1fe353301fd9086ee1df24d3a7d45f6f7f837033017c59e88fa95c513ccf944de763f47a89c3bf304eee4f8dd862640ce2a5c2fb24f1ce29131c4870102e68ba8513522694a31c998769efc7f9ba80853dc4bbb8d74b0a9d0283f89c5448940331fe8bc074d0abc94781c80a37b27e040db93f497b994cbfdf22a52bb41feff1bbe1ac29e93bc0ecc7fa283d"}, {0x50, 0x117, 0x7, "4e329b91ea4e7e69f44e94d4c91d02119b0bac08ce3edffd26722ae292e178df20567c5dd90d759aa8c0f541e924341dc3ef182a25f0accee97cf54cd3739431"}, {0x10, 0x117}, {0xe0, 0x10d, 0x6, "66f41639ad9bf40beed703a9126eebd756254df65792134fb70f1991a23054e2e443b8b4c726b916200d6f369669ad6b9b8fdccec1f5b4e0184e4227f31e4b3884bcc94645d12e38b4712af5f5ae49476ac61705da17ca2e678f6765be6ae04053d5e3c7cd058843fabe13a370e164157e2ff18041f44087bf868e7a7f1fa4f96e3248a55a9118e6fee9308316ed77d5e2a2c5067c18b9a80210c662ab6aed43c09f1fda2719adc8bae3a5708414eaf20097b3b0723ce7fc08fd60813809ec86a0211398e977a805082d4047"}], 0x560}}, {{&(0x7f0000007480)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80, &(0x7f000000a780)=[{&(0x7f0000007500)="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", 0x1000}, {&(0x7f0000008500)="68b47d26e245475b516b1afbded691e7851e7e71fa2b878b7c4abe9a272d52ebef177fee2ceb044bedb16208f12fa5afebe319d2250d849404964c808a6d5e9bae748d3e770882af11be85ec0bd9eaf22bbc4d23914702b6852436bc258b1ec00c95875fbc2d31d3cfe3ec2ac43f0be99ee38f83364fba7693b97d5044f3fa577be5ae71086aa235cc223abfcb826505b90f11bd8eed8d65e4fdec5624ea1e424bc157b8682b06badd4c79142f399992034488e668e7486fb15a5aa8b3e5dcdf3cb0dab0c08f8f63bcf0b7dfb53efb28434c7e31e7cbd831f85a50e2560935026643c7e05dc6ea3bbd2a28a2a271d83a50cd77e42a99f7a5b046ccf5197e35001dd0ac809f0bd6d166f4a6316d479b2eb4bb76ba6920ca2f4c156652bae56f05881dab4d01838a23aae0616482cacdf4d710f490c6bb212924b1b5534483d3ee5119cfef91829a3d03d5bc5bf05049b0f55d26c098f4e7e64cfd9c32275a64fbc3040c8f4794ac353a156fead6ca06e724681f6fbe43dfee97c6a0e034f6b84b5b4ba8f00717a287b95eac8e91b9a39f1a792f5146a652485fcc33fda0ac995bacd3ed0f5612bf9d5b5293fa61873d480129530e43e2a664c5820329eaee59a6a580f793c9cde7ede2ac0f1c1843e96ca0076810462e2c2d25eae24d286d9f01b4801ee1b8da0006293acca1ad59401993a3f55eabe28e75d099760b6b1b4a7b74daacedf751d92aa3238ad11410cd645044651950a8233c3b35fe1b521c1ed72b0005a87be050cb93f2d952d171068de05b0272b40d554d440a88a70a2a45759f9991a9a59a096896b5dd4b740af109d2cedf1ca77bf090ecd623c6a30486b16473840905e04f395167f97a09b842ea1a417606bbcf1f287ff8af971829b5f6ffa4564c5ac38ecda0face920fdaa5a42f741ecefd8baca61d05de37fbef555114a8b8a65ac9556406e4b83ed68b9ec417faf77f5658c944c2920fb8857f484ade8989103c75b57647b1adc868f6d7f78a34042ee284437ba75ffc5410129a64524f79717be963f94f60aaadd08e725810c63dadcf463fe4031590f18ccb9b8cdaeb5c5d89b19d6bc249ada54504ae4dc0fdc015d440c08a85fecc3eb6f1f009142af525a9df0bdf2cf214b45a4e446124a932ec7353124925e4d5305c07746cd0a73c5f389f4813776cad2a18e2649542167dbc439d3fb9af62abf7c9aa0a0ed97e4f7e277d4d56859307910d3e333a6ddb2eed29cf0f9c4eb8b9b36079beca08c58f788945f2ca09e15d3261e51d8d07f3341c077cecb37f554d1315e2c8f6beff63af5098c9b07bda60cf8744a04baf3a68509b42afa162a317df993a8762c923893f13038e0359327de5838c676cb2fdf947531b644d3ce792e1be2142334332250b46840bfcda53ed8d0db3b2b5dd81a1c017cd32c2c5825d4a5a6ae91f2cfed593c08ee39b369610f178c9149db62ef99f3f301562eec57298939eaa53ceb8908ae2bc2ea236941be481a05e91117d3b3c54d50c31ca0e403c21f94ff9e2428bebc673593b83f28682899d200710c606e742c71418adee781846635ed870ef03750d1cc7e3dd3934c008970e5a533f97a0264bba888c83af5aad2c165e3b7284a9ce7a9aa38f280a8a2566069e260a384385df9336d59188675ca75bbc26989dd9b611e583685ca0c11d07ec9ac49d1b0b2b4129b5869ea104d30ef504be33446d30eb7b01085b1d2098dc24a1a4402a440e322c0efc09c9950f398267100849540ae2e804470b79a1bb63c671a761002397f32b2901b98ae87d6305c65d9528fb896c3139a67ec133d6f92f0119237d2cec89d3a62d454f9671c113f2263f3e3615f5a75c149b8ddb8e6b963588d2e6720e2538d50233e82bf71c04b0e18beeb625b7cf5c9274bc11ca94525fc01ff05a3106585d5114e3124d2429faf36c248f98df32d7625b93bd1df4b01ed63004d8b6cea74de1a978eab1f8a123854965417f322ae67ba03709a8f28e3a086e5ef8fce0c3c0876458679199d2d746626a71e2cdf30ba382bba14ac03d9dd3a454e176f5cb94e514536a6b2716c519141c43897897ae488e30af43064963e0ec216d3d3f87cab9c20e7d9957a62c6634b8b48a01fc35ef593c2b7a2dc6895b452551d0f796685a941e8f84845984700b1151bb60a3a6036288112d1daeb401c6e6c33d380e94dcbd5e5b6e5d5cf925a363912f7a8c2dd8aa2bd322d92dc6f01f8692517942e444a67c4bfdd09ed967adde2df71a221328efc1f6dfa9d2e231824b0584577995dfefbe167cb4b37f5e96b3b0e915a18ef461055cdc61c1df28ec0c64c0ae42209cd5f3275cc8477fd666bbe695e470dde1fc8efa8a0f8ab2a0c085b9178c64f4f5bcdd5802f7ec707d9459256c561c47b30de7e104b1a1e29e4c49ad38f7e5a1f91c9b0204a899ad8dd71a61fd3ed8a8ce19d45c027a826a05b1b4428e44012431f8e8dddb596585d56495efe7d8e317f2c44c33e4a0f6cc379f783d941d37d1c678c199d3d5eaed21f81fdb62b67affc4fa563c96701e1e218c173c92e4162945a4665c1f22226ce8453417aeb93917effadef73792fe01394fe871c35b888937a13f3b0ca5413ecf3a7491753a7e8aefbe4838aec341463a68d07620224324ccb3d83e59e47030785a7ed472b6902013a0229410abb6cda3dcc2a039bcbbcfd443f8771df054e81f6722215a670b57bb29b18293f2fdd051bdd9c90cceba7211ca2785168fc06b3d8f77ab70e6e8f668b2cda8ec5557ac906dee8b2cc4b36e5b972034062eac944fc2dce28c6ace48fc8dd9b8f7b5c76fde92b0d12fa58bb95246048654a39d07b36af23475b92b7cc4690191cf69936df3345c92d0ab986a7c4b2bdecdb6783c2fa2105b0a8728db5482190b591073bd9276d995d12d4a5f131865c264ad3637333dcfa1b52a935fb77553a962698603590ab371573683f3d9fe77784edebf6535f1037373c09178e273cdba68d32e9c83f48b45880ba3d81e0e4dcdbc0848b2524bb98cd6c4c9468655c4055c089971f65e1ebc0d814a6dde72fc90f16ca4db70066df21ac6ea937900171a514bb64408a6f9749b9c4c4ffd3874ae5232cc647d30ead1e42ee1e362d2c0072fe972f2ed8995fb03ea7bc7e527c9495da0d4b643441dd7a0ce53a7cf60f4fc96c80dd4815b279d90cf8b6b1df0b536803f349dd6997845b5a0826db6e0408f95de553ec7392409c0d9ae2039a2c20488bbda11014d59c9e8edf24c78632d30906e991689784f4852f02922f7ef851eb4f3bd0195add7d7d4a9d61979e775673ce6173be8e7805ee5b64ec557a0522f03c8ee5b67effa9a493a4e76b726325c1845abf704ad2e9890aa9258f0a40ca09053c05094a2cfeefb030a68d3744be43eda27693e69884c71edee0eebedb1e4287e7582b72a76cd7547993967bc693423f06ddd2b5978314ea3502135b93c23bf9289857e7c376eaf1a263b0d46702372947906cc4ea60bf42753ae963a111aeb9f19ea4c6c5e07b1940b8f6808bcd9f5136d779206e457945b9d28ebc8d811eceab12c3ba47d81049b264694ce7248287e0f865baf63851470139437de66571e554a93cd3fe494efa9d017d3064aaf5ae0686a7ef0d8868d9b5b4de39897335e3c03e9d9655bdcb3213926afd1a87cd37c639b93457e077c606329607d6dc90bd9edcba6db1bf5171033132e593122999736e28fc482cb46e2a4cac1e305ff129081da991408391fb986e7da0aaf66b0041153c66e38a11c46631d803936af9274125aa70e0b3d77044ca6833f97144eae82ce8c6a9ccd03f93b7338df34b812e355a3cf2fccebf1e01c33940373a5f6ee2e0d790ac1c07952f2454a5b132c2bba46cc5286da7dd0bd6ed9035b3f6d2285110f496a286b89fb01e9016599ad469aefde7d00f8ff1e7eef162902e2295da22fb9d33519191e50ea247f097dc57bf5e28db6458147b3f6537566f8e595409048381c623ae77f6b70b63e9c50a7502e96abae9cc87954e0432baed7952efc6c1084440002ebab3f8d5616640729bb071939350b8b34a8ffce1a0aa10c03a86018b504cae4dccfc6316cb5f15dbade73a83830e98d6ab8382e1d2eee14956eaca60b53e85d5b2a48db7dd66028645a6e05a6009e460d4af35fdc05f5a07396aab0fb41286cf0f4c5c9a446d66f9bdc3c09eabe8605e507526ff3996a3b4cfdbeda5950fec75d9684380cd7a1a304f8b73ec3b049f9bdc383bac6ba9540510752248536dad24c6abecb59c7b54068ec9807c83abf379db3223568a56a99bd9db3781a38f63147a36e9f24d06526a2bce727ad360aa3c933458cf86aef2cef59f5fbafdb5d51756e06a4e9b07713d135597b94a47a6aeb7b8afad9befa7646bbbda629b192f45cd4f1082ff387e98118ad994c28c2810786d286212589ad30a7ca8e74e998909fa4bb9305f870f92b59f3f4e6f4e85fd4859fdd047300a0b89b47de2728096f1b06138611b6c52273d171967f70aec5117d636e8b4e7fdcfbe0bd0a98eb7ea6c36dae1cc05a73bfac4d847556d75d1e840028d9f8fd78f90832131e99af40514bc8ac1d30d79f6a4edd7f98736d5937e7171c6b131687085408090a0532e8ea160327a13bfff145d3c61aadcc9441174950b7654f995fca8e166e669332d68c3b97ef956d47d922aba0f256474a05e12327bfa13427430a1d90eaf4a1b8f8cb1d1c268ad7547e1c58aaa0c14e35b6da2232dde0a844f0e536564669c4fecce6f3e77d73fb3e58a8bce0aa9c2429aa9212dac3083132d6b0462447666c8142db9f5871f6052ba34f29258a5745ba6ae04496f731fafedd063abca12b10492fd0df40f6561ba1c4a8f0e631f28cc4f082c4fb4a3f34e84bf41edfe2f6da7f729a71500aba85ef56a89703faf63fa477b24ec23bc827616776680d65397a21bb39ed4a31948fea5b32d77cdb4b4f833dab0a84f6c94b1feb34d8fa838aec5ccbb56230f39a42733eeb62c20db00aa478f635096304a631a064db7d7716eef400310c0f1a5bac2608faa7ca2058251a38bc938d06e22fd78226206a7b4ca745116278a75fcb78d6cb4803d4cfada5eab2b58fa1d7ec446d95d024abce26f728080245e0fe37a85e8458d1ce5d0fa484366a9a161ce51966d715467058c5d51a5bf235817ae8d89758786d2d4cf59d76250b0ee4e56a61f55893a91e213933a20cdf4f4b3ae1e27112af3b943736cf8bb31b4c693acf1416170b63ae8c5ba41fb94d57b6047932bbd1cd0ccc782e1e9d017a2143d62ce00f9c875062916fdfd73517570a5641c1975a93d05b014b2e638090be8d283608908b13cd1e5a037358f358b11e0a088011415e054a9103fa9b21dc33c69f7ee9c14f3acc1fcca69c894a3b63e426235e1af14cb15ff2ceed4b12853134e91358241f112dbae9b907666c83843fab37b9ce41d0049f02efb9017df97a941272e2ffde1f500dded5e08ed5c8b8b64213eb35b268973f589aba38405152fc464dd00828136e4035f1427a11710189ac892df38983b639c79f0fdafc7e19f423af0f1ca275095722edae95424227346fbcbfe012b03d4ae06f6fe97c2e122c2ce326d256480582fdfc359c72a702c9dd360e6cbfd4eb0e4bb1854fb2cb281abe36ac086c18f15433e5b06178a0d2923adc57835fc6acdabad72a49b77aad4f3c50409f9d944f718612945e335fd0b4e344d7cd387cfaff11e6c764dab754fc5d3ff1cc05603ee7406b836d35922d3d80246e3f6ae73dc7150c4a", 0x1000}, {&(0x7f0000009500)="fe9fad4d85c690595916996cefa98500d063c978fdb457f78d0805383c441176087b09f656a5031acb872aef4b85b6df296d2f55e521eb40e25ebde97958840ad11cbae9448c9a8ee50e55478fbb6a4c616d57f274d903cfde8f985a0c7a37a4ff086bdc60b01aa9ed31856fe5203d742579c09b85da64a54ad905c8d8604ad1e4fe20b32955b0365c0c70d79777ebc10f1063d441ab2a28", 0x98}, {&(0x7f00000095c0)="a1806b070cbe1eaff79de582064544d321cbe041e74da20297cd0581da463d49d05bd56c8785b8fd9cd1af1708e4ce14ed79362906c5e8301ec2524ed92887a8569e487980c90b83f85befd89c2a875bb60680b2316d587590fbc299112cb7165f0984e856d6036a61340ac7ba4acf36f5e37f2a93a354e06ee4e05961b55b62c8cf703a438ef899d20888c72516e70b79", 0x91}, {&(0x7f0000009680)="c29513838a07970408655d8b248a6d61e9a5c8eb1817355bb85faf045a72c393e8eef73f180436d94beed8dd4393a2419c814a80b01794ea3089c848a0c078febbe4ab3f25aaa2811e49f0203f706319b70938eca39b63fab5b329aee556ad29038727110ce9dcbd4875b5a72b10d8c93ebe555e34dd69be99684c54d41c91dd08956aa7dcea2669383f0ce4e2fbc75e5bdc705112b46f7b8a31692bf8", 0x9d}, {&(0x7f0000009740)="93bbf474bd7ce3605552c53d83d6f6653b33f1cb57f0199b", 0x18}, {&(0x7f0000009780)="83ddf210ef7b49a74292651ac3c4aa7638e005b84cda4c2c8e229868db8b665f9cc6c08125bbe910e0c1e493d1739504a6613e9bf9d8e3dfa4210e8275a8d33c6df72703d00bf8723c719f4104c22528ced3dd6be7f1bef25374560df742f0a5c90f92c0008f2726ed5958821d997f75bb4f6daf5c92879b45c4df959032628845ccec18a311ff4ac27e656f8b77398e0085e5d2ef0637eea195caadbd4da673e06cc427424324388ed2c487a4dc147112283edab8fa1f41115699846ba357cbfc36e67b252aab1648d20de0399c2801a7604e5336dd110146088c04d0576ac57bc903393c84d49c0cd7ed1915c56337310358af6ffc92dca89e122d1abc61c39dd5fbc2b8744b96c60d021b41b2b7edc80448fa1dad9af99edf77e72008087d9803c146a0997d4fc45c271a4221c8af2ff89c2c08aa73e7adb171fc9bb541a9f2209768a2bfc013fe66735c5c9e2f7b920b3fa0839a167c6a976077de2f4980ded4538f9d554934824e37ef1f24f90705d2937b16d693918721641f3d6769b66a9ecf984200e6680a29a538f6468ec550143d265c310a991ccb072d94a25e440892b58294841aba78a92dceb622aa31986ada2611e80b1051a5072040038b19cb85ebd2c2a6f25f5a158d72cf597c340e8fd92717a6752cc75f66f710c26471a168d94d0f1b885026f1ab0d221a488b05ec2c1cf045bdc040a83ae7cec8ee121d87b181b3f623a4e9927bd076907108eeadadc50076caaacba477c1b5aafe0cc1e4952602b21842d68806e11f6015ec5f94cb20a17c0acf6278cba2a4748bf4a79496b4c0c49ee8a42a95d151ee7b7f2dc916fda3d5b18c6bef7f0eb1b8c4b358851c2f1ccd41590ed0b2243b88a68161e48da06aea81d8571bb7127b858395cec553b836ffe773536cb53593d26c1018a93ac97125e08b8918ac1ae1c982fcbc77180e3154a4470bbc0d0befbaca2c18e6fe9c7353776d2fceb62510a7c873402b2adab6380ff86aaa2725bac0794668393448644a42372439aa1da532e1c101fba87c3917f138aa2ccef26e495165f7873ac85346092ae6f19f685ac98d28f7ca136f5f157e4b920430dec3e239013a5b62697cd23834fa8216e674cd5b6e3fd429d3f0ab8c127dd884b05ddeaba66c1038cc0313b45e4a638dd638892691b663cd07a4761917a64f91e16808abbcf8004405b153a04686b757af8eb2b11854298bce71ef6c78996d0bc1c168a68db7a17f39ddb6c7df3885b7d32d44063e84232a2d3ae73946347e35f9344335b28d6af25c63a9e79524c46851ebd57c5f30af11dd883139def2fd7508b810451407fb189ba848d00edf6b33eb3b383aa8016c769bf2bc88f9bb66bed5490aaecd45d4a641b149ca971aceca658d2477e3e537d277484ab24c61c972a06333f732d63e2204ad44b10e04b1596394cd8e5af8ac09cf4c6d0182d314bf558b05fa2693d2f125586b25cff09a2570e24ffb0587262d25106f31934988f5e53ff0016afe18fc417965d75472e4d09473c2504d0e465d47e78c64db4ff671b0f080152b7ee380be4c613759bfe03660a9561ac944a982f8fcd4f78ad80288cd3f00bba0c602ef8b453b99371c102fc06bc07468724cc782ecf5f89d683e67d734423166d25043cca944b69bbf0021da6ec038dc47231fb32101918bbfb995ba3f6655aa2847adb4b33abda4cd720b26c17cc49d9a242b3469e9a1dedf92906f74e1b99c8d8e0ce0857495df157379395acda07c92998ddc4199bc1d03cf045e37f9348f8c2001439d29d53c640ee3536ae62fb3aaee4c5358518bbcca11bd481d5ffaa640f6497c23c3da30518939d0fd53783b52beada75d68638f7a18bfdf315b95643ebc6e916f52a755cdf3a69a1821b10266a69435586a9d828140d63fdec42847d4480eb18ef1b64accee5fcc797ea90cf59253dfd3cbacc95eefbffa43e3575424a713feca3508f20deee8fc9b9b6efa74efd5df37d24e1710a0c08c9f1766e178aa19cb96a1534300f5159f615ad4e7c9a057e743c25c5ceb50e289e21a7c30dd8c29d006c24718431769236df17eaad3b4151ea41fb35612d833cc8e67097b3f1a5d08ea30c8da649665bdb37a203ebfb7bb46c8bfbac95e4b6dae7d8f7f2ee785f6f086282ee1e16c20f033b459653f9efd8a74d707c839d9179b64affb37afc28af59c28606b28fefdf8815808fb12b6913b39abbd96970f5f83dbab20bd10f8ff5ef028ff7e5e447e4d03a83f7b9c1033b7dc229e081e3f940ace0f53874188ab427a0a78a133daa46b0c6d1f20f4dd185a1f8f74895e8c44ead174a53cdfe6b7ac4bf99a9d648460a1493fe8df7a52cc236dfcc8527a02d428ec9c056c1371304f450f26c0fbe035334fef647527d6f20057fb7ca33a71a60620768552cb495ea4497a1c1b3d21b18ce0fce3c1da5f8425a4fe4c201acbe5a823289144acc3405a5a3e57cf6641999f8c03cf7bc8069c4afde3cd3118cb6d9900e5e1f38e0384658b7e5b79ca8025db6eb66cc752073817f118b4ed9b77265f57885e82acec53b0c4317cd53a45ffd818284c955cdbf6f3de3e063ffdb96d71da3af595891f9617b0ce8bd3091049ba507b28b3569dd540f8ac45034d63a2b5463837cc9b9d53d1e0b25e03170293fef0fec3fd768edc039305c642b3f123c2ca06135f163d5a3b1efac0c513985c413e49b0f7fa8c8d1414af8915b6246391fddea3279be9e33c7615529646209dec499e9e6b13a7a789bae392a701d11f13f8773638be368780f20d454892993d1f84ca837be41f29316ff6447b0bfc1bf56f38500768ed5e4f5aadf0590f03c780439223063482a2772ca855687027ce38b6f3e54726e1d233eb5127ce272d6bcff3d5ccaa93e6eac828e7db46caac0908f5ebe64a537bd73fd93930f804049b9351d6333236c20af7d077888eae6d118e3f21a38cafbae3e124a7186ad6627621ecfb79b54d45655ed76a98ea1e76bfc74ad0a910384c8d5c69268d276f6d53d66aa09e766a9827c7a8e87a97dd2e9df7adeb3573c00083782bf470ef41b0e9a51ad3022615a87993e7dc9057d5731c38ed5e06c0f0faea7d3d142de859347167393c594037cfa0c05e151d71d5da2a6cfc9d25e0f4bee921933284c682a53d2c8017982a16d690a6106697a4d5d7840e942a0762619bcb742b0a94a8ff6c9e64345817cb5a3511cc4b23006b5ce32bb41c49ff367764d1e88753695049a55b1e271a680d1d18e2292e67f5613fcd338c45792798f4f18a3442440319687c38e904d8acc1a9d8a17c3d255a4bc3e9acbfbce21bdff5761d65362747efd0480c9e920e9d6b924c04e1c5f2d8313644fc7706cdee08b8d2aaf1dd32e4636a44522d7db698fb1771637f741e13299f96cdab5fc8224b62bd48ecf924beb4dcdc07b51ffa80924eb6f461b732336da8ae22c4df10688c45acc0296272af9a681e2d6db316125c5dc63be32a82177a4bfceab8a07108f5dd8aa08172bd18357368d81a6abf9a9b6ed0c27d26597538b7a56808339476ae687011afa0d02bab3d3219c257442202eeefb0e024b41f4bcd63fe9c43d87fb2b43e7187e19eb9468cfad07452bbb513de1eed8ccb19fa6a2268b953965e532643a599d43774b088fa7dedb856c8f40cb71d23fa2a87bf0f158371a82155e014ae0827fc2a2e7f694e8b69f052dfe84f6298ee4a0e8b90b7169f80c2927756c44d6580f033ecc0ff5ea113ef4cd37882eea39ad2d9b979ae0f744d47196400ec77efb03cb8a516182d3b2a1e8192fa580d6db5196482b36c22ee6b46d7c386304c31981809cf9d0ad01fd00ebf59c5b5d1ab0b9794fa5dce1127e6773d5d274aa9eb22a409b8aa86e89fd254583ee8738d0552486aed55f56311608506a0325a9cf149ee719749b6e8a14a82db35bb8c57e104f88b3127011e596a07215e0412fcd96dedf4519c797f3eca38d89d18b78155fed09dff0f8f20b766cc12789ba9d1c83f80be4fdf7c1060953a6b2e8869fcd44caa3bcf19865f7f8c81e25d2b56a883924e05be2fbf7cb4e8a50139213b49c0d4731f2a99dc4d7a3f8639511660b43480769d77dcd95d71bea8ddfa8474dd2f8eae58284e00cd922d5968746c6c7479d7dd17dcd2e12a485d5220c525aac4186bee6213f1d902dafae6019c72f0cf2bd3eb41ab7184b42f8dfd55752f197d50135e0be100d34ecc96d6dcae617d887c9ce8ca785dc7136355642ed6593ebb0d6a97c31de14a1cb54a311d7a894b31d6f24c6d28a231d26bc67f808632801190530020a505f1650a652a9344c20138170b666b3acb90204cc71e1d33bb62d838bc97700bcbe7756af66aa9e192f64221d7718db53483f7f9d1d08bac130a7a944666da348796227868c9cee2ddf0da0e83ec7a677a57b87841e4c6045f19455863b6022509fc227a502b7e80ebd579bb48b511d97025d61def9142ef64f57ea1c04b8f98e2ff4216c554063021c7197604c62308b0487eba4b83215d80238a97740164d7ece8659bf07fa701dad4b2eb14951ce27c40646cca4cc6eaecd488be75e177d163882335f21f75ab397c7efd40464bcce15f7461bce3aa54304f20224f75a144276d3b60aa6ec82fc2d02d6c4a233dd9360e8547d4ccc318d397b8e6ef57ce2095c4203db19d4306b77eb2aaa95cd0beafd5113519258458fa93ac43af9f60c809dcb706c3057b447e644dfbddc64f1b91b48747bf4fa9915420fc946a415ee2ab9894577fd871be07b0fcc382b7fe24eb70386dfb44ff8a6e35d2de070f1ea26899b122806342ca175cf3b24657089f9e893becb229c896386d2b778be5b4206891dc3cea0109de9836bebe227f9b6f14f360d75030838f9a1e9c662140963c8f10c70b3c2ee04db329a71de679c09496689c4d41f2b8c93c2394865f34bfb6becabaa4f3049edd4aa0090934135954aac0fae2ddcf1afa1f16ac0dac986f99cdaef2a1ba255816c1a4c9f7ff6752732552b599b2cb34edd986e8985bac362eb238e8802dd6693508a2c28cd2310340a44af3ae3b0713721f34cfc609b43ed091fea2a70cf5d3e5d68210492c7a18be901c3f0d6af2dbd4833a72b893a0e33165ae6ad279dcca32dc85f6efe1d76900147d035ad7ff5ea33f19404fc3a35d0315517b9d988f88c18ba74cdd44724aea3288e578419d97fe2df094b04ab662d38714f432575c0a5b8d7a8e02e9199be9a3608bae0d76ae1de812ca0425fdb42306376cc9a11f13617f742c1f539ca71094478909ef02334067f8810ad4e99eca91b8e2ed79bf72a49fb5dedd3c700d30dc94e8aa3535f303d3c942c954c4ab3b54ecd6bf36e4003cc1398db0d4cfa120e24b693d25dc82d93a4c3c3df9633e3e5c8aeea6195acc0ec18b72fd2e788fb36e17a4b3ccf4c0550a9161386d490266c9c880e5ceb0b24cef9e310f0c54801f2f065f5e8bb6490435f7a45fbfcebe3f2bcc7cea7b32219da5b1a7bcdbd079193febf53e9e3df49dca956ce646b0f8ffc535bbb5f81b061622f2c4eaac93610dd9268794c31ce7835438ebfc7da53b53c6ea8fa97dbde216637aec71769ad2f4880e5bb38101ed5f7b8a0ff94347fb468137b80a877f34b5cde4d54cbb23219f933ea5680ea0a982965253332e713e10aa456a096d32cd4b9c5aabc862dc883d53cca594164256ab11ca2d6ac2f09176c2b9d1d2ab3f138b3991876549ef34c02fb4c427f0ba739a5a5d9faef16a0c3030aa56a56c06293602e16a23b7b9f7d5a6f8d82f99d123093256", 0x1000}], 0x7, &(0x7f000000a800)=[{0xa8, 0x10f, 0x64c80000, "4cc79ead26c3ab5eb4e9aad2629babdea87ced4ece22a81a84e4cd0ba9feefa4c61242e392e1662fb6b020fa248e4a026912fe2c52286b23150872fd408d213e1749f19d49b8e3f6bc0b8e264af1b8cd9eea64f30b7cce93899602bd05648117769563cc6f06f7f99b58926650d5327f115acb37a3f2e0d5904b34cae57279f0d0ad4810c385929009e62373cf0e3499f0192737f1"}, {0x40, 0x112, 0x0, "97a6785b719990bdaba70430fa3b300af57ec4b00f5148fefdf0219de325a0cc16835dda34d64d68df48595dfc9e0495"}], 0xe8}}], 0xa, 0x4000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r6, 0x0, 0x4, 0x3}) openat$cgroup_ro(r7, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}], 0x1}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) 16:18:52 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 227.381933][T19072] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 227.418876][T19072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 227.426940][T19072] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 25) 16:18:52 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffe00, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x21, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 227.466183][T19095] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 227.474218][T19095] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 227.486335][T19095] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 227.494367][T19095] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 227.588187][T19103] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. 16:18:52 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 227.637501][T19095] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 227.645548][T19095] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 227.657446][T19095] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 227.665477][T19095] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 227.763592][T19118] FAULT_INJECTION: forcing a failure. [ 227.763592][T19118] name failslab, interval 1, probability 0, space 0, times 0 [ 227.776246][T19118] CPU: 0 PID: 19118 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 227.785006][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.795062][T19118] Call Trace: [ 227.798334][T19118] dump_stack_lvl+0xd6/0x122 [ 227.802934][T19118] dump_stack+0x11/0x1b [ 227.807075][T19118] should_fail+0x23c/0x250 [ 227.811561][T19118] __should_failslab+0x81/0x90 [ 227.816399][T19118] ? register_for_each_vma+0x372/0x890 [ 227.821862][T19118] should_failslab+0x5/0x20 [ 227.826359][T19118] kmem_cache_alloc_trace+0x52/0x320 [ 227.831640][T19118] ? register_for_each_vma+0x372/0x890 [ 227.837173][T19118] ? vma_interval_tree_iter_next+0x24c/0x280 [ 227.843171][T19118] register_for_each_vma+0x372/0x890 [ 227.848477][T19118] __uprobe_register+0x404/0x8b0 [ 227.853475][T19118] uprobe_register_refctr+0x29/0x40 [ 227.858657][T19118] probe_event_enable+0x2be/0x7d0 [ 227.863672][T19118] ? __uprobe_trace_func+0x440/0x440 [ 227.869017][T19118] trace_uprobe_register+0x88/0x410 [ 227.874197][T19118] perf_trace_event_init+0x34e/0x790 [ 227.879601][T19118] perf_uprobe_init+0xf5/0x140 [ 227.884423][T19118] perf_uprobe_event_init+0xde/0x140 [ 227.889694][T19118] perf_try_init_event+0x21a/0x400 [ 227.894834][T19118] perf_event_alloc+0xa60/0x1790 [ 227.899820][T19118] __se_sys_perf_event_open+0x5db/0x2810 [ 227.905489][T19118] __x64_sys_perf_event_open+0x63/0x70 [ 227.911028][T19118] do_syscall_64+0x44/0xa0 [ 227.915439][T19118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.921370][T19118] RIP: 0033:0x7ffa67e11a79 [ 227.925846][T19118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.945434][T19118] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 227.953838][T19118] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 26) [ 227.961795][T19118] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 227.969756][T19118] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.977705][T19118] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 227.985659][T19118] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 228.047357][T19113] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.055377][T19113] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 228.067106][T19113] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.075113][T19113] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:53 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 228.115367][T19113] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.123401][T19113] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 228.137998][T19113] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.146001][T19113] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 228.163061][T19136] FAULT_INJECTION: forcing a failure. [ 228.163061][T19136] name failslab, interval 1, probability 0, space 0, times 0 [ 228.175761][T19136] CPU: 0 PID: 19136 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 228.184520][T19136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.194621][T19136] Call Trace: [ 228.197893][T19136] dump_stack_lvl+0xd6/0x122 [ 228.202475][T19136] dump_stack+0x11/0x1b [ 228.206615][T19136] should_fail+0x23c/0x250 [ 228.211013][T19136] __should_failslab+0x81/0x90 [ 228.215762][T19136] ? register_for_each_vma+0x372/0x890 [ 228.221204][T19136] should_failslab+0x5/0x20 [ 228.225696][T19136] kmem_cache_alloc_trace+0x52/0x320 [ 228.230975][T19136] ? register_for_each_vma+0x372/0x890 [ 228.236416][T19136] ? vma_interval_tree_iter_next+0x263/0x280 [ 228.242398][T19136] register_for_each_vma+0x372/0x890 [ 228.247724][T19136] __uprobe_register+0x404/0x8b0 [ 228.252647][T19136] uprobe_register_refctr+0x29/0x40 [ 228.257869][T19136] probe_event_enable+0x2be/0x7d0 [ 228.262879][T19136] ? __uprobe_trace_func+0x440/0x440 [ 228.268146][T19136] trace_uprobe_register+0x88/0x410 [ 228.273404][T19136] perf_trace_event_init+0x34e/0x790 [ 228.278678][T19136] perf_uprobe_init+0xf5/0x140 [ 228.283429][T19136] perf_uprobe_event_init+0xde/0x140 [ 228.288717][T19136] perf_try_init_event+0x21a/0x400 [ 228.293817][T19136] perf_event_alloc+0xa60/0x1790 [ 228.298737][T19136] __se_sys_perf_event_open+0x5db/0x2810 [ 228.304358][T19136] __x64_sys_perf_event_open+0x63/0x70 [ 228.309799][T19136] do_syscall_64+0x44/0xa0 [ 228.314201][T19136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.320081][T19136] RIP: 0033:0x7ffa67e11a79 [ 228.324476][T19136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.344163][T19136] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 228.352656][T19136] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 228.360607][T19136] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 228.368560][T19136] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 228.376570][T19136] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 228.384647][T19136] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 27) 16:18:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x22, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7e, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:53 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x2, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 228.411351][T19132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.419554][T19132] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 228.430735][T19132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.438771][T19132] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:53 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x3, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 228.481934][T19132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.489958][T19132] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 228.502467][T19132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.510570][T19132] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 228.639208][T19151] FAULT_INJECTION: forcing a failure. [ 228.639208][T19151] name failslab, interval 1, probability 0, space 0, times 0 [ 228.651832][T19151] CPU: 0 PID: 19151 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 228.660589][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.670630][T19151] Call Trace: [ 228.673899][T19151] dump_stack_lvl+0xd6/0x122 [ 228.678474][T19151] dump_stack+0x11/0x1b [ 228.682621][T19151] should_fail+0x23c/0x250 [ 228.687026][T19151] __should_failslab+0x81/0x90 [ 228.691789][T19151] ? register_for_each_vma+0x372/0x890 [ 228.697263][T19151] should_failslab+0x5/0x20 [ 228.701763][T19151] kmem_cache_alloc_trace+0x52/0x320 [ 228.707024][T19151] ? register_for_each_vma+0x372/0x890 [ 228.712463][T19151] ? vma_interval_tree_iter_next+0x263/0x280 [ 228.718536][T19151] register_for_each_vma+0x372/0x890 [ 228.723886][T19151] __uprobe_register+0x404/0x8b0 [ 228.728833][T19151] uprobe_register_refctr+0x29/0x40 [ 228.734027][T19151] probe_event_enable+0x2be/0x7d0 [ 228.739042][T19151] ? __uprobe_trace_func+0x440/0x440 [ 228.744313][T19151] trace_uprobe_register+0x88/0x410 [ 228.749493][T19151] perf_trace_event_init+0x34e/0x790 [ 228.754921][T19151] perf_uprobe_init+0xf5/0x140 [ 228.759713][T19151] perf_uprobe_event_init+0xde/0x140 [ 228.765003][T19151] perf_try_init_event+0x21a/0x400 [ 228.770118][T19151] perf_event_alloc+0xa60/0x1790 [ 228.775110][T19151] __se_sys_perf_event_open+0x5db/0x2810 [ 228.780726][T19151] __x64_sys_perf_event_open+0x63/0x70 [ 228.786198][T19151] do_syscall_64+0x44/0xa0 [ 228.790647][T19151] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.796539][T19151] RIP: 0033:0x7ffa67e11a79 [ 228.800993][T19151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.820650][T19151] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 228.829043][T19151] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 28) 16:18:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd8, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 228.836994][T19151] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 228.844965][T19151] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 228.852916][T19151] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 228.860880][T19151] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:54 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x4, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 228.896879][T19153] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.904961][T19153] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 228.917207][T19153] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.925274][T19153] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 228.957768][T19153] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.965793][T19153] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 228.977853][T19153] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 228.986027][T19153] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 229.007824][T19178] FAULT_INJECTION: forcing a failure. [ 229.007824][T19178] name failslab, interval 1, probability 0, space 0, times 0 [ 229.020563][T19178] CPU: 0 PID: 19178 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 229.029309][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.039355][T19178] Call Trace: [ 229.042704][T19178] dump_stack_lvl+0xd6/0x122 [ 229.047289][T19178] dump_stack+0x11/0x1b [ 229.051445][T19178] should_fail+0x23c/0x250 [ 229.055838][T19178] __should_failslab+0x81/0x90 [ 229.060578][T19178] ? register_for_each_vma+0x372/0x890 [ 229.066021][T19178] should_failslab+0x5/0x20 [ 229.070583][T19178] kmem_cache_alloc_trace+0x52/0x320 [ 229.075895][T19178] ? register_for_each_vma+0x372/0x890 [ 229.081334][T19178] ? vma_interval_tree_iter_next+0x263/0x280 [ 229.087295][T19178] register_for_each_vma+0x372/0x890 [ 229.092648][T19178] __uprobe_register+0x404/0x8b0 [ 229.097615][T19178] uprobe_register_refctr+0x29/0x40 [ 229.102804][T19178] probe_event_enable+0x2be/0x7d0 [ 229.107808][T19178] ? __uprobe_trace_func+0x440/0x440 [ 229.113074][T19178] trace_uprobe_register+0x88/0x410 [ 229.118300][T19178] perf_trace_event_init+0x34e/0x790 [ 229.123571][T19178] perf_uprobe_init+0xf5/0x140 [ 229.128327][T19178] perf_uprobe_event_init+0xde/0x140 [ 229.133604][T19178] perf_try_init_event+0x21a/0x400 [ 229.138706][T19178] perf_event_alloc+0xa60/0x1790 [ 229.143685][T19178] __se_sys_perf_event_open+0x5db/0x2810 [ 229.149368][T19178] __x64_sys_perf_event_open+0x63/0x70 [ 229.154820][T19178] do_syscall_64+0x44/0xa0 [ 229.159272][T19178] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.165144][T19178] RIP: 0033:0x7ffa67e11a79 [ 229.169539][T19178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.189138][T19178] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 229.197533][T19178] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) (fail_nth: 1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:18:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 229.205484][T19178] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 229.213445][T19178] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.221392][T19178] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 229.229459][T19178] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x32, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 29) 16:18:54 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 229.259824][T19171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.267812][T19171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 229.279273][T19171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.287261][T19171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:54 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x10, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 229.322557][T19171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.330573][T19171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 229.341677][T19171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.349680][T19171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 229.370757][T19201] FAULT_INJECTION: forcing a failure. [ 229.370757][T19201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.383894][T19201] CPU: 1 PID: 19201 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 229.392639][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.402693][T19201] Call Trace: [ 229.405959][T19201] dump_stack_lvl+0xd6/0x122 [ 229.410576][T19201] dump_stack+0x11/0x1b [ 229.414748][T19201] should_fail+0x23c/0x250 [ 229.419252][T19201] should_fail_usercopy+0x16/0x20 [ 229.424256][T19201] _copy_to_user+0x1c/0x90 [ 229.428772][T19201] simple_read_from_buffer+0xab/0x120 [ 229.434125][T19201] proc_fail_nth_read+0x10d/0x150 [ 229.439207][T19201] ? proc_fault_inject_write+0x230/0x230 [ 229.444860][T19201] vfs_read+0x1e6/0x750 [ 229.448997][T19201] ? __fget_light+0x21b/0x260 [ 229.453659][T19201] ? __cond_resched+0x11/0x40 [ 229.458327][T19201] ksys_read+0xd9/0x190 [ 229.462567][T19201] __x64_sys_read+0x3e/0x50 [ 229.467079][T19201] do_syscall_64+0x44/0xa0 [ 229.471498][T19201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.477393][T19201] RIP: 0033:0x7febc7b4d62c [ 229.481790][T19201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 229.501392][T19201] RSP: 002b:00007febc58d0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.509783][T19201] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007febc7b4d62c [ 229.517736][T19201] RDX: 000000000000000f RSI: 00007febc58d01e0 RDI: 0000000000000006 [ 229.525767][T19201] RBP: 00007febc58d01d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.533869][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.541823][T19201] R13: 00007ffc4931df9f R14: 00007febc58d0300 R15: 0000000000022000 16:18:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:18:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 229.636991][T19198] FAULT_INJECTION: forcing a failure. [ 229.636991][T19198] name failslab, interval 1, probability 0, space 0, times 0 [ 229.649624][T19198] CPU: 0 PID: 19198 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 229.658394][T19198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.668568][T19198] Call Trace: [ 229.671831][T19198] dump_stack_lvl+0xd6/0x122 [ 229.676412][T19198] dump_stack+0x11/0x1b [ 229.680567][T19198] should_fail+0x23c/0x250 [ 229.684970][T19198] __should_failslab+0x81/0x90 [ 229.689718][T19198] ? register_for_each_vma+0x372/0x890 [ 229.695227][T19198] should_failslab+0x5/0x20 [ 229.699852][T19198] kmem_cache_alloc_trace+0x52/0x320 [ 229.705120][T19198] ? register_for_each_vma+0x372/0x890 [ 229.710565][T19198] ? vma_interval_tree_iter_next+0x263/0x280 [ 229.716539][T19198] register_for_each_vma+0x372/0x890 [ 229.721814][T19198] __uprobe_register+0x404/0x8b0 [ 229.726827][T19198] uprobe_register_refctr+0x29/0x40 [ 229.732004][T19198] probe_event_enable+0x2be/0x7d0 [ 229.737073][T19198] ? __uprobe_trace_func+0x440/0x440 [ 229.742349][T19198] trace_uprobe_register+0x88/0x410 [ 229.747527][T19198] perf_trace_event_init+0x34e/0x790 [ 229.753063][T19198] perf_uprobe_init+0xf5/0x140 [ 229.757807][T19198] perf_uprobe_event_init+0xde/0x140 [ 229.763243][T19198] perf_try_init_event+0x21a/0x400 [ 229.768409][T19198] perf_event_alloc+0xa60/0x1790 [ 229.773365][T19198] __se_sys_perf_event_open+0x5db/0x2810 [ 229.779028][T19198] __x64_sys_perf_event_open+0x63/0x70 [ 229.784471][T19198] do_syscall_64+0x44/0xa0 [ 229.788870][T19198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.794780][T19198] RIP: 0033:0x7ffa67e11a79 [ 229.799170][T19198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.818814][T19198] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 229.827211][T19198] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 229.835286][T19198] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 229.843309][T19198] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.851261][T19198] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 229.859212][T19198] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 30) [ 229.907054][T19190] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.915081][T19190] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 229.926594][T19190] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.934618][T19190] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf2, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 229.952909][T19190] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.960921][T19190] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 229.973562][T19190] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 229.981786][T19190] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 230.005642][T19222] FAULT_INJECTION: forcing a failure. [ 230.005642][T19222] name failslab, interval 1, probability 0, space 0, times 0 [ 230.018299][T19222] CPU: 1 PID: 19222 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 230.027060][T19222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.037102][T19222] Call Trace: [ 230.040371][T19222] dump_stack_lvl+0xd6/0x122 [ 230.045037][T19222] dump_stack+0x11/0x1b [ 230.049192][T19222] should_fail+0x23c/0x250 [ 230.053589][T19222] __should_failslab+0x81/0x90 [ 230.058543][T19222] ? register_for_each_vma+0x372/0x890 [ 230.064124][T19222] should_failslab+0x5/0x20 [ 230.068647][T19222] kmem_cache_alloc_trace+0x52/0x320 [ 230.073923][T19222] ? register_for_each_vma+0x372/0x890 [ 230.079386][T19222] ? vma_interval_tree_iter_next+0x263/0x280 [ 230.085358][T19222] register_for_each_vma+0x372/0x890 [ 230.090675][T19222] __uprobe_register+0x404/0x8b0 [ 230.095658][T19222] uprobe_register_refctr+0x29/0x40 [ 230.100900][T19222] probe_event_enable+0x2be/0x7d0 [ 230.105984][T19222] ? __uprobe_trace_func+0x440/0x440 [ 230.111266][T19222] trace_uprobe_register+0x88/0x410 [ 230.116452][T19222] perf_trace_event_init+0x34e/0x790 [ 230.121732][T19222] perf_uprobe_init+0xf5/0x140 [ 230.126487][T19222] perf_uprobe_event_init+0xde/0x140 [ 230.131758][T19222] perf_try_init_event+0x21a/0x400 [ 230.136861][T19222] perf_event_alloc+0xa60/0x1790 [ 230.141788][T19222] __se_sys_perf_event_open+0x5db/0x2810 [ 230.147404][T19222] __x64_sys_perf_event_open+0x63/0x70 [ 230.152845][T19222] do_syscall_64+0x44/0xa0 [ 230.157310][T19222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.163210][T19222] RIP: 0033:0x7ffa67e11a79 [ 230.167607][T19222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.187211][T19222] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 230.195654][T19222] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x48, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 230.203611][T19222] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 230.211640][T19222] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 230.219667][T19222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 230.227621][T19222] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 31) 16:18:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfe, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 230.287184][T19211] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.295202][T19211] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 230.309144][T19211] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.317174][T19211] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 230.344378][T19211] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.352415][T19211] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 230.364152][T19211] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.372219][T19211] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 230.479299][T19243] FAULT_INJECTION: forcing a failure. [ 230.479299][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 230.492036][T19243] CPU: 0 PID: 19243 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 230.500795][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.510879][T19243] Call