66ab7233e981ddb3a9788477a51a923946cb1bc0646069423e307cf2778cff2a448c4ec8b52d2e7f3360d2c5c5b7b0dad132bcb24ab9bfbb30ef48e9f8547475677b4a7b5b1e4c3bf1dca684fe2275060e12e2f105d563c41aa0ddf2fea1e36fa285d024ae8652871a1da24635bb855707bc87f036fccd64a4166a95c620db3d91a8491cb62c9d9905bf4a9f86e5d31040a62df1ab1018e00babcd69ba1a7181f9a041ae313e73e5366d858990aefab8d6fc557bc1f96a5831a0975db0da7698839ae8f8f158968f3beba14cea8f68579e473f625178513ad179ca0982cce754a04cc55f9b45a0c79bb66891da3ddaaf838fbe196016e77dbd8d063a63879d3dfba4d7ce03368a18488d58ac5d50a3c0cc27c5ce57ea978812e3a5c5a8f3662f4795db09d8fb8fd50c8c4c58b914b71b07bbf4f117cf56c2c4ff3f951222cbd4e15fad4489c4adec78b992961f2c88cda90a30030795ef74229beeca5ede0fa76a6666048cca0d8d0f19e07e1b3a6aee195e1204f48f2f8b7305a93ca4753b48f1c8ecab8038d1e8995d780793270b5963898110bfb5f1a0d2d7afb97016a3b903274fa613b5e895bf6e3c8c62c2a0192070c2e57aa6e16b50a13aeecacbf081e60c5b48a0da046fa7414bce4b034f72b5f1ec047ee77413da32ddde826c8d8f865f7a3db5537e85f47233a847e34895631b38f39e37c712bb144b01eb31aebdedbbcbcd65f5ebcc15c6254f9f941dd2902d4fc5950020c84710c3422cf0ba9a8a35733c76e7d1e8e1b57572c28dc1c449cc79d2e3b180826993a7bc936c9c275e8ca9cf1733df09e24ac124620275d23b4ca679bca560e59f19d498e083c3ef781c3d1985e44998eca61294e5f01756738627cb65f60c4bbd8c0c580a1b65af7a6726c731230f62ec46cb6ef4544f0d7aad7a37643ff401d7e146715c089d72d5ae04dd2f0bf1e27c785baddbe61db1cbe618557c777a03369c613b2e4631439ef095706ccd2efb89f3e76fa94f23f83d6dfc92446e3fa98512d612ef2640e11bff0da2311b807ad224d264c3567cce35b450254ecd338a30c1dcedc2b8644135a5c96a32111dfe7f409edbb0e5ea84b942378dc6cf4e1c6cac23d529152ca16c7825401e2c905bb3e95daed1954858e1ca97c5b4c822a361abbef73ea9e261110e2b141884781c38d12581fa6e1b20b61da50ae5feb09c96e98425acff407077131ba9af46bda972f8c632e8844390163eea95031d6d5b7b916cbb874b205eeb4f90ffc6f4cb18d809e4c56cc2366d6b6f593e9687e5d3622bdbdd90bf29316d28f104fb122b6cbb6a77669ee4d5477c05b10b731f80137d6b43ba8ceb8e881831eaa41f8a048a1d171b7c7699344aa1b1f58a009b59a101322f8be5e49814c02a187ccb1657d806fe196a3afa80a46a9c10cd5822bb535182de437b670f80f5855b64db3663f2f86d4e3faf63d285b2f88a4411137d6e9fb92e69a7a066d191158ad867cb3ff55db87a6fd87988e292597da328923f6b8e91c7e01a5f24cfb75c074c18334d1615945306da863f457d4902ca4ce096333183d210b3a92b08db82ea0a00d1cbc663bb3923b9cad2d09dc6d8b0aacf0e04b9363af222a21fcec68a7b607dd5054e10f1032e48490f692b642173b0477734ac80c6783208e994f9153e70717691c81d24503ee00592657d13a1aea95cf7cb86900258e962d34e63ba1e37f0bcb76cba90ff28aba441010f40fd509a2bd6c116296f2698db49afb1c87826ad0ffe45e8cda024e035f213c23b617dbcbf182fb94d707672d76d55526f7a3fd94a0538ccad30b9299918db660edad7db56399a8f59a87c85e0a671764769f7123f0f06618729d8b9ca98a43f8da8cf46a674c40834ca6a95195ba3e19ffcaebfa90c128f61f68b36972d5a830882551a4bbd7dd7f28216bf3fc874ea47b434db69de1674d05f82f69e2ee54b1310b1da4fed387286916339e66b3e49c307f7dc3a2bc2ee17e40c876bfb01985d4f30289f7967facfe842d82aaa217856793af82963af05d101c0e64d29a0b29f20246f221327b1a149fc3e2076097899bd50f4670569c44cc2eadc2df2ea8d4d5022545d1733fd264c8774cb032c519f40c3456544aecbfbefdbe8ce48b41f0a070fae93e36071c4ab31e30a675f3bb43f5d8fe82cd39931b30f5a481fea5a047bed5e595e83a30f67bca5b821310c51b3f962dfe056b1aad61e16ba2b48226bd169926be1103890130fbd51df59ce580973e69d7f7bc3219e056416bec640f16d54d07afc5e946ea472f2461723dfde6c5e8b7e3eb6eb2631327991c57a6d758bc54859d77ed0a23907235d6fbffbd6eb777d19454bf0edf56addc2c8fd98c6672f891ca5b954b6f7ff6bac3ab35d9faa686376b58efb4ed5c3c91770286b7a20c51a8e5c9532d8e2b569125604229caa21f53ae876e3ebc502c710f114d051496720036cbfa0fe3fe58dfbfbb97508aecdf859ac2824015595d083352e917313f10abc9af12e917321e4d16342c95d7b78853f5b0084c1038b367670e573dc62e9ba86b4b2639b899c712e9682a4793b6baa16c51814a3381360e6ba307109a14e2538a1f78020d16ffa5f6adc119a927f7991b1c9ded9b4f345af64a19530d5c633fecc38c8349711ddd16b1035bb31469ed6b3c90cc427ce0b0b217d32b9b647b4c518cd1093a2b71320023bc2d66c9e0557603906fa7bf2d1bc01ae4ca3a6311ef2de4d7fbb578b843865aa9d947526d9962e351b4a412e969906bebbe0f5c4b421f48d817e649403928c5a6f1faffc2ff8a4d066925bd85397f8a218324e8470e3725bfd744efee8324f3ad7d74826a24bc65ad6840ac75089fc9416c538d76c71c0a7f70d442ec07ba5ad840bad0b1a6e6b9fc230525a6f0d7115e1ea81ea9b98670da2cebe41acad7fe97e302d5750c0f078ff268665ca641923d0f49c8fc9c14ac33f602aacde63130bd0b1cde6b469e76cf26ffcb93d431489e718a940125cf2228e890a98feac0f9f55d58d64ae5fd266697c43f259fcbbc614b0a9909ffc5957d87380cd872c3c2ecee5b31827951bca78e7b2b8713e6824a69340ff09e66798ca19093844b116d00656178ccf9d6da26f1ec0bca242fea69c0ae845a1d6f4c3a3c0bd3474aebce59c273e8043f2d7dfb3b2b0de25c80df9cffae5f755077775739f997f35c256f37803aacb9eb52e6349f2df2bc1b130e7013e06d24348051a10ce8476738b3c5a34c02d9b4e2100bcf5ccd10e4530a31028a5d0c79a77049e78a4e5bc6cc51294b28b0b7625840f4af868d185529dc14f3ac8984d5abd7f90763e0c1461c51e8f2c7fc195e976ea6ec495f5fb301491a57ee3a2d8a34e5b15fe6690e08aa185dde662902f806e5d77e49115410f6e91827cb8be48eb62123601f318b521ef7f6040501c53a664156dfa1087e1b3415dae387033d950c98d9bea4956ac18db1b79bf3813b990bab046727e0d4fe7a852ab00db1c4a8b9cd636d6072f9d8d0e523361cd51871c549f0187cb8ec83f952bee9f536ff3465bc0e872566ac3fe2804cfd03b98ea4eb6407d6fee926b3b3771a3971e35c9bd7c02ae1ea07e6363265ccd7b7665e068717d206552fc1a0f7949f73a2985e2bd42af813a5a61d5a0d28a1230d7a100c03f486a30d37d395364672ac600107b5998df0cbf4667bab8a2d8", 0x1000}], 0x7, &(0x7f00000081c0)=[{0x70, 0x107, 0x6, "9d5e59345464572e06aa1de17c09c3b676d5c216b02cefbd460eee1d4650c000edfcb667c8684d2cc7e77c0045a2d3c1ee8f570fb3a90f0f08dbdb115d8859e31a3b135055dddfe515f02754cd25bc6545c64d2e600557e7433735800b"}, {0xb8, 0x1a1, 0x1, "808e40cba95e023fb21af9889a49d467e40a5ef08475ab7775089816f57cc3fad4536b9788622639cf240fdb02674cab63103aa2d1b64f0a967927d71c520777f9aeab04662b1f72ccdf5c20a562ccf8d864bc06b65d3421e0228670c8cb5fe61f79aac9d595216234eb39869eadcb5a0d15cef70737b4bb0ac952b2fcaa58e02d71ccae3188fb29ff9e72286be88ad9d72e5531839f3c272599f779e8d9b88df58200a550076712"}, {0x48, 0x107, 0x2cc, "4bad66c22c0c2dc5ff9069f3d3df73b0d63174681628265fafdf92d84bf76acc886b5150699cbaa838ca40cf1772c95cff5fecea"}, {0xf0, 0x114, 0x9, "fa359e4d34e69cc78d35750a4b652297f99474fac1d0e4bd277a8d79c5603fd62b2ebb950432cbd01b7819aa15b7005e045499e2a688fcea4c57532afc6a072cbc6015fe118326d027b71de00be376c9cb5d82fcc189a3c80e806efd075316f937a13d61f579fb7cea2ef8962ec629ebd85b555ebced6febc506f4baff398e6cf025957d93b89eaf37aea27c9c96a6001dad48b523aa9c348ee96d4df0ff623a892b34361ac97d02d64ec8b606503c0ebea301bfa17921b407f332d0f3b77b64bde7ff89a26d0f23b8db712c16c25c81b4c87cb5dd3a3f6560922d2a57"}, {0xe0, 0x119, 0x8, "d1e0c937480615c687918be4df81d356c63918026d1ea42645797479e1dcf6ad7996c23ced1cf700c0240824bb9484a79cb489ecdcd2b3b34e5fe110753f64a4a6abb6d19d2c6f704ede0709cdf28c8baeeb568c69fff297e673f57ceeb0cb45612f12a4818a01c1ef6ff4969609f886bbc0541c1f71745d9be04e3ac1cb3da1afc305c8177e9694e1a296a37c14107384163403607a39241a6f4d06cdd3c48585e041caef8e53a526f4524bcf4db8c77ab19efb4de0acd148d2d4fc524c9cd17350e0f1e5479fab67a1b44aa602f926"}, {0x1010, 0x109, 0x20, "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"}, {0xc8, 0x1, 0x7fff, "9930284099b71b68894514f218486a8572cc28ecde4624e2940655fc005b28d45459dd980c54fceabbde53392bb1a44033faa7c96cef58198510ed7215dc891f525cf51461af51f59fe0577c46f124245babeda598198425d109f2df65de5e98809b59a59d85838c08fe68a42b635685fcc197ce8ee89fa8fd3c2f0de6a7f072ed2475760c85716c6b160083a37b5b13bfcf583070137f530f4b4a68283c53e36cf6429deadea789b846bbbe6d43166b3717056741c33036"}, {0xa0, 0x84, 0x5, "f714988fbeaa63ab496a0eb74708c0497cc047207f8f5aa9713230adcfdce12db7139e762ff0ad8f5aff83039779b1407cb37be4550642392af236caa11e933812bf297687778ea89a3113e6f93f38a1eb7d44d3bf1abe9505ded55cb98f8416f38a4eaa4f66486b8809e09076a51946064eaa98acff1156bcb818108efdbe4d66d85ce8a2d19e49a40fe1ac6e0218dc"}, {0x28, 0x127, 0x7f, "8fd656074cb066b0176a241ca09b22a351016b629189e04b"}, {0xf8, 