Trace: [ 230.514142][T19243] dump_stack_lvl+0xd6/0x122 [ 230.518722][T19243] dump_stack+0x11/0x1b [ 230.522860][T19243] should_fail+0x23c/0x250 [ 230.527259][T19243] __should_failslab+0x81/0x90 [ 230.532004][T19243] ? register_for_each_vma+0x372/0x890 [ 230.537447][T19243] should_failslab+0x5/0x20 [ 230.541997][T19243] kmem_cache_alloc_trace+0x52/0x320 [ 230.547282][T19243] ? register_for_each_vma+0x372/0x890 [ 230.552794][T19243] ? vma_interval_tree_iter_next+0x24c/0x280 [ 230.558797][T19243] register_for_each_vma+0x372/0x890 [ 230.564163][T19243] __uprobe_register+0x404/0x8b0 [ 230.569084][T19243] uprobe_register_refctr+0x29/0x40 [ 230.574266][T19243] probe_event_enable+0x2be/0x7d0 [ 230.579319][T19243] ? __uprobe_trace_func+0x440/0x440 [ 230.584638][T19243] trace_uprobe_register+0x88/0x410 [ 230.589867][T19243] perf_trace_event_init+0x34e/0x790 [ 230.595143][T19243] perf_uprobe_init+0xf5/0x140 [ 230.599927][T19243] perf_uprobe_event_init+0xde/0x140 [ 230.605218][T19243] perf_try_init_event+0x21a/0x400 [ 230.610340][T19243] perf_event_alloc+0xa60/0x1790 [ 230.615260][T19243] __se_sys_perf_event_open+0x5db/0x2810 [ 230.620893][T19243] __x64_sys_perf_event_open+0x63/0x70 [ 230.626341][T19243] do_syscall_64+0x44/0xa0 [ 230.630744][T19243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.636682][T19243] RIP: 0033:0x7ffa67e11a79 [ 230.641085][T19243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.660675][T19243] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 230.669069][T19243] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 230.677032][T19243] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 230.684983][T19243] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 230.692993][T19243] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 230.701024][T19243] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf00, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 230.750571][T19240] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.758579][T19240] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 230.778069][T19240] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.786117][T19240] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 230.893067][T19240] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 230.901093][T19240] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 230.925186][T19240] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xeffd, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 230.933230][T19240] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 231.049982][T19262] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.057987][T19262] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 231.069243][T19262] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.077243][T19262] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 32) 16:18:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf200, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 231.094655][T19262] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.102700][T19262] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 231.116334][T19262] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.124364][T19262] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 231.248742][T19258] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.256799][T19258] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:18:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfcfd, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 231.294635][T19258] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.302649][T19258] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdef, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 231.425613][T19258] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.433666][T19258] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 231.475220][T19258] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.483242][T19258] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 231.603466][T19281] FAULT_INJECTION: forcing a failure. [ 231.603466][T19281] name failslab, interval 1, probability 0, space 0, times 0 [ 231.616384][T19281] CPU: 1 PID: 19281 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 231.625304][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.635361][T19281] Call Trace: [ 231.638739][T19281] dump_stack_lvl+0xd6/0x122 [ 231.643337][T19281] dump_stack+0x11/0x1b [ 231.647513][T19281] should_fail+0x23c/0x250 [ 231.651934][T19281] __should_failslab+0x81/0x90 [ 231.656734][T19281] ? register_for_each_vma+0x372/0x890 [ 231.662212][T19281] should_failslab+0x5/0x20 [ 231.666737][T19281] kmem_cache_alloc_trace+0x52/0x320 [ 231.672134][T19281] ? register_for_each_vma+0x372/0x890 [ 231.677606][T19281] ? vma_interval_tree_iter_next+0x24c/0x280 [ 231.683662][T19281] register_for_each_vma+0x372/0x890 [ 231.688959][T19281] __uprobe_register+0x404/0x8b0 [ 231.693910][T19281] uprobe_register_refctr+0x29/0x40 [ 231.699117][T19281] probe_event_enable+0x2be/0x7d0 [ 231.704218][T19281] ? __uprobe_trace_func+0x440/0x440 [ 231.709515][T19281] trace_uprobe_register+0x88/0x410 [ 231.714726][T19281] perf_trace_event_init+0x34e/0x790 [ 231.720053][T19281] perf_uprobe_init+0xf5/0x140 [ 231.724929][T19281] perf_uprobe_event_init+0xde/0x140 [ 231.730267][T19281] perf_try_init_event+0x21a/0x400 [ 231.735406][T19281] perf_event_alloc+0xa60/0x1790 [ 231.740359][T19281] __se_sys_perf_event_open+0x5db/0x2810 [ 231.746096][T19281] __x64_sys_perf_event_open+0x63/0x70 [ 231.751565][T19281] do_syscall_64+0x44/0xa0 [ 231.756054][T19281] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 231.761958][T19281] RIP: 0033:0x7ffa67e11a79 [ 231.766446][T19281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 231.786058][T19281] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 231.794512][T19281] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7e, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 231.802487][T19281] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 231.810626][T19281] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 231.818604][T19281] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 231.826575][T19281] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 33) [ 231.849862][T19286] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.858029][T19286] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 231.874799][T19286] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.882853][T19286] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 231.903058][T19286] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.911076][T19286] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 231.930522][T19286] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.938523][T19286] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdfc, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:18:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r3 = gettid() tkill(r3, 0x3a) clone3(&(0x7f0000000700)={0x2000, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, r3], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000058600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059600)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0xf2, "2b93294b014d99"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x5, 0x4, 0x0, 0x6, 0x0, 0x8, 0x402, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb, 0x2, @perf_bp={&(0x7f0000000200)}, 0xc1, 0x81, 0x5, 0x3, 0xfff, 0x2, 0x2, 0x0, 0x4, 0x0, 0x9}, r3, 0xffffffffffffffff, r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={0x1ac, 0x14, 0x2, 0x70bd28, 0x25dfdbfc, {0x2c, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "35976eab1b41dbab59317e300c4b637c9a48e19ffafc43487a6143fdc717df1cc232d17c3df65f4f494e460be826adaaab1d54ff2e9fb1a4fd4b1bfced7f7265d953a882bde1f5b474d789708d998c98cd53f7ecacc076bec07d832bc5a0ad3e8d6ed9763d99d6982a207cd6694c581e582883d88a2860e6d7d756953328cd632a029804253480bbfd3040eddf10bcc518ef575a1957ccbf40b1b9a06ee480e9fe00601143fb3b666ba91d077bcb82b19133a459f5ddd1382cfcb8b85c91f680ae542ebf5ebdd74d77dbbc3dac61e4699c09ab1f649af67370177e3105e9"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "13e871d130ca5b5e342313542d05d2bb85e8a497b2add6352a09133891ed2d454a93251ae81ca756ecd4d08e95e62b331628fa12c37fdd96418bfe378d7320cda07913b0e0c0dd9d45ded062c29c10253b1f176ede66546e6b28ecda4c5d45e8faff069d68130df1981bf99bd4549a284a35bb7e296468cf9127f90b3b4f581fba802c6cf62a892777bab763641a946acc"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "1e2edd41f52ab71d472240dd8846c541346881c4cbb0aa"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 231.956743][T19302] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.964763][T19302] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 231.978298][T19302] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 231.986379][T19302] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdfe, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 232.009147][T19302] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.017139][T19302] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 232.034775][T19302] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.042790][T19302] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 232.146104][T19305] FAULT_INJECTION: forcing a failure. [ 232.146104][T19305] name failslab, interval 1, probability 0, space 0, times 0 [ 232.158757][T19305] CPU: 0 PID: 19305 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 232.167510][T19305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.177547][T19305] Call Trace: [ 232.180858][T19305] dump_stack_lvl+0xd6/0x122 [ 232.185604][T19305] dump_stack+0x11/0x1b [ 232.189739][T19305] should_fail+0x23c/0x250 [ 232.194154][T19305] __should_failslab+0x81/0x90 [ 232.198920][T19305] ? register_for_each_vma+0x372/0x890 [ 232.204377][T19305] should_failslab+0x5/0x20 [ 232.208862][T19305] kmem_cache_alloc_trace+0x52/0x320 [ 232.214156][T19305] ? register_for_each_vma+0x372/0x890 [ 232.219596][T19305] ? vma_interval_tree_iter_next+0x24c/0x280 [ 232.225610][T19305] register_for_each_vma+0x372/0x890 [ 232.230888][T19305] __uprobe_register+0x404/0x8b0 [ 232.235832][T19305] uprobe_register_refctr+0x29/0x40 [ 232.241076][T19305] probe_event_enable+0x2be/0x7d0 [ 232.246256][T19305] ? __uprobe_trace_func+0x440/0x440 [ 232.251518][T19305] trace_uprobe_register+0x88/0x410 [ 232.256700][T19305] perf_trace_event_init+0x34e/0x790 [ 232.261994][T19305] perf_uprobe_init+0xf5/0x140 [ 232.266741][T19305] perf_uprobe_event_init+0xde/0x140 [ 232.272052][T19305] perf_try_init_event+0x21a/0x400 [ 232.277142][T19305] perf_event_alloc+0xa60/0x1790 [ 232.282057][T19305] __se_sys_perf_event_open+0x5db/0x2810 [ 232.287670][T19305] __x64_sys_perf_event_open+0x63/0x70 [ 232.293116][T19305] do_syscall_64+0x44/0xa0 [ 232.297611][T19305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.303611][T19305] RIP: 0033:0x7ffa67e11a79 [ 232.308006][T19305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 232.327590][T19305] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 232.336258][T19305] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x88, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="23bd285f", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedb8892288812aa8f60da184f55ab7cf8df250f000000080003000a95957e0bb3d59c60de9b37b33e876046da0179d151c04f74d25dca9644075fe955b48daa0b02909bb1c25d6634e186f240e900002e1af5d1616abe5661ae44c3d4dea3707a2b7bb5cb8e20e4408831040000000000000007400adee13ec34d", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 232.344209][T19305] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 232.352173][T19305] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 232.360121][T19305] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 232.368077][T19305] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 34) 16:18:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 232.410911][T19308] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.418896][T19308] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 232.430449][T19308] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.438405][T19308] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfe00, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 232.469791][T19308] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.477812][T19308] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 232.490456][T19308] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.498454][T19308] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 232.595679][T19340] FAULT_INJECTION: forcing a failure. [ 232.595679][T19340] name failslab, interval 1, probability 0, space 0, times 0 [ 232.608370][T19340] CPU: 1 PID: 19340 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 232.617243][T19340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.627336][T19340] Call Trace: [ 232.630609][T19340] dump_stack_lvl+0xd6/0x122 [ 232.635288][T19340] dump_stack+0x11/0x1b [ 232.639429][T19340] should_fail+0x23c/0x250 [ 232.643840][T19340] __should_failslab+0x81/0x90 [ 232.648582][T19340] ? register_for_each_vma+0x372/0x890 [ 232.654063][T19340] should_failslab+0x5/0x20 [ 232.658546][T19340] kmem_cache_alloc_trace+0x52/0x320 [ 232.663847][T19340] ? register_for_each_vma+0x372/0x890 [ 232.669285][T19340] ? vma_interval_tree_iter_next+0x263/0x280 [ 232.675252][T19340] register_for_each_vma+0x372/0x890 [ 232.680529][T19340] __uprobe_register+0x404/0x8b0 [ 232.685459][T19340] uprobe_register_refctr+0x29/0x40 [ 232.690631][T19340] probe_event_enable+0x2be/0x7d0 [ 232.695675][T19340] ? __uprobe_trace_func+0x440/0x440 [ 232.701035][T19340] trace_uprobe_register+0x88/0x410 [ 232.706228][T19340] perf_trace_event_init+0x34e/0x790 [ 232.711497][T19340] perf_uprobe_init+0xf5/0x140 [ 232.716244][T19340] perf_uprobe_event_init+0xde/0x140 [ 232.721547][T19340] perf_try_init_event+0x21a/0x400 [ 232.726696][T19340] perf_event_alloc+0xa60/0x1790 [ 232.731631][T19340] __se_sys_perf_event_open+0x5db/0x2810 [ 232.737264][T19340] __x64_sys_perf_event_open+0x63/0x70 [ 232.742702][T19340] do_syscall_64+0x44/0xa0 [ 232.747112][T19340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.752984][T19340] RIP: 0033:0x7ffa67e11a79 [ 232.757376][T19340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 232.777067][T19340] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 232.785467][T19340] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xef, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 232.793430][T19340] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 232.801376][T19340] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 232.809320][T19340] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 232.817307][T19340] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:58 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 35) 16:18:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x74, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 232.858462][T19330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.866567][T19330] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 232.878348][T19330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.886716][T19330] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfefd, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 232.913159][T19330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.921186][T19330] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 232.932791][T19330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 232.940799][T19330] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 232.960086][T19361] FAULT_INJECTION: forcing a failure. [ 232.960086][T19361] name failslab, interval 1, probability 0, space 0, times 0 [ 232.972763][T19361] CPU: 1 PID: 19361 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 232.981522][T19361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.991665][T19361] Call Trace: [ 232.994936][T19361] dump_stack_lvl+0xd6/0x122 [ 232.999526][T19361] dump_stack+0x11/0x1b [ 233.003677][T19361] should_fail+0x23c/0x250 [ 233.008113][T19361] __should_failslab+0x81/0x90 [ 233.012862][T19361] ? register_for_each_vma+0x372/0x890 [ 233.018310][T19361] should_failslab+0x5/0x20 [ 233.022794][T19361] kmem_cache_alloc_trace+0x52/0x320 [ 233.028198][T19361] ? register_for_each_vma+0x372/0x890 [ 233.033743][T19361] ? vma_interval_tree_iter_next+0x24c/0x280 [ 233.039717][T19361] register_for_each_vma+0x372/0x890 [ 233.045042][T19361] __uprobe_register+0x404/0x8b0 [ 233.049956][T19361] uprobe_register_refctr+0x29/0x40 [ 233.055184][T19361] probe_event_enable+0x2be/0x7d0 [ 233.060199][T19361] ? __uprobe_trace_func+0x440/0x440 [ 233.065461][T19361] trace_uprobe_register+0x88/0x410 [ 233.070637][T19361] perf_trace_event_init+0x34e/0x790 [ 233.076051][T19361] perf_uprobe_init+0xf5/0x140 [ 233.080836][T19361] perf_uprobe_event_init+0xde/0x140 [ 233.086142][T19361] perf_try_init_event+0x21a/0x400 [ 233.091319][T19361] perf_event_alloc+0xa60/0x1790 [ 233.096250][T19361] __se_sys_perf_event_open+0x5db/0x2810 [ 233.101954][T19361] __x64_sys_perf_event_open+0x63/0x70 [ 233.107452][T19361] do_syscall_64+0x44/0xa0 [ 233.111849][T19361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.117820][T19361] RIP: 0033:0x7ffa67e11a79 [ 233.122233][T19361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 233.141832][T19361] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 233.150221][T19361] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:18:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 233.158175][T19361] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 233.166124][T19361] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.174072][T19361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 233.182028][T19361] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 233.220408][T19356] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.228398][T19356] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 233.240371][T19356] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.248351][T19356] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffd, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 233.278034][T19356] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.286078][T19356] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 233.304087][T19356] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.312237][T19356] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:58 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 36) 16:18:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f00000009c0)=[{&(0x7f00000000c0)="b255324c8d993c00fff4fa2d90bc25e80bf144f7861c415e8b269cada6b11452187319596ad103a2caeacc7518", 0x2d, 0x800}, {&(0x7f0000000200)="6a490a75601def5d65d30d7463bcfad2d8c2e642d6723e71044e73aca5fd737b5f6f3665fb97b31ed226f9e74cc443a28762711549cdfa03", 0x38, 0x6e1}, {&(0x7f0000000800)="fd64b0849f30fa88dc3412d743a4905fb69517fd5849e9bb50c4e1d8028c93a105b93bc0f7df31d73d9ecb007e73d2ae03080dc589027dba7d7e7087a7cffa1e81b02a9916be376a1e89b40c6a803e179df7ac0f7ce7166f43ca057a231e53d657f318380349cc70e3b4463d0c79c262582a94c14f1767b2cd1ab64ef6bdb3305d5a6f28510b93e45f783fc4bd85e9e91950c78785d9ce3139cf8b21bd1df409fac0f6e93ae52aa1338505ac7d74e5a2deed3b42d4ca4fc56a849517f18fe0c7f35a662756095fbbc83399108348325fc52a14ea11b34cc1c22e96d8ef0c4935357c", 0xe2, 0x2}, {&(0x7f0000000900)="7b2810d0326dd50d900cb6f7118f00e6fe7103c43fbb91688370b448596308e33eaefd616d246a41f260982003016bc92642d1c18bb915030f922c0ed42a705ece02b8d8f70556302c6aee5756ad619861e0ce3b229f6984eaa6564e1b2a05cd280ed161c01e50cafea8e50b27c742ffb407bfc03f1c9ef5392f5f4e04485d494443d7cb", 0x84, 0x80}, {&(0x7f0000000280)="a9b5c69742f0480e0a5d13", 0xb, 0x2}, {&(0x7f0000000340)="815d2f4f7c10b38492c818c589004f56b93e1caf3ee9009fb5a771abc80e0b863f30ded970a4a5fc49049ed827fd32746e4baf0fd220ddfd76d52302f8e8d144f3c42cccc7e97dc02293af04b8839abec52a10a0473a638cd8", 0x59, 0x100000001}, {&(0x7f0000000ac0)="7b23722b0d492930a92d83e534bf79c872af2d1290f9fbaa3eb3680b63a774ff57dcd5c8e2867c34f989dd623c52cff7274f35cbb72ee0a10f4ff586d60fe02ce23da49a4e9f57da82d19d13229d1d04cb763337673cbc2bc31d0d2a7da649e4262470c385117fcdb8a159c8e4c7ac07bfc643bfa31bb57a83481605b0a377128c4a63509ed3340d3787a937c098212b1d46645f867481e475b58daee3e6549198c0641bbd0d6521e010fc72eb1bd7f2e4d71f772e3435bc612e84c16a6edf6d4a86307d009e9761b7ee93de7d4e5045aa02f7c37afcef613da121f46d1528b588bb88948236270a96731a5f9a9f5fa912238a7a1a", 0xf5, 0x8000}], 0x0, &(0x7f0000000bc0)={[{@numtail}, {@fat=@uid={'uid', 0x3d, 0xee01}}, {@numtail}, {@utf8}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '/\x00'}}]}) execveat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780)=[&(0x7f00000004c0)='\x00', &(0x7f00000006c0)='\x00'], &(0x7f0000000d40)=[&(0x7f0000000c40)='$\x00', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)='\x00'], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r5) gettid() r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f00000001c0), 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000d80)={0x7f, 0x0, 0x100, 0x870bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x0, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0xfffffffffffffeb3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:18:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf0ff7f, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 233.343888][T19369] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.351962][T19369] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 233.369201][T19369] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.377259][T19369] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:18:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfeffff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 233.498643][T19369] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.506737][T19369] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 233.523531][T19369] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.531578][T19369] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 233.621219][T19398] loop1: detected capacity change from 0 to 264192 [ 233.631062][T19398] FAT-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value [ 233.642711][T19394] FAULT_INJECTION: forcing a failure. [ 233.642711][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 233.655419][T19394] CPU: 0 PID: 19394 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 233.664956][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.674995][T19394] Call Trace: [ 233.678348][T19394] dump_stack_lvl+0xd6/0x122 [ 233.682940][T19394] dump_stack+0x11/0x1b [ 233.687078][T19394] should_fail+0x23c/0x250 [ 233.691486][T19394] __should_failslab+0x81/0x90 [ 233.696230][T19394] ? register_for_each_vma+0x372/0x890 [ 233.701687][T19394] should_failslab+0x5/0x20 [ 233.706185][T19394] kmem_cache_alloc_trace+0x52/0x320 [ 233.711454][T19394] ? register_for_each_vma+0x372/0x890 [ 233.716954][T19394] ? vma_interval_tree_iter_next+0x263/0x280 [ 233.722993][T19394] register_for_each_vma+0x372/0x890 [ 233.728261][T19394] __uprobe_register+0x404/0x8b0 [ 233.733250][T19394] uprobe_register_refctr+0x29/0x40 [ 233.738469][T19394] probe_event_enable+0x2be/0x7d0 [ 233.743488][T19394] ? __uprobe_trace_func+0x440/0x440 [ 233.748756][T19394] trace_uprobe_register+0x88/0x410 [ 233.753994][T19394] perf_trace_event_init+0x34e/0x790 [ 233.759272][T19394] perf_uprobe_init+0xf5/0x140 [ 233.764029][T19394] perf_uprobe_event_init+0xde/0x140 [ 233.769322][T19394] perf_try_init_event+0x21a/0x400 [ 233.774479][T19394] perf_event_alloc+0xa60/0x1790 [ 233.779404][T19394] __se_sys_perf_event_open+0x5db/0x2810 [ 233.785032][T19394] __x64_sys_perf_event_open+0x63/0x70 [ 233.790488][T19394] do_syscall_64+0x44/0xa0 [ 233.794936][T19394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.800830][T19394] RIP: 0033:0x7ffa67e11a79 [ 233.805238][T19394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 233.825194][T19394] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 233.833592][T19394] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 233.841543][T19394] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 233.849516][T19394] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.857474][T19394] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 16:18:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 233.865428][T19394] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 37) [ 233.925090][T19387] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.933118][T19387] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 233.945937][T19387] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.953988][T19387] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 233.974699][T19387] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 233.982720][T19387] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 233.994401][T19387] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.002389][T19387] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 234.018785][T19419] FAULT_INJECTION: forcing a failure. [ 234.018785][T19419] name failslab, interval 1, probability 0, space 0, times 0 [ 234.031450][T19419] CPU: 0 PID: 19419 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 234.040205][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.050278][T19419] Call Trace: [ 234.053540][T19419] dump_stack_lvl+0xd6/0x122 [ 234.058120][T19419] dump_stack+0x11/0x1b [ 234.062325][T19419] should_fail+0x23c/0x250 [ 234.066725][T19419] __should_failslab+0x81/0x90 [ 234.071470][T19419] ? register_for_each_vma+0x372/0x890 [ 234.076913][T19419] should_failslab+0x5/0x20 [ 234.081424][T19419] kmem_cache_alloc_trace+0x52/0x320 [ 234.086690][T19419] ? register_for_each_vma+0x372/0x890 [ 234.092130][T19419] ? vma_interval_tree_iter_next+0x263/0x280 [ 234.098117][T19419] register_for_each_vma+0x372/0x890 [ 234.103386][T19419] __uprobe_register+0x404/0x8b0 [ 234.108306][T19419] uprobe_register_refctr+0x29/0x40 [ 234.113485][T19419] probe_event_enable+0x2be/0x7d0 [ 234.118500][T19419] ? __uprobe_trace_func+0x440/0x440 [ 234.123768][T19419] trace_uprobe_register+0x88/0x410 [ 234.128953][T19419] perf_trace_event_init+0x34e/0x790 [ 234.134293][T19419] perf_uprobe_init+0xf5/0x140 [ 234.139100][T19419] perf_uprobe_event_init+0xde/0x140 [ 234.144371][T19419] perf_try_init_event+0x21a/0x400 [ 234.149544][T19419] perf_event_alloc+0xa60/0x1790 [ 234.154469][T19419] __se_sys_perf_event_open+0x5db/0x2810 [ 234.160158][T19419] __x64_sys_perf_event_open+0x63/0x70 [ 234.165603][T19419] do_syscall_64+0x44/0xa0 [ 234.170058][T19419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.176004][T19419] RIP: 0033:0x7ffa67e11a79 [ 234.180413][T19419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.200031][T19419] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 234.208427][T19419] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 234.216403][T19419] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:18:59 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 234.224358][T19419] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.232381][T19419] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 234.240348][T19419] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:18:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 38) [ 234.280185][T19397] loop1: detected capacity change from 0 to 264192 [ 234.286953][T19397] FAT-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value [ 234.320567][T19416] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.328587][T19416] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 234.350159][T19416] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.358229][T19416] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 234.373568][T19416] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.381653][T19416] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 234.393065][T19416] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.401085][T19416] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 234.418937][T19438] FAULT_INJECTION: forcing a failure. [ 234.418937][T19438] name failslab, interval 1, probability 0, space 0, times 0 [ 234.431703][T19438] CPU: 1 PID: 19438 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 234.440439][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.450574][T19438] Call Trace: [ 234.453835][T19438] dump_stack_lvl+0xd6/0x122 [ 234.458424][T19438] dump_stack+0x11/0x1b [ 234.462568][T19438] should_fail+0x23c/0x250 [ 234.466973][T19438] __should_failslab+0x81/0x90 [ 234.471727][T19438] ? register_for_each_vma+0x372/0x890 [ 234.477175][T19438] should_failslab+0x5/0x20 [ 234.481691][T19438] kmem_cache_alloc_trace+0x52/0x320 [ 234.487041][T19438] ? register_for_each_vma+0x372/0x890 [ 234.492513][T19438] ? vma_interval_tree_iter_next+0x263/0x280 [ 234.498487][T19438] register_for_each_vma+0x372/0x890 [ 234.503751][T19438] __uprobe_register+0x404/0x8b0 [ 234.508667][T19438] uprobe_register_refctr+0x29/0x40 [ 234.513857][T19438] probe_event_enable+0x2be/0x7d0 [ 234.518888][T19438] ? __uprobe_trace_func+0x440/0x440 [ 234.524153][T19438] trace_uprobe_register+0x88/0x410 [ 234.529326][T19438] perf_trace_event_init+0x34e/0x790 [ 234.534635][T19438] perf_uprobe_init+0xf5/0x140 [ 234.539449][T19438] perf_uprobe_event_init+0xde/0x140 [ 234.544754][T19438] perf_try_init_event+0x21a/0x400 [ 234.549984][T19438] perf_event_alloc+0xa60/0x1790 [ 234.554906][T19438] __se_sys_perf_event_open+0x5db/0x2810 [ 234.560583][T19438] __x64_sys_perf_event_open+0x63/0x70 [ 234.566037][T19438] do_syscall_64+0x44/0xa0 [ 234.570490][T19438] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.576365][T19438] RIP: 0033:0x7ffa67e11a79 [ 234.580767][T19438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.600382][T19438] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 234.608832][T19438] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 234.616783][T19438] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:18:59 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="b2f13416124f15bbe115d86bba3188685311bb239d2327bec3002d24e5ac0ee9ce0dcb1d22e674edca972231f3d4d5b4c9848a0664ec0fe5d4fcc3266cc2343906e3086b5e55212f", 0x48}, {&(0x7f0000000800)="55e20e49dfcc5297411b615a8deea1755019cba3280a38f022e5488fb8626e6321cbd7b3fef8f85731a7acf128e92225cec3b9b73e7f4d16d229bf720deaf6d969d5eb9aa549890d115a74e25da91acfced2363e83347452eef91ffe0f46febf726a64c9e98a275da04e05adcdf9ca707afec975c5939a620eaa19c69a525d1e288f8bb847d885133a6c39f67668f5fcee3e8c89a521cec35c3dff8ab0ba44840a42149e51d09709e4357dfe9adaaa8992df10e65eec62a4b35d7d1c482b9a862ed7dd579463c5226b4e9c1cbe5bed9066647de17e0b74974f2e2a59bf3304e1c2d87cb9c63120c32769a39cae892edbaa828bd22bd3", 0xf6}, {&(0x7f00000000c0)="17d7f46bc0877ecb667ad57228e634e8a126f8ab5f33f9b944b05e7743472cd21b0d457c96fb9f1e41be8dea4aa69e67d9e4aa582bc8f08e649b", 0x3a}, {0x0}, {&(0x7f0000000ac0)="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", 0x1000}], 0x5) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:18:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:59 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 234.624801][T19438] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.632750][T19438] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 234.640804][T19438] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 234.657563][T19435] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 39) 16:18:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 234.665588][T19435] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 234.677766][T19435] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.685770][T19435] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 234.711713][T19435] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:18:59 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 234.719743][T19435] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 234.735630][T19435] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 234.743738][T19435] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 234.860887][T19449] FAULT_INJECTION: forcing a failure. [ 234.860887][T19449] name failslab, interval 1, probability 0, space 0, times 0 [ 234.873655][T19449] CPU: 1 PID: 19449 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 234.882417][T19449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.892514][T19449] Call Trace: [ 234.895790][T19449] dump_stack_lvl+0xd6/0x122 [ 234.900417][T19449] dump_stack+0x11/0x1b [ 234.904567][T19449] should_fail+0x23c/0x250 [ 234.908964][T19449] __should_failslab+0x81/0x90 [ 234.913803][T19449] ? register_for_each_vma+0x372/0x890 [ 234.919245][T19449] should_failslab+0x5/0x20 [ 234.923790][T19449] kmem_cache_alloc_trace+0x52/0x320 [ 234.929080][T19449] ? register_for_each_vma+0x372/0x890 [ 234.934532][T19449] ? vma_interval_tree_iter_next+0x24c/0x280 [ 234.940491][T19449] register_for_each_vma+0x372/0x890 [ 234.945769][T19449] __uprobe_register+0x404/0x8b0 [ 234.950700][T19449] uprobe_register_refctr+0x29/0x40 [ 234.955938][T19449] probe_event_enable+0x2be/0x7d0 [ 234.960964][T19449] ? __uprobe_trace_func+0x440/0x440 [ 234.966223][T19449] trace_uprobe_register+0x88/0x410 [ 234.971397][T19449] perf_trace_event_init+0x34e/0x790 [ 234.976707][T19449] perf_uprobe_init+0xf5/0x140 [ 234.981465][T19449] perf_uprobe_event_init+0xde/0x140 [ 234.986730][T19449] perf_try_init_event+0x21a/0x400 [ 234.991855][T19449] perf_event_alloc+0xa60/0x1790 [ 234.996793][T19449] __se_sys_perf_event_open+0x5db/0x2810 [ 235.002439][T19449] __x64_sys_perf_event_open+0x63/0x70 [ 235.007885][T19449] do_syscall_64+0x44/0xa0 [ 235.012296][T19449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.018180][T19449] RIP: 0033:0x7ffa67e11a79 [ 235.022597][T19449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.042266][T19449] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 235.050657][T19449] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 235.058646][T19449] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 235.066598][T19449] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 235.074555][T19449] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 235.082516][T19449] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 40) [ 235.139197][T19458] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.147380][T19458] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 235.162854][T19458] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.170923][T19458] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 235.190299][T19458] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.198280][T19458] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 235.213750][T19458] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.221848][T19458] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 235.336539][T19483] FAULT_INJECTION: forcing a failure. [ 235.336539][T19483] name failslab, interval 1, probability 0, space 0, times 0 [ 235.349265][T19483] CPU: 1 PID: 19483 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 235.358007][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.368062][T19483] Call Trace: [ 235.371322][T19483] dump_stack_lvl+0xd6/0x122 [ 235.375928][T19483] dump_stack+0x11/0x1b [ 235.380073][T19483] should_fail+0x23c/0x250 [ 235.384467][T19483] __should_failslab+0x81/0x90 [ 235.389228][T19483] ? register_for_each_vma+0x372/0x890 [ 235.394667][T19483] should_failslab+0x5/0x20 [ 235.399199][T19483] kmem_cache_alloc_trace+0x52/0x320 [ 235.404540][T19483] ? register_for_each_vma+0x372/0x890 [ 235.410052][T19483] ? vma_interval_tree_iter_next+0x263/0x280 [ 235.416145][T19483] register_for_each_vma+0x372/0x890 [ 235.421459][T19483] __uprobe_register+0x404/0x8b0 [ 235.426380][T19483] uprobe_register_refctr+0x29/0x40 [ 235.431609][T19483] probe_event_enable+0x2be/0x7d0 [ 235.436627][T19483] ? __uprobe_trace_func+0x440/0x440 [ 235.441891][T19483] trace_uprobe_register+0x88/0x410 [ 235.447068][T19483] perf_trace_event_init+0x34e/0x790 [ 235.452415][T19483] perf_uprobe_init+0xf5/0x140 [ 235.457169][T19483] perf_uprobe_event_init+0xde/0x140 [ 235.462495][T19483] perf_try_init_event+0x21a/0x400 [ 235.467626][T19483] perf_event_alloc+0xa60/0x1790 [ 235.472671][T19483] __se_sys_perf_event_open+0x5db/0x2810 [ 235.478295][T19483] __x64_sys_perf_event_open+0x63/0x70 [ 235.483795][T19483] do_syscall_64+0x44/0xa0 [ 235.488195][T19483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.494086][T19483] RIP: 0033:0x7ffa67e11a79 [ 235.498535][T19483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.518174][T19483] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 235.526564][T19483] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 235.534516][T19483] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 235.542474][T19483] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 235.550420][T19483] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 235.558445][T19483] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 235.593306][T19479] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.601385][T19479] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 235.613094][T19479] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.621112][T19479] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 235.634653][T19479] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:19:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:19:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 235.642650][T19479] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 235.653717][T19479] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.661784][T19479] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 41) 16:19:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x10000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 235.699839][T19490] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.707831][T19490] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 235.727694][T19490] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.735755][T19490] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:01 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x7ffff000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 235.816714][T19490] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.824762][T19490] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 235.836326][T19490] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 235.844335][T19490] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 235.950491][T19509] FAULT_INJECTION: forcing a failure. [ 235.950491][T19509] name failslab, interval 1, probability 0, space 0, times 0 [ 235.963142][T19509] CPU: 0 PID: 19509 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 235.971902][T19509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.981952][T19509] Call Trace: [ 235.985216][T19509] dump_stack_lvl+0xd6/0x122 [ 235.989789][T19509] dump_stack+0x11/0x1b [ 235.994224][T19509] should_fail+0x23c/0x250 [ 235.998786][T19509] __should_failslab+0x81/0x90 [ 236.003540][T19509] ? register_for_each_vma+0x372/0x890 [ 236.008983][T19509] should_failslab+0x5/0x20 [ 236.013475][T19509] kmem_cache_alloc_trace+0x52/0x320 [ 236.018764][T19509] ? register_for_each_vma+0x372/0x890 [ 236.024220][T19509] ? vma_interval_tree_iter_next+0x24c/0x280 [ 236.030200][T19509] register_for_each_vma+0x372/0x890 [ 236.035480][T19509] __uprobe_register+0x404/0x8b0 [ 236.040683][T19509] uprobe_register_refctr+0x29/0x40 [ 236.045869][T19509] probe_event_enable+0x2be/0x7d0 [ 236.050883][T19509] ? __uprobe_trace_func+0x440/0x440 [ 236.056184][T19509] trace_uprobe_register+0x88/0x410 [ 236.061361][T19509] perf_trace_event_init+0x34e/0x790 [ 236.066636][T19509] perf_uprobe_init+0xf5/0x140 [ 236.071381][T19509] perf_uprobe_event_init+0xde/0x140 [ 236.076737][T19509] perf_try_init_event+0x21a/0x400 [ 236.081877][T19509] perf_event_alloc+0xa60/0x1790 [ 236.086827][T19509] __se_sys_perf_event_open+0x5db/0x2810 [ 236.092472][T19509] __x64_sys_perf_event_open+0x63/0x70 [ 236.097945][T19509] do_syscall_64+0x44/0xa0 [ 236.102371][T19509] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.108260][T19509] RIP: 0033:0x7ffa67e11a79 [ 236.112656][T19509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.132240][T19509] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 236.140680][T19509] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 236.148641][T19509] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 236.156596][T19509] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.164560][T19509] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 236.172536][T19509] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 236.218268][T19504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.226340][T19504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.237783][T19504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.245770][T19504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 236.260389][T19504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:19:01 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xeffdffff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 236.268386][T19504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.280963][T19504] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.288975][T19504] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 236.419393][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.427389][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.439808][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.447891][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0, &(0x7f00000000c0), 0x2000000, &(0x7f0000000280)={[{'\x00'}, {'\x00'}, {'\x00'}, {'\\&+\xce'}, {'}}[-]'}, {'}]-*'}, {'\x00'}], [{@context={'context', 0x3d, 'user_u'}}, {@dont_appraise}, {@smackfsfloor}, {@appraise}]}) execveat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000940)=[&(0x7f0000000340)='.$\xc3]\\\x00', &(0x7f0000000380)='^&\\\x00', &(0x7f00000004c0)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000780)='\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='\x00'], &(0x7f0000000bc0)=[&(0x7f00000009c0)='.\\\xb8[:\x00', &(0x7f0000000a00)='\x00', &(0x7f0000000a40)='%{\x00', &(0x7f0000000ac0)='#\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='\x00', &(0x7f0000000b80)='\x00'], 0x100) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400402, 0x45) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 42) 16:19:01 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xf2000000, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:19:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 236.462951][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.471043][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.482167][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.490145][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:01 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfcfdffff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 236.529920][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.538186][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.549633][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.557612][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 236.651052][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.659083][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.670441][T19519] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.678483][T19519] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 236.698867][T19541] FAULT_INJECTION: forcing a failure. [ 236.698867][T19541] name failslab, interval 1, probability 0, space 0, times 0 [ 236.711521][T19541] CPU: 1 PID: 19541 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 236.720299][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.730343][T19541] Call Trace: [ 236.733617][T19541] dump_stack_lvl+0xd6/0x122 [ 236.738238][T19541] dump_stack+0x11/0x1b [ 236.742377][T19541] should_fail+0x23c/0x250 [ 236.746888][T19541] __should_failslab+0x81/0x90 [ 236.751636][T19541] ? register_for_each_vma+0x372/0x890 [ 236.757374][T19541] should_failslab+0x5/0x20 [ 236.761927][T19541] kmem_cache_alloc_trace+0x52/0x320 [ 236.767190][T19541] ? register_for_each_vma+0x372/0x890 [ 236.772692][T19541] ? vma_interval_tree_iter_next+0x263/0x280 [ 236.778653][T19541] register_for_each_vma+0x372/0x890 [ 236.784021][T19541] __uprobe_register+0x404/0x8b0 [ 236.789012][T19541] uprobe_register_refctr+0x29/0x40 [ 236.794202][T19541] probe_event_enable+0x2be/0x7d0 [ 236.799210][T19541] ? __uprobe_trace_func+0x440/0x440 [ 236.804469][T19541] trace_uprobe_register+0x88/0x410 [ 236.809642][T19541] perf_trace_event_init+0x34e/0x790 [ 236.814910][T19541] perf_uprobe_init+0xf5/0x140 [ 236.819812][T19541] perf_uprobe_event_init+0xde/0x140 [ 236.825082][T19541] perf_try_init_event+0x21a/0x400 [ 236.830233][T19541] perf_event_alloc+0xa60/0x1790 [ 236.835154][T19541] __se_sys_perf_event_open+0x5db/0x2810 [ 236.840802][T19541] __x64_sys_perf_event_open+0x63/0x70 [ 236.846240][T19541] do_syscall_64+0x44/0xa0 [ 236.850645][T19541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.856546][T19541] RIP: 0033:0x7ffa67e11a79 [ 236.860940][T19541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.880542][T19541] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 236.888936][T19541] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:02 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 43) [ 236.896889][T19541] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 236.904888][T19541] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.912843][T19541] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 236.920886][T19541] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 236.959550][T19544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.967762][T19544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 236.979817][T19544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 236.987876][T19544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:02 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfefdffff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 237.012990][T19544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.021279][T19544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 237.034440][T19544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.042496][T19544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 237.060759][T19575] FAULT_INJECTION: forcing a failure. [ 237.060759][T19575] name failslab, interval 1, probability 0, space 0, times 0 [ 237.073405][T19575] CPU: 1 PID: 19575 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 237.082212][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.092360][T19575] Call Trace: [ 237.095631][T19575] dump_stack_lvl+0xd6/0x122 [ 237.100233][T19575] dump_stack+0x11/0x1b [ 237.104402][T19575] should_fail+0x23c/0x250 [ 237.108801][T19575] __should_failslab+0x81/0x90 [ 237.113561][T19575] ? register_for_each_vma+0x372/0x890 [ 237.119000][T19575] should_failslab+0x5/0x20 [ 237.123557][T19575] kmem_cache_alloc_trace+0x52/0x320 [ 237.128829][T19575] ? register_for_each_vma+0x372/0x890 [ 237.134267][T19575] ? vma_interval_tree_iter_next+0x263/0x280 [ 237.140324][T19575] register_for_each_vma+0x372/0x890 [ 237.145670][T19575] __uprobe_register+0x404/0x8b0 [ 237.150598][T19575] uprobe_register_refctr+0x29/0x40 [ 237.155807][T19575] probe_event_enable+0x2be/0x7d0 [ 237.160815][T19575] ? __uprobe_trace_func+0x440/0x440 [ 237.166097][T19575] trace_uprobe_register+0x88/0x410 [ 237.171384][T19575] perf_trace_event_init+0x34e/0x790 [ 237.176914][T19575] perf_uprobe_init+0xf5/0x140 [ 237.181942][T19575] perf_uprobe_event_init+0xde/0x140 [ 237.187235][T19575] perf_try_init_event+0x21a/0x400 [ 237.192336][T19575] perf_event_alloc+0xa60/0x1790 [ 237.197480][T19575] __se_sys_perf_event_open+0x5db/0x2810 [ 237.203142][T19575] __x64_sys_perf_event_open+0x63/0x70 [ 237.208655][T19575] do_syscall_64+0x44/0xa0 [ 237.213064][T19575] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.218952][T19575] RIP: 0033:0x7ffa67e11a79 [ 237.223356][T19575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.243030][T19575] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 237.251537][T19575] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 237.259615][T19575] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 237.267715][T19575] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.275690][T19575] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 237.283690][T19575] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x6, 0x5, 0x0, 0x2, 0x4001, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x1040, 0x0, 0x350c, 0x5, 0x653, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r2, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:02 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffdffff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 237.319757][T19568] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.327763][T19568] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 237.339570][T19568] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.347549][T19568] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:02 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdef, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 237.389008][T19568] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.397196][T19568] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 237.409283][T19568] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.417314][T19568] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:02 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 44) 16:19:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 237.585677][T19607] FAULT_INJECTION: forcing a failure. [ 237.585677][T19607] name failslab, interval 1, probability 0, space 0, times 0 [ 237.598316][T19607] CPU: 0 PID: 19607 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 237.607114][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.617717][T19607] Call Trace: [ 237.620995][T19607] dump_stack_lvl+0xd6/0x122 [ 237.625649][T19607] dump_stack+0x11/0x1b [ 237.629793][T19607] should_fail+0x23c/0x250 [ 237.634255][T19607] __should_failslab+0x81/0x90 [ 237.639030][T19607] ? register_for_each_vma+0x372/0x890 [ 237.644484][T19607] should_failslab+0x5/0x20 [ 237.648987][T19607] kmem_cache_alloc_trace+0x52/0x320 [ 237.654257][T19607] ? register_for_each_vma+0x372/0x890 [ 237.659712][T19607] ? vma_interval_tree_iter_next+0x263/0x280 [ 237.665697][T19607] register_for_each_vma+0x372/0x890 [ 237.670961][T19607] __uprobe_register+0x404/0x8b0 [ 237.675949][T19607] uprobe_register_refctr+0x29/0x40 [ 237.681164][T19607] probe_event_enable+0x2be/0x7d0 [ 237.686214][T19607] ? __uprobe_trace_func+0x440/0x440 [ 237.691508][T19607] trace_uprobe_register+0x88/0x410 [ 237.696695][T19607] perf_trace_event_init+0x34e/0x790 [ 237.701993][T19607] perf_uprobe_init+0xf5/0x140 [ 237.706760][T19607] perf_uprobe_event_init+0xde/0x140 [ 237.712039][T19607] perf_try_init_event+0x21a/0x400 [ 237.717153][T19607] perf_event_alloc+0xa60/0x1790 [ 237.722096][T19607] __se_sys_perf_event_open+0x5db/0x2810 [ 237.727716][T19607] __x64_sys_perf_event_open+0x63/0x70 [ 237.733168][T19607] do_syscall_64+0x44/0xa0 [ 237.737569][T19607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.743447][T19607] RIP: 0033:0x7ffa67e11a79 [ 237.747840][T19607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.767429][T19607] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 237.775822][T19607] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 237.783776][T19607] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 237.791732][T19607] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.799694][T19607] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 237.807656][T19607] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:03 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 45) [ 237.838644][T19594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.846680][T19594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 237.858568][T19594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.866586][T19594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdfc, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 237.885150][T19594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.893213][T19594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 237.909923][T19594] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 237.917997][T19594] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 237.936779][T19623] FAULT_INJECTION: forcing a failure. [ 237.936779][T19623] name failslab, interval 1, probability 0, space 0, times 0 [ 237.949445][T19623] CPU: 1 PID: 19623 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 237.958227][T19623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.968270][T19623] Call Trace: [ 237.971532][T19623] dump_stack_lvl+0xd6/0x122 [ 237.976110][T19623] dump_stack+0x11/0x1b [ 237.980261][T19623] should_fail+0x23c/0x250 [ 237.984655][T19623] __should_failslab+0x81/0x90 [ 237.989402][T19623] ? register_for_each_vma+0x372/0x890 [ 237.994894][T19623] should_failslab+0x5/0x20 [ 237.999427][T19623] kmem_cache_alloc_trace+0x52/0x320 [ 238.004792][T19623] ? register_for_each_vma+0x372/0x890 [ 238.010258][T19623] ? vma_interval_tree_iter_next+0x24c/0x280 [ 238.016225][T19623] register_for_each_vma+0x372/0x890 [ 238.021505][T19623] __uprobe_register+0x404/0x8b0 [ 238.026553][T19623] uprobe_register_refctr+0x29/0x40 [ 238.031782][T19623] probe_event_enable+0x2be/0x7d0 [ 238.036861][T19623] ? __uprobe_trace_func+0x440/0x440 [ 238.042165][T19623] trace_uprobe_register+0x88/0x410 [ 238.047360][T19623] perf_trace_event_init+0x34e/0x790 [ 238.052630][T19623] perf_uprobe_init+0xf5/0x140 [ 238.057395][T19623] perf_uprobe_event_init+0xde/0x140 [ 238.062720][T19623] perf_try_init_event+0x21a/0x400 [ 238.067838][T19623] perf_event_alloc+0xa60/0x1790 [ 238.072833][T19623] __se_sys_perf_event_open+0x5db/0x2810 [ 238.078459][T19623] __x64_sys_perf_event_open+0x63/0x70 [ 238.083899][T19623] do_syscall_64+0x44/0xa0 [ 238.088486][T19623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 238.094367][T19623] RIP: 0033:0x7ffa67e11a79 [ 238.098766][T19623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 238.118362][T19623] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 238.126797][T19623] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 238.134766][T19623] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 238.142726][T19623] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 238.150710][T19623] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 238.158679][T19623] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="44671d00", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f0081000020080003005fba990dd196074b46575304110acfa9f331cc8751d3fe85f7f64ad51bb01c252b73a862499cef9c6167", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x13, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 238.205215][T19621] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.213358][T19621] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 238.225935][T19621] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.234093][T19621] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdfe, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:19:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) 16:19:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x21, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xa, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 238.265245][T19621] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.273280][T19621] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 238.288696][T19621] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.296734][T19621] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:03 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 46) 16:19:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffe00, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 238.412962][T19641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.421033][T19641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 238.441436][T19641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.449471][T19641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xffffffff, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 238.552073][T19641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.560104][T19641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 238.571778][T19641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.579808][T19641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x100}]) [ 238.688194][T19654] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.696294][T19654] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 238.710729][T19654] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.718758][T19654] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 238.824075][T19654] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.832199][T19654] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 238.844197][T19654] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 238.852197][T19654] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 238.937183][T19664] FAULT_INJECTION: forcing a failure. [ 238.937183][T19664] name failslab, interval 1, probability 0, space 0, times 0 [ 238.949807][T19664] CPU: 0 PID: 19664 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 238.958550][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.968590][T19664] Call Trace: [ 238.971900][T19664] dump_stack_lvl+0xd6/0x122 [ 238.976505][T19664] dump_stack+0x11/0x1b [ 238.980644][T19664] should_fail+0x23c/0x250 [ 238.985042][T19664] __should_failslab+0x81/0x90 [ 238.989954][T19664] ? register_for_each_vma+0x372/0x890 [ 238.995478][T19664] should_failslab+0x5/0x20 [ 239.000000][T19664] kmem_cache_alloc_trace+0x52/0x320 [ 239.005511][T19664] ? register_for_each_vma+0x372/0x890 [ 239.010981][T19664] ? vma_interval_tree_iter_next+0x24c/0x280 [ 239.017162][T19664] register_for_each_vma+0x372/0x890 [ 239.022505][T19664] __uprobe_register+0x404/0x8b0 [ 239.027506][T19664] uprobe_register_refctr+0x29/0x40 [ 239.032705][T19664] probe_event_enable+0x2be/0x7d0 [ 239.037715][T19664] ? __uprobe_trace_func+0x440/0x440 [ 239.042995][T19664] trace_uprobe_register+0x88/0x410 [ 239.048184][T19664] perf_trace_event_init+0x34e/0x790 [ 239.053453][T19664] perf_uprobe_init+0xf5/0x140 [ 239.058320][T19664] perf_uprobe_event_init+0xde/0x140 [ 239.063591][T19664] perf_try_init_event+0x21a/0x400 [ 239.068744][T19664] perf_event_alloc+0xa60/0x1790 [ 239.073740][T19664] __se_sys_perf_event_open+0x5db/0x2810 [ 239.079358][T19664] __x64_sys_perf_event_open+0x63/0x70 [ 239.084852][T19664] do_syscall_64+0x44/0xa0 [ 239.089253][T19664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.095139][T19664] RIP: 0033:0x7ffa67e11a79 [ 239.099545][T19664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.119158][T19664] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 239.127561][T19664] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 239.135591][T19664] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 239.143559][T19664] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.151512][T19664] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 239.159462][T19664] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 239.207557][T19661] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.215582][T19661] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 239.227083][T19661] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.235095][T19661] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 239.249477][T19661] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:19:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c05060003000000000008000300"/36, @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:04 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x3, 0x0, r0, 0x0, 0x0, 0x100}]) 16:19:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xb, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x22, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 47) 16:19:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 239.257475][T19661] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 239.269287][T19661] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.277277][T19661] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xc, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:04 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x4, 0x0, r0, 0x0, 0x0, 0x100}]) [ 239.335090][T19693] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.343163][T19693] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 239.354856][T19693] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.362893][T19693] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:04 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x5, 0x0, r0, 0x0, 0x0, 0x100}]) [ 239.476139][T19693] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.484198][T19693] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 239.495842][T19693] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.503866][T19693] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 239.609547][T19701] FAULT_INJECTION: forcing a failure. [ 239.609547][T19701] name failslab, interval 1, probability 0, space 0, times 0 [ 239.622305][T19701] CPU: 0 PID: 19701 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 239.631067][T19701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.641255][T19701] Call Trace: [ 239.644522][T19701] dump_stack_lvl+0xd6/0x122 [ 239.649100][T19701] dump_stack+0x11/0x1b [ 239.653245][T19701] should_fail+0x23c/0x250 [ 239.657656][T19701] __should_failslab+0x81/0x90 [ 239.662403][T19701] ? register_for_each_vma+0x372/0x890 [ 239.667886][T19701] should_failslab+0x5/0x20 [ 239.672385][T19701] kmem_cache_alloc_trace+0x52/0x320 [ 239.677694][T19701] ? register_for_each_vma+0x372/0x890 [ 239.683290][T19701] ? vma_interval_tree_iter_next+0x263/0x280 [ 239.689386][T19701] register_for_each_vma+0x372/0x890 [ 239.694741][T19701] __uprobe_register+0x404/0x8b0 [ 239.699670][T19701] uprobe_register_refctr+0x29/0x40 [ 239.704900][T19701] probe_event_enable+0x2be/0x7d0 [ 239.709957][T19701] ? __uprobe_trace_func+0x440/0x440 [ 239.715436][T19701] trace_uprobe_register+0x88/0x410 [ 239.720618][T19701] perf_trace_event_init+0x34e/0x790 [ 239.725931][T19701] perf_uprobe_init+0xf5/0x140 [ 239.730698][T19701] perf_uprobe_event_init+0xde/0x140 [ 239.736206][T19701] perf_try_init_event+0x21a/0x400 [ 239.741300][T19701] perf_event_alloc+0xa60/0x1790 [ 239.746226][T19701] __se_sys_perf_event_open+0x5db/0x2810 [ 239.751903][T19701] __x64_sys_perf_event_open+0x63/0x70 [ 239.757424][T19701] do_syscall_64+0x44/0xa0 [ 239.761898][T19701] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.767775][T19701] RIP: 0033:0x7ffa67e11a79 [ 239.772182][T19701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.791773][T19701] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 239.800168][T19701] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 239.808145][T19701] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 239.816099][T19701] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.824055][T19701] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 239.832052][T19701] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 48) 16:19:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x27, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 239.869994][T19691] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.878142][T19691] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 239.890372][T19691] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.898348][T19691] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 239.928485][T19691] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.936530][T19691] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 239.948123][T19691] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 239.956133][T19691] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 239.972418][T19728] FAULT_INJECTION: forcing a failure. [ 239.972418][T19728] name failslab, interval 1, probability 0, space 0, times 0 [ 239.985361][T19728] CPU: 1 PID: 19728 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 239.994186][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.004274][T19728] Call Trace: [ 240.007577][T19728] dump_stack_lvl+0xd6/0x122 [ 240.012214][T19728] dump_stack+0x11/0x1b [ 240.016443][T19728] should_fail+0x23c/0x250 [ 240.021009][T19728] __should_failslab+0x81/0x90 [ 240.026418][T19728] ? register_for_each_vma+0x372/0x890 [ 240.031872][T19728] should_failslab+0x5/0x20 [ 240.036361][T19728] kmem_cache_alloc_trace+0x52/0x320 [ 240.041630][T19728] ? register_for_each_vma+0x372/0x890 [ 240.047066][T19728] ? vma_interval_tree_iter_next+0x24c/0x280 [ 240.053092][T19728] register_for_each_vma+0x372/0x890 [ 240.058404][T19728] __uprobe_register+0x404/0x8b0 [ 240.063354][T19728] uprobe_register_refctr+0x29/0x40 [ 240.068695][T19728] probe_event_enable+0x2be/0x7d0 [ 240.073762][T19728] ? __uprobe_trace_func+0x440/0x440 [ 240.079042][T19728] trace_uprobe_register+0x88/0x410 [ 240.084221][T19728] perf_trace_event_init+0x34e/0x790 [ 240.089631][T19728] perf_uprobe_init+0xf5/0x140 [ 240.094469][T19728] perf_uprobe_event_init+0xde/0x140 [ 240.099800][T19728] perf_try_init_event+0x21a/0x400 [ 240.104928][T19728] perf_event_alloc+0xa60/0x1790 [ 240.109925][T19728] __se_sys_perf_event_open+0x5db/0x2810 [ 240.115543][T19728] __x64_sys_perf_event_open+0x63/0x70 [ 240.120989][T19728] do_syscall_64+0x44/0xa0 [ 240.125386][T19728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 240.131262][T19728] RIP: 0033:0x7ffa67e11a79 [ 240.135699][T19728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.155373][T19728] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 240.163763][T19728] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 240.171749][T19728] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 240.179772][T19728] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.187724][T19728] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 240.195761][T19728] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x32, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x7, 0x0, r0, 0x0, 0x0, 0x100}]) 16:19:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 240.232347][T19723] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.240387][T19723] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 240.252132][T19723] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.260301][T19723] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, r0, 0x0, 0x0, 0x100}]) [ 240.287813][T19723] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.295890][T19723] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 240.310225][T19723] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.318336][T19723] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 49) 16:19:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x48, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x300, 0x0, r0, 0x0, 0x0, 0x100}]) [ 240.469967][T19739] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.477966][T19739] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:19:05 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r4) r5 = gettid() r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f00000001c0), 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, 0x0, 0x450c1) clone3(&(0x7f0000000700)={0xd0000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, r5, r5], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 240.519195][T19739] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.527194][T19739] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0xffff, 0x0, r0, 0x0, 0x0, 0x100}]) [ 240.679225][T19739] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.687233][T19739] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 240.699128][T19739] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 240.707124][T19739] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 240.831931][T19762] FAULT_INJECTION: forcing a failure. [ 240.831931][T19762] name failslab, interval 1, probability 0, space 0, times 0 [ 240.844655][T19762] CPU: 0 PID: 19762 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 240.853421][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.863558][T19762] Call Trace: [ 240.866819][T19762] dump_stack_lvl+0xd6/0x122 [ 240.871411][T19762] dump_stack+0x11/0x1b [ 240.875632][T19762] should_fail+0x23c/0x250 [ 240.880032][T19762] __should_failslab+0x81/0x90 [ 240.884779][T19762] ? register_for_each_vma+0x372/0x890 [ 240.890257][T19762] should_failslab+0x5/0x20 [ 240.894755][T19762] kmem_cache_alloc_trace+0x52/0x320 [ 240.900036][T19762] ? register_for_each_vma+0x372/0x890 [ 240.905522][T19762] ? vma_interval_tree_iter_next+0x263/0x280 [ 240.911494][T19762] register_for_each_vma+0x372/0x890 [ 240.916767][T19762] __uprobe_register+0x404/0x8b0 [ 240.921685][T19762] uprobe_register_refctr+0x29/0x40 [ 240.926870][T19762] probe_event_enable+0x2be/0x7d0 [ 240.931873][T19762] ? __uprobe_trace_func+0x440/0x440 [ 240.937216][T19762] trace_uprobe_register+0x88/0x410 [ 240.942400][T19762] perf_trace_event_init+0x34e/0x790 [ 240.947671][T19762] perf_uprobe_init+0xf5/0x140 [ 240.952434][T19762] perf_uprobe_event_init+0xde/0x140 [ 240.957826][T19762] perf_try_init_event+0x21a/0x400 [ 240.962930][T19762] perf_event_alloc+0xa60/0x1790 [ 240.967855][T19762] __se_sys_perf_event_open+0x5db/0x2810 [ 240.973534][T19762] __x64_sys_perf_event_open+0x63/0x70 [ 240.979069][T19762] do_syscall_64+0x44/0xa0 [ 240.983553][T19762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 240.989461][T19762] RIP: 0033:0x7ffa67e11a79 [ 240.993860][T19762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.013510][T19762] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 241.021904][T19762] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:06 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100}]) [ 241.029857][T19762] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 241.037807][T19762] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.045771][T19762] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 241.053724][T19762] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:06 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x2, r0, 0x0, 0x0, 0x100}]) 16:19:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 50) 16:19:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xf, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x10, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:06 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x3, r0, 0x0, 0x0, 0x100}]) [ 241.253176][T19760] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.261192][T19760] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 241.279134][T19760] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.287205][T19760] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 241.456304][T19760] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.464399][T19760] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 241.478375][T19760] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.486390][T19760] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 241.501397][T19798] FAULT_INJECTION: forcing a failure. [ 241.501397][T19798] name failslab, interval 1, probability 0, space 0, times 0 [ 241.514021][T19798] CPU: 0 PID: 19798 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 241.522780][T19798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.532827][T19798] Call Trace: [ 241.536098][T19798] dump_stack_lvl+0xd6/0x122 [ 241.540763][T19798] dump_stack+0x11/0x1b [ 241.545030][T19798] should_fail+0x23c/0x250 [ 241.549451][T19798] __should_failslab+0x81/0x90 [ 241.554325][T19798] ? register_for_each_vma+0x372/0x890 [ 241.559783][T19798] should_failslab+0x5/0x20 [ 241.564289][T19798] kmem_cache_alloc_trace+0x52/0x320 [ 241.569577][T19798] ? register_for_each_vma+0x372/0x890 [ 241.575026][T19798] ? vma_interval_tree_iter_next+0x263/0x280 [ 241.580995][T19798] register_for_each_vma+0x372/0x890 [ 241.586314][T19798] __uprobe_register+0x404/0x8b0 [ 241.591231][T19798] uprobe_register_refctr+0x29/0x40 [ 241.596424][T19798] probe_event_enable+0x2be/0x7d0 [ 241.601446][T19798] ? __uprobe_trace_func+0x440/0x440 [ 241.606747][T19798] trace_uprobe_register+0x88/0x410 [ 241.612019][T19798] perf_trace_event_init+0x34e/0x790 [ 241.617301][T19798] perf_uprobe_init+0xf5/0x140 [ 241.622050][T19798] perf_uprobe_event_init+0xde/0x140 [ 241.627355][T19798] perf_try_init_event+0x21a/0x400 [ 241.632458][T19798] perf_event_alloc+0xa60/0x1790 [ 241.637435][T19798] __se_sys_perf_event_open+0x5db/0x2810 [ 241.643083][T19798] __x64_sys_perf_event_open+0x63/0x70 [ 241.648531][T19798] do_syscall_64+0x44/0xa0 [ 241.653033][T19798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 241.658929][T19798] RIP: 0033:0x7ffa67e11a79 [ 241.663337][T19798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.683088][T19798] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 241.691484][T19798] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 241.699442][T19798] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 241.707403][T19798] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.715352][T19798] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 241.723337][T19798] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x68, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:06 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x4, r0, 0x0, 0x0, 0x100}]) 16:19:06 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0xfffffe98, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4, 0x10, 0xffffffffffffffff, 0x10000000) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x531c81, 0xa8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, r5, &(0x7f0000000ac0), &(0x7f0000000080)='./file0\x00', 0x2, 0x4000, 0x0, {0x0, r6}}, 0x0) [ 241.757967][T19796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.765972][T19796] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 241.786239][T19796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.794256][T19796] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xf, r0, 0x0, 0x0, 0x100}]) [ 241.818354][T19796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.826409][T19796] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 241.838868][T19796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 241.846873][T19796] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 51) 16:19:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x11, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x12, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6c, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x10, r0, 0x0, 0x0, 0x100}]) 16:19:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x21, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xf2, r0, 0x0, 0x0, 0x100}]) [ 242.058012][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.066093][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 242.077637][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.085719][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfe, r0, 0x0, 0x0, 0x100}]) [ 242.176931][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.184970][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 242.197667][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.205699][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 242.313138][T19838] FAULT_INJECTION: forcing a failure. [ 242.313138][T19838] name failslab, interval 1, probability 0, space 0, times 0 [ 242.325758][T19838] CPU: 0 PID: 19838 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 242.334519][T19838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.344566][T19838] Call Trace: [ 242.347832][T19838] dump_stack_lvl+0xd6/0x122 [ 242.352414][T19838] dump_stack+0x11/0x1b [ 242.356641][T19838] should_fail+0x23c/0x250 [ 242.361038][T19838] __should_failslab+0x81/0x90 [ 242.365788][T19838] ? register_for_each_vma+0x372/0x890 [ 242.371229][T19838] should_failslab+0x5/0x20 [ 242.375752][T19838] kmem_cache_alloc_trace+0x52/0x320 [ 242.381019][T19838] ? register_for_each_vma+0x372/0x890 [ 242.386533][T19838] ? vma_interval_tree_iter_next+0x263/0x280 [ 242.392508][T19838] register_for_each_vma+0x372/0x890 [ 242.397778][T19838] __uprobe_register+0x404/0x8b0 [ 242.402699][T19838] uprobe_register_refctr+0x29/0x40 [ 242.407878][T19838] probe_event_enable+0x2be/0x7d0 [ 242.412887][T19838] ? __uprobe_trace_func+0x440/0x440 [ 242.418152][T19838] trace_uprobe_register+0x88/0x410 [ 242.423331][T19838] perf_trace_event_init+0x34e/0x790 [ 242.428600][T19838] perf_uprobe_init+0xf5/0x140 [ 242.433377][T19838] perf_uprobe_event_init+0xde/0x140 [ 242.438888][T19838] perf_try_init_event+0x21a/0x400 [ 242.443999][T19838] perf_event_alloc+0xa60/0x1790 [ 242.448929][T19838] __se_sys_perf_event_open+0x5db/0x2810 [ 242.454546][T19838] __x64_sys_perf_event_open+0x63/0x70 [ 242.459986][T19838] do_syscall_64+0x44/0xa0 [ 242.464391][T19838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 242.470272][T19838] RIP: 0033:0x7ffa67e11a79 [ 242.474665][T19838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.494356][T19838] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 242.502759][T19838] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 242.510790][T19838] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 242.518742][T19838] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 242.527091][T19838] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 242.535057][T19838] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x74, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 242.570823][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.578852][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 242.598268][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.606282][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:07 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f0000000ac0)=""/148, 0x94}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000b80)=""/136, 0x88}], 0x7, 0x87d8, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004804}, 0x24000094) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='E\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x300, r0, 0x0, 0x0, 0x100}]) 16:19:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 52) 16:19:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x22, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 242.700706][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.708770][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 242.720287][T19812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.728349][T19812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xf00, r0, 0x0, 0x0, 0x100}]) [ 242.780661][T19861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.788698][T19861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 242.800214][T19861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.808250][T19861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xeffd, r0, 0x0, 0x0, 0x100}]) [ 242.912438][T19861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.920464][T19861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 242.932603][T19861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.940633][T19861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xf200, r0, 0x0, 0x0, 0x100}]) [ 243.060500][T19874] FAULT_INJECTION: forcing a failure. [ 243.060500][T19874] name failslab, interval 1, probability 0, space 0, times 0 [ 243.073129][T19874] CPU: 0 PID: 19874 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 243.081892][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.091937][T19874] Call Trace: [ 243.095336][T19874] dump_stack_lvl+0xd6/0x122 [ 243.099938][T19874] dump_stack+0x11/0x1b [ 243.104090][T19874] should_fail+0x23c/0x250 [ 243.108488][T19874] __should_failslab+0x81/0x90 [ 243.113252][T19874] ? register_for_each_vma+0x372/0x890 [ 243.118700][T19874] should_failslab+0x5/0x20 [ 243.123188][T19874] kmem_cache_alloc_trace+0x52/0x320 [ 243.128571][T19874] ? register_for_each_vma+0x372/0x890 [ 243.134048][T19874] ? vma_interval_tree_iter_next+0x24c/0x280 [ 243.140026][T19874] register_for_each_vma+0x372/0x890 [ 243.145309][T19874] __uprobe_register+0x404/0x8b0 [ 243.150235][T19874] uprobe_register_refctr+0x29/0x40 [ 243.155409][T19874] probe_event_enable+0x2be/0x7d0 [ 243.160506][T19874] ? __uprobe_trace_func+0x440/0x440 [ 