0x88, 0x5, "6e6d2fe20fd62f688a227c6c5fef410c4586cdd6835fb6f696ed58865af30a8114814037072cf42844fac197e7a0a0eb59647130c4a3773b48df68a35f0131644662ea741e5bbe39804e469051199b6081136e85de2431ab00fd925aba3b390dc2fe8048823283cf1bdd6720b6c47b11c4ea14394d8f2e45c01bd639f1fdd92ed2f9ab7f12458bf78cdd77ce4538296317976ccf32c78415487cbbe59d9f8bdfd2b7436176dc08d6373c2a05631e3b6ff9a2736e4e57d98ba738910ab0dd292585f180faaf6648e16ffae993f40360754673724cd240e837640732411c23fa5ae2c6"}], 0x15d8}}, {{&(0x7f00000097c0)=@l2={0x1f, 0x3ff, @none, 0x2}, 0x80, &(0x7f0000009a40)=[{&(0x7f0000009840)="757e332ef74deb2741e4c30bfd84ad1758d4ebaabc7bfcf37d1c5424b2b887dd7f7180c19f9302e4672452ca51db1bf199452bf20d8fa6e58b33166d0a53c1c5951a3c842623776163d9d4ef06cdc145a00071eeead00d439e19810502afac6e73bb075e9f0ccced2a6e0982a08dbfbfccea8a2b4eb860d1", 0x78}, {&(0x7f00000098c0)="ab6fd6b288d3a9bda0a2229a7c30d0f7bbd245b0f733dba033c00a65e716c0ea8a812690c26d6fe3dec7e70e7a43b53a407fcb1d08c537a5e4c00b6f2d60b593a68ad7b3186ae11901946b5fa632cd6ed25b700459790ebe2bc27f2cc72babece631e9ff0233fc521e7ae8edd51c0c7ee627e2779ca91dbf61f7b974a15b89051d6e1ca9ba40909c9da9ae1a015697ab8cf781e558be7cccddc7a44cfc7dfd9ddb1b8b826b65bfad48925f4c9a3d212b35", 0xb1}, {&(0x7f0000009980)="a0ba09b4bf3bdcd1153a613e037a08ac0453b95ebac86496f395f1e32ed72f706260b8be8e86918608eb4325b45bea2bed67decc94d1583d3c25adefb06d8dd128dad2ab486be59399c4aecec078367b184627de95ac633aa10951f7a6d4b4d1731fba4a5d8bfb870bacf4736ff61a24199b92ddd298066c505b341ca9c30275d753bf887e3e49fb7cff21d96cec7fc9af638073def28209ef76e3e81676a6b41a3920a69412585574e07f5c9c171b8cdb926b0b985a9578d747", 0xba}], 0x3, &(0x7f0000009a80)=[{0xa8, 0x115, 0x4, "7f5aa54ed402fc6f5e328146bd4a40c970b802d1660df3a558d3bfa3afd70ca2518d6fa5ee84179eba76636e59f6034c96cdf72d63e6bd8a866bfe59c20dbed9d2bee71062146d3528ede1d62daf1a1da2553b8273a11db0324915a1b7bd6e814fa5954258ee6f16a7e5e094e7b5db71b8c7edae4e2239080183c252888910cd4cbb597ad2a269f46b519a5b934adb6eca"}, {0x100, 0x114, 0x8a8, "245248c5d420be02f99579668e5b3f7081035deae481e47a3cb75fc5190d81c7a2a54a0a6add3a1e586f70e8935a1e288b0b3625eb09a379f9ab3f969aedabc297535453bb278f57ed282e88c4f6c148b7add58644d73b2ee2c813bfb6339fcca2c07c8f9831c8739f6d8034e7b456fc63900bc20fdf8f53ce1a78236a272b7d55aff7d16d9678f1e5a7bec2b5d9a543436c49835bdd7749f51cf73485219a1c752f13c179e31394cfbd8db96751773cf5abaeefcb65f689f6e4d1d10ba03724698fbefdde409fe2bdc66a72dab13e616b8882a53c40ce4f70546f6662ac71ae5a286e36c48b8a6aaebb73"}], 0x1a8}}], 0x8, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fallocate(r2, 0x2, 0x10001, 0xaa) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x25420, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x4, 0xffffffffffffffff, 0x0) dup2(r1, r3) 20:18:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x18}], 0x1, 0x2, 0x0) 20:18:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x14}], 0x1, 0x2, 0x0) 20:18:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x5000000) 20:18:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x16}], 0x1, 0x2, 0x0) 20:18:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@local, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r8 = dup2(r5, r5) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x4, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1f, 0x101, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x5, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x3f, 0x59, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0xfff, 0x3f}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6d, 0x80, 0x4, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x700, 0x8, 