243.166258][T19874] trace_uprobe_register+0x88/0x410 [ 243.171442][T19874] perf_trace_event_init+0x34e/0x790 [ 243.176712][T19874] perf_uprobe_init+0xf5/0x140 [ 243.181469][T19874] perf_uprobe_event_init+0xde/0x140 [ 243.186734][T19874] perf_try_init_event+0x21a/0x400 [ 243.191853][T19874] perf_event_alloc+0xa60/0x1790 [ 243.196798][T19874] __se_sys_perf_event_open+0x5db/0x2810 [ 243.202426][T19874] __x64_sys_perf_event_open+0x63/0x70 [ 243.207922][T19874] do_syscall_64+0x44/0xa0 [ 243.212325][T19874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.218214][T19874] RIP: 0033:0x7ffa67e11a79 [ 243.222605][T19874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 243.242191][T19874] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 243.250580][T19874] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 243.258614][T19874] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 243.266657][T19874] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.274619][T19874] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 243.282579][T19874] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x21, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x27, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7a, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 243.410454][T19871] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.418470][T19871] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 243.430157][T19871] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.438299][T19871] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfcfd, r0, 0x0, 0x0, 0x100}]) [ 243.461444][T19871] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.469698][T19871] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 243.488495][T19871] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.496632][T19871] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 243.530674][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.538684][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 243.550327][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.558427][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:08 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) r4 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r4, 0xbf, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r5, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8, r5}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4004, @fd=r4, 0x3, &(0x7f0000000040)=""/51, 0x33, 0x1d, 0x0, {0x0, r8}}, 0x7) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012824776a2400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB="d3b69f7e471dc9cc269eb4746671a186e16db8fd7ff5f2b7621d2460665972312ee64abec6aee7f7d09fd84bf64c07ee4031760a72f7a05bc9dc2610b31be6edf8e4959e73ea5b093ab7"], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 243.584275][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.592351][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 243.603726][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.611845][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:08 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 53) 16:19:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7e, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x32, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfdef, r0, 0x0, 0x0, 0x100}]) [ 243.630253][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.638263][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 243.649624][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.657749][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfdfc, r0, 0x0, 0x0, 0x100}]) [ 243.684986][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.693091][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 243.704152][T19898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.712248][T19898] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:09 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfdfe, r0, 0x0, 0x0, 0x100}]) 16:19:09 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x22, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 243.819897][T19923] FAULT_INJECTION: forcing a failure. [ 243.819897][T19923] name failslab, interval 1, probability 0, space 0, times 0 [ 243.833157][T19923] CPU: 1 PID: 19923 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 243.841917][T19923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.852138][T19923] Call Trace: [ 243.855399][T19923] dump_stack_lvl+0xd6/0x122 [ 243.859996][T19923] dump_stack+0x11/0x1b [ 243.864213][T19923] should_fail+0x23c/0x250 [ 243.868613][T19923] __should_failslab+0x81/0x90 [ 243.873381][T19923] ? register_for_each_vma+0x372/0x890 [ 243.878819][T19923] should_failslab+0x5/0x20 [ 243.883346][T19923] kmem_cache_alloc_trace+0x52/0x320 [ 243.888610][T19923] ? register_for_each_vma+0x372/0x890 [ 243.894061][T19923] ? vma_interval_tree_iter_next+0x263/0x280 [ 243.900036][T19923] register_for_each_vma+0x372/0x890 [ 243.905363][T19923] __uprobe_register+0x404/0x8b0 [ 243.910292][T19923] uprobe_register_refctr+0x29/0x40 [ 243.915496][T19923] probe_event_enable+0x2be/0x7d0 [ 243.920554][T19923] ? __uprobe_trace_func+0x440/0x440 [ 243.925842][T19923] trace_uprobe_register+0x88/0x410 [ 243.931057][T19923] perf_trace_event_init+0x34e/0x790 [ 243.936340][T19923] perf_uprobe_init+0xf5/0x140 [ 243.941187][T19923] perf_uprobe_event_init+0xde/0x140 [ 243.946537][T19923] perf_try_init_event+0x21a/0x400 [ 243.951691][T19923] perf_event_alloc+0xa60/0x1790 [ 243.956613][T19923] __se_sys_perf_event_open+0x5db/0x2810 [ 243.962268][T19923] __x64_sys_perf_event_open+0x63/0x70 [ 243.967769][T19923] do_syscall_64+0x44/0xa0 [ 243.972259][T19923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.978132][T19923] RIP: 0033:0x7ffa67e11a79 [ 243.982523][T19923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 244.002124][T19923] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 244.010779][T19923] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 244.018730][T19923] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 244.026707][T19923] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 244.034652][T19923] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 244.042638][T19923] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:09 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfdff, r0, 0x0, 0x0, 0x100}]) [ 244.170251][T19920] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.178259][T19920] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 244.190363][T19920] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.198429][T19920] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:09 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfe00, r0, 0x0, 0x0, 0x100}]) [ 244.297832][T19920] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.305907][T19920] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 244.317566][T19920] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.325569][T19920] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 54) 16:19:09 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x524c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r8, 0xfffffe98, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r3, 0x80}, {r0, 0x20}, {r4, 0x5402}, {r1, 0x4008}, {r2, 0x8400}, {r0, 0x1000}, {r8, 0x522}], 0x7, &(0x7f0000000200)={r9, r10+10000000}, &(0x7f0000000280)={[0x8]}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0), &(0x7f00000006c0)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:09 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfefd, r0, 0x0, 0x0, 0x100}]) [ 244.519188][T19964] FAULT_INJECTION: forcing a failure. [ 244.519188][T19964] name failslab, interval 1, probability 0, space 0, times 0 [ 244.531837][T19964] CPU: 0 PID: 19964 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 244.540604][T19964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.550659][T19964] Call Trace: [ 244.553937][T19964] dump_stack_lvl+0xd6/0x122 [ 244.558627][T19964] dump_stack+0x11/0x1b [ 244.562778][T19964] should_fail+0x23c/0x250 [ 244.567195][T19964] __should_failslab+0x81/0x90 [ 244.572024][T19964] ? register_for_each_vma+0x372/0x890 [ 244.577467][T19964] should_failslab+0x5/0x20 [ 244.581952][T19964] kmem_cache_alloc_trace+0x52/0x320 [ 244.587245][T19964] ? register_for_each_vma+0x372/0x890 [ 244.592687][T19964] ? vma_interval_tree_iter_next+0x24c/0x280 [ 244.598658][T19964] register_for_each_vma+0x372/0x890 [ 244.603928][T19964] __uprobe_register+0x404/0x8b0 [ 244.608855][T19964] uprobe_register_refctr+0x29/0x40 [ 244.614062][T19964] probe_event_enable+0x2be/0x7d0 [ 244.619127][T19964] ? __uprobe_trace_func+0x440/0x440 [ 244.624390][T19964] trace_uprobe_register+0x88/0x410 [ 244.629575][T19964] perf_trace_event_init+0x34e/0x790 [ 244.634858][T19964] perf_uprobe_init+0xf5/0x140 [ 244.639675][T19964] perf_uprobe_event_init+0xde/0x140 [ 244.644986][T19964] perf_try_init_event+0x21a/0x400 [ 244.650105][T19964] perf_event_alloc+0xa60/0x1790 [ 244.655146][T19964] __se_sys_perf_event_open+0x5db/0x2810 [ 244.660839][T19964] __x64_sys_perf_event_open+0x63/0x70 [ 244.666440][T19964] do_syscall_64+0x44/0xa0 [ 244.670947][T19964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 244.676907][T19964] RIP: 0033:0x7ffa67e11a79 [ 244.681310][T19964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 244.700903][T19964] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 244.709312][T19964] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 244.717269][T19964] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 244.725221][T19964] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 244.733294][T19964] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 244.741268][T19964] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x598, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60c2079}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x556a7a0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1251fd6d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x782f3c8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50c84e70}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c98}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc010}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21acb7d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x784e2971}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x493226bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17d1921a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19719984}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf54b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58e012d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57874de3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6aa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf020c57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac17}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe37f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c5782d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe277}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20501a33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x333473fe}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cc2}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a7bd96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f3189b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e75913c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6145}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c1ec68c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd17a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x412b4252}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb1fc453}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc2ebf42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7164a66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f493f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x564b4cf6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e34e9d5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68ab74ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a01a0bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e402d22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46bc5622}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f467dfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f107366}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x204}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c409857}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f01108e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x393925e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4440a875}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x149ca66a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36b3be87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36799ca3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5de430d6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3acd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb142}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3707}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f777dc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x392d34bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf580}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b136210}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c85dfe3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9215}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c9f0e3b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d8be448}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5714c14e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ec158ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5028}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48c6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x158a8a25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb99ac8a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x279fb69d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfda9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcdffb8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15c54d9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d65dc26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4205}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fa47878}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25821b05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x135cd018}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xde57e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27f0838f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3671a2a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x19c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47262242}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d87583}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b96eabd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x577dfad6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13cc1f50}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b99383a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdd1dd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25c03f2f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ac671fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45502b6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x685f9dde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38014d11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d4d7bfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x421a862}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4930d876}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fb92ce6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f240dc1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cf5629f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f6a8324}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3422d50a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29388010}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f5ccce}]}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x5, 0x8, &(0x7f00000032c0)=[{&(0x7f00000002c0)="cbbe9db0", 0x4, 0x2}, {&(0x7f0000001080)="44dbd3f8d05cc0286c843e6262eb00368ca3742d77aba36cad97f9d1352e9dc92fba540040c269580aa7554fbfa308c7e111ebf4ff7cfe9bd69da6618d34fdaaab0df61fbf0b4bc0822d91ba4253a6f97e6d50943bc676e14ffffdbc8dbd1ab75b07c0b5bdce777320890c2ada0540dd469ad72864ca514282fccf10e6bea7a2e5581d149f3d6645c1207f8408aea0c19dce1b4832c713bd5d1714be3e788d19", 0xa0, 0x6}, {&(0x7f0000001140)="d898637d8c1174c43f0829193301a1686cc074d072620b5c46ec43c38c7265bc94d154fbb4b06107e02e51696ff54f093f1a1437a1dd17e24bb85cea4de48a36458c28672bcdcc0940d8ad028c6c0882951bb75b45f466ad184b0a35a97e44f33ee42e1fa25b0f4336ef254ea3699f20408b4e73bc58a234d8eb254a070b928b476e68881cb4609867c1a10b60e0fb50a9875a0008189c240a7a2e95a5eab77cf9fdeb650488940befa5169f9f9d5dd2ffec4d", 0xb3, 0x4e3}, {&(0x7f0000000340)="6be9c6fc83ddd7fee880cda697c184a5a3974a3d5020ca5e597adcdac26b4b442f19948e276aee1d7e9ed78dc14eb3fca7adc05128e19490b10ec5b594c8cbce5590c6889a1c6d3c722e6842d2603fb3802e27660b09", 0x56, 0x7f}, {&(0x7f0000001200)="2ece928adaf4f2a8100c3477f9ab619c25e3ce051592046e7f782b03f5a174ff172b3f631970cdcb758542e14e1b47747e96ad746237ee1e64f5373cb53591bbb0e2e9a5f5e519ca24c923ec6735603727b83f5810fec6b24efdfcf4b05da9fed924b0517309751ed9903423b8e7293d994fe9d4ba31b23071dd9ec089b7caa4e51db3696acc51a5146f05634cb8cca39a70a954", 0x94, 0x1ff}, {&(0x7f00000012c0)="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", 0x1000, 0x80000001}, {&(0x7f00000022c0)="b9dda5187dbbb2a582a3bcb4e7e886e6b100a2fed84aced7ee9259d846e997805a8abe0b067413c6da4459056fa19c9238cb7bf37cdd13e70595f14f4f6a4f57f43585f2dce585288945f1e19b09dce2dc68db83d03f255060c9d57a52d87637716753003e7d58635dd8e707362a351680963ddbb7e6ed3016e77f707e9cc9a255e53b220cdf6d5066d50935d7f0674119b1056bf63927ed0e67aa83ec4385f5ed01554c0463604a307117a99a0a44d1799a91e54ee2334bdb240e8db0041082cfbe0e8ffaa7462afba7746cef00a8ac41d7a8a03ba51be6228db99cabfdf403c69f840f486bb2a5ec2d80df62a4b80200f9f2ddabc73bc538b3cde75c3dcf06b2a1d50a264cbf9666d9aedfe80423d2e650d73ff0cb41219ed48411c1cad13cbc6a6e2b78204ee0187aca40831fb521ae411b4c6e9c834f1d04600a5721ee438020482b011c9f405fd2aa1e40405266f371598167abb30ffe86548c0b0a78c0a710c0f921471b394c5aca47c3f3b5eceeec6fc703c1252695e43a2699780452d109049dc1d10968073f74d508c9c4fdaf03a7fa8eea56f447db313052aaf8cc53f4f244857a3c99725bd61b1d84309ba2163a5a30e5ff1ae9bf3a8ec8eb696751697c3dd31163d013679de8736943b1f2180ddfd92d4314b3d2e795a3e08afdc3910fd1598cf879275a2969fd7967e6908bc2d82c26d99aeda1ebd63323b2cd9ca61dcf7ff456f7616f63c9b3b6427ce936382c16aec530a63a24c46fd6ba2989b459943b965d9f0c257ceac03c8679b9b6bb09c233b623a70af053b2382482d63d2f9edcb1ef3b5743584e072c5a3cfad94fc40e03852b8fb62f3ec9eb2b0c449989d63c1a5136b3ba3b3b7592f02ac04a0e9944f01f0acba63310315b740f77acf7753b1788006befe9aac7350b3c1d4cfd807bd4b80ffdf98ec33f5820b93334f684e01313e03939bccd3a2e8cd4352e78c284aacb9d6347d529f394bca203f61679d889495df2d0c671b9fd01eafe8e453424c1427ab893d81c853d0c99972e3a1abe477da9e9bc07bf860a22a3aec8fd050a807a07e1d2de16ac826f55e8e5d7c63b8c70090b054b85e177f42b672d8c6bb1b23f311b6ffc13cec338113af8c632d35dd8c0d81aa713c41882fc0132549439567c802dc6c128e7b4404c183dc6047574d8a35127e952f86a3a247bc81bdb66177727ee252ab58bd6320dddcfe47610ce99eb043e951842edbd115c1bd87aa27e3bf00b37cbfc0647cead952e7587b992d1378595e7b62fe77d225193f86612bf67a504ccf941cbb5788b5d6677fe9d1a1517e1a817ce0392bf142a8cb65d30942311678ec5c8d7b3ef34e4f527990a9fe417f82d8f981da981aa8e72be1a3bfeafde422df65fe9bd50d2f3032b07052d2949b92c68e0e5493bbc9d3e29c805153bc5851bed5a697ed77597a00c8280471aec62b8edfc9adc1d126b224008ac3ba65ac9469313714bdf4695e46a607d15835399b957707d11752b2947d79f5f17718c93bfb04af44e15458d1003ae2132d0a4da562fbea14f9bd0d8da16f22b4e0ec6443dfe1c76aa37d6ca99979bd0bc0ed89751eedd6bcd521b4316fbfb24d6fe3f26280205eefd1647c6b5b01310001e481587228c398dc18863503838ba6fb6784175e999ef546953608132d41701fabfe85d1a006e25f27265ac2a86022245a5cd11e6e1b92f9e03adb363f37882cad6cba3ca3b5ac8ddaf7ef38e6b8a29aaafbe2b3ec1f391b9f95686e8f931c3fe1bcd2cd7be94f4f96e1ff084a6dbbd3d264248f0a73906036ef193c309db18f675ff42e82789f6520ca40f63912d4be47d3438e1e190567e2008829c1891f599992b8fb74c117236ddd4db188f21bf903be671d5ddae8aaa0c5a636295e7ddc15b489b7f365517f2c40e8b160e2f9b3ab176b96ddc4111a583b6b0a1517f9c581acb8fc2e0946bd69f035605494e0fee29479465bca1a4df8d140a48cf59fd97d65ace3cc71d71f917791b4ae96a8d804b0fd6af0a4179dad9c52a55aeac931307a02bc8e2032978e51b7b5c98ec8e29e9e41312a6d7a033d04249223b549b0e4ae4632929ce7741fb1e852e0672b372d60d97a0d082297572def47a48fe5b602f45a5e26ea870b40a8c4fecfab9996903e8c76da3740d8057d496ef21c1f1d41ecf5a16f439f81a2dfba7f1f39dfe295d03c50ac0da782a3702cca96e311163dcabc4d0fe8a12010d93c69cd71641d3dbc622efa10962452ae000e21dbd4a0949684e52bb27e946484b842b67ab22a3467736f6e9b42d8c8a651b0d965549889c6964b508b95e2310a6f6b84d8d25f621605ea3342c73b16c836eb7825fd16287e29f04e3cd17d008d5eba9a8e7cb892a960a19311632b787277dc96c1c3a315ba23e95515adc49b2b4db1d80fcba5a58449f483f8c3b00427fb2162d55fa67c13bd2f17e742abc77e63e45471152db3573e6681826e5be07b0cf983e0690fc875d3024d95e43b1d9c3172c35b7b5d4a2a52f3ed1c211c4158bbe2303fcb358526002c8dcc86680e504fe1cf2430796a22fb63cd023d8fcc7e15f9a697568d5f501ce006488b728a92a91383397dbc02107e985c490440b57937cc0ce9b145ca0079de0849603d0651a65a6bedafa714c9158f68bc12a5837dc0e8e077fa198a2885f5d7fdf073a319ac8ac3ae139c7bdd44b46465e387f2c93420e494227be21b118abb5a7625186479bfdd842ef0d49f9b87cb36d78232a6b37819185a826d2c515406e4808f7c5123d8bf80856eca7140f1ad762ff600062562d9c1c55d425e70780dcab63db049984fc643d4324ae55a18f922253b7d1812f0d9e44a8293503b0ae858920fc3822fbb802cb86db0b5e0d3a6552381d760318c5d9c9cabd75cd6e1142fb3af7df90e8570f92269d3c6573a99f7dfc37c22f2639718e52517a0559df0b4765d31b4c0f650c1de73fe38da19f838dfe2a079ea5d9378ff80b06c6ea582e35444e97a77f7779670417446875405491165ba4fb0a8668afae1940a7a84c3084dc5853decd022b06a8ff9c68931f37f80a3e3cfd4336de4b44167281a54ad158604513f22f1a248a16038443a1b9b517ec8c32862ab8bb224c3975974b73a39cb4c06eae979e2db429ef9d08bcfef59cd4935ce120d4e14290f2560bca17d336861006f61aa4bbc1137735848b3bad505ccf5e7350075b369fca074e5a845da9f25b8dbc2bd7f46aced3bf401de1c4b840a824b6ec67d53dfde17d4af45f94429cebd2522099c2932322021516ad9d7dfb7d7692a715ac0afae8d80f56f11dca39731e00746e4bc46988c5616d7106f0066c84eae44e6b9c1a6f9c13b17bfdc63ed8ee1ecbda91ec649ab13505bb1a40f959da56ca83742dbf567847305109bb12fb5fa318fdca6f465148f6e378700981a33ab279377794db9e006a68f7a8ef21b469cd3677ceb90c651e5c076ada1563b7d890b3fdb539e7b70b2224254fb8e852a7972de893b59399cbcd8ed735cdf4ec9c7c3c9f1dce4ccc78fd663bdefdd6062d248e5ab51a094ec7a15111760bb5b2a3480464e7e28035294d2f41e20fa1e217fa71294a4b43e9c3c0ca0df2d5cd1dc7c43ebc5d9d90a199d4818b29cdaf06bb6242e56f2b29a5f68d64cbc193a29c4e2880bcb61768490a0995f35801580017fb8e0c52f02fa93d799fe91370820bf44d0e13b2f3ed9f8b750ff2fb27ed3f8f7fa3e71af17826cdaa4d16ce36e3b5db07e3a4a45ca9d9681f4647b65537d9eac2aeda169bcafcbcebf0d0cf06f3d52a85dd898b1cc0c156a2d6efc0d5dc9cf04a1785555fd3be2ba209ec85a71a28530ea76d07c6c5132c08b4359f1f63fb5e57072d64b9512c1f806378b766138d4db21d959842ced440731abf5c112648cb6a7e68a5c6cee8340b1d9d34e83c1303715b6ca6fa317cd06deb226ad650c9a4d26329effde50478ca07e558cf9cd46941b32c4b9684b8800f336eaaa7963bcb5f626b70868c2ea955d37728fe600be7db362327001e7fb0c1a5370148a3a89369cc3b7eca8f9ecd96454243b5d0b7736802ea43f2ba37f798fefc9306cc0fc72025037d81c7acdfa857d4ab3bcf12f57ce7782417d3f570c109e1586a22b607fca0a638c77eabee7fcce4c4b2d2ae6b92d85be51083a30c12dc0e9a097911d59ff3284df5a48623c313dde0c6426086d598822270ce70d1dc1d06b2c47f08461ee938596b61764831c3cf7699793d5129db7c5a2410c9744fd26d34c961733066afe804df9317cb24ec8ac8ddb560fa44a2f6fd8064cf539d02c58d559da5e13ae92926b35f4fd9d7d7c537ce8e285958d01863d7b4f0279df0579e4121446b962a46e1df2f4f860fe7683c9f9333b808fe7f39bc53042b0f91b174fe048d307536ec3e314ee52102d31b43b7fa47f197cdb41efeffb9ebfdd72852e598e8b2e4914d3586db7ef7c2a6f0d2602393d305dc82a00e226081613480a15a428b75376156a34ebcca83d48ccb75fb0770de88b957bea11089b5847225e51db2eaa9fa9f2b4b14b9c01cabfcf07e1c146e5fe4b2a61c3b9430fb33b60e04ce06d2df29bcb3749a969c1b1ef3eb3d96795b0f2ac38d940344c9958f787a24ad7264000004f1172521ccb4651fa173279e8bf80df03a04c5a0e9b9a213ac60a47aa5aa12caf856d13f8f725c89876da77df0b388a7f0f0ebc68c578e0d76e59bc9ed80618535d1b403d3718b15a8bdb2ce6ff7892bc288b0b470c2a0ce447a62e75e9e3771a34608a5880f48adc59ab01108ff8ce1dde66fad1e530c253df294809e1a54c1bdb103037783f2e230f8efb9012a6510dde3ba3f5c8e2a305097689ceff235704d092c3ccbb555d85c7f02662967ab5b8857c1cd6d8c280c8e1319a39ad9abc337214d3fde20fbc6b5dab6d52552ace4e21e054cb0591aa88ff64a2cdb8e84e73027e3e874d95207614ad4e0fb4ec7a2e1ca4790065d25004c565f4c8158b0d1fc5513ae334862733d2cf75bddf6d85bea019ac82edf9173baaaed39742bec363e2fa94bc3adcd7ff473a205007b4294ec682542106b8f633c4cecb0c40f9dc0005b51610ebe1b5d830f5ed81b175bdddf59e27d782344f84a711e25ffd6a67230a21cc78094af2b97212fc2e2a3412e6f24aad8f826120e3b1a3855f342e8b5079045be87f62ad25d0b81bddaf7ea6c249466f42a15744a81711a34259754acf2bd1309c56c76936def2b9c54f7f1b5aa0a5d3167db47064c5b8390969f9e9799b9a6a7ee705f4450450d609532a75fe23620062bdcf823199b729f8709e4f91a68f9844373ff0b7af019deffe16b07873e4a4469d50ed3a9bb8c5f5533af1e452f871213dbeaf075475dcf2b0911078f9d669d64b7ba87595bdee105d79503a6ffbb5be5dadb81f1d6be5b9959dd935279c4da47f763dc83c27975e52a38f50887ffc15d2f5f7ba0d3c548bfefd32b5504a01bf79d3695823182c2d81b1c4df4057baf32dd42e66c7210aa1e0dc6e176f642058122a85b8c3b9bd56df46d39844063394a55b09a7be29828097bead8a6f357d2151504a0b7f8d56e3d3c7c1f3ed9983a66b62a1c073340892bafc31735a27184cc663bba0dcfd7893b8b6994fcb3b0e540b0880ca1fd6d8c8f22807b7e0867c4fafb969d37e4c5ac7ae9f46511e639988a1ebf281b095473c9ec1ac1ddd4a856136da34fa3e38c08d03552b910b47b16fabead6b52ac21b6c7018e387507fdf59e3ce778048feaf8a9d6cd4929dcdd45bd5f7e70610f300334b2", 0x1000, 0xffffffffffffd501}, {&(0x7f00000004c0)="039aea1d400ebb366139b39afec42757a275c3accc19c05017051f8230abd1002047a06fc0cf8068b3d463591174c17a8d5fb8b176064e8ecdaa8ec3", 0x3c, 0x20}], 0x100080, &(0x7f0000003380)={[{@orlov}, {@bsdgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x100000000}}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x5c0cdf81}}, {@noacl}, {@nomblk_io_submit}, {@abort}, {}], [{@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '+%--!@^#[:#$'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800)) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 55) [ 244.781379][T19938] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.789399][T19938] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 244.801805][T19938] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.809827][T19938] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 244.860820][T19938] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.868834][T19938] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 244.880285][T19938] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.888833][T19938] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 244.903180][T19979] FAULT_INJECTION: forcing a failure. [ 244.903180][T19979] name failslab, interval 1, probability 0, space 0, times 0 [ 244.915978][T19979] CPU: 0 PID: 19979 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 244.924794][T19979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.934838][T19979] Call Trace: [ 244.938099][T19979] dump_stack_lvl+0xd6/0x122 [ 244.942684][T19979] dump_stack+0x11/0x1b [ 244.946823][T19979] should_fail+0x23c/0x250 [ 244.951241][T19979] __should_failslab+0x81/0x90 [ 244.955989][T19979] ? register_for_each_vma+0x372/0x890 [ 244.961502][T19979] should_failslab+0x5/0x20 [ 244.965998][T19979] kmem_cache_alloc_trace+0x52/0x320 [ 244.971266][T19979] ? register_for_each_vma+0x372/0x890 [ 244.976793][T19979] ? vma_interval_tree_iter_next+0x263/0x280 [ 244.982826][T19979] register_for_each_vma+0x372/0x890 [ 244.988128][T19979] __uprobe_register+0x404/0x8b0 [ 244.993050][T19979] uprobe_register_refctr+0x29/0x40 [ 244.998229][T19979] probe_event_enable+0x2be/0x7d0 [ 245.003312][T19979] ? __uprobe_trace_func+0x440/0x440 [ 245.008585][T19979] trace_uprobe_register+0x88/0x410 [ 245.013785][T19979] perf_trace_event_init+0x34e/0x790 [ 245.019056][T19979] perf_uprobe_init+0xf5/0x140 [ 245.023805][T19979] perf_uprobe_event_init+0xde/0x140 [ 245.029076][T19979] perf_try_init_event+0x21a/0x400 [ 245.034235][T19979] perf_event_alloc+0xa60/0x1790 [ 245.039292][T19979] __se_sys_perf_event_open+0x5db/0x2810 [ 245.045015][T19979] __x64_sys_perf_event_open+0x63/0x70 [ 245.050528][T19979] do_syscall_64+0x44/0xa0 [ 245.054962][T19979] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.060845][T19979] RIP: 0033:0x7ffa67e11a79 [ 245.065244][T19979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 245.084833][T19979] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 245.093316][T19979] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 245.101334][T19979] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:19:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x27, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:10 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xfffd, r0, 0x0, 0x0, 0x100}]) 16:19:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 56) [ 245.109288][T19979] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.117241][T19979] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 245.125207][T19979] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 245.135421][T19988] loop1: detected capacity change from 0 to 264192 16:19:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 245.228829][T19987] loop1: detected capacity change from 0 to 264192 [ 245.235442][T20002] FAULT_INJECTION: forcing a failure. [ 245.235442][T20002] name failslab, interval 1, probability 0, space 0, times 0 [ 245.248111][T20002] CPU: 1 PID: 20002 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 245.256871][T20002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.266919][T20002] Call Trace: [ 245.270221][T20002] dump_stack_lvl+0xd6/0x122 [ 245.274838][T20002] dump_stack+0x11/0x1b [ 245.278979][T20002] should_fail+0x23c/0x250 [ 245.283427][T20002] __should_failslab+0x81/0x90 [ 245.288175][T20002] ? register_for_each_vma+0x372/0x890 [ 245.293645][T20002] should_failslab+0x5/0x20 [ 245.298177][T20002] kmem_cache_alloc_trace+0x52/0x320 [ 245.303493][T20002] ? register_for_each_vma+0x372/0x890 [ 245.308936][T20002] ? vma_interval_tree_iter_next+0x24c/0x280 [ 245.314924][T20002] register_for_each_vma+0x372/0x890 [ 245.320216][T20002] __uprobe_register+0x404/0x8b0 [ 245.325137][T20002] uprobe_register_refctr+0x29/0x40 [ 245.330372][T20002] probe_event_enable+0x2be/0x7d0 [ 245.335381][T20002] ? __uprobe_trace_func+0x440/0x440 [ 245.340652][T20002] trace_uprobe_register+0x88/0x410 [ 245.345832][T20002] perf_trace_event_init+0x34e/0x790 [ 245.351104][T20002] perf_uprobe_init+0xf5/0x140 [ 245.355911][T20002] perf_uprobe_event_init+0xde/0x140 [ 245.361182][T20002] perf_try_init_event+0x21a/0x400 [ 245.366361][T20002] perf_event_alloc+0xa60/0x1790 [ 245.371283][T20002] __se_sys_perf_event_open+0x5db/0x2810 [ 245.376911][T20002] __x64_sys_perf_event_open+0x63/0x70 [ 245.382367][T20002] do_syscall_64+0x44/0xa0 [ 245.386786][T20002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.392671][T20002] RIP: 0033:0x7ffa67e11a79 [ 245.397070][T20002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 245.416660][T20002] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 16:19:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x32, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 245.425053][T20002] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 245.433007][T20002] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 245.440962][T20002] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.448982][T20002] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 245.456954][T20002] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:10 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:10 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0xffff, r0, 0x0, 0x0, 0x100}]) [ 245.479059][T19997] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.487055][T19997] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 245.500653][T19997] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.508673][T19997] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:10 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x2, 0x100}]) [ 245.544632][T19997] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.552669][T19997] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 245.564328][T19997] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.572344][T19997] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 57) 16:19:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 245.709457][T20033] FAULT_INJECTION: forcing a failure. [ 245.709457][T20033] name failslab, interval 1, probability 0, space 0, times 0 [ 245.722262][T20033] CPU: 0 PID: 20033 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 245.731147][T20033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.741275][T20033] Call Trace: [ 245.744541][T20033] dump_stack_lvl+0xd6/0x122 [ 245.749191][T20033] dump_stack+0x11/0x1b [ 245.753412][T20033] should_fail+0x23c/0x250 [ 245.758194][T20033] __should_failslab+0x81/0x90 [ 245.763149][T20033] ? register_for_each_vma+0x372/0x890 [ 245.768743][T20033] should_failslab+0x5/0x20 [ 245.773227][T20033] kmem_cache_alloc_trace+0x52/0x320 [ 245.778544][T20033] ? register_for_each_vma+0x372/0x890 [ 245.784053][T20033] ? vma_interval_tree_iter_next+0x24c/0x280 [ 245.790087][T20033] register_for_each_vma+0x372/0x890 [ 245.795371][T20033] __uprobe_register+0x404/0x8b0 [ 245.800322][T20033] uprobe_register_refctr+0x29/0x40 [ 245.805512][T20033] probe_event_enable+0x2be/0x7d0 [ 245.810530][T20033] ? __uprobe_trace_func+0x440/0x440 [ 245.815813][T20033] trace_uprobe_register+0x88/0x410 [ 245.821024][T20033] perf_trace_event_init+0x34e/0x790 [ 245.826318][T20033] perf_uprobe_init+0xf5/0x140 [ 245.831093][T20033] perf_uprobe_event_init+0xde/0x140 [ 245.836417][T20033] perf_try_init_event+0x21a/0x400 [ 245.841554][T20033] perf_event_alloc+0xa60/0x1790 [ 245.846551][T20033] __se_sys_perf_event_open+0x5db/0x2810 [ 245.852175][T20033] __x64_sys_perf_event_open+0x63/0x70 [ 245.857637][T20033] do_syscall_64+0x44/0xa0 [ 245.862058][T20033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.867976][T20033] RIP: 0033:0x7ffa67e11a79 [ 245.872392][T20033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 245.892000][T20033] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 245.900396][T20033] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x48, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 245.908445][T20033] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 245.916444][T20033] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.924402][T20033] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 245.932380][T20033] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 58) [ 245.966044][T20018] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.974171][T20018] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 245.998973][T20039] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:19:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3, 0x100}]) 16:19:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r1, 0xbf, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r1, 0xad1d6000) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 246.007008][T20039] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 246.020221][T20039] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.028299][T20039] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x4, 0x100}]) [ 246.058618][T20039] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.066623][T20039] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 246.078097][T20039] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.086111][T20039] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 246.180814][T20047] FAULT_INJECTION: forcing a failure. [ 246.180814][T20047] name failslab, interval 1, probability 0, space 0, times 0 [ 246.193586][T20047] CPU: 0 PID: 20047 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 246.202351][T20047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.212472][T20047] Call Trace: [ 246.215825][T20047] dump_stack_lvl+0xd6/0x122 [ 246.220441][T20047] dump_stack+0x11/0x1b [ 246.224633][T20047] should_fail+0x23c/0x250 16:19:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf, 0x100}]) [ 246.229050][T20047] __should_failslab+0x81/0x90 [ 246.233876][T20047] ? register_for_each_vma+0x372/0x890 [ 246.239337][T20047] should_failslab+0x5/0x20 [ 246.243876][T20047] kmem_cache_alloc_trace+0x52/0x320 [ 246.249226][T20047] ? register_for_each_vma+0x372/0x890 [ 246.254667][T20047] ? vma_interval_tree_iter_next+0x263/0x280 [ 246.260813][T20047] register_for_each_vma+0x372/0x890 [ 246.266089][T20047] __uprobe_register+0x404/0x8b0 [ 246.271034][T20047] uprobe_register_refctr+0x29/0x40 [ 246.276276][T20047] probe_event_enable+0x2be/0x7d0 [ 246.281278][T20047] ? __uprobe_trace_func+0x440/0x440 [ 246.286546][T20047] trace_uprobe_register+0x88/0x410 [ 246.291740][T20047] perf_trace_event_init+0x34e/0x790 [ 246.297064][T20047] perf_uprobe_init+0xf5/0x140 [ 246.301822][T20047] perf_uprobe_event_init+0xde/0x140 [ 246.307168][T20047] perf_try_init_event+0x21a/0x400 [ 246.312279][T20047] perf_event_alloc+0xa60/0x1790 [ 246.317201][T20047] __se_sys_perf_event_open+0x5db/0x2810 [ 246.322843][T20047] __x64_sys_perf_event_open+0x63/0x70 [ 246.328296][T20047] do_syscall_64+0x44/0xa0 [ 246.332791][T20047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 246.338727][T20047] RIP: 0033:0x7ffa67e11a79 [ 246.343281][T20047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 246.362974][T20047] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 246.371404][T20047] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 246.379364][T20047] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 246.387318][T20047] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 246.395350][T20047] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 246.403322][T20047] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 246.516949][T20046] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.524979][T20046] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 246.536374][T20046] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.544369][T20046] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x10, 0x100}]) [ 246.574564][T20046] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.582582][T20046] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 246.594319][T20046] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.602341][T20046] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 59) 16:19:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x68, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf2, 0x100}]) 16:19:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 246.640624][T20071] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.648709][T20071] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 246.661203][T20071] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.669266][T20071] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 246.773030][T20071] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.781063][T20071] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 246.793076][T20071] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.801088][T20071] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='/,!