0x8001}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25020000004800018008000300000000001400020067656e657665300000000000000000001400020077673200000000000000000000000000140002006d6163766c616e300000000000000000480001800800030005000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000300000000001400020064756d6d7930000000000000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020068737230000000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f746f5f7465616d00000018000180140002006873723000000000000000000000000034000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="20000180080003000200000014000200766c616e3100000000000000000000003800018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 20:18:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x1a}], 0x1, 0x2, 0x0) 20:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x6000000) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x18}], 0x1, 0x2, 0x0) 20:18:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xe1, 0x1, 0x8, 0x6, 0x5, 0x3, 0x6, 0x8, 0x94, 0x38, 0x387, 0x7fffffff, 0x7fff, 0x20, 0x2, 0x5, 0x8, 0x5}, [{0x60000000, 0xe00000, 0x3, 0x3, 0x10001, 0x5, 0x3, 0x3212800}], "ba07539cd70c57d5194aa8916c3fb16956e8d3c50cf5fb6429cd76ec884ff0b02b18944e988b1a84c6b659bbce004b9e979f7263e98fc63548a16c84bc8dfb95e1443c7062e5fe0daf2c2e9ba5c38e7d285d3c5a8ce103882b8d58c765f8e2eaadf9f5e21ab254c1b27c63b32857db1b837b81e74eead5be448dd8118424101076a0c813cf4c9d202c53005685be5ce3fb3f481b96dc418b94c3debb3dac7bb99a5ad910", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9fc) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x1c}], 0x1, 0x2, 0x0) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x7000000) 20:18:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x1a}], 0x1, 0x2, 0x0) 20:18:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x1e}], 0x1, 0x2, 0x0) 20:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x8000000) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x1c}], 0x1, 0x2, 0x0) 20:18:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x22}], 0x1, 0x2, 0x0) [ 242.983834][T21283] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 242.993245][T21283] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 243.037729][T21283] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.046251][T21283] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.059003][T21283] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.067675][T21283] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 243.115413][T21283] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.124149][T21283] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x24}], 0x1, 0x2, 0x0) 20:18:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x1e}], 0x1, 0x2, 0x0) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x9000000) [ 243.166666][T21283] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.175578][T21283] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.199141][T21283] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.208884][T21283] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 243.277775][T21276] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.285889][T21276] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 243.311773][T21276] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.320184][T21276] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.332347][T21276] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.340750][T21276] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 243.382361][T21276] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.391836][T21276] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 243.409217][T21276] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.418939][T21276] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.432021][T21276] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.440698][T21276] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x26}], 0x1, 0x2, 0x0) 20:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0xa000000) 20:18:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x22}], 0x1, 0x2, 