+') r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x3f, 0x3, 0x3, 0x0, 0x4, 0x22281, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x828, 0x10001, 0x8, 0x1, 0x400, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x8, r3, 0x3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfe, 0x100}]) 16:19:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x300, 0x100}]) [ 246.901157][T20095] FAULT_INJECTION: forcing a failure. [ 246.901157][T20095] name failslab, interval 1, probability 0, space 0, times 0 [ 246.913971][T20095] CPU: 0 PID: 20095 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 246.922742][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.932782][T20095] Call Trace: [ 246.936048][T20095] dump_stack_lvl+0xd6/0x122 [ 246.940683][T20095] dump_stack+0x11/0x1b [ 246.944824][T20095] should_fail+0x23c/0x250 [ 246.949214][T20095] __should_failslab+0x81/0x90 [ 246.953971][T20095] ? register_for_each_vma+0x372/0x890 [ 246.959404][T20095] should_failslab+0x5/0x20 [ 246.963887][T20095] kmem_cache_alloc_trace+0x52/0x320 [ 246.969146][T20095] ? register_for_each_vma+0x372/0x890 [ 246.974580][T20095] ? vma_interval_tree_iter_next+0x263/0x280 [ 246.980645][T20095] register_for_each_vma+0x372/0x890 [ 246.985916][T20095] __uprobe_register+0x404/0x8b0 [ 246.991000][T20095] uprobe_register_refctr+0x29/0x40 [ 246.996176][T20095] probe_event_enable+0x2be/0x7d0 [ 247.001230][T20095] ? __uprobe_trace_func+0x440/0x440 [ 247.006493][T20095] trace_uprobe_register+0x88/0x410 [ 247.011684][T20095] perf_trace_event_init+0x34e/0x790 [ 247.016959][T20095] perf_uprobe_init+0xf5/0x140 [ 247.021727][T20095] perf_uprobe_event_init+0xde/0x140 [ 247.027000][T20095] perf_try_init_event+0x21a/0x400 [ 247.032104][T20095] perf_event_alloc+0xa60/0x1790 [ 247.037141][T20095] __se_sys_perf_event_open+0x5db/0x2810 [ 247.042894][T20095] __x64_sys_perf_event_open+0x63/0x70 [ 247.048354][T20095] do_syscall_64+0x44/0xa0 [ 247.052935][T20095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 247.058826][T20095] RIP: 0033:0x7ffa67e11a79 [ 247.063217][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 247.083242][T20095] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 247.091724][T20095] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 247.099710][T20095] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 247.107765][T20095] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 247.115743][T20095] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 247.123763][T20095] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf00, 0x100}]) 16:19:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6c, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 247.254236][T20089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.262284][T20089] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 247.287903][T20089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.296006][T20089] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xeffd, 0x100}]) [ 247.414526][T20089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.422588][T20089] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 247.434413][T20089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.442492][T20089] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 60) 16:19:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB="d3c38841a22e4dbd84c35a5058cd0a41f885836a329884afc56445786274676c7c8b7c9167a8eb"], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf200, 0x100}]) [ 247.550533][T20117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.558618][T20117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 247.570498][T20117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.578697][T20117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfcfd, 0x100}]) [ 247.686669][T20117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.694688][T20117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 247.706872][T20117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.714895][T20117] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:13 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x74, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:13 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfdef, 0x100}]) [ 247.800882][T20136] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.808936][T20136] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 247.820849][T20136] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.828901][T20136] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:13 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfdfc, 0x100}]) [ 247.943546][T20136] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.951646][T20136] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 247.970225][T20136] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.978230][T20136] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:13 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfdfe, 0x100}]) [ 248.080703][T20143] FAULT_INJECTION: forcing a failure. [ 248.080703][T20143] name failslab, interval 1, probability 0, space 0, times 0 [ 248.093333][T20143] CPU: 1 PID: 20143 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 248.102160][T20143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.112279][T20143] Call Trace: [ 248.115546][T20143] dump_stack_lvl+0xd6/0x122 [ 248.120380][T20143] dump_stack+0x11/0x1b [ 248.124516][T20143] should_fail+0x23c/0x250 [ 248.128915][T20143] __should_failslab+0x81/0x90 [ 248.133672][T20143] ? register_for_each_vma+0x372/0x890 [ 248.139158][T20143] should_failslab+0x5/0x20 [ 248.143660][T20143] kmem_cache_alloc_trace+0x52/0x320 [ 248.148997][T20143] ? register_for_each_vma+0x372/0x890 [ 248.154449][T20143] ? vma_interval_tree_iter_next+0x24c/0x280 [ 248.160444][T20143] register_for_each_vma+0x372/0x890 [ 248.165762][T20143] __uprobe_register+0x404/0x8b0 [ 248.170751][T20143] uprobe_register_refctr+0x29/0x40 [ 248.175938][T20143] probe_event_enable+0x2be/0x7d0 [ 248.180939][T20143] ? __uprobe_trace_func+0x440/0x440 [ 248.186204][T20143] trace_uprobe_register+0x88/0x410 [ 248.191382][T20143] perf_trace_event_init+0x34e/0x790 [ 248.196771][T20143] perf_uprobe_init+0xf5/0x140 [ 248.201535][T20143] perf_uprobe_event_init+0xde/0x140 [ 248.206899][T20143] perf_try_init_event+0x21a/0x400 [ 248.211992][T20143] perf_event_alloc+0xa60/0x1790 [ 248.216960][T20143] __se_sys_perf_event_open+0x5db/0x2810 [ 248.222593][T20143] __x64_sys_perf_event_open+0x63/0x70 [ 248.228037][T20143] do_syscall_64+0x44/0xa0 [ 248.232627][T20143] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.238561][T20143] RIP: 0033:0x7ffa67e11a79 [ 248.242985][T20143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.262807][T20143] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 248.271202][T20143] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 248.279177][T20143] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 248.287135][T20143] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 248.295170][T20143] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 248.303131][T20143] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:13 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfdff, 0x100}]) [ 248.412433][T20140] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.420514][T20140] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 248.432071][T20140] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.440178][T20140] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 248.551411][T20140] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.559543][T20140] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 248.571341][T20140] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.579413][T20140] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 61) 16:19:13 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfe00, 0x100}]) [ 248.684582][T20171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.692590][T20171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 248.709582][T20171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.717612][T20171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 248.745836][T20171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.754125][T20171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 248.767048][T20171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.775120][T20171] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 248.870521][T20191] FAULT_INJECTION: forcing a failure. [ 248.870521][T20191] name failslab, interval 1, probability 0, space 0, times 0 [ 248.883160][T20191] CPU: 0 PID: 20191 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 248.891908][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.902079][T20191] Call Trace: [ 248.905371][T20191] dump_stack_lvl+0xd6/0x122 [ 248.909941][T20191] dump_stack+0x11/0x1b [ 248.914087][T20191] should_fail+0x23c/0x250 [ 248.918654][T20191] __should_failslab+0x81/0x90 [ 248.923402][T20191] ? register_for_each_vma+0x372/0x890 [ 248.928842][T20191] should_failslab+0x5/0x20 [ 248.933329][T20191] kmem_cache_alloc_trace+0x52/0x320 [ 248.938602][T20191] ? register_for_each_vma+0x372/0x890 [ 248.944046][T20191] ? vma_interval_tree_iter_next+0x263/0x280 [ 248.950022][T20191] register_for_each_vma+0x372/0x890 [ 248.955296][T20191] __uprobe_register+0x404/0x8b0 [ 248.960219][T20191] uprobe_register_refctr+0x29/0x40 [ 248.965399][T20191] probe_event_enable+0x2be/0x7d0 [ 248.970414][T20191] ? __uprobe_trace_func+0x440/0x440 [ 248.975685][T20191] trace_uprobe_register+0x88/0x410 [ 248.980867][T20191] perf_trace_event_init+0x34e/0x790 [ 248.986323][T20191] perf_uprobe_init+0xf5/0x140 [ 248.991108][T20191] perf_uprobe_event_init+0xde/0x140 [ 248.996394][T20191] perf_try_init_event+0x21a/0x400 [ 249.001512][T20191] perf_event_alloc+0xa60/0x1790 [ 249.006504][T20191] __se_sys_perf_event_open+0x5db/0x2810 [ 249.012275][T20191] __x64_sys_perf_event_open+0x63/0x70 [ 249.017715][T20191] do_syscall_64+0x44/0xa0 [ 249.022197][T20191] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.028151][T20191] RIP: 0033:0x7ffa67e11a79 [ 249.032611][T20191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 249.052197][T20191] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 249.060589][T20191] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 249.068626][T20191] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 249.076592][T20191] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.084545][T20191] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 249.092846][T20191] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x628000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x34, 0xf, 0x81}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7a, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:14 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfefd, 0x100}]) 16:19:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 249.116203][T20187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.124340][T20187] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 249.135753][T20187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.143832][T20187] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:14 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffd, 0x100}]) [ 249.170255][T20187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.178275][T20187] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 249.190827][T20187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.198853][T20187] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 62) 16:19:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xa, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7e, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:14 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf0ff7f, 0x100}]) [ 249.346331][T20197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.354414][T20197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 249.366007][T20197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.374019][T20197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:14 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfeffff, 0x100}]) [ 249.406116][T20197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.414166][T20197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 249.431999][T20197] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.440137][T20197] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 249.543760][T20218] FAULT_INJECTION: forcing a failure. [ 249.543760][T20218] name failslab, interval 1, probability 0, space 0, times 0 [ 249.556396][T20218] CPU: 0 PID: 20218 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 249.565245][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.575312][T20218] Call Trace: [ 249.578666][T20218] dump_stack_lvl+0xd6/0x122 [ 249.583259][T20218] dump_stack+0x11/0x1b [ 249.587400][T20218] should_fail+0x23c/0x250 [ 249.591900][T20218] __should_failslab+0x81/0x90 [ 249.596661][T20218] ? register_for_each_vma+0x372/0x890 [ 249.602098][T20218] should_failslab+0x5/0x20 [ 249.606596][T20218] kmem_cache_alloc_trace+0x52/0x320 [ 249.611871][T20218] ? register_for_each_vma+0x372/0x890 [ 249.617364][T20218] ? vma_interval_tree_iter_next+0x24c/0x280 [ 249.623326][T20218] register_for_each_vma+0x372/0x890 [ 249.628661][T20218] __uprobe_register+0x404/0x8b0 [ 249.633583][T20218] uprobe_register_refctr+0x29/0x40 [ 249.638759][T20218] probe_event_enable+0x2be/0x7d0 [ 249.643784][T20218] ? __uprobe_trace_func+0x440/0x440 [ 249.649092][T20218] trace_uprobe_register+0x88/0x410 [ 249.654288][T20218] perf_trace_event_init+0x34e/0x790 [ 249.659887][T20218] perf_uprobe_init+0xf5/0x140 [ 249.664639][T20218] perf_uprobe_event_init+0xde/0x140 [ 249.669905][T20218] perf_try_init_event+0x21a/0x400 [ 249.674995][T20218] perf_event_alloc+0xa60/0x1790 [ 249.679916][T20218] __se_sys_perf_event_open+0x5db/0x2810 [ 249.685531][T20218] __x64_sys_perf_event_open+0x63/0x70 [ 249.690984][T20218] do_syscall_64+0x44/0xa0 [ 249.695386][T20218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.701287][T20218] RIP: 0033:0x7ffa67e11a79 [ 249.705747][T20218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 249.725358][T20218] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 249.733784][T20218] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 249.741805][T20218] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 249.749761][T20218] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.757821][T20218] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 249.765822][T20218] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 249.896526][T20217] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.904563][T20217] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 249.915959][T20217] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.924043][T20217] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x1000000, 0x100}]) 16:19:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x88, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 249.939094][T20217] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.947097][T20217] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 249.958185][T20217] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.966376][T20217] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 63) 16:19:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x2000000, 0x100}]) [ 250.022429][T20249] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.030485][T20249] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 250.055728][T20249] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.063858][T20249] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 250.181333][T20249] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.189515][T20249] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 250.208058][T20249] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.216110][T20249] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 250.232030][T20263] FAULT_INJECTION: forcing a failure. [ 250.232030][T20263] name failslab, interval 1, probability 0, space 0, times 0 [ 250.244683][T20263] CPU: 0 PID: 20263 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 250.253443][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.263576][T20263] Call Trace: [ 250.266855][T20263] dump_stack_lvl+0xd6/0x122 [ 250.271562][T20263] dump_stack+0x11/0x1b [ 250.275785][T20263] should_fail+0x23c/0x250 [ 250.280188][T20263] __should_failslab+0x81/0x90 [ 250.284985][T20263] ? register_for_each_vma+0x372/0x890 [ 250.290495][T20263] should_failslab+0x5/0x20 [ 250.294983][T20263] kmem_cache_alloc_trace+0x52/0x320 [ 250.300249][T20263] ? register_for_each_vma+0x372/0x890 [ 250.305689][T20263] ? vma_interval_tree_iter_next+0x263/0x280 [ 250.311660][T20263] register_for_each_vma+0x372/0x890 [ 250.316926][T20263] __uprobe_register+0x404/0x8b0 [ 250.321908][T20263] uprobe_register_refctr+0x29/0x40 [ 250.327171][T20263] probe_event_enable+0x2be/0x7d0 [ 250.332175][T20263] ? __uprobe_trace_func+0x440/0x440 [ 250.337483][T20263] trace_uprobe_register+0x88/0x410 [ 250.343015][T20263] perf_trace_event_init+0x34e/0x790 [ 250.348352][T20263] perf_uprobe_init+0xf5/0x140 [ 250.353108][T20263] perf_uprobe_event_init+0xde/0x140 [ 250.358379][T20263] perf_try_init_event+0x21a/0x400 [ 250.363495][T20263] perf_event_alloc+0xa60/0x1790 [ 250.368426][T20263] __se_sys_perf_event_open+0x5db/0x2810 [ 250.374076][T20263] __x64_sys_perf_event_open+0x63/0x70 [ 250.379693][T20263] do_syscall_64+0x44/0xa0 [ 250.384167][T20263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.390107][T20263] RIP: 0033:0x7ffa67e11a79 [ 250.394607][T20263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.414195][T20263] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 250.422586][T20263] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000000, 0x100}]) [ 250.430546][T20263] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 250.438533][T20263] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.446494][T20263] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 250.454511][T20263] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4044000) 16:19:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 64) 16:19:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xc, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x4000000, 0x100}]) [ 250.585488][T20254] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.593513][T20254] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 250.611411][T20254] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.619549][T20254] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf000000, 0x100}]) [ 250.762932][T20254] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.770955][T20254] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 250.783490][T20254] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.791510][T20254] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x10000000, 0x100}]) [ 250.895716][T20282] FAULT_INJECTION: forcing a failure. [ 250.895716][T20282] name failslab, interval 1, probability 0, space 0, times 0 [ 250.908348][T20282] CPU: 0 PID: 20282 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 250.917125][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.927173][T20282] Call Trace: [ 250.930443][T20282] dump_stack_lvl+0xd6/0x122 [ 250.935054][T20282] dump_stack+0x11/0x1b [ 250.939209][T20282] should_fail+0x23c/0x250 [ 250.943607][T20282] __should_failslab+0x81/0x90 [ 250.948382][T20282] ? register_for_each_vma+0x372/0x890 [ 250.953822][T20282] should_failslab+0x5/0x20 [ 250.958329][T20282] kmem_cache_alloc_trace+0x52/0x320 [ 250.963729][T20282] ? register_for_each_vma+0x372/0x890 [ 250.969213][T20282] ? vma_interval_tree_iter_next+0x263/0x280 [ 250.975214][T20282] register_for_each_vma+0x372/0x890 [ 250.980610][T20282] __uprobe_register+0x404/0x8b0 [ 250.985529][T20282] uprobe_register_refctr+0x29/0x40 [ 250.990745][T20282] probe_event_enable+0x2be/0x7d0 [ 250.995819][T20282] ? __uprobe_trace_func+0x440/0x440 [ 251.001088][T20282] trace_uprobe_register+0x88/0x410 [ 251.006342][T20282] perf_trace_event_init+0x34e/0x790 [ 251.011611][T20282] perf_uprobe_init+0xf5/0x140 [ 251.016420][T20282] perf_uprobe_event_init+0xde/0x140 [ 251.021839][T20282] perf_try_init_event+0x21a/0x400 [ 251.027012][T20282] perf_event_alloc+0xa60/0x1790 [ 251.032025][T20282] __se_sys_perf_event_open+0x5db/0x2810 [ 251.037667][T20282] __x64_sys_perf_event_open+0x63/0x70 [ 251.043117][T20282] do_syscall_64+0x44/0xa0 [ 251.047528][T20282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.053418][T20282] RIP: 0033:0x7ffa67e11a79 [ 251.057822][T20282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.077863][T20282] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 251.086257][T20282] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 251.094849][T20282] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 251.103061][T20282] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.111028][T20282] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 251.119016][T20282] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xef, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x7ffff000, 0x100}]) 16:19:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 251.213047][T20277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.221073][T20277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 251.242861][T20277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.250887][T20277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xeffdffff, 0x100}]) [ 251.336203][T20277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.344241][T20277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 251.356076][T20277] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.364111][T20277] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = socket(0x11, 0x2, 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 65) 16:19:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf2000000, 0x100}]) [ 251.457737][T20298] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.466188][T20298] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 251.479632][T20298] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.487866][T20298] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfcfdffff, 0x100}]) [ 251.611396][T20298] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.619528][T20298] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 251.631420][T20298] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.639440][T20298] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfefdffff, 0x100}]) [ 251.746267][T20327] FAULT_INJECTION: forcing a failure. [ 251.746267][T20327] name failslab, interval 1, probability 0, space 0, times 0 [ 251.758929][T20327] CPU: 0 PID: 20327 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 251.767773][T20327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.777959][T20327] Call Trace: [ 251.781251][T20327] dump_stack_lvl+0xd6/0x122 [ 251.785827][T20327] dump_stack+0x11/0x1b [ 251.790011][T20327] should_fail+0x23c/0x250 [ 251.794492][T20327] __should_failslab+0x81/0x90 [ 251.799238][T20327] ? register_for_each_vma+0x372/0x890 [ 251.804689][T20327] should_failslab+0x5/0x20 [ 251.809222][T20327] kmem_cache_alloc_trace+0x52/0x320 [ 251.814529][T20327] ? register_for_each_vma+0x372/0x890 [ 251.820055][T20327] ? vma_interval_tree_iter_next+0x24c/0x280 [ 251.826027][T20327] register_for_each_vma+0x372/0x890 [ 251.831294][T20327] __uprobe_register+0x404/0x8b0 [ 251.836250][T20327] uprobe_register_refctr+0x29/0x40 [ 251.841449][T20327] probe_event_enable+0x2be/0x7d0 [ 251.846467][T20327] ? __uprobe_trace_func+0x440/0x440 [ 251.851731][T20327] trace_uprobe_register+0x88/0x410 [ 251.856909][T20327] perf_trace_event_init+0x34e/0x790 [ 251.862217][T20327] perf_uprobe_init+0xf5/0x140 [ 251.866960][T20327] perf_uprobe_event_init+0xde/0x140 [ 251.872229][T20327] perf_try_init_event+0x21a/0x400 [ 251.877324][T20327] perf_event_alloc+0xa60/0x1790 [ 251.882255][T20327] __se_sys_perf_event_open+0x5db/0x2810 [ 251.887886][T20327] __x64_sys_perf_event_open+0x63/0x70 [ 251.893330][T20327] do_syscall_64+0x44/0xa0 [ 251.897850][T20327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.903732][T20327] RIP: 0033:0x7ffa67e11a79 [ 251.908142][T20327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.927741][T20327] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 251.936221][T20327] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 251.944171][T20327] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 251.952136][T20327] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.960133][T20327] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 251.968099][T20327] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffdffff, 0x100}]) 16:19:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 66) [ 252.085623][T20343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.093754][T20343] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 252.108434][T20343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.116643][T20343] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffdef, 0x100}]) [ 252.237068][T20343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.245138][T20343] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 252.263164][T20343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.271208][T20343] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffdfc, 0x100}]) [ 252.390358][T20358] FAULT_INJECTION: forcing a failure. [ 252.390358][T20358] name failslab, interval 1, probability 0, space 0, times 0 [ 252.402987][T20358] CPU: 1 PID: 20358 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 252.411759][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.422031][T20358] Call Trace: [ 252.425348][T20358] dump_stack_lvl+0xd6/0x122 [ 252.429949][T20358] dump_stack+0x11/0x1b [ 252.434091][T20358] should_fail+0x23c/0x250 [ 252.438488][T20358] __should_failslab+0x81/0x90 [ 252.443654][T20358] ? register_for_each_vma+0x372/0x890 [ 252.449130][T20358] should_failslab+0x5/0x20 [ 252.453621][T20358] kmem_cache_alloc_trace+0x52/0x320 [ 252.458902][T20358] ? register_for_each_vma+0x372/0x890 [ 252.464515][T20358] ? vma_interval_tree_iter_next+0x24c/0x280 [ 252.470496][T20358] register_for_each_vma+0x372/0x890 [ 252.475764][T20358] __uprobe_register+0x404/0x8b0 [ 252.480696][T20358] uprobe_register_refctr+0x29/0x40 [ 252.485894][T20358] probe_event_enable+0x2be/0x7d0 [ 252.490904][T20358] ? __uprobe_trace_func+0x440/0x440 [ 252.496184][T20358] trace_uprobe_register+0x88/0x410 [ 252.501362][T20358] perf_trace_event_init+0x34e/0x790 [ 252.506655][T20358] perf_uprobe_init+0xf5/0x140 [ 252.511412][T20358] perf_uprobe_event_init+0xde/0x140 [ 252.516745][T20358] perf_try_init_event+0x21a/0x400 [ 252.521848][T20358] perf_event_alloc+0xa60/0x1790 [ 252.526799][T20358] __se_sys_perf_event_open+0x5db/0x2810 [ 252.532428][T20358] __x64_sys_perf_event_open+0x63/0x70 [ 252.537868][T20358] do_syscall_64+0x44/0xa0 [ 252.542276][T20358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.548164][T20358] RIP: 0033:0x7ffa67e11a79 [ 252.552566][T20358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.572195][T20358] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 252.580591][T20358] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 252.588556][T20358] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 252.596516][T20358] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.604485][T20358] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 252.612608][T20358] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:17 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f00000010c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="000425bd7000fedbdf250500000014000600766c616e3100000000000000000000002900070073797374656d5f753a6f626a6563745f723a68616c645f6d61635f657865635f743a73300000000014000300fc000000000000000000000000000000080005007f000001140c0200fc01000000000000000000000000000114000300ff02000000000009000000000100000114000300fc0100"/166], 0xac}, 0x1, 0x0, 0x0, 0x4084}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000280), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f0000000ac0)=""/225, 0xe1}], 0x7, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000d0c268f6e113e61232391540afb463d7a59a1a82992dc4aeeb537238d122773119af602f83f564a3e8d03a0d2a68599c993add46154713940d5dd23a7ce6d83f780572e6c2bcfee8b92f18380ed7523a2bcb5ae2463e3a88cdd44fd36b32423daaacf03f987316000000000022c2e8cbc05502f3d635f434b410060a00000000000000000000c6148b00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x158}, 0x40010100) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x7f, 0x2, 0xff, 0x0, 0x1, 0x78100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x0, 0x8}, 0x140, 0x7d5, 0x3, 0x1, 0x7, 0x4, 0x1, 0x0, 0xffff0000, 0x0, 0xe89}, 0xffffffffffffffff, 0xe, r8, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) perf_event_open(&(0x7f0000000f40)={0x4, 0x80, 0x3, 0x6, 0x5, 0x1, 0x0, 0x7ff, 0x48000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x186e, 0x6}, 0x8100, 0xc1, 0x4, 0x8, 0x4, 0x9, 0x20, 0x0, 0x9f8, 0x0, 0x2}, r9, 0x9, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000dc0)={0x3, 0x80, 0x6e, 0x0, 0x9, 0x1, 0x0, 0x6, 0x83840, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000006c0), 0x1}, 0x8000, 0x7f, 0x7fff, 0x8, 0xdce, 0x8, 0x200, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000003c0)='*@{\xea-\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB="ba3a64d67e100dbb45f000bb4a3c30023bf2ec6a3fb194d1370717ab6a24f0230f023e70f9e8bd88dc44e0171149499def3cc28750abd9cb3fb22eb63919993df287892e2e540322f6f47037f25e2b77f549136ca887de01e3f97502ec491a1d0a4a5234afe78dbf8078656563fab26c1b0fa327ccd11bb0deafe1fc1c73bbbee1fed1f1de05b4bbd1fe0604914b4fa1f1bebe5c175203159f3d6794e14209d2bf"], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 252.717370][T20354] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.725401][T20354] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d 16:19:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffdfe, 0x100}]) [ 252.762596][T20354] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.770623][T20354] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffdff, 0x100}]) [ 252.818991][T20354] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.827001][T20354] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 252.878258][T20354] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.886272][T20354] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 67) 16:19:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffe00, 0x100}]) 16:19:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x11, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 253.067483][T20380] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.075515][T20380] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 253.087059][T20380] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.095043][T20380] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x10000000000, 0x100}]) [ 253.196390][T20380] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.204409][T20380] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 253.228241][T20380] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.236244][T20380] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 253.342236][T20399] FAULT_INJECTION: forcing a failure. [ 253.342236][T20399] name failslab, interval 1, probability 0, space 0, times 0 [ 253.354853][T20399] CPU: 1 PID: 20399 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 253.363603][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.373816][T20399] Call Trace: [ 253.377087][T20399] dump_stack_lvl+0xd6/0x122 [ 253.381664][T20399] dump_stack+0x11/0x1b [ 253.385820][T20399] should_fail+0x23c/0x250 [ 253.390225][T20399] __should_failslab+0x81/0x90 [ 253.394966][T20399] ? register_for_each_vma+0x372/0x890 [ 253.400442][T20399] should_failslab+0x5/0x20 [ 253.404925][T20399] kmem_cache_alloc_trace+0x52/0x320 [ 253.410227][T20399] ? register_for_each_vma+0x372/0x890 [ 253.415673][T20399] ? vma_interval_tree_iter_next+0x24c/0x280 [ 253.421669][T20399] register_for_each_vma+0x372/0x890 [ 253.427033][T20399] __uprobe_register+0x404/0x8b0 [ 253.432045][T20399] uprobe_register_refctr+0x29/0x40 [ 253.437226][T20399] probe_event_enable+0x2be/0x7d0 16:19:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x7ffffffff000, 0x100}]) [ 253.442269][T20399] ? __uprobe_trace_func+0x440/0x440 [ 253.447621][T20399] trace_uprobe_register+0x88/0x410 [ 253.452945][T20399] perf_trace_event_init+0x34e/0x790 [ 253.458223][T20399] perf_uprobe_init+0xf5/0x140 [ 253.463017][T20399] perf_uprobe_event_init+0xde/0x140 [ 253.468348][T20399] perf_try_init_event+0x21a/0x400 [ 253.473610][T20399] perf_event_alloc+0xa60/0x1790 [ 253.478611][T20399] __se_sys_perf_event_open+0x5db/0x2810 [ 253.484303][T20399] __x64_sys_perf_event_open+0x63/0x70 [ 253.489755][T20399] do_syscall_64+0x44/0xa0 [ 253.494215][T20399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.500166][T20399] RIP: 0033:0x7ffa67e11a79 [ 253.504631][T20399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 253.524219][T20399] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 253.532632][T20399] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 253.540595][T20399] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 253.548676][T20399] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 253.556637][T20399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 253.564612][T20399] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 68) [ 253.691236][T20401] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.699355][T20401] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 253.711403][T20401] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.719440][T20401] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r3 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r3, 0xbf, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f00000002c0)="a1ac476a62d980c1fcee2563c7e094c245661cf5c37296a2c7", 0x19) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r6, 0x60b, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20040084) 16:19:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x1000000000000, 0x100}]) [ 253.828630][T20401] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.836629][T20401] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 253.848057][T20401] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.856070][T20401] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 253.868501][T20425] FAULT_INJECTION: forcing a failure. [ 253.868501][T20425] name failslab, interval 1, probability 0, space 0, times 0 [ 253.881317][T20425] CPU: 1 PID: 20425 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 253.890165][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.900199][T20425] Call Trace: [ 253.903476][T20425] dump_stack_lvl+0xd6/0x122 [ 253.908049][T20425] dump_stack+0x11/0x1b [ 253.912964][T20425] should_fail+0x23c/0x250 [ 253.917362][T20425] __should_failslab+0x81/0x90 [ 253.922120][T20425] ? register_for_each_vma+0x372/0x890 [ 253.927561][T20425] should_failslab+0x5/0x20 [ 253.932137][T20425] kmem_cache_alloc_trace+0x52/0x320 [ 253.937403][T20425] ? register_for_each_vma+0x372/0x890 [ 253.942843][T20425] ? vma_interval_tree_iter_next+0x24c/0x280 [ 253.948807][T20425] register_for_each_vma+0x372/0x890 [ 253.954130][T20425] __uprobe_register+0x404/0x8b0 [ 253.959048][T20425] uprobe_register_refctr+0x29/0x40 [ 253.964288][T20425] probe_event_enable+0x2be/0x7d0 [ 253.969303][T20425] ? __uprobe_trace_func+0x440/0x440 [ 253.974569][T20425] trace_uprobe_register+0x88/0x410 [ 253.979747][T20425] perf_trace_event_init+0x34e/0x790 [ 253.985064][T20425] perf_uprobe_init+0xf5/0x140 [ 253.989811][T20425] perf_uprobe_event_init+0xde/0x140 [ 253.995157][T20425] perf_try_init_event+0x21a/0x400 [ 254.000323][T20425] perf_event_alloc+0xa60/0x1790 [ 254.005258][T20425] __se_sys_perf_event_open+0x5db/0x2810 [ 254.010987][T20425] __x64_sys_perf_event_open+0x63/0x70 [ 254.016513][T20425] do_syscall_64+0x44/0xa0 [ 254.020974][T20425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.026861][T20425] RIP: 0033:0x7ffa67e11a79 [ 254.031251][T20425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.050994][T20425] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 254.059396][T20425] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 254.067358][T20425] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 254.075310][T20425] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.083356][T20425] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 254.091393][T20425] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf0ff7f00000000, 0x100}]) [ 254.119995][T20422] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.128190][T20422] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 254.151833][T20422] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.159848][T20422] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf0ffffff7f0000, 0x100}]) [ 254.255021][T20422] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.263074][T20422] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 254.279487][T20422] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.287505][T20422] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x13, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 69) [ 254.453479][T20460] FAULT_INJECTION: forcing a failure. [ 254.453479][T20460] name failslab, interval 1, probability 0, space 0, times 0 [ 254.466569][T20460] CPU: 1 PID: 20460 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 254.475333][T20460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.485379][T20460] Call Trace: [ 254.488698][T20460] dump_stack_lvl+0xd6/0x122 [ 254.493287][T20460] dump_stack+0x11/0x1b [ 254.497428][T20460] should_fail+0x23c/0x250 [ 254.501839][T20460] __should_failslab+0x81/0x90 [ 254.506612][T20460] ? register_for_each_vma+0x372/0x890 [ 254.512061][T20460] should_failslab+0x5/0x20 [ 254.516623][T20460] kmem_cache_alloc_trace+0x52/0x320 [ 254.521893][T20460] ? register_for_each_vma+0x372/0x890 [ 254.527336][T20460] ? vma_interval_tree_iter_next+0x24c/0x280 [ 254.533299][T20460] register_for_each_vma+0x372/0x890 [ 254.538575][T20460] __uprobe_register+0x404/0x8b0 [ 254.543496][T20460] uprobe_register_refctr+0x29/0x40 [ 254.548717][T20460] probe_event_enable+0x2be/0x7d0 [ 254.553722][T20460] ? __uprobe_trace_func+0x440/0x440 [ 254.559035][T20460] trace_uprobe_register+0x88/0x410 [ 254.564228][T20460] perf_trace_event_init+0x34e/0x790 [ 254.569545][T20460] perf_uprobe_init+0xf5/0x140 [ 254.574296][T20460] perf_uprobe_event_init+0xde/0x140 [ 254.579569][T20460] perf_try_init_event+0x21a/0x400 [ 254.584694][T20460] perf_event_alloc+0xa60/0x1790 [ 254.589671][T20460] __se_sys_perf_event_open+0x5db/0x2810 [ 254.595313][T20460] __x64_sys_perf_event_open+0x63/0x70 [ 254.600769][T20460] do_syscall_64+0x44/0xa0 [ 254.605193][T20460] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.611072][T20460] RIP: 0033:0x7ffa67e11a79 [ 254.615466][T20460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.635064][T20460] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 254.643720][T20460] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 254.651686][T20460] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 254.659643][T20460] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.667591][T20460] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 254.675541][T20460] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 254.693856][T20456] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:19:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 70) 16:19:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5881339f0000000000", @ANYRES16=r3, @ANYBLOB="020028bd7000fbdbdf25050000001400060065727370616e30000000000000000000140002000000000000000000000000000000000008000500ffffffff14000600"/82], 0x58}}, 0x48001) r4 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r4, 0xbf, 0x0, 0x0, 0x0, 0x0) fallocate(r4, 0x8, 0x0, 0x84) r5 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r5, 0xbf, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="02000006988f54c99383d0b85707f6cf95a8d398f7c1a2420443571df1aba3eea002357aa6c15515632e1f85928a86e4cad6248424ba818f2ebc8d1c1c0a08de0af13adf3593edc813d98945d3f087379fc9440ef4554482be41db95142ddc6012f8f0fd2addbe", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r6, 0x0, 0x1b, &(0x7f0000000ac0)=""/4096, &(0x7f00000000c0)=0x1000) 16:19:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfeffffffffffff, 0x100}]) [ 254.701985][T20456] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 254.719717][T20456] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.727709][T20456] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x100000000000000, 0x100}]) [ 254.764729][T20456] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.772766][T20456] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 254.784610][T20456] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.792630][T20456] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 254.908930][T20477] FAULT_INJECTION: forcing a failure. [ 254.908930][T20477] name failslab, interval 1, probability 0, space 0, times 0 [ 254.921594][T20477] CPU: 1 PID: 20477 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 254.930352][T20477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.940420][T20477] Call Trace: [ 254.943695][T20477] dump_stack_lvl+0xd6/0x122 [ 254.948285][T20477] dump_stack+0x11/0x1b [ 254.952461][T20477] should_fail+0x23c/0x250 [ 254.956871][T20477] __should_failslab+0x81/0x90 [ 254.961721][T20477] ? register_for_each_vma+0x372/0x890 [ 254.967159][T20477] should_failslab+0x5/0x20 [ 254.971642][T20477] kmem_cache_alloc_trace+0x52/0x320 [ 254.976914][T20477] ? register_for_each_vma+0x372/0x890 [ 254.982427][T20477] ? vma_interval_tree_iter_next+0x263/0x280 [ 254.988552][T20477] register_for_each_vma+0x372/0x890 [ 254.993915][T20477] __uprobe_register+0x404/0x8b0 [ 254.998894][T20477] uprobe_register_refctr+0x29/0x40 [ 255.004106][T20477] probe_event_enable+0x2be/0x7d0 [ 255.009171][T20477] ? __uprobe_trace_func+0x440/0x440 [ 255.014452][T20477] trace_uprobe_register+0x88/0x410 [ 255.019650][T20477] perf_trace_event_init+0x34e/0x790 [ 255.025007][T20477] perf_uprobe_init+0xf5/0x140 [ 255.029845][T20477] perf_uprobe_event_init+0xde/0x140 [ 255.035196][T20477] perf_try_init_event+0x21a/0x400 [ 255.040290][T20477] perf_event_alloc+0xa60/0x1790 [ 255.045209][T20477] __se_sys_perf_event_open+0x5db/0x2810 [ 255.050875][T20477] __x64_sys_perf_event_open+0x63/0x70 [ 255.056332][T20477] do_syscall_64+0x44/0xa0 [ 255.060744][T20477] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.066704][T20477] RIP: 0033:0x7ffa67e11a79 [ 255.071116][T20477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.090806][T20477] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 255.099261][T20477] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:20 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x200000000000000, 0x100}]) 16:19:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x21, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 255.107218][T20477] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 255.115171][T20477] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.123125][T20477] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 255.131080][T20477] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 71) 16:19:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:20 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x300000000000000, 0x100}]) [ 255.267733][T20470] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.275756][T20470] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 255.289069][T20470] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.297050][T20470] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:20 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x400000000000000, 0x100}]) [ 255.409235][T20470] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.417317][T20470] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 255.428825][T20470] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.436934][T20470] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 255.533886][T20500] FAULT_INJECTION: forcing a failure. [ 255.533886][T20500] name failslab, interval 1, probability 0, space 0, times 0 [ 255.546508][T20500] CPU: 0 PID: 20500 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 255.555271][T20500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.565320][T20500] Call Trace: [ 255.568669][T20500] dump_stack_lvl+0xd6/0x122 [ 255.573263][T20500] dump_stack+0x11/0x1b [ 255.577426][T20500] should_fail+0x23c/0x250 [ 255.581902][T20500] __should_failslab+0x81/0x90 [ 255.586647][T20500] ? register_for_each_vma+0x372/0x890 [ 255.592084][T20500] should_failslab+0x5/0x20 [ 255.596565][T20500] kmem_cache_alloc_trace+0x52/0x320 [ 255.601888][T20500] ? register_for_each_vma+0x372/0x890 [ 255.607332][T20500] ? vma_interval_tree_iter_next+0x24c/0x280 [ 255.613292][T20500] register_for_each_vma+0x372/0x890 [ 255.618643][T20500] __uprobe_register+0x404/0x8b0 [ 255.623665][T20500] uprobe_register_refctr+0x29/0x40 [ 255.628886][T20500] probe_event_enable+0x2be/0x7d0 [ 255.633967][T20500] ? __uprobe_trace_func+0x440/0x440 [ 255.639255][T20500] trace_uprobe_register+0x88/0x410 [ 255.644457][T20500] perf_trace_event_init+0x34e/0x790 [ 255.649724][T20500] perf_uprobe_init+0xf5/0x140 [ 255.654522][T20500] perf_uprobe_event_init+0xde/0x140 [ 255.660035][T20500] perf_try_init_event+0x21a/0x400 [ 255.665237][T20500] perf_event_alloc+0xa60/0x1790 [ 255.670213][T20500] __se_sys_perf_event_open+0x5db/0x2810 [ 255.675949][T20500] __x64_sys_perf_event_open+0x63/0x70 [ 255.681411][T20500] do_syscall_64+0x44/0xa0 [ 255.685825][T20500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.691848][T20500] RIP: 0033:0x7ffa67e11a79 [ 255.696288][T20500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.715935][T20500] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 255.724331][T20500] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:20 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf00000000000000, 0x100}]) [ 255.732323][T20500] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 255.740272][T20500] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.748223][T20500] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 255.756206][T20500] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x22, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:21 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x1000000000000000, 0x100}]) 16:19:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r2, r3) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x120000, &(0x7f0000000280)={'trans=virtio,', {[{@posixacl}, {@uname={'uname', 0x3d, '\x00'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@aname={'aname', 0x3d, '*{'}}, {@aname={'aname', 0x3d, '\x00'}}, {@posixacl}], [{@appraise_type}]}}) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(r0, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @local, 0x8}, 0x1c) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 255.897094][T20498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.905199][T20498] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 255.917124][T20498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.925209][T20498] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:21 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xeffdffffffffffff, 0x100}]) [ 256.052975][T20498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.061077][T20498] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 256.073363][T20498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.081381][T20498] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 72) 16:19:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x27, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:21 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xf200000000000000, 0x100}]) [ 256.234238][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.242280][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 256.254263][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.262290][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:21 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfcfdffffffffffff, 0x100}]) [ 256.351772][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.359890][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 256.371463][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.379567][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 256.481999][T20551] FAULT_INJECTION: forcing a failure. [ 256.481999][T20551] name failslab, interval 1, probability 0, space 0, times 0 [ 256.494633][T20551] CPU: 0 PID: 20551 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 256.503397][T20551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.513454][T20551] Call Trace: [ 256.516721][T20551] dump_stack_lvl+0xd6/0x122 [ 256.521306][T20551] dump_stack+0x11/0x1b [ 256.525564][T20551] should_fail+0x23c/0x250 [ 256.529973][T20551] __should_failslab+0x81/0x90 [ 256.534719][T20551] ? register_for_each_vma+0x372/0x890 [ 256.540214][T20551] should_failslab+0x5/0x20 [ 256.544747][T20551] kmem_cache_alloc_trace+0x52/0x320 [ 256.550709][T20551] ? register_for_each_vma+0x372/0x890 [ 256.556150][T20551] ? vma_interval_tree_iter_next+0x263/0x280 [ 256.562155][T20551] register_for_each_vma+0x372/0x890 [ 256.567425][T20551] __uprobe_register+0x404/0x8b0 [ 256.572345][T20551] uprobe_register_refctr+0x29/0x40 [ 256.577528][T20551] probe_event_enable+0x2be/0x7d0 [ 256.582537][T20551] ? __uprobe_trace_func+0x440/0x440 [ 256.587803][T20551] trace_uprobe_register+0x88/0x410 [ 256.592981][T20551] perf_trace_event_init+0x34e/0x790 [ 256.598948][T20551] perf_uprobe_init+0xf5/0x140 [ 256.603699][T20551] perf_uprobe_event_init+0xde/0x140 [ 256.609039][T20551] perf_try_init_event+0x21a/0x400 [ 256.614200][T20551] perf_event_alloc+0xa60/0x1790 [ 256.619122][T20551] __se_sys_perf_event_open+0x5db/0x2810 [ 256.624763][T20551] __x64_sys_perf_event_open+0x63/0x70 [ 256.630216][T20551] do_syscall_64+0x44/0xa0 [ 256.634627][T20551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.640508][T20551] RIP: 0033:0x7ffa67e11a79 [ 256.644906][T20551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.664581][T20551] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 256.672974][T20551] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:21 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfefdffffffffffff, 0x100}]) 16:19:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 256.681023][T20551] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 256.688978][T20551] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.696939][T20551] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 256.704900][T20551] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 256.841921][T20548] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.849967][T20548] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 256.864700][T20548] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.872760][T20548] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 256.890278][T20548] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.898385][T20548] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 256.909960][T20548] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.918009][T20548] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 73) 16:19:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x32, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:22 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffdffffffffffff, 0x100}]) [ 256.937833][T20559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.945867][T20559] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 256.968728][T20559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.976730][T20559] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 16:19:22 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffffffffffdef, 0x100}]) [ 257.007690][T20559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.015711][T20559] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000f5db099d [ 257.036061][T20559] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.044555][T20559] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009e7a7718 [ 257.146231][T20582] FAULT_INJECTION: forcing a failure. [ 257.146231][T20582] name failslab, interval 1, probability 0, space 0, times 0 [ 257.158875][T20582] CPU: 0 PID: 20582 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 257.167670][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.177750][T20582] Call Trace: [ 257.181017][T20582] dump_stack_lvl+0xd6/0x122 [ 257.185598][T20582] dump_stack+0x11/0x1b [ 257.189732][T20582] should_fail+0x23c/0x250 [ 257.194194][T20582] __should_failslab+0x81/0x90 [ 257.198939][T20582] ? register_for_each_vma+0x372/0x890 [ 257.204382][T20582] should_failslab+0x5/0x20 [ 257.208869][T20582] kmem_cache_alloc_trace+0x52/0x320 [ 257.214174][T20582] ? register_for_each_vma+0x372/0x890 [ 257.219652][T20582] ? vma_interval_tree_iter_next+0x263/0x280 [ 257.225631][T20582] register_for_each_vma+0x372/0x890 [ 257.230901][T20582] __uprobe_register+0x404/0x8b0 [ 257.235837][T20582] uprobe_register_refctr+0x29/0x40 [ 257.241017][T20582] probe_event_enable+0x2be/0x7d0 [ 257.246086][T20582] ? __uprobe_trace_func+0x440/0x440 [ 257.251435][T20582] trace_uprobe_register+0x88/0x410 [ 257.256613][T20582] perf_trace_event_init+0x34e/0x790 [ 257.261896][T20582] perf_uprobe_init+0xf5/0x140 [ 257.266648][T20582] perf_uprobe_event_init+0xde/0x140 [ 257.271920][T20582] perf_try_init_event+0x21a/0x400 [ 257.277032][T20582] perf_event_alloc+0xa60/0x1790 [ 257.281954][T20582] __se_sys_perf_event_open+0x5db/0x2810 [ 257.287568][T20582] ? rb_erase+0x4cb/0x750 [ 257.291876][T20582] ? finish_task_switch+0xce/0x290 [ 257.296971][T20582] __x64_sys_perf_event_open+0x63/0x70 [ 257.302551][T20582] do_syscall_64+0x44/0xa0 [ 257.306988][T20582] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.312868][T20582] RIP: 0033:0x7ffa67e11a79 [ 257.317294][T20582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 257.336953][T20582] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 16:19:22 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffffffffffdfc, 0x100}]) 16:19:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 257.345346][T20582] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 257.353296][T20582] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 257.361252][T20582] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.369290][T20582] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 257.377675][T20582] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x48, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 74) 16:19:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) open(&(0x7f0000000340)='./file0\x00', 0x2, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)="c85903f514ba592b7e4f456da98e4b1319e3156962946120aa6b51bedb6dc8b030f9f502be1b2d4ace83ba2f2bd09e5ccefb8969b1502c3e1463e25f9e55a1382a8825615827a0076f8481f9441c34cd3d12c2d26a01f4b47128908c8c2b7e309c6eb8ae092b956fc6b18c9d24487337fa1a683be299bde445aff049ebd0f82b4acd095178fb6963b6078dea287faf72534d217b872165d76c9b8f73903e98c1582289ccc6819a0a2277efba53570fb92e02073bb4fb40f489877e80f932ce", 0xbf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="593528c57c6febfdfe3063de021b3ccdd5367b9403ea"], 0x20}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffc0, 0x4d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="bef8f412", @ANYRES16=r5, @ANYBLOB="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"], 0x168}}, 0x40) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) 16:19:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4c, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 257.557065][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.578872][T20609] FAULT_INJECTION: forcing a failure. [ 257.578872][T20609] name failslab, interval 1, probability 0, space 0, times 0 [ 257.591532][T20609] CPU: 1 PID: 20609 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 16:19:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x21, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 257.600303][T20609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.610353][T20609] Call Trace: [ 257.613623][T20609] dump_stack_lvl+0xd6/0x122 [ 257.618214][T20609] dump_stack+0x11/0x1b [ 257.622406][T20609] should_fail+0x23c/0x250 [ 257.626797][T20609] __should_failslab+0x81/0x90 [ 257.631539][T20609] ? register_for_each_vma+0x372/0x890 [ 257.636975][T20609] should_failslab+0x5/0x20 [ 257.641458][T20609] kmem_cache_alloc_trace+0x52/0x320 [ 257.646743][T20609] ? vma_interval_tree_iter_next+0x263/0x280 [ 257.652707][T20609] register_for_each_vma+0x372/0x890 [ 257.657977][T20609] __uprobe_register+0x404/0x8b0 [ 257.662938][T20609] uprobe_register_refctr+0x29/0x40 [ 257.668115][T20609] probe_event_enable+0x2be/0x7d0 [ 257.673135][T20609] ? __uprobe_trace_func+0x440/0x440 [ 257.678398][T20609] trace_uprobe_register+0x88/0x410 [ 257.683587][T20609] perf_trace_event_init+0x34e/0x790 [ 257.688894][T20609] perf_uprobe_init+0xf5/0x140 [ 257.693645][T20609] perf_uprobe_event_init+0xde/0x140 [ 257.698970][T20609] perf_try_init_event+0x21a/0x400 [ 257.704073][T20609] perf_event_alloc+0xa60/0x1790 [ 257.709099][T20609] __se_sys_perf_event_open+0x5db/0x2810 [ 257.714768][T20609] __x64_sys_perf_event_open+0x63/0x70 [ 257.720239][T20609] do_syscall_64+0x44/0xa0 [ 257.724751][T20609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.730712][T20609] RIP: 0033:0x7ffa67e11a79 [ 257.735143][T20609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:19:23 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffffffffffdfe, 0x100}]) [ 257.754753][T20609] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 257.763184][T20609] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 257.771135][T20609] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 257.779353][T20609] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.787303][T20609] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 257.795252][T20609] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 75) 16:19:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 257.876658][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.916045][T20634] FAULT_INJECTION: forcing a failure. [ 257.916045][T20634] name failslab, interval 1, probability 0, space 0, times 0 [ 257.928678][T20634] CPU: 0 PID: 20634 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 257.937476][T20634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.947518][T20634] Call Trace: [ 257.950776][T20634] dump_stack_lvl+0xd6/0x122 [ 257.955360][T20634] dump_stack+0x11/0x1b [ 257.959502][T20634] should_fail+0x23c/0x250 [ 257.963893][T20634] __should_failslab+0x81/0x90 [ 257.968731][T20634] ? register_for_each_vma+0x372/0x890 [ 257.974172][T20634] should_failslab+0x5/0x20 [ 257.978662][T20634] kmem_cache_alloc_trace+0x52/0x320 [ 257.983931][T20634] ? register_for_each_vma+0x372/0x890 [ 257.989384][T20634] ? vma_interval_tree_iter_next+0x263/0x280 [ 257.995361][T20634] register_for_each_vma+0x372/0x890 [ 258.000632][T20634] __uprobe_register+0x404/0x8b0 [ 258.005546][T20634] uprobe_register_refctr+0x29/0x40 [ 258.010719][T20634] probe_event_enable+0x2be/0x7d0 [ 258.015721][T20634] ? __uprobe_trace_func+0x440/0x440 [ 258.020984][T20634] trace_uprobe_register+0x88/0x410 [ 258.026173][T20634] perf_trace_event_init+0x34e/0x790 [ 258.031526][T20634] perf_uprobe_init+0xf5/0x140 [ 258.036292][T20634] perf_uprobe_event_init+0xde/0x140 [ 258.041562][T20634] perf_try_init_event+0x21a/0x400 [ 258.046713][T20634] perf_event_alloc+0xa60/0x1790 [ 258.051628][T20634] __se_sys_perf_event_open+0x5db/0x2810 [ 258.057243][T20634] __x64_sys_perf_event_open+0x63/0x70 [ 258.062735][T20634] do_syscall_64+0x44/0xa0 [ 258.067193][T20634] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.073076][T20634] RIP: 0033:0x7ffa67e11a79 [ 258.077469][T20634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.097062][T20634] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 258.105456][T20634] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 258.113410][T20634] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:19:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6c, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = clone3(&(0x7f0000000880)={0x4800, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000280), {0x7}, &(0x7f0000000340)=""/99, 0x63, &(0x7f0000000800)=""/83, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) r3 = pidfd_getfd(r0, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0xf9, 0x80, 0x80, 0x0, 0x4, 0x8040, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0x4}, 0x1, 0x694a, 0x1000, 0x0, 0x0, 0x3ff, 0xfe83, 0x0, 0x8, 0x0, 0x6}, r2, 0x10, r3, 0x9) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 258.121354][T20634] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.129353][T20634] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 258.137299][T20634] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x22, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:23 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffffffffffdff, 0x100}]) 16:19:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 76) 16:19:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x74, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x27, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xa, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 258.293867][T20662] FAULT_INJECTION: forcing a failure. [ 258.293867][T20662] name failslab, interval 1, probability 0, space 0, times 0 [ 258.306562][T20662] CPU: 0 PID: 20662 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 258.315322][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.325351][T20662] Call Trace: [ 258.328607][T20662] dump_stack_lvl+0xd6/0x122 [ 258.333176][T20662] dump_stack+0x11/0x1b [ 258.337321][T20662] should_fail+0x23c/0x250 [ 258.341728][T20662] __should_failslab+0x81/0x90 [ 258.346548][T20662] ? register_for_each_vma+0x372/0x890 [ 258.351993][T20662] should_failslab+0x5/0x20 [ 258.356565][T20662] kmem_cache_alloc_trace+0x52/0x320 [ 258.361825][T20662] ? register_for_each_vma+0x372/0x890 [ 258.367356][T20662] ? vma_interval_tree_iter_next+0x263/0x280 [ 258.373328][T20662] register_for_each_vma+0x372/0x890 [ 258.378594][T20662] __uprobe_register+0x404/0x8b0 [ 258.383588][T20662] uprobe_register_refctr+0x29/0x40 [ 258.388770][T20662] probe_event_enable+0x2be/0x7d0 [ 258.393771][T20662] ? __uprobe_trace_func+0x440/0x440 [ 258.399207][T20662] trace_uprobe_register+0x88/0x410 [ 258.404384][T20662] perf_trace_event_init+0x34e/0x790 [ 258.409701][T20662] perf_uprobe_init+0xf5/0x140 [ 258.414495][T20662] perf_uprobe_event_init+0xde/0x140 [ 258.419758][T20662] perf_try_init_event+0x21a/0x400 [ 258.424877][T20662] perf_event_alloc+0xa60/0x1790 [ 258.429796][T20662] __se_sys_perf_event_open+0x5db/0x2810 [ 258.435431][T20662] __x64_sys_perf_event_open+0x63/0x70 [ 258.440889][T20662] do_syscall_64+0x44/0xa0 [ 258.445304][T20662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.451257][T20662] RIP: 0033:0x7ffa67e11a79 [ 258.455655][T20662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.475250][T20662] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 258.483667][T20662] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:23 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xfffffffffffffe00, 0x100}]) 16:19:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x32, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0xfffffe98, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2007, @fd=r3, 0x1, 0x101, 0x2, 0x4, 0x1, {0x1}}, 0x6) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="594fa084cf05f8b947c57c6f9ab4bda8fadc093f28861fd17b1a9385e42f3eaf9517439c6d850b9fb2263f873140"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24044042}, 0x4000041) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:23 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x100}]) [ 258.491625][T20662] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 258.499590][T20662] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.507560][T20662] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 258.515721][T20662] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 77) 16:19:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x48, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 258.737789][T20693] FAULT_INJECTION: forcing a failure. [ 258.737789][T20693] name failslab, interval 1, probability 0, space 0, times 0 [ 258.750549][T20693] CPU: 0 PID: 20693 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 258.759307][T20693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.769349][T20693] Call Trace: [ 258.772731][T20693] dump_stack_lvl+0xd6/0x122 [ 258.777312][T20693] dump_stack+0x11/0x1b [ 258.781492][T20693] should_fail+0x23c/0x250 [ 258.785889][T20693] __should_failslab+0x81/0x90 [ 258.790638][T20693] ? register_for_each_vma+0x372/0x890 [ 258.796080][T20693] should_failslab+0x5/0x20 [ 258.800567][T20693] kmem_cache_alloc_trace+0x52/0x320 [ 258.805873][T20693] ? register_for_each_vma+0x372/0x890 [ 258.811394][T20693] ? vma_interval_tree_iter_next+0x263/0x280 [ 258.817373][T20693] register_for_each_vma+0x372/0x890 [ 258.822643][T20693] __uprobe_register+0x404/0x8b0 [ 258.827576][T20693] uprobe_register_refctr+0x29/0x40 [ 258.832756][T20693] probe_event_enable+0x2be/0x7d0 [ 258.837767][T20693] ? __uprobe_trace_func+0x440/0x440 [ 258.843034][T20693] trace_uprobe_register+0x88/0x410 [ 258.848214][T20693] perf_trace_event_init+0x34e/0x790 [ 258.853484][T20693] perf_uprobe_init+0xf5/0x140 [ 258.858233][T20693] perf_uprobe_event_init+0xde/0x140 [ 258.863630][T20693] perf_try_init_event+0x21a/0x400 [ 258.868770][T20693] perf_event_alloc+0xa60/0x1790 [ 258.873700][T20693] __se_sys_perf_event_open+0x5db/0x2810 [ 258.879348][T20693] __x64_sys_perf_event_open+0x63/0x70 [ 258.884797][T20693] do_syscall_64+0x44/0xa0 [ 258.889241][T20693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.895141][T20693] RIP: 0033:0x7ffa67e11a79 [ 258.899541][T20693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.919132][T20693] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 258.927538][T20693] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xc, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x3}]) 16:19:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7e, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 258.935492][T20693] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 258.943444][T20693] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.951395][T20693] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 258.959346][T20693] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 78) 16:19:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x102}]) 16:19:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd8, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 259.168465][T20716] FAULT_INJECTION: forcing a failure. [ 259.168465][T20716] name failslab, interval 1, probability 0, space 0, times 0 [ 259.181104][T20716] CPU: 0 PID: 20716 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 259.189866][T20716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.199908][T20716] Call Trace: [ 259.203165][T20716] dump_stack_lvl+0xd6/0x122 [ 259.207736][T20716] dump_stack+0x11/0x1b [ 259.211914][T20716] should_fail+0x23c/0x250 [ 259.216305][T20716] __should_failslab+0x81/0x90 [ 259.221046][T20716] ? register_for_each_vma+0x372/0x890 [ 259.226547][T20716] should_failslab+0x5/0x20 [ 259.231027][T20716] kmem_cache_alloc_trace+0x52/0x320 [ 259.236341][T20716] ? register_for_each_vma+0x372/0x890 [ 259.241877][T20716] ? vma_interval_tree_iter_next+0x24c/0x280 [ 259.247837][T20716] register_for_each_vma+0x372/0x890 [ 259.253115][T20716] __uprobe_register+0x404/0x8b0 [ 259.258027][T20716] uprobe_register_refctr+0x29/0x40 [ 259.263206][T20716] probe_event_enable+0x2be/0x7d0 [ 259.268341][T20716] ? __uprobe_trace_func+0x440/0x440 [ 259.273652][T20716] trace_uprobe_register+0x88/0x410 [ 259.278828][T20716] perf_trace_event_init+0x34e/0x790 [ 259.284145][T20716] perf_uprobe_init+0xf5/0x140 [ 259.289029][T20716] perf_uprobe_event_init+0xde/0x140 [ 259.294298][T20716] perf_try_init_event+0x21a/0x400 [ 259.299464][T20716] perf_event_alloc+0xa60/0x1790 [ 259.304381][T20716] __se_sys_perf_event_open+0x5db/0x2810 [ 259.310011][T20716] __x64_sys_perf_event_open+0x63/0x70 [ 259.315453][T20716] do_syscall_64+0x44/0xa0 [ 259.319891][T20716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.325767][T20716] RIP: 0033:0x7ffa67e11a79 [ 259.330166][T20716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.349798][T20716] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 259.358248][T20716] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 259.366271][T20716] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 259.374266][T20716] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.382216][T20716] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 259.390304][T20716] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x200) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'cpu'}, {0x2b, 'pids'}, {0x6, 'io'}, {0x2d, 'cpu'}]}, 0x14) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000005000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x103}]) 16:19:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x68, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 79) 16:19:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x104}]) 16:19:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x10f}]) [ 259.694931][T20743] FAULT_INJECTION: forcing a failure. [ 259.694931][T20743] name failslab, interval 1, probability 0, space 0, times 0 [ 259.707559][T20743] CPU: 1 PID: 20743 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 259.716325][T20743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.716340][T20743] Call Trace: [ 259.716347][T20743] dump_stack_lvl+0xd6/0x122 [ 259.716370][T20743] dump_stack+0x11/0x1b [ 259.716386][T20743] should_fail+0x23c/0x250 [ 259.716404][T20743] __should_failslab+0x81/0x90 [ 259.716422][T20743] ? register_for_each_vma+0x372/0x890 [ 259.716513][T20743] should_failslab+0x5/0x20 [ 259.716531][T20743] kmem_cache_alloc_trace+0x52/0x320 [ 259.716551][T20743] ? register_for_each_vma+0x372/0x890 [ 259.716570][T20743] ? vma_interval_tree_iter_next+0x24c/0x280 [ 259.716594][T20743] register_for_each_vma+0x372/0x890 [ 259.716615][T20743] __uprobe_register+0x404/0x8b0 [ 259.716654][T20743] uprobe_register_refctr+0x29/0x40 [ 259.716670][T20743] probe_event_enable+0x2be/0x7d0 [ 259.716687][T20743] ? __uprobe_trace_func+0x440/0x440 [ 259.716702][T20743] trace_uprobe_register+0x88/0x410 [ 259.716791][T20743] perf_trace_event_init+0x34e/0x790 [ 259.716861][T20743] perf_uprobe_init+0xf5/0x140 [ 259.815422][T20743] perf_uprobe_event_init+0xde/0x140 [ 259.821433][T20743] perf_try_init_event+0x21a/0x400 [ 259.826660][T20743] perf_event_alloc+0xa60/0x1790 [ 259.831642][T20743] __se_sys_perf_event_open+0x5db/0x2810 [ 259.837306][T20743] __x64_sys_perf_event_open+0x63/0x70 [ 259.842754][T20743] do_syscall_64+0x44/0xa0 [ 259.847248][T20743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.853135][T20743] RIP: 0033:0x7ffa67e11a79 [ 259.857532][T20743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.877245][T20743] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 259.885713][T20743] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 259.893667][T20743] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 259.901619][T20743] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.909571][T20743] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 259.917532][T20743] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6c, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 80) 16:19:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xf, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x74, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:25 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x110}]) 16:19:25 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x1, 0x40, 0x21, 0x0, 0x7, 0x81b0d, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x4c8}, 0x11000, 0x1ff, 0xd, 0x9, 0x0, 0x40, 0xff43, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f00000002c0)='./file0\x00', 0x600800, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x218, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ca3edd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeb47d41}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4de3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d46e558}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb7e49d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x560b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aa93b10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36ba71c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c54769e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xde3cdf63525ccc53}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3842}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ebd2403}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f832de3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b668af0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a2ceff1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5526af2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1882}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x425}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f294ff0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e12cf33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15468176}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d3b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc164}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f04a25b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20afd253}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb055}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232ddc99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ab70867}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4315f09f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42500cf7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x672dba65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29ac8a7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11757bc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f40dee5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43fe7758}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a81b4fc}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) chown(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) r6 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)={0x108, 0x3d, 0x200, 0x70bd28, 0x25dfdbff, "", [@generic="44fca8cb1687f79c5c4956e1a2505c477ecea617fc68e2311505fbb07883dd844a1186bc25c01e13ae8334bb5d31f9812602ce14e22fa2b21cba0c1d25bbefdfdbabc7ec3556b1162a0e47caf8cba6ec275fe9fde83c30c7dfe71a72b9e30bd787a943510347cafa2152235a12d118f50ca7420bcf4382346e8427f82c8f6d0f497c26d8c8139292bf8543f23063878675a5d45a687cd18811721681d51738a747fddb97eb18ded766ddbbde0a0c32", @generic="5e7b7d81f117204a82037ebf5101d122cb8aec94966f3a4564ac738d50727b1db3e4bf5a2e5a079408edb55702ed5b24d8a85eceb35820fc1c1f455a0cb6973447156481a7aa9476"]}, 0x108}, {&(0x7f0000000c00)={0x24b4, 0x3d, 0x400, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x1d, 0x0, 0x0, @fd=r5}, @generic="446a411031045181a6c302c9605c934e7426a0a994cb990197bc676fee25f0f86821564f027ec965dec1e3bf8fc96feedecc8bbf26106c441311ba0fd58be59c15f0d204fb36609aa0868661685970f40c6615de9041d08b33272cee070106125461f0e509f9554e2657fb6e3cc3548285a5d33cd860436a7be2f37d4a7d0d7277af7cb2a62532e4150741e2413cc50b34c87cb7e060b02c3914d2867acd957e", @generic="ec074e243a644fab6d5116ffc226ef1b616a2f3b94e7a8547ce1e046e921fd9100ab7703d096da3ecea699ac13eb66986d4610899ad778a400d412d2721b8177945c37365146ae274de882b9d2e18651c025da1d35515b3f39ee1a8963e382ea2a024a0e33f278a405caa0aecbfa6984b7a40c7b96f629e2c1bc80978c613804e3b3020ea01f5291087e55eddfb62f450594fe26947c65b97f1cd9", @nested={0x231d, 0x4, 0x0, 0x1, [@generic="eb24db86961499cd564f0cbd1dc061a59a10ec8d2c523d5f9604920fe56e62c9df0ac10d23371051cfc0b5c041847c0911984a0b1e7a504cc063374a4053b713bb5d31977f2b5bba543a506983e75cd23b039360201e06e072c488a3bcfc7d9607f5fef58eaa22afaa368474fc0377e13d2dd759f1f38977a1d60f0496fd6379dc8d54f6c7be39363947a9529bbbaeb9163483558b1df8995b718f6f0518596abb201f94d5f0dad378657e03c03ddb4497872de665466ed6c43c438d02f4ac899a41832276193b85d7862623b792c12bfc26c6bccd1154753b4fd85490fb77d08d5532e30105c6c07b541f9fa298b9ec88a9d2", @typed={0xc, 0x45, 0x0, 0x0, @u64=0x9}, @generic="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", @typed={0xc, 0x54, 0x0, 0x0, @u64=0x4}, @generic="ef6292", @typed={0x6f, 0x5e, 0x0, 0x0, @binary="6b9fa86ebe6e0def8a6f548ae6f90f4ca85e914b254b8f80c16a34a3eb0567124ddad02e428919d6aa5cd9409e2d673f795e42ee7b7cc95d2bf56ff40b89546bcf1c23a6b224791c96e87c7db0f7a1b85267c8da7cbf2903cdcc50ad06d792b75a7e49b4cfdad2f10e99de"}, @generic="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", @generic="c1891370df08820b7d5576f0f42c1825c2ae24f1d08d1dfe6495e54a03e6e3fca3e4a1cc84e51fab6966648cfecca4f30af3336448fc1dee43e9cf2b5165ea36f4d606415aab3d1a2e36517afb09a06bfd2fa9b32ec672b07050ce181dfe7d15b4a497b84f40b4ff5b60f199592de1a78c146cdb17f65666280256859741b03b928687f6b4eb58a1930a6e261a0a5db86229fede0fe61f55083fbc226a7b17fbfa38f9563bc3bf0afc61c82fbff34d00a40c7713450946c532e3e3478781d20a7ac4f87ad7c1df682b3ca050a3d7cfb377eabdf624aaac4ffc14a3405021e02496bb7350d1b3806a0e35d535", @typed={0xa, 0x94, 0x0, 0x0, @str='\x91*(&/\x00'}, @generic="332c9d2e2334129316e95c7cab26bdcf053672cbdbf45c3c3231ff7103b85c5032878a17a18e248257fc07acc5510a02577f44ea007f4fc5d00b95b7653d4a9f46ad15452288e10c9a63e5a6d6f57156be213f35e8393eab155ddd06a1745a769b0f3d0c68645f46369626fab2c0e42cb66519c70457a0bfb3e7f87c5cbfedfced4608f710707617c9dddead5a488037e4efd3b168c8c6ea5c0c36198fd7964ccd1065"]}, @generic="b8863cedd60d3406484eeb1e86e388d39159cb9da56bb15b9f3daabb6312c792b788b0f23b91f0a759f380b6232cc35d674022d8719c75bea60735f7443e1785"]}, 0x24b4}, {&(0x7f00000030c0)={0xa4, 0x24, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="9c0528260a1b7158aa2db98384fa0ec13b03907b7f0ea9958e15598e270ce0c6918ff0f88c27f082a8e48816028c4694ed7a08e3a058c0a98db3aa43427661215a117983d63661d0c186242b0bed89efdad59a030e97196c46310575573c10ab4227098857561a80b109914d840ab09dfab2f97e64d837a9997d1001748f039db623cdc1a924f0c34c4952bcad9146ff2e58a9"]}, 0xa4}, {&(0x7f0000003180)={0x2f8, 0x21, 0x800, 0x70bd2a, 0x25dfdbff, "", [@nested={0x198, 0x38, 0x0, 0x1, [@generic="d6e8de62df56a644e226345ea7bcb35a9d25afcbfc994a52d057d28f9c4281cc9c24628c54889870f79f5e71bb034813e6a86dedc03ef947f55e4a135cf6bafd357213588a8a88e95004e92ded84f01ff133eca8fff5be935c16a0526330d3f723657c53b15ba3a46409dee70d0f911b159bc71dcb77fafc9e77afaa114d41d61e250be976da86babdce6c0cdc6316551ceb3d7751270a62fffee5ba36be21d6e56c85fc57d213ce8b37222661b2896e0f", @typed={0x8, 0x3e, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x45, 0x0, 0x0, @u32=0x3}, @generic="6ed234c847f42ba605", @generic="a70d754981c01dda50d438b47dc49105f0bb3d7e1082f0947d9df09b5bdf7b476e1adbe2ba81a3d48f31aa52449e50db43ed4cd937a4d5be8590394a80f74b347d392582c09a56879f8e03b5b43a23a056a9d539acf17929440199239543fbf5454195e17dd0f7e5ca4c56010fb8c33be52727fabf4c40b417a8a8a225283aef9c1887ddccc47e268d3b37463dedf0271a4aac99002326249571594368b8156e5fe2336cca5f9fdc9fd0a2ef2ec268e665922913fa1194cf18a9", @typed={0x8, 0x47, 0x0, 0x0, @u32}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0xfffffffb}]}, @typed={0x4, 0x52}, @generic="4164e52f3edd3fd62767f6aacda0384dc3c0948c2d9add215237ce0040085cb2d31353a64ef7175aeafb1760bd061be81f706d470f5e07fb451b98a394da44537e18b459f2bbf533d82ce8cd1f064875cc0739952bf451660485bf", @generic="e0376992d2ac61eed5cde24c6a53ec4290cfa1c751f3cafa3881f4e4aab9bab0fcb0b760f7bfe493ac4196a0343564ee0f697fc74e5b596609f30fb4cd576d22c184426d6f5a6c690700f229609ad39275889711ea0a0bbc266f387b19c73129f70eb555407d8027555ad9d542b648b84df0d0b5961340e79685ef0adcddc912594001f679ae7f1a981229f1488d3cae5c1f0be0b23b899ec0de8aa8ebc6bcd8b5688a6884353431b6dc183595ff1bc97d2b16fe33523c1a40552b435233211fc742b0c2bf79476458fff737a454fd98db6f805f4b75ccb0a9a1c8fa185d4124dfa5c6", @typed={0xb, 0x6d, 0x0, 0x0, @str='(^/-$}\x00'}]}, 0x2f8}, {&(0x7f0000003480)={0x11ac, 0x2e, 0x300, 0x70bd26, 0x25dfdbfc, "", [@nested={0x109, 0x3f, 0x0, 0x1, [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x4}, @generic="573fbd68ef2ff4c3f0a68ff5df14d5f633cb316d4a96fb84e66a70d29faf0b2c1f3c504b36be4e770d20a630d6526f0bf43218f8b05660809cae2d97ac02050302f65988d34672fe40254e6137857b2cd67669b779b35eb0c25550e4ec547ed246154abdd54f95d30d56adbb25c3c184b0e3be40112e63d0ea59fe1d646597a38d61a6bdef76e1859626e20920a15578fe5718dd01dc261a1f3cf1c799269caeb2a9b14c4d27297a074552f62fb8fb4bf39d649129ea2b9528", @typed={0x8, 0x60, 0x0, 0x0, @u32=0xffff28a7}, @typed={0x26, 0x79, 0x0, 0x0, @binary="b97cbfed326666f2f82555bf7db7d4d1b78814e1dd8976827feb356e36bb40685b0e"}, @typed={0x8, 0x87, 0x0, 0x0, @fd}]}, @typed={0x4, 0x5f}, @nested={0x1008, 0x3b, 0x0, 0x1, [@typed={0x1004, 0x95, 0x0, 0x0, @binary="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"}]}, @typed={0xc, 0x62, 0x0, 0x0, @u64=0x5a72de57}, @nested={0x75, 0x6, 0x0, 0x1, [@typed={0x37, 0x5, 0x0, 0x0, @binary="a1742cc568bebec7ca1d5b87b2bc4023111adba75c641dc3823d2596625afa2916aac698304a873143a72e949aeaf622775f7c"}, @generic="2600a7a9e8dde7c5367c5039dce4cad0b9c4502a00bbc60a92b78065d3b105713f26087b0306becfc07f3718bb91a74eef000df4edc789876a"]}]}, 0x11ac}, {&(0x7f0000004640)={0x20c, 0x21, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0x196, 0x8f, 0x0, 0x1, [@generic="ee348b3dbfe3f7db124d", @generic="57cd520aceddd1c51155e8ac317e2b0b054e59d910699c7f86cf1b65b3de85305f7d33dbb742f7d362fa67cd777752687a24977198619d158b732b74cce1392949a9d192c5052c2efe0ae68dc35bd96695dd0da4721ea7f997489ae2c0b164dc564522e737c9", @generic="730c333c8b22914f59e13884bd3c78e87d5a33a2e83a4e2aae60c85982180ae9b8a67bedde67944588", @generic="0ae1a7c4703da711900b6013758ef43b7fdaec27a4dce0cf7c4f7d214ffd48228bbe5e1022955fe9c6e0b8672348d7b67be424ff976a501e62906d4998a46d155c7161fb4de2ca4dc9555b36b28ef444c5ab37739f7e1561f05075ae7b879f49ba86d2e91f666621f321cf53de13425cadfd05c6d418a418879f14ae2cf14bfe8c8f417886c4c1d5121541c4b6fac14f4cbadad47ffbd0a11f2031b8191148aa00b1e41f82b00008297ab3b54b05272f1fcc750189b16b77a44046a0e65d2247a455331f9bf6b18fb8a9657ea4bf8b21857740d36c637058e46ad9eda1cc895f2a15e4706be9f259605fb7f3acc3a59646d7751370dff40657"]}, @generic="5f4f12c5fd2d3da360a38dc43d07c1aa852121d98f1c380f25d79645cf91483d28ddf307b28f629aa79999ab05d30c3e6b33a59a056d86b3236b03054fca7d4201cd26aabc2fe1f281620abe02e4839b908dbceeb9bef57f0a87ef5603df9a6bdc09fb"]}, 0x20c}, {&(0x7f0000004880)={0x12d4, 0x1b, 0x100, 0x70bd26, 0x25dfdbfc, "", [@generic, @nested={0x38, 0x2, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x14, 0x0, 0x0, @fd}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x6, 0x2b, 0x0, 0x0, @str='{\x00'}, @typed={0x8, 0x4e, 0x0, 0x0, @uid=0xee01}]}, @generic="0ba0cd7018b62064627de42f7a4b7b9e2abe0d17d3933b31eb0e9ebcd7c9c7df5c5b5561bf0ddcb93a0b2a00ba3ae2c5b4c2d2e2bea496c3a2282904b77bb7227766121a2fa12e09a354fe1df41f97285d34d38e0dd8249aed89e76d6dd2f0178bd67559290be0b807bdf587d7d977951a399d1ce83b37671e309d2f2234c2bed62afa7f7fd09fdec0b6a452f0bdf187c3a8f10af987c3843f3871085f76bf25fe5b2419d489d2a2963ce6fe1b12b0af33afecebf5c6ff8913707b841a267790abb259b5d517d0865aaf77d87fe92deeaca5c4bae3843e64fa493ad584c2d5eebd134d59e1a86e9e2bc630c1fc62c6437fd4f2b7ca4732630887ef6e1bf6a67471528db6150d31b2bc972c89524d0114f5d46aecb1ff7f85ead395a98b7297ae3a2cded22eb1be1081cc93d5c364097d249bf683ccbf9e213b10e6ea3497b7c59c14cc9982547673c0b7b90bef07a2133bd1640d590a7a3150e7ecc98976f824c6842d6ae83e7955fabeee0e7491659c5cd6a8a3d1c8cae09c912415fcb6c9549123a2f7d8674a7455c772547132b3391013e417d4ec05c326469f3cc3e0ffaf36c826c0880bf4f1c81a0591f18c60b2dc65f8ee138022eb22e425613925f5a6a4e3dd6d87d3a76e1b2caee3b1c12bd0b12e1e447fa1f70a2c2537dde7961072c67cd1338ddddf4ecb429df09dfc677188c0a4f0fee79c651448b274ad86ed044ec5ffb6c36433e8cb2dac1a4965be8c02b6356814df2809026ebb4ad5c489127b6a4f3d1526447ee8c99cae1b4a88e77621bdf25e4a292af414344df7bd1ba2e2526329cc642476514fd3df7490524764075f25c6f6391996bf36e4210282aeb309427cc4796eddaf35176715051422e2d39c00fe246f6464987ac6d83c71c2f8b13767b0ad8204ecc792de4fdf7b7d176406609c6e2aed9d7fcb2ad029542b9f222d13b902f5a9182464935c5b085de409563398ada5e27ab0887263e1a3eb8852bf21f9f4382aa9176cfc3bb0ba0fe041ffc5a9bf3ac69eb85cd117738002faacad9e151e7fb8c1d078289bd91dd41bb786cbbb51621e863c4bfd665d2166ccadda787ad08933a1fb47cd865d3620b43ab1f47dc3ee475947b2c641c1f66a3e5c6c0a7fe46582b87a473a3302b236b73f2533c2548b3fc8229e2071f03845fbc47a9e9bcce954f024d630b0bd019b76d40a2e70fec72dfe40bdefd51a05c39af1be7532f8a8f5b0c3498932231678821ef5f37c44fe58b145dea2d9acb44e4ec1a5cab1bc34f130f76e3e2be1ba955dee3504274fcebd14d3b2c67507a51791e3fd88b512e1eaa4578bba31733d8ffc0430861d3334469104eded0a5480cee211743f721202a0a169befc04c97e00c130f590eac3d5d5bbcd2d69b204054c338239d82cf433908d110cce03cbad9015dec3828a1be1a5fe600d3c089a88539c41780fd6af432a398bce3c89c60ffdccc49bedf89dbcab18c65d80f27c04da0492a839c825310973072b63876c92a7995da0ebac77ef91a8f0572ed0447479b28872b311a1a3568265123c1dd961c0069fb478853732fe9da39983b79dc24f60758bcd92a3e6935aaa5b075594a6077acf5ad2545b01ab646c0d1e4dbc3591e3d25c0b1ac1c2e6224df3faec61942a6f0bb40415dbe62905654466fc46849ce7c11701684cc51f0de8b32657c84e091ff109c47eee2b78aada3bacbcb421f1993e80f4008b11e37ca86c03f31e7762a17e127263e27766391c2f9739758b76b1f998a53d6cc8c19c4dac7d482e811cb039e3d54656e1d10f593bddf857f64cb243f27c8580c4fac962f4699710f86c5df37510bc7b92bddbc1fe311e2db2984f8be595e231c766c384c39831ac8be41b045852f803ebd0c1d0d942d7086f8d5347fbb5092b30b0622018f307ee188f3139532e0574c02a93cd6279993e3f2e6de0172e490f6bd3fae47020e0edbe778a126a099080ea3fda0c709cc94bfee563e6dadab7badeba25aba64120fff2edd108061e60a5008b09c06e64ea25a78feeeaaa4fd0fe30d74edb95f524fde1fb71f1ef87003079c460cad889405c8be9fbdd663cbc27e4dc3cf3636dd0d22ca40f8f32fc39ffe4c2295b4a45afa76cc6244748c42e98d4a75ea85b5a78f30ae964e7fdc0f40c2add954e142284ee451300aec299e8284185289a136d5135e7f351e3ca10b0b9c755ffb750febe17dfda7ed132e822bf1c332699be02fb9c2d73c8441ccf59b7068334f0ed759c36f9be6755dc84462c9379e1ce9edc0e8499856c17c986d0ebd02e11705d218e9041b5d1a9482add489ff9b56109eb40a83b0bf209ce10cb06ba839a5764629ce5c8c309334b332ec28a5e470570f8095bf2984204d28652a64c86aa7dd977859579a57544bc17bf03fc82f01cfd8b3d4ce5ae2ea363308703fccd7ae75f4c92e64d4271fdbf822be7c3d46ebcd22d1de76405b855afbb97bed348484a12b02906640f766b9b4cbefce6060f1c5537a743d1dcd1d84b5ea015c2d90da30e57a1fd90f2aa7be8660cba2c37c648746cead3f765050972418714a1eb606347d02172268132d1d7ca9cc29d43fd6bbb431d357a8159914395ca9a2655505630f7788613df6c61ea5a3c2179a2d1e06e35a41e53aaf84b2a23db28fda3d21dac973405d14cc85e944e0695e59a9106d9f43186fd9fa846ba05a570067abab4932819f2408b96d89eb041936c7d075df0960f28c9e3c7618543361a934b2f2048470179e846df3eb9dbb28257afa7c370e1659e24aadec972c28b7f2d8f4f529696c97d7b528e45d1ac3ff2d6f7b2eb073f3a515ed854dc06500215279ee1df599c781ccdc7ec932f67767578f8f4ef8b33b01bf336187c89fbf1be87efc77e81405c4fd3c0c67c281c5cd0ed10b5a298335583f802e39903e997867e8d029ed1b5c976bcf2426c452f686cf0dedfc3d117a34d16361064ce11ca8184c69e48b06aeb89fb9fc8a256722e9e4184fdabb0a9eb826f77c66a21df6666fe0ef0e603f223ea325358bae4134c1dae253ee58afdcc1bf8222f936f4508cdeae452e205980c11617c71da2eddc4c1a42d1379b78fc5466609d0b2a8f7674717a06ef4d38dcc09e63139a4e6cc6fc9937519cdfd56cb9afe545da8c48ac783b0691f04e4fe72a754f65427f4500b2a79e3f1593ed63f05886d5c5c559db2f975714e174ea4250214670ca00f34138d746ea351d862f76bb410ccbe1a810ec2fc2376cd6711c82ac0697bd59449ffed41770bc409bf8d42fd016329acaf1f599e68f715ef2a19a3c569ffa31b2ed05b5aed4ad4ccef9d2d7b7548f227dded3bb53928f274fb1d085c8da2acb08c0db08894e3f38058aebd65cd781400f688f0784f280b0252a67c751af3afd12e99939dc5576552eec61b4f375dcbfb6c27ed080e8985b6ab6ff39c2af3065d0b07a510e84f0d2622cd8792ba0eb570f977eb17f48344712f15d825d36bba0de418e0e9e881dd2a78ac20b3df7c63c7c2f56d6d6692c665315c9de6c7b3f2f7cb1fad1d4270f9f915856f47fc3c0e2d9ac011a43498858257c97f901e46fa0d97301f777dcf3ead5dccefe6dbc991e4454fa6d8a38fec99d9dbdfb1934e869acc046571a3e6e7afccafedd49f33ed9720c92d7d91c9a15bd33c08958c4735d6eba1f6505053ff54297c787b1a4505f31e44f7f93ccda370440c6af5670978599d526634a928b3252517113e750a2ba7a24b94a04f126433dda8817d2b49a0305cc675002ef1c03f58d59f7e58b4f79868b418219f63291a1c64830e91a3a2fa64d817cbe8d15b9d59f98629ad8ec217288c8c6cae30007811acc9275b5c64289f97b970149f34ee5cb28550ec3e8c99744a17efdace85d04e62de740c99607714dfa393ab4c1cc3314d54bf155a223700990a91702475910627e6ecb8d76bebf25c653fb8ad4f14479e308961d1eef174de48bfe672a3cc7a67b3201f80af5e530fe31cf2718d436474da330f3c1310614fb4ce90a7cae5217403e328c7273ea24a43116fea07789ad8c475f1e99dd288e517679f67a1a37a2b90df88bb553a06abb9669d8da60568b0c17ac12623fa67604e89ab778fc5ee4fd87aba4a9e75a7908d0bab141c24c01fa683e155f54f4fb665ddf843e0eb58fb9b097efbd02568c30f066b743019b849e0f85684cb80e8a08e50f4da4656bb615514cb593f4f25d814214fa2b15927ce11969f6f5c5ab08f10089820a28695d9279f449b0fba3207e7dc46402173966ab116d1d795cd9e02e8b11c3002c73325e97fb31cb82d3fa5a9f2e17d4a985e8db9a0fa6e486462dd7359c3fd1e7f2a20c404f41bded30a54c83041c39d1b789a1a929d83487153c17c49aeb8d6be9f025ba1e70234df300e6df73f8aa1e06a91bb002037f4c1ffb4ef77a9f56d5f421a69e3bcebf63403a85c9537de15ff7069116ca81a9f9a89ad845cf6892680e1476155c947c0effecdd1f26f92265c74db2377ada7e1be3fd40d1ed54d70ef61c9b432ca162be1f14606b531f7980a67d177b64f83efef6a5fbd4bd40ee57425223f4801cedd69d24ed43879a8006b6dcca0cb1ef701e19bb9786433b4d68e02a94c3ddf409fb92125903ef9585ffa5c345880543b33786f4b2987406f5b3dd8197843ba74d2f9a6b6ced08378ce5bc1b94f970e7534e0bacb115823e2f65b4427b514fc5e96e7fc1c4d87f9f7eb7b32b070b04281b4531d2244a3ffc693ec7d570e262cfefa5c50f7542795cb7b080bf3c170fb093934783aa0dd1bb41ba707507d74d88c22e61d64f3a724f909b4fd72a3cab5aadd6a124b674307daaa8f66238931ec5878f2a96cc977ce83cd8bf4bb7b7192dc58223eb39c629a397848d078bf4c3fd4e6840982e57d09ddc60ac8253ea51b67e9b4c609aea61dd39b1235f7b0ff71a4bdf59b23c65ad97a144d24e79d016e24c945c921d77faf086deeba46465a15bd6da87228c5247950d897ada82c2e93d58fef6f86038882da43b8f6f83dd67c24619b3c7e5194fb70891387b812cfc785f4ba993407c2abc9ce89bd16ce1af04dc559b8cfec61fbd43c1d2a56be548359b946770d24e5a89b7e8054594fb44b523ce75a05ff8ae321392a562e6de0fec1cb985e39a870589793af2df573748db43779da222c825b664d7a34c1f177e221f185c390beb6a5427934d4c17698e6947ee7bfdb7ca806a5f5222981b527b434c9ccb426b5772fa5426c8d4f5d6273c6bc8830acaadbec3b19e2d98b79e0833395e638f8f98e72763d08243209fb91119cec5c229ee58432d20b7b47635919103e47a21f80bce4fffaf595863c66492e14c7139a144612d664e2cadebdf402f67cac7c80469b72e93f396062daf744beb68135763c34801be5ab896dae8c5a6b13cbfbf9ca25a3e0e5ae36c600139ea5eec7096e6c806aac353c565de1ec12f12f601331342015d1623ec677949e942312db6b084b1e3e0796dbb5addaa4f07fcaab33848d3ffa3e5e1243ce722854d0bb714f2c0a2ce826f354697c8c81eac294f145ec7b506551c292a1ead5edd67808eda11118b7ae90bdabe44571b9199ae79c09037e7b6f9a91737a38a8e225ae901ac3084d4b42abad4e604fc0596cadfa34c3d189c59008e221335700516ca619b34a2ba01d887c2b3a7bc8fcbea66e7caf38c466a6c02ec2392e057950b19203e8b36b964e40b18beeb111f8ce43a150537aaffdae808a1f355a892bfdc8e87a852f62fd4f7938f4085f9f07f65f2d737c8ae41c5a071b2d1aa33a6d2030", @nested={0x27a, 0x6b, 0x0, 0x1, [@generic="d3c86f3867eab8e8e0ee1c89d79af0829db7f7aa809aa189d955ae71ed6810e6f3a52773241382626f90cef882c08cd3f38356c8511a0729851888b08352e6ca569e39ae488b54a656efb6f5b7afb06a37977dceaf1c4dc1324d7624a16fece8603e59478fbe80fac5f6c0522d11110534f9bd0b568242a1098e629ca9c5e7a2e818a6a3f047ee546c79a5e3d55adb43d3c34d0da3", @generic="f053e52cdd8217e225cfe2725d2bdd4408e2455f01b0fffbf261e35224563c8ab46d6d4cb651ebbbe42c2d847b5eb70e69e3c6f3821e183e0e746b94ff2a81ff248aeae99a6df8c0d369af305eceb37e28f16fc6b641", @typed={0xcd, 0x11, 0x0, 0x0, @binary="a08dda27a962079386306f5f03ce6f7e39a29aacc391d239119d4d2efd52fd2700f3edba64ce4091baed262c1621cf74c797b127c872c1eaeae62aa548f89ea311e9dd2d49f98280dec1db1c1600f3abbb69963288adcb6a3cde9d0f94c313d659622bf3060e4c24aa6ffe102f7ff553624887e035647dfed37d596a2a8846e335c8e908c6bedfd8ea3cd601b5c62e4888a0fbbb09b614106c775e62971b5e9862cbd629c357d054ae10a2956bc1d140b837ee6f2401b813a55a7b4bccef5cc091d61cac95456dac7b"}, @typed={0x4, 0x4f}, @generic="b42571a1d17e67fe67e0188f33ed5289ea1bf2cbbba14fc125d5554a1219de1f4679ecf1f0bde13727400785aa539405d08acf4f1356aedc5745193457136f64bdbfeb2e895dd489a07db2eea0a8ad50aba78a122214eefa3d5aa2", @generic="781e1fee008cb987677ab8491859a6302c15f9aa2d17f8d08467a2b0f7228a0bd855974b7298a1c85b753aa2a3c955f875b12f6031fc1b76a3c644ce2a099f9909d5a4c450b097c7280aa471f890dbcc991915dcb78975dcb94235a1"]}, @typed={0x8, 0x38, 0x0, 0x0, @uid}, @typed={0x8, 0x14, 0x0, 0x0, @uid=0xee00}]}, 0x12d4}, {&(0x7f0000005b80)={0x19c, 0x39, 0x2, 0x70bd27, 0x25dfdbff, "", [@generic="3c096a422403ea8e390197fbcc7c14522b4c74843f658adda66f16f874e39ec61ea3983380285622c164a57b9cf1ecb0431a7a645dc1340702721c40213bcf3adb09dbc178ec657c522ab1410946c76b48f4357cdc70a0cd373a9442f70be3e857a96eb9711b2a84698ee5a441a5f4ef0113c0453229465af6b6868454c05bd818eed2205725587a578e39e51f5b329a9586d7f0d2c6a8f59db1234deb61e9b6348031f45720c1697d9d3c757879098813f58b", @generic="d46b3c2afebae4d36f5e3921f77c576ede1fe69b21903e7b8f50c9912c5bc498761bc46476b90d8196e11f99bd216e5c6f4cf17190eb3adc3fd582138fb39f43858c761be6fcc7aeed91a229688ed2b64391b1570bc841d67ce0c4a981c9a4bc1f48269bcd6e2590d4e5a6d95c1719ab265c1d5fa6046898e456d9c4fd147e4d17b3e2523bc22732365a5cbe98b424bd013d38de7af96aed5f32012ce6f0589aacc131789c521288aec5d3290dc5b0cac329b8522d60fe985ba40e2dfeb8cb8bfa49cae37ad795ff872b17421a46ef86be4c2a8085d598aa6f"]}, 0x19c}], 0x8, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r6}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20040810}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:25 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x1f2}]) [ 260.124586][T20771] FAULT_INJECTION: forcing a failure. [ 260.124586][T20771] name failslab, interval 1, probability 0, space 0, times 0 [ 260.137244][T20771] CPU: 1 PID: 20771 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 260.146008][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.156074][T20771] Call Trace: [ 260.159351][T20771] dump_stack_lvl+0xd6/0x122 [ 260.164059][T20771] dump_stack+0x11/0x1b [ 260.168194][T20771] should_fail+0x23c/0x250 [ 260.172641][T20771] __should_failslab+0x81/0x90 [ 260.177471][T20771] ? register_for_each_vma+0x372/0x890 [ 260.182997][T20771] should_failslab+0x5/0x20 [ 260.187511][T20771] kmem_cache_alloc_trace+0x52/0x320 [ 260.192779][T20771] ? register_for_each_vma+0x372/0x890 [ 260.198251][T20771] ? vma_interval_tree_iter_next+0x263/0x280 [ 260.204238][T20771] register_for_each_vma+0x372/0x890 [ 260.209513][T20771] __uprobe_register+0x404/0x8b0 [ 260.214598][T20771] uprobe_register_refctr+0x29/0x40 [ 260.219793][T20771] probe_event_enable+0x2be/0x7d0 [ 260.224802][T20771] ? __uprobe_trace_func+0x440/0x440 [ 260.230149][T20771] trace_uprobe_register+0x88/0x410 [ 260.235334][T20771] perf_trace_event_init+0x34e/0x790 [ 260.240612][T20771] perf_uprobe_init+0xf5/0x140 [ 260.245357][T20771] perf_uprobe_event_init+0xde/0x140 [ 260.250770][T20771] perf_try_init_event+0x21a/0x400 [ 260.255917][T20771] perf_event_alloc+0xa60/0x1790 [ 260.260961][T20771] __se_sys_perf_event_open+0x5db/0x2810 [ 260.266617][T20771] __x64_sys_perf_event_open+0x63/0x70 [ 260.272143][T20771] do_syscall_64+0x44/0xa0 [ 260.276564][T20771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.282442][T20771] RIP: 0033:0x7ffa67e11a79 [ 260.286835][T20771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.306431][T20771] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 260.314899][T20771] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 260.324174][T20771] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 260.332123][T20771] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.340072][T20771] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 260.348063][T20771] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7a, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 81) 16:19:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 260.478289][T20781] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x2 16:19:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:25 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x300}]) [ 260.531568][T20796] FAULT_INJECTION: forcing a failure. [ 260.531568][T20796] name failslab, interval 1, probability 0, space 0, times 0 [ 260.544222][T20796] CPU: 0 PID: 20796 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 260.552986][T20796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.563043][T20796] Call Trace: [ 260.566354][T20796] dump_stack_lvl+0xd6/0x122 [ 260.570982][T20796] dump_stack+0x11/0x1b [ 260.575207][T20796] should_fail+0x23c/0x250 [ 260.579616][T20796] __should_failslab+0x81/0x90 [ 260.584442][T20796] ? register_for_each_vma+0x372/0x890 [ 260.589882][T20796] should_failslab+0x5/0x20 [ 260.594461][T20796] kmem_cache_alloc_trace+0x52/0x320 [ 260.599907][T20796] ? register_for_each_vma+0x372/0x890 [ 260.605486][T20796] ? vma_interval_tree_iter_next+0x24c/0x280 [ 260.611607][T20796] register_for_each_vma+0x372/0x890 [ 260.616890][T20796] __uprobe_register+0x404/0x8b0 [ 260.621830][T20796] uprobe_register_refctr+0x29/0x40 [ 260.627023][T20796] probe_event_enable+0x2be/0x7d0 [ 260.632146][T20796] ? __uprobe_trace_func+0x440/0x440 [ 260.637411][T20796] trace_uprobe_register+0x88/0x410 [ 260.642680][T20796] perf_trace_event_init+0x34e/0x790 [ 260.647946][T20796] perf_uprobe_init+0xf5/0x140 [ 260.652764][T20796] perf_uprobe_event_init+0xde/0x140 [ 260.658043][T20796] perf_try_init_event+0x21a/0x400 [ 260.663184][T20796] perf_event_alloc+0xa60/0x1790 [ 260.668179][T20796] __se_sys_perf_event_open+0x5db/0x2810 [ 260.673883][T20796] __x64_sys_perf_event_open+0x63/0x70 [ 260.679362][T20796] do_syscall_64+0x44/0xa0 [ 260.683787][T20796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.689667][T20796] RIP: 0033:0x7ffa67e11a79 [ 260.694063][T20796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.713700][T20796] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 260.722097][T20796] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 260.730101][T20796] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 260.738195][T20796] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.746150][T20796] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 260.754614][T20796] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 82) 16:19:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x11, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 260.933287][T20815] FAULT_INJECTION: forcing a failure. [ 260.933287][T20815] name failslab, interval 1, probability 0, space 0, times 0 [ 260.945927][T20815] CPU: 0 PID: 20815 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 260.954665][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.964697][T20815] Call Trace: [ 260.968020][T20815] dump_stack_lvl+0xd6/0x122 [ 260.972600][T20815] dump_stack+0x11/0x1b [ 260.976790][T20815] should_fail+0x23c/0x250 [ 260.981195][T20815] __should_failslab+0x81/0x90 [ 260.985962][T20815] ? register_for_each_vma+0x372/0x890 [ 260.991510][T20815] should_failslab+0x5/0x20 [ 260.996010][T20815] kmem_cache_alloc_trace+0x52/0x320 [ 261.001273][T20815] ? register_for_each_vma+0x372/0x890 [ 261.006804][T20815] ? vma_interval_tree_iter_next+0x24c/0x280 [ 261.012856][T20815] register_for_each_vma+0x372/0x890 [ 261.018132][T20815] __uprobe_register+0x404/0x8b0 [ 261.023055][T20815] uprobe_register_refctr+0x29/0x40 [ 261.028239][T20815] probe_event_enable+0x2be/0x7d0 [ 261.033251][T20815] ? __uprobe_trace_func+0x440/0x440 [ 261.038539][T20815] trace_uprobe_register+0x88/0x410 [ 261.043719][T20815] perf_trace_event_init+0x34e/0x790 [ 261.049023][T20815] perf_uprobe_init+0xf5/0x140 [ 261.053769][T20815] perf_uprobe_event_init+0xde/0x140 [ 261.059043][T20815] perf_try_init_event+0x21a/0x400 [ 261.064142][T20815] perf_event_alloc+0xa60/0x1790 [ 261.069062][T20815] __se_sys_perf_event_open+0x5db/0x2810 [ 261.075711][T20815] __x64_sys_perf_event_open+0x63/0x70 [ 261.081235][T20815] do_syscall_64+0x44/0xa0 [ 261.085633][T20815] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.091580][T20815] RIP: 0033:0x7ffa67e11a79 [ 261.095982][T20815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.115607][T20815] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 261.124004][T20815] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x800, 0x160) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000ac0)={{0x0, 0xa25, 0x48, 0xffff, 0x0, 0x7, 0x81, 0x10000, 0x6, 0xfffff801, 0x1, 0x0, 0x25ff, 0x9, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000040)={{r3, 0x0, 0x8, 0x7, 0x6, 0x0, 0xeff, 0x80000001, 0x2, 0x5, 0x1, 0x20000000, 0x9, 0x9, 0x80000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x90041, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, r4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:26 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x500}]) [ 261.131977][T20815] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 261.139962][T20815] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.147933][T20815] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 261.156078][T20815] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 83) 16:19:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x700}]) 16:19:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x4000}]) [ 261.343429][T20840] FAULT_INJECTION: forcing a failure. [ 261.343429][T20840] name failslab, interval 1, probability 0, space 0, times 0 [ 261.356071][T20840] CPU: 0 PID: 20840 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 261.364973][T20840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.375166][T20840] Call Trace: [ 261.378424][T20840] dump_stack_lvl+0xd6/0x122 [ 261.383492][T20840] dump_stack+0x11/0x1b [ 261.387644][T20840] should_fail+0x23c/0x250 [ 261.392084][T20840] __should_failslab+0x81/0x90 [ 261.396916][T20840] ? register_for_each_vma+0x372/0x890 [ 261.402352][T20840] should_failslab+0x5/0x20 [ 261.406889][T20840] kmem_cache_alloc_trace+0x52/0x320 [ 261.412210][T20840] ? register_for_each_vma+0x372/0x890 [ 261.417664][T20840] ? vma_interval_tree_iter_next+0x24c/0x280 [ 261.423638][T20840] register_for_each_vma+0x372/0x890 [ 261.428907][T20840] __uprobe_register+0x404/0x8b0 [ 261.433931][T20840] uprobe_register_refctr+0x29/0x40 [ 261.439104][T20840] probe_event_enable+0x2be/0x7d0 [ 261.444111][T20840] ? __uprobe_trace_func+0x440/0x440 [ 261.449376][T20840] trace_uprobe_register+0x88/0x410 [ 261.454551][T20840] perf_trace_event_init+0x34e/0x790 [ 261.459860][T20840] perf_uprobe_init+0xf5/0x140 [ 261.464622][T20840] perf_uprobe_event_init+0xde/0x140 [ 261.469898][T20840] perf_try_init_event+0x21a/0x400 [ 261.475017][T20840] perf_event_alloc+0xa60/0x1790 [ 261.479936][T20840] __se_sys_perf_event_open+0x5db/0x2810 [ 261.485611][T20840] __x64_sys_perf_event_open+0x63/0x70 [ 261.491053][T20840] do_syscall_64+0x44/0xa0 [ 261.495557][T20840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.501526][T20840] RIP: 0033:0x7ffa67e11a79 [ 261.505926][T20840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.525691][T20840] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 261.534177][T20840] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 261.542127][T20840] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 261.550085][T20840] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.558057][T20840] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 261.566006][T20840] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 84) [ 261.684580][T20844] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x6 16:19:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0xd0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x20000000}) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd70a5e191180300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x21, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:26 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x7f00}]) 16:19:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:27 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0xff1f0000}]) [ 261.820021][T20874] FAULT_INJECTION: forcing a failure. [ 261.820021][T20874] name failslab, interval 1, probability 0, space 0, times 0 [ 261.832682][T20874] CPU: 0 PID: 20874 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 261.841443][T20874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.851584][T20874] Call Trace: [ 261.854861][T20874] dump_stack_lvl+0xd6/0x122 [ 261.859454][T20874] dump_stack+0x11/0x1b [ 261.863591][T20874] should_fail+0x23c/0x250 [ 261.867985][T20874] __should_failslab+0x81/0x90 [ 261.872728][T20874] ? register_for_each_vma+0x372/0x890 [ 261.878236][T20874] should_failslab+0x5/0x20 [ 261.882720][T20874] kmem_cache_alloc_trace+0x52/0x320 [ 261.888054][T20874] ? register_for_each_vma+0x372/0x890 [ 261.893512][T20874] ? vma_interval_tree_iter_next+0x263/0x280 [ 261.899730][T20874] register_for_each_vma+0x372/0x890 [ 261.904993][T20874] __uprobe_register+0x404/0x8b0 [ 261.909911][T20874] uprobe_register_refctr+0x29/0x40 [ 261.915109][T20874] probe_event_enable+0x2be/0x7d0 [ 261.920188][T20874] ? __uprobe_trace_func+0x440/0x440 [ 261.925489][T20874] trace_uprobe_register+0x88/0x410 [ 261.930694][T20874] perf_trace_event_init+0x34e/0x790 [ 261.936038][T20874] perf_uprobe_init+0xf5/0x140 [ 261.940794][T20874] perf_uprobe_event_init+0xde/0x140 [ 261.946255][T20874] perf_try_init_event+0x21a/0x400 [ 261.951385][T20874] perf_event_alloc+0xa60/0x1790 [ 261.956306][T20874] __se_sys_perf_event_open+0x5db/0x2810 [ 261.961936][T20874] __x64_sys_perf_event_open+0x63/0x70 [ 261.967400][T20874] do_syscall_64+0x44/0xa0 [ 261.971811][T20874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.977697][T20874] RIP: 0033:0x7ffa67e11a79 [ 261.982100][T20874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.001693][T20874] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 262.010108][T20874] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 262.018088][T20874] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 262.026039][T20874] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.034008][T20874] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 262.042037][T20874] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x22, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 85) [ 262.152637][T20882] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8 16:19:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 262.247580][T20896] FAULT_INJECTION: forcing a failure. [ 262.247580][T20896] name failslab, interval 1, probability 0, space 0, times 0 [ 262.260290][T20896] CPU: 1 PID: 20896 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 262.269076][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.279208][T20896] Call Trace: [ 262.282484][T20896] dump_stack_lvl+0xd6/0x122 [ 262.287093][T20896] dump_stack+0x11/0x1b [ 262.291230][T20896] should_fail+0x23c/0x250 [ 262.295644][T20896] __should_failslab+0x81/0x90 [ 262.300473][T20896] ? register_for_each_vma+0x372/0x890 [ 262.305909][T20896] should_failslab+0x5/0x20 [ 262.310411][T20896] kmem_cache_alloc_trace+0x52/0x320 [ 262.315670][T20896] ? register_for_each_vma+0x372/0x890 [ 262.321110][T20896] ? vma_interval_tree_iter_next+0x24c/0x280 [ 262.327109][T20896] register_for_each_vma+0x372/0x890 [ 262.332379][T20896] __uprobe_register+0x404/0x8b0 [ 262.337310][T20896] uprobe_register_refctr+0x29/0x40 [ 262.342564][T20896] probe_event_enable+0x2be/0x7d0 [ 262.347568][T20896] ? __uprobe_trace_func+0x440/0x440 [ 262.352940][T20896] trace_uprobe_register+0x88/0x410 [ 262.358266][T20896] perf_trace_event_init+0x34e/0x790 [ 262.363552][T20896] perf_uprobe_init+0xf5/0x140 [ 262.368349][T20896] perf_uprobe_event_init+0xde/0x140 [ 262.373613][T20896] perf_try_init_event+0x21a/0x400 [ 262.378767][T20896] perf_event_alloc+0xa60/0x1790 [ 262.383939][T20896] __se_sys_perf_event_open+0x5db/0x2810 [ 262.389563][T20896] __x64_sys_perf_event_open+0x63/0x70 [ 262.395097][T20896] do_syscall_64+0x44/0xa0 [ 262.399529][T20896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.405526][T20896] RIP: 0033:0x7ffa67e11a79 [ 262.409958][T20896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.429612][T20896] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 262.438017][T20896] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x27, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 86) 16:19:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x0, 0x0, 0x4}, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r7, 0xfffffe98, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r7, 0xfff, 0x1000, 0x5, 0x2, 0x1}, 0x3) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40008004}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x3a, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 262.445974][T20896] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 262.453922][T20896] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.461889][T20896] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 262.469835][T20896] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:27 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 16:19:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:27 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x2}]) [ 262.537123][T20911] FAULT_INJECTION: forcing a failure. [ 262.537123][T20911] name failslab, interval 1, probability 0, space 0, times 0 [ 262.549761][T20911] CPU: 1 PID: 20911 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 262.558566][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.568694][T20911] Call Trace: [ 262.571980][T20911] dump_stack_lvl+0xd6/0x122 [ 262.576604][T20911] dump_stack+0x11/0x1b [ 262.580755][T20911] should_fail+0x23c/0x250 [ 262.585180][T20911] __should_failslab+0x81/0x90 [ 262.589922][T20911] ? register_for_each_vma+0x372/0x890 [ 262.595359][T20911] should_failslab+0x5/0x20 [ 262.599838][T20911] kmem_cache_alloc_trace+0x52/0x320 [ 262.605097][T20911] ? register_for_each_vma+0x372/0x890 [ 262.610594][T20911] ? vma_interval_tree_iter_next+0x24c/0x280 [ 262.616575][T20911] register_for_each_vma+0x372/0x890 [ 262.621862][T20911] __uprobe_register+0x404/0x8b0 [ 262.626863][T20911] uprobe_register_refctr+0x29/0x40 [ 262.632038][T20911] probe_event_enable+0x2be/0x7d0 [ 262.637063][T20911] ? __uprobe_trace_func+0x440/0x440 [ 262.642340][T20911] trace_uprobe_register+0x88/0x410 [ 262.647532][T20911] perf_trace_event_init+0x34e/0x790 [ 262.652833][T20911] perf_uprobe_init+0xf5/0x140 [ 262.657657][T20911] perf_uprobe_event_init+0xde/0x140 [ 262.662974][T20911] perf_try_init_event+0x21a/0x400 [ 262.668106][T20911] perf_event_alloc+0xa60/0x1790 [ 262.673054][T20911] __se_sys_perf_event_open+0x5db/0x2810 [ 262.678765][T20911] __x64_sys_perf_event_open+0x63/0x70 [ 262.684354][T20911] do_syscall_64+0x44/0xa0 [ 262.688768][T20911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.694650][T20911] RIP: 0033:0x7ffa67e11a79 [ 262.699041][T20911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.718637][T20911] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 262.727129][T20911] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 16:19:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 262.735097][T20911] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 262.743054][T20911] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.751037][T20911] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 262.758986][T20911] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x32, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 262.865097][T20919] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xa 16:19:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x48, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 87) 16:19:28 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup(r0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="a2bc685e1826a8814e1caf66e79d08e691b9", 0x12}, {&(0x7f0000000080)="b6d60dd9e91839be07579bf8162edba60035f0206d14dfb0892f3d6043bd058d517f6cac31578e0fa30e4d53132022478e65cccaa658ca3e8f6fe582439d04def4386e2b7e937d656b505767ad5ddb159c279e5dcd39ee", 0x57}, {&(0x7f0000000200)="68bedf6a17aa23510fec53b3972295a530ced75876bf02696d9aa41a4361f06ba5c2c9c26cdd85d73e7638d98d6ca63798bd8d5acfbb0220d1e921a206", 0x3d}, {&(0x7f0000000280)="27bb5889b253e0500aefce0c85f41738703ac2540b5a7e26dba93af4b27a6fb7587cc773c5c7b18d51d2235fc1255a77c727c301ba42b3c2d0906f9a07fc7805c41b9e6a0ad5bc6f5d34d00cbd732729edcd9ccc5c1bd665677a27260ece", 0x5e}, {&(0x7f0000000800)="772a80e7c48ec04488a2086a4a6ae1233bc1d58fd60fddc37897f0352ac1c03c1e27d7e7c729a2216cbb52f1fbd4b8947eb95e49f4bb88ab91ebf8cca2794576ae0743b0d581cac1c5dc02c48bc030bb80a4be5c3c0853e1c131e3c617a2809cf6db9c82cb70dee075e7ee999c5b123f3ff7c9692cb99e8193ee6cf9351c3bc6735568344ef2940708b87a11d044619970e63bad6a9afdf052b937e6fc39cb7bcd517be53528e082e1747c6dd33ff005ff145019c26f9dfb45f333c049e513c061a67831cd09e7aff3ad5b455e47d169071487194fb77028fd269c167b863b68f153510bc2bdbd95af9f311e73b9bb6eeda289029420", 0xf6}], 0x5, 0xa) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 263.004195][T20949] FAULT_INJECTION: forcing a failure. [ 263.004195][T20949] name failslab, interval 1, probability 0, space 0, times 0 [ 263.016839][T20949] CPU: 1 PID: 20949 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 263.025593][T20949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.035634][T20949] Call Trace: [ 263.038906][T20949] dump_stack_lvl+0xd6/0x122 [ 263.043527][T20949] dump_stack+0x11/0x1b [ 263.047662][T20949] should_fail+0x23c/0x250 [ 263.052063][T20949] __should_failslab+0x81/0x90 [ 263.056804][T20949] ? register_for_each_vma+0x372/0x890 [ 263.062241][T20949] should_failslab+0x5/0x20 [ 263.066720][T20949] kmem_cache_alloc_trace+0x52/0x320 [ 263.071984][T20949] ? register_for_each_vma+0x372/0x890 [ 263.077423][T20949] ? vma_interval_tree_iter_next+0x24c/0x280 [ 263.083386][T20949] register_for_each_vma+0x372/0x890 [ 263.088658][T20949] uprobe_apply+0x8b/0x260 [ 263.093053][T20949] ? __uprobe_trace_func+0x440/0x440 [ 263.098313][T20949] trace_uprobe_register+0x2b6/0x410 [ 263.103655][T20949] perf_trace_event_init+0xf8/0x790 [ 263.108883][T20949] perf_uprobe_init+0xf5/0x140 [ 263.113651][T20949] perf_uprobe_event_init+0xde/0x140 [ 263.118926][T20949] perf_try_init_event+0x21a/0x400 [ 263.124023][T20949] perf_event_alloc+0xa60/0x1790 [ 263.128976][T20949] __se_sys_perf_event_open+0x5db/0x2810 [ 263.134592][T20949] __x64_sys_perf_event_open+0x63/0x70 [ 263.140185][T20949] do_syscall_64+0x44/0xa0 [ 263.144636][T20949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.150573][T20949] RIP: 0033:0x7ffa67e11a79 [ 263.154991][T20949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.174583][T20949] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 263.183110][T20949] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 263.191079][T20949] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:19:28 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x3}]) 16:19:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 263.199028][T20949] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.206971][T20949] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 263.214923][T20949] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 88) 16:19:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4c, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 263.290048][T20962] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc [ 263.333654][T20969] FAULT_INJECTION: forcing a failure. [ 263.333654][T20969] name failslab, interval 1, probability 0, space 0, times 0 [ 263.346395][T20969] CPU: 1 PID: 20969 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 263.355218][T20969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.365269][T20969] Call Trace: [ 263.368528][T20969] dump_stack_lvl+0xd6/0x122 [ 263.373113][T20969] dump_stack+0x11/0x1b [ 263.377366][T20969] should_fail+0x23c/0x250 [ 263.381831][T20969] __should_failslab+0x81/0x90 [ 263.386572][T20969] ? register_for_each_vma+0x372/0x890 [ 263.392015][T20969] should_failslab+0x5/0x20 [ 263.396510][T20969] kmem_cache_alloc_trace+0x52/0x320 [ 263.401774][T20969] ? register_for_each_vma+0x372/0x890 [ 263.407210][T20969] ? vma_interval_tree_iter_next+0x24c/0x280 [ 263.413276][T20969] register_for_each_vma+0x372/0x890 [ 263.418661][T20969] uprobe_apply+0x8b/0x260 [ 263.423057][T20969] ? __uprobe_trace_func+0x440/0x440 [ 263.428320][T20969] trace_uprobe_register+0x2b6/0x410 [ 263.433582][T20969] perf_trace_event_init+0xf8/0x790 [ 263.438865][T20969] perf_uprobe_init+0xf5/0x140 [ 263.443616][T20969] perf_uprobe_event_init+0xde/0x140 [ 263.448938][T20969] perf_try_init_event+0x21a/0x400 [ 263.454042][T20969] perf_event_alloc+0xa60/0x1790 [ 263.458984][T20969] __se_sys_perf_event_open+0x5db/0x2810 [ 263.464688][T20969] __x64_sys_perf_event_open+0x63/0x70 [ 263.470130][T20969] do_syscall_64+0x44/0xa0 [ 263.474558][T20969] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.480450][T20969] RIP: 0033:0x7ffa67e11a79 [ 263.484851][T20969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.504501][T20969] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 263.512895][T20969] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 263.520845][T20969] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:19:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x841, &(0x7f0000000800)={0x0, 0xd79b, 0x0, 0x2, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r5, 0xfffffe98, 0x0}, 0x0) dup2(r5, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 263.528797][T20969] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.536777][T20969] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 263.545333][T20969] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 16:19:28 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x4}]) 16:19:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 89) 16:19:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 263.657399][T20989] FAULT_INJECTION: forcing a failure. [ 263.657399][T20989] name failslab, interval 1, probability 0, space 0, times 0 [ 263.670103][T20989] CPU: 0 PID: 20989 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 263.678861][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.688906][T20989] Call Trace: [ 263.692166][T20989] dump_stack_lvl+0xd6/0x122 [ 263.696740][T20989] dump_stack+0x11/0x1b [ 263.700954][T20989] should_fail+0x23c/0x250 [ 263.705366][T20989] __should_failslab+0x81/0x90 [ 263.710126][T20989] ? register_for_each_vma+0x372/0x890 [ 263.715580][T20989] should_failslab+0x5/0x20 [ 263.720099][T20989] kmem_cache_alloc_trace+0x52/0x320 [ 263.725375][T20989] ? register_for_each_vma+0x372/0x890 [ 263.730838][T20989] ? vma_interval_tree_iter_next+0x263/0x280 [ 263.736848][T20989] register_for_each_vma+0x372/0x890 [ 263.742167][T20989] uprobe_apply+0x8b/0x260 [ 263.746580][T20989] ? __uprobe_trace_func+0x440/0x440 [ 263.751935][T20989] trace_uprobe_register+0x2b6/0x410 [ 263.757281][T20989] perf_trace_event_init+0xf8/0x790 [ 263.762559][T20989] perf_uprobe_init+0xf5/0x140 [ 263.767341][T20989] perf_uprobe_event_init+0xde/0x140 [ 263.772648][T20989] perf_try_init_event+0x21a/0x400 [ 263.777758][T20989] perf_event_alloc+0xa60/0x1790 [ 263.782692][T20989] __se_sys_perf_event_open+0x5db/0x2810 [ 263.788321][T20989] __x64_sys_perf_event_open+0x63/0x70 [ 263.793777][T20989] do_syscall_64+0x44/0xa0 [ 263.798195][T20989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.804183][T20989] RIP: 0033:0x7ffa67e11a79 [ 263.808576][T20989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.828174][T20989] RSP: 002b:00007ffa65b89188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 263.836564][T20989] RAX: ffffffffffffffda RBX: 00007ffa67f15f60 RCX: 00007ffa67e11a79 [ 263.844515][T20989] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6c, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 263.852480][T20989] RBP: 00007ffa65b891d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.860460][T20989] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 263.868429][T20989] R13: 00007ffe0076bebf R14: 00007ffa65b89300 R15: 0000000000022000 [ 263.897453][T20997] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xe 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 90) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf}]) 16:19:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ff, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xa, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x74, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 263.992207][T21011] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 264.012050][T21013] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x10}]) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xc, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r4, 0xfffffe98, 0x0}, 0x0) dup2(r4, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000048680)={0x0, 0x0, "3aad0a1e36bb22289f56d4b259a5e00791ee406e392389b1b6b24a45585197c3b811f79dfa1eb50daf23d9eb7c7312a6641f225e5a8f74911e8714ef039c2dde2bea31c2b80c14ef5807cfa7bd8415680a166f45f2c56e08844dec75d2bbb9c40baf7dd793ebe47a8dd72b131c6f3d2662fc2ceac7d46ba78c6e82d32a30ffe0757ec8aeb3ef90095a8e657b2b73bbc9009477956714588562bc679db1af269a20c3cb77bb7b5ae8af95a1e8a2d9071a7445274751460b2cd1c7841180fcd5bf69a34a23c97121cebb30960c72ca45029f1ea2cda126938a24700007c81186450eb68cf30da1b868e4a8f7beb3c0120c1ae09204e537994e4ab51985ec255a73", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x6, "515d75b44f7ce0"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000f00)={0x0, 0x6}) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000ac0)={0x0, 0x8f6, 0x0, [0x1, 0xffff, 0x4, 0x8000, 0x8], [0x1, 0x7fffffff, 0x2ef, 0x6, 0x5, 0xd400000000, 0x8, 0x0, 0x9, 0xfffffffffffffffe, 0x8912, 0x6, 0xff, 0xb7, 0x3, 0xce8, 0x5, 0x0, 0x6, 0x282, 0x5, 0x7, 0x2, 0xfff0000000000000, 0x3f, 0x1000, 0x0, 0x7, 0x4, 0x3, 0x3ff, 0x8001, 0x7f, 0xe1f0, 0x2, 0x4000000000, 0xffffffff, 0x7, 0x7, 0x1, 0x10001, 0x5, 0x5da75031, 0x7fffffff, 0x3, 0x9, 0x1, 0x3782, 0x2, 0x4, 0x400, 0x5, 0x2, 0x7, 0x4, 0x80000001, 0x8000, 0x7bd5, 0x3ed, 0x100000000, 0x7, 0x4, 0x13, 0x7, 0x6, 0x100, 0x7, 0x305a, 0x401, 0x0, 0x0, 0x9, 0xfffffffffffffffb, 0x6, 0x5c6, 0x8, 0xe13f, 0x2, 0xdf18, 0x6, 0x8, 0x7f, 0xfffffffffffffffd, 0xe0, 0x7, 0xfffffffffffffffa, 0x78e8, 0x6, 0x9, 0x5, 0xcb0, 0x20, 0x6, 0x5, 0x7, 0x0, 0x7, 0x20, 0x0, 0x7, 0x5, 0xd92a, 0xffff, 0x6, 0x3, 0x2, 0x5, 0x10001, 0x1, 0x0, 0x9, 0x1, 0xe, 0x8, 0x3, 0x7da3, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x4]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf2}]) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfe}]) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7e, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 264.348692][T21065] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 16:19:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000003800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000800)={0xf8, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3927b5edbd69c119593afec9c966c045873e1bb3303d91be"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040080}, 0x40) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x88, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x13}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x300}]) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xef, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x11, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, r2, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x10000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 264.601084][T21117] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x1fe 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf00}]) 16:19:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x21, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x22, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 264.736956][T21144] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x4002 16:19:29 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xeffd}]) 16:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440)=0xffffffffffffffff, &(0x7f0000000480), 0x0, {0x26}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000040)={0x1, 0x40}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="e897b8e23d0b3aad92ea768184046a9b202d85ae7a5441f582c150ac5a0820c86db4e4bfa823eb5176665ab05058732015fdaa71825fc8311916fb1c8cf67ace40413a361fe28a4cf370fd1c29e914b376574c935713e965ec7320e92dd88274f3e578e47c56cb4e4316b2a1801336bbfd15047336f400a7ea44a63c414882d6dabfab18420915f359adaacd2bf2b90e0d41", @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB="15621f2c6326e972d23fcf88d5cf5c795e1cdecee0308e679c149908d638040675ef997522a81c2b27a80afe4d58a744ea77448e2f1aaf66d60b333aa977a9f371eb89a68bdffebf3e1281c0e759f1071bb2bc140fa44b9f4a71b28b1d77027193eb5d5bc3395da13bbe63cf0721302bb5215100"/130], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf200}]) 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x27, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5901}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 264.978834][T21157] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 264.995984][T21171] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.016940][T21177] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.068196][T21177] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.068221][T21175] ================================================================== [ 265.087294][T21175] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 265.095195][T21175] [ 265.097517][T21175] write to 0xffff888133c680e0 of 8 bytes by task 21177 on cpu 1: [ 265.105225][T21175] __mark_inode_dirty+0x1c4/0x6a0 [ 265.110245][T21175] touch_atime+0x185/0x250 [ 265.114659][T21175] step_into+0x859/0xee0 [ 265.118885][T21175] walk_component+0x1a1/0x360 [ 265.123544][T21175] path_lookupat+0x12d/0x3d0 [ 265.128121][T21175] filename_lookup+0x130/0x310 [ 265.132875][T21175] kern_path+0x35/0x100 [ 265.137028][T21175] create_local_trace_uprobe+0x51/0x3d0 [ 265.142572][T21175] perf_uprobe_init+0xbe/0x140 [ 265.147326][T21175] perf_uprobe_event_init+0xde/0x140 [ 265.152599][T21175] perf_try_init_event+0x21a/0x400 [ 265.157699][T21175] perf_event_alloc+0xa60/0x1790 [ 265.162621][T21175] __se_sys_perf_event_open+0x5db/0x2810 [ 265.168243][T21175] __x64_sys_perf_event_open+0x63/0x70 [ 265.173688][T21175] do_syscall_64+0x44/0xa0 [ 265.178090][T21175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.183971][T21175] [ 265.186278][T21175] read to 0xffff888133c680e0 of 8 bytes by task 21175 on cpu 0: [ 265.193886][T21175] __mark_inode_dirty+0xda/0x6a0 [ 265.198814][T21175] touch_atime+0x185/0x250 [ 265.203221][T21175] step_into+0x859/0xee0 [ 265.207447][T21175] path_openat+0x102d/0x1ec0 [ 265.212023][T21175] do_filp_open+0x105/0x220 [ 265.216511][T21175] do_sys_openat2+0xb5/0x2b0 [ 265.221088][T21175] __x64_sys_openat+0xef/0x110 [ 265.225836][T21175] do_syscall_64+0x44/0xa0 [ 265.230238][T21175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.236135][T21175] [ 265.238440][T21175] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 265.245523][T21175] [ 265.247826][T21175] Reported by Kernel Concurrency Sanitizer on: [ 265.253951][T21175] CPU: 0 PID: 21175 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x32, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 265.262695][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.272733][T21175] ================================================================== [ 265.308303][T21195] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfcfd}]) 16:19:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x11, 0x800000003, 0x0) syz_io_uring_setup(0x329f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000780), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) syz_io_uring_submit(r2, r6, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd_index=0x8, 0x5, &(0x7f0000000a00)=[{&(0x7f0000000200)="6b553d9b2f9ba2b90a952e6907184be47b035b13ba", 0x15}, {&(0x7f00000002c0)="f5ccd81b956ef2bc0c11f8da1e9894d6effc6c733fb35d8810dc28780bff312908e3da", 0x23}, {&(0x7f0000000340)="7df01ab93fca0883746926a7c6711eaa993d52ac3f15f1396b3e5cfdce487cb995f2cba1339ca0f9f43cf31e8f5f80d131e48f973127b4ab09e0ca6912ccf8a3a75f462789d29f3ee9381ed05ed0521edc45", 0x52}, {&(0x7f0000000800)="a6300a0cd1e41f7ed70c61906e32735ffd3406419f862d46acc56add22dafbc6b3b0e50e5189c25c99dd60f09e31c1c6f4748233269967577764378aefe346c3aed93a00c33c51b77c63b17ba8a240636792bb3ebc65e450d934d111657a2075f5176d8a914b15ae85639fd4ae709a688a4825948224b7df679d3762585969c7e5fd0eb0966cfedec8d33e3408efdd4e0f8bab1377791cb4ce714fe73226d64bdce279b2ef836d8e5781bd030a9c0cdabc2a83", 0xb3}, {&(0x7f00000008c0)="4e1a32525cf87a775c5dc8d4fd13f3edc3e96dfad1d6c26a3738b5e51f0fc87b3a6f89b7b126eda8b65bccc1e23794151f550228994ba4d3e4f9323e908dd8a7427a6a58b6e22df9170434a251a3ccfb966e3dbb63840b3709100bb7c8d8e75aa2298c9c10a41a5df1a52aa7b60940b55066c703bb59e164fb572df1e7492f96", 0x80}, {&(0x7f0000000940)="0a4f4b15c7b2617943ed221a32fe2314ef2759932b327c22ecc76e114c9a522ccb3ddf230e7608b8137ee2b49405cd0031c04a3164e098a44d7cb5e742d49c80bae28b0538360a89f7d119c1071b7a8621197ed84dd1cd7a1ebc7ddd905f38ee2f8558524cdeace5300d3cb8a65bbb654dd18d40767612842b95f2d0657f8e164cf5b7ed15928236e49f0e00a8d41aeffc757163cfb4f78c6477b71e891c2df08646b651c5c54af36e4c", 0xaa}, {&(0x7f0000001fc0)="545604f8aa6e32fea190796556b82790819294b585225b80fc5d04316fba95bc827ca2bdd5a6fde738e20db816baca73c1088de754a1d7b8771f0244230734e528eaa645310270bc918d45239cf3fd5e44b0e69834a0e87996220cd8fbc71399a9e8a34db2ae913c508500b82c2641ea91cf7632cc6d67ddded8ad2df9995330cb715f8d5bac12966e733cbe541e69e1dab1926b", 0x94}], 0x7, 0x0, 0x0, {0x1}}, 0x8001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x34, r4, 0x9, 0x0, 0x0, {0x5}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250e0000000c0001800800030000000000280002800400015d0400050010000400d4643b5ae53f00000002000200000068000180080003000300000008000100"/82, @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32, @ANYBLOB="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"], 0x14e4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040810) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a0f503adabbdf46193a8a4000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.353857][T21199] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.377366][T21210] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x48, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.402398][T21208] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfdef}]) [ 265.461745][T21225] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.474433][T21227] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4c, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6d01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.514905][T21228] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.537909][T21238] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x4, 0x508, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ac0], 0x0, &(0x7f0000000040), &(0x7f0000000ac0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x10, 0x9, 'veth1_to_batadv\x00', 'caif0\x00', 'ip6gre0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x200, 'system_u:object_r:null_device_t:s0\x00'}}}}, {0x11, 0xa, 0x10, 'veth1_virt_wifi\x00', 'team0\x00', 'batadv0\x00', 'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0x116, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x400}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffffffff, 0x2, 0x1, 0x0, 0x0, "3da643970cc9af962ada8f678bac0051987d8eee3858e99afe9fd57179f5da045768f145a2470e4da387947dc3dbc5b2d0c50795dc05bfcfd62a025403b2bd7d"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0xf, 0x0, 0x19, 'macvtap0\x00', 'veth0_to_hsr\x00', 'veth1_to_bond\x00', 'bond_slave_1\x00', @remote, [0xff], @local, [0xff, 0x0, 0x0, 0xff], 0x6e, 0xb6, 0xee, [], [@common=@ERROR={'ERROR\x00', 0x20, {"e797fce1f29efbcbf3ce4d4673a25154bc89a3989a5ab9dcd31bc1ea3287"}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}, {0x3, 0x50, 0x6003, 'veth0_vlan\x00', 'nr0\x00', 'bridge_slave_1\x00', 'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @random="9ef88dd1214a", [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x580) 16:19:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.566512][T21241] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.584214][T21245] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x6 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfdfc}]) [ 265.616485][T21245] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x6 [ 265.653385][T21261] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6c, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.675341][T21257] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.704986][T21267] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x74, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.729319][T21273] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.747616][T21279] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.766943][T21267] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.783692][T21280] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x8 [ 265.799962][T21280] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x8 16:19:31 executing program 1: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d80)={0x2c0, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbb, 0x7b}}}}, [@NL80211_ATTR_PBSS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x78, 0xfa, "da125dc000647675a86fec0bcdd458ef3d50c0367a8feddc6844d2c998e03dc1f9fdfb2f07904d2f0eeefa05959b5c744722bb6ac30ea70de48311161488a0453448ffac5f08ba1f563a113b490f9a8a950cacda4f0067c3a8c3896f31a1d8c63182a58d07d7349bb7fc4769721ff917d92478b9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x0, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_RRK={0x1c, 0xfc, "3807a1896bc1b3bc5da4d85ad1fd470886fdc4327eda38f3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0xf9, 0xfc, "f45221d1eb76f559b03a77ce55c3ecae7e553ec984d9c9c5c838298494d552e0806dd8a2ba628eef910b23a916c982f20bbf1ec876c42bf266154a77b1cf70f1c7dc21c00b8ea648b0b9dd7302da647facc2e5c9c6b9edfb66a4970c0ea736e4f0052d530a5729fc31af0a8ea4e16503b40f539314828f724fb15d77a9fad3ac9502eb6da656f7de621be3f6d18b810c1565586b505fddef571d50fe326a811f01d13d138bc5728ccdb1f67a0fb91dfb7697a4de22a242e75d532c58a6715e370bd089cfdc988b5c8bd585d6d0674b6f04e2554ec7394b98119e8667cc54d717527586f40c4f3fbc8c37aca5e1240846ad04b3e95d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "e089c9bedc0a04f3865fe1f2e56ccf24"}], @NL80211_ATTR_KEYS={0xa0, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a4003fbd6afe53f97a7084dbfe"}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x0, 0x1, "0a857f150209556859db0cf189"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0xffffffffffffff86}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "292811842da671438fd6c52605"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "29bd668d71"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 16:19:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfdfe}]) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 265.824000][T21288] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.847307][T21291] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.876251][T21293] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x8002 [ 265.895684][T21302] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.918193][T21303] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 265.970215][T21315] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 265.982307][T21317] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0xa [ 266.000080][T21318] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfdff}]) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x6, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000004c0)='./file0\x00', 0x800, 0x4, &(0x7f0000000980)=[{&(0x7f0000000340)="d8c061e3f449e9cad6a54b6f3ee75e16b2049831724cc8b583a54bdce69b7bf67daeabb27defa5d7888d174859b01a29fde7caa7c263a57519c44bfaa6cfd63e31148feb52a72143198794dac87e8c3f4b8860459b636887d95bd0bde5adad3f48a55544e9b270ee544490000c5d66ae492a82154d216fe0da4f4e282c63859899e8f19fa3bc66368bdb8d4d96c60550619e456964795275b38307e62f9d5bd0680245d526ed8c250e0d35533f09bbb1457693dbc3be1e319a19fdee1c62f8955f55c1ab4b15df173fc72c1b28fb0e8769fba86c54c509f001fccab228cb", 0xde, 0x8000}, {&(0x7f0000000800)="53bd1b8b8ce1164a00e0fe5c7a0a4c801b995e2cd31d17e816e7c03ea53938743f615fc7dcdd7543a673b7bebbe79627adff4e46a7b95a13769d9f8e531406298ac18331b8bd949839682f226701373aaf5c07a21a52af1874040ad85465a602dc79c70fd1f428df16df5d71b124", 0x6e, 0x47}, {&(0x7f0000000880)="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", 0xff, 0xd3}, {&(0x7f0000000200)="ce4e9c648ffa4fa31659ccb3d163", 0xe, 0x8}], 0x10, &(0x7f0000000a00)={[{@numtail}, {@utf8no}], [{@subj_role={'subj_role', 0x3d, 'veth0_to_bridge\x00'}}, {@obj_role}, {@fsname}, {@smackfsfloor={'smackfsfloor', 0x3d, ']\xd8#-'}}, {@seclabel}, {@context={'context', 0x3d, 'user_u'}}]}) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) r3 = fspick(r0, &(0x7f00000006c0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0xc, 0x1, {0x0, 0x0, r2}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1000}) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c004763bc6324c442f58917b15c062311601ce900004c8e1d7d666541aa32120175d367d5f540ea6ab91b66ece26848f9e6ae5b1e71c0456da9e633be1b745f18258b11d75604191ef7fa97121f356047ac067c3c52865c484f226c8370e419f8c4a3e279", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40048094}, 0x91) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 266.011761][T21319] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 266.023706][T21317] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0xa [ 266.036485][T21325] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.091051][T21335] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 266.112051][T21338] loop1: detected capacity change from 0 to 128 [ 266.116922][T21337] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0xc002 [ 266.124479][T21338] FAT-fs (loop1): Unrecognized mount option "subj_role=veth0_to_bridge" or missing value 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfe00}]) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 266.149286][T21346] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 266.164249][T21350] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 266.187869][T21351] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.254249][T21362] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0xc [ 266.283665][T21367] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 266.288320][T21338] loop1: detected capacity change from 0 to 128 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd301}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf7, 0x8, 0x3, 0x81, 0x0, 0x3, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0xb, 0x7fffffff, 0xe3f, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x56, 0x0, 0x10000}, 0x0, 0xc, r2, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfefd}]) [ 266.303959][T21362] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0xc [ 266.318285][T21338] FAT-fs (loop1): Unrecognized mount option "subj_role=veth0_to_bridge" or missing value [ 266.329339][T21376] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xa, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd601}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffd}]) 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xb, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd701}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.527972][T21403] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x810, 0xffffffffffffffff, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20040010) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000940)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200050c09f0000", @ANYRES16=r3, @ANYBLOB="594fa084cf05f847c57c6f"], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250800000005002e000100008005003800010059000500300001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB="f8731f2f015d720b352debf23304a663630b330eba5c52131c16fe523977386fadf0f3c9a04226211553e0106b13c5dd0c147f4adf004c125a178945b6a7aa2e7ab9c0b8b2e31adf984134ce5268c38cb2735738f574b0fbd2690d6838d80d793e7895c6795fccfbbc709e32f1bd907fc07199984dec3f1cfa15a43cbd2e8190d5039b964f85c04211136fe437c9dfb3ba388b7276678e70f3ed05be88373641eb810de1d442affeecdd2726c8b334d5e062ec2051d22b4a01ed503db9e5c346915b20565eaf6f9d61796130eacbd19ce2eee6712c5b96c3dddaa43af812acc5675695e0dc"], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 266.589002][T21423] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xda00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf0ff7f}]) 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xc, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.628995][T21430] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 266.658093][T21437] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x6 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xdb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.682383][T21443] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0xda00 [ 266.703929][T21441] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x10 [ 266.717301][T21442] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 266.734600][T21450] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 266.746468][T21441] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x10 [ 266.762263][T21460] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 266.773973][T21459] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0xdb00 16:19:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfeffff}]) [ 266.794863][T21458] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.837914][T21467] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x8 [ 266.876903][T21468] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/packet\x00') r5 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x5, 0x6, 0x2, 0x0, 0x4, 0x2206, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe71, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x2004, 0xffffffffffffff81, 0x9, 0x4, 0x100000000, 0x9, 0x0, 0x0, 0x8, 0x0, 0xc5}, r3, 0x9, r0, 0xb) r6 = dup2(r1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r6, 0x8, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000006840)={0x38, 0x6, 0x31, 0xff, 0x10000, 0x6, 0x8, 0x2, 0x4, 0x2b99168}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)={0x230, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x62, 0x6d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffb}, @NL80211_ATTR_IE={0xbf, 0x2a, [@fast_bss_trans={0x37, 0x80, {0x80, 0x3, "834ded923ec99e1498766d56fdef1cbe", "6bde5da41d896e3457217ee27b5f30ed91dd53f56436fe7c30f5decd94c70686", "30a6386e350e9537484dd0911f6c415308fad91c9618f950cefa0a8def1fca44", [{0x3, 0x8, "15911ca1edc37635"}, {0x1, 0x3, "7d1df0"}, {0x3, 0x1d, "b4f9a578aad26a4b0795d3321c7f12cd9c1a2a8e8ef19754c6c3636bab"}]}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @preq={0x82, 0x30, @not_ext={{0x1}, 0xfb, 0x0, 0x4, @broadcast, 0x40, "", 0x1, 0x2, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0xd67}, {{0x1, 0x0, 0x1}, @device_a, 0x3ff}]}}, @ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, 0x9}}, @ibss={0x6, 0x2, 0x3}, @ssid={0x0, 0x1b, @random="1739dc2104ea5f79ed3e760b98def6e5c1f817078eb740ffc358cb"}, @chsw_timing={0x68, 0x4, {0x2, 0x101}}, @erp={0x2a, 0x1}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @dsss={0x3, 0x1, 0xad}]}, @NL80211_ATTR_SSID={0x15, 0x34, @random="539b5a348a084bea230f74aeaba3614aab"}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xc0, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xb3, 0xff}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x80, 0x9, @broadcast, 0x2, 0x23, 0x1}}, @tim={0x5, 0x69, {0x63, 0xfc, 0xd7, "ab6480bbfdd33392c63d24c27bee165b3e5189dbc9e6aaaf09b4ddd8aa34e0ece81aa26d693612d3eb16efbf1d6606a6e68e14b2ab5886690bc8ad065637e76f5ab2eeff2e264cedc71348df9ff4f696803f8d5994d00ebc5986f70fe4779e4c0c6bc4b6bd30"}}, @peer_mgmt={0x75, 0x14, {0x1, 0x8, @void, @void, @val="333d01d1386b606baa96cd8c5744f20a"}}, @mesh_chsw={0x76, 0x6, {0x2, 0x4, 0x6, 0x9}}, @challenge={0x10, 0x1, 0x6c}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40044}, 0x20044000) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r9 = fcntl$getown(r4, 0x9) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x3, 0x1, 0xfe, 0x80, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x7}, 0x1090, 0x1, 0x4, 0x4, 0x2eb, 0x101, 0x8, 0x0, 0x9824}, r9, 0x6, r5, 0xa) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4403000000350000b8", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x1000000}]) [ 266.893782][T21480] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x12 [ 266.926719][T21481] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 266.945425][T21482] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 266.957453][T21480] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x12 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xe, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x2000000}]) 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 266.992173][T21491] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.006292][T21500] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0xa [ 267.024716][T21499] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.047841][T21504] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.074725][T21512] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x10, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.105834][T21511] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x104 [ 267.118229][T21517] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.134391][T21519] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "c9212abc4b9a27a1529cd0a93ecf39ca"}, 0x11, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r3 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r3, 0xbf, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x18}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r7, 0xfffffe98, 0x0}, 0x0) dup2(r3, r7) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000cd003fdc75288000600030000000000000005000d008198000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x3000000}]) [ 267.162648][T21523] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.187660][T21511] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x104 [ 267.201170][T21532] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0xc 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1d8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.234945][T21533] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.252730][T21534] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.266367][T21543] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x1d8 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x11, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.286609][T21543] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x1d8 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x4000000}]) [ 267.332172][T21553] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 [ 267.360559][T21555] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x12, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.386415][T21559] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xe ref_ctr_offset(new): 0x4 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf000000}]) 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x21, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.459951][T21576] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 267.517790][T21583] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 [ 267.537252][T21580] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x2, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40840}, 0x4000044) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 267.566000][T21589] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 [ 267.590166][T21599] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x22, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x10000000}]) 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.615799][T21601] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x10 [ 267.635180][T21605] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5901}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 267.682943][T21612] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 [ 267.706912][T21610] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 267.739888][T21621] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 [ 267.757867][T21630] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x12 [ 267.770307][T21624] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x7ffff000}]) [ 267.792892][T21632] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) r2 = gettid() tkill(r2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1b, 0x28, 0x3f, 0xfd, 0x0, 0x200, 0xc200, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000040), 0x5}, 0x9811, 0x2, 0x5, 0x3, 0x5, 0x1000, 0xfff, 0x0, 0x1000, 0x0, 0x6}, r2, 0x2, r3, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 267.835345][T21638] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x104 [ 267.859696][T21642] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x32, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 267.881246][T21648] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4002 ref_ctr_offset(new): 0x4 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xeffdffff}]) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200000000000000000004000000b54b33595e5f300500000014000000aa06000b009c000000080000000000000000000000000000e00000000000000000"], 0x4c}}, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x9, 0xb, 0x2, 0x0, 0x7, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1200, 0x1, @perf_config_ext={0x3, 0xc2}, 0x523d, 0x41b6fc86, 0x80000000, 0x2, 0x0, 0x9, 0x1, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r2, 0x1) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25010400004800000000000000000007050071c93caee2865a0c832e1e1123b296828aa43b240121031000290500ff0100"/68], 0x44}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480)=0x0, 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r6 = syz_io_uring_complete(r4) ptrace$cont(0x18, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r5, &(0x7f00000004c0)='environ\x00') clone3(&(0x7f0000000ac0)={0x980000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x40}, &(0x7f0000000940)=""/200, 0xc8, &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, {r7}}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x100010, r6, 0x10000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="000009000000fcb3f6d4e4b4434a62685193f7c8510a81a150cd81177bbc522d5a73bc2d6fb1190db44d4ca23608b489fdd5571b4a1a8ffa310eb83400"/70, @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f018100000008000300d1d0e5d5ec39aaf9321b13db15d1c7b88ee69ec8996374d04d4257b878c35315b864270afffab6a9a4f8d51d7855d7ff39f64a0e346c1ed369fdfbc9c6ed06e291d59ea072be56d413780a6b2a5be9909388f502b9f58b66c9a9af10edb7c0e808b8533c2ef653531a8cc5662d4590aca60fccaf95aa605970f96e4c8f44cf37307ee503e5e1c81e92638ca69570d31286e7e00c2efc3d231b6930c940e9fee10a46f9881e899a9ab0f75a4be3cf68cd10a545ab4577d72f0e0dfd478088194ed9ed624abef0ce", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6d01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x48, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xf2000000}]) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 268.058187][T21681] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 [ 268.076489][T21682] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 268.125397][T21688] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 268.171987][T21693] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 [ 268.185976][T21682] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 16:19:33 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73782edddde05e7d7d292f7b262100"], &(0x7f0000000040)='-\x00', 0x2, 0x3) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x2}, 0xc1, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f}, 0xffffffffffffffff, 0x0, r2, 0x0) dup2(r1, r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) mmap(&(0x7f0000b2a000/0x2000)=nil, 0x2000, 0xc, 0x80010, r0, 0x9de60000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfcfdffff}]) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 268.237820][T21706] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 [ 268.270399][T21711] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0xc002 16:19:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 268.297891][T21713] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xda00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfefdffff}]) [ 268.374511][T21731] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xdc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) r2 = syz_io_uring_setup(0x3dc4, &(0x7f0000000180), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000080)) io_uring_enter(r2, 0xbf, 0x0, 0x0, 0x0, 0x0) dup3(r1, r2, 0x80000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) nanosleep(&(0x7f0000000040), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) [ 268.417909][T21741] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 [ 268.432170][T21743] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0xda00 [ 268.444379][T21746] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x8002 ref_ctr_offset(new): 0x4 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffdffff}]) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffffdef}]) [ 268.536813][T21761] ref_ctr going negative. vaddr: 0x2000dc00, curr val: -22823, delta: 1 [ 268.545206][T21761] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0xdc00 of mm: 0x00000000f5db099d 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffffdfc}]) 16:19:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x13}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 268.817478][T21801] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xc002 ref_ctr_offset(new): 0x4 [ 268.850983][T21803] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc002 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x74, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffffdfe}]) 16:19:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd70dbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600030000000000000005000f008100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 269.006796][T21837] ref_ctr going negative. vaddr: 0x2000d000, curr val: -18232, delta: 1 [ 269.015298][T21837] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0xd000 of mm: 0x00000000f5db099d [ 269.051390][T21837] ref_ctr going negative. vaddr: 0x2000d000, curr val: -18232, delta: 1 [ 269.059786][T21837] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0xd000 of mm: 0x00000000f5db099d [ 269.072268][T21841] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffffdff}]) 16:19:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 269.092173][T21846] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.109136][T21840] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.136368][T21848] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 269.148130][T21854] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0xd100 [ 269.160392][T21854] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0xd100 [ 269.172434][T21859] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0xfffffe00}]) [ 269.191786][T21850] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.203564][T21860] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.240718][T21864] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x32}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 269.254457][T21871] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd301}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:19:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3dc4, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x4, 0x10}, {0x5}]}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x350, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1145a3f5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e09a04d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1757fd42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd799543}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57c130c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a89}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b55aa79}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1299}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51338077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39d4e2a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc80c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5111a9aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb1ad5e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6978833e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x295d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc668}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb2553e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36b3e462}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52010ca0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x557b0b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4531}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc091}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38f8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca47}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc02c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2824}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a3c059d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5407}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76ff8f2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5664}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44f9576}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6de6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d34b89f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3213cf6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7cc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4aa0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x388e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x323d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a9c71b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33ce67b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42ffd126}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20f7e928}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9934}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b981bad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4db0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13f9c344}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2929fba2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72ab}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8161}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540cc950}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x809f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x977c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdfae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30630fd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70d5cd12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d2f806}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1614f74a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bc1c2d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5554}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e8258bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1695d8c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a00bef1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x107b37b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ec372b2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41e1af96}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe346}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d08e1d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21ec5afd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36b0ab8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c83796}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58b354b5}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x48001}, 0x4004) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {0x34}, &(0x7f0000000500)=""/206, 0xce, &(0x7f0000000600)=""/171, &(0x7f0000000a80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x91) 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 269.310509][T21880] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.328456][T21884] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x100, 0x10000000000}]) [ 269.351552][T21885] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000033000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [ 269.383606][T21892] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.411773][T21895] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 16:19:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 269.430893][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.438971][T21899] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0xd000 ref_ctr_offset(new): 0x4 [ 269.456793][T21906] ref