0x0) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x24}], 0x1, 0x2, 0x0) 20:18:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x28}], 0x1, 0x2, 0x0) [ 243.577140][T21343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.585372][T21343] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0xb000000) [ 243.620585][T21343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.629371][T21343] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.662743][T21343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.670835][T21343] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2a}], 0x1, 0x2, 0x0) [ 243.756025][T21343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.764433][T21343] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x26}], 0x1, 0x2, 0x0) [ 243.829504][T21343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.837773][T21343] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.850315][T21343] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.858715][T21343] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 243.915002][T21332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.923430][T21332] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 243.951204][T21332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.959937][T21332] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 243.973909][T21332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 243.982056][T21332] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 244.027595][T21332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.038132][T21332] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.065523][T21332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000000c0)={0x1, 0x80000000, 0x4e, &(0x7f0000000040)=""/78}) 20:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0xc000000) 20:18:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x28}], 0x1, 0x2, 0x0) 20:18:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2c}], 0x1, 0x2, 0x0) [ 244.074502][T21332] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 244.086562][T21332] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.094746][T21332] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2e}], 0x1, 0x2, 0x0) [ 244.164590][T21391] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.172789][T21391] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.193023][T21391] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.201133][T21391] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2a}], 0x1, 0x2, 0x0) 20:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0xd000000) [ 244.221223][T21391] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.229754][T21391] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x30}], 0x1, 0x2, 0x0) 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2c}], 0x1, 0x2, 0x0) [ 244.281281][T21391] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.289373][T21391] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.341729][T21391] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.350384][T21391] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 244.365813][T21391] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.374533][T21391] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 244.421377][T21385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.429816][T21385] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.460298][T21385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.469086][T21385] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 244.481833][T21385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.490131][T21385] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 244.518474][T21385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.529095][T21385] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.541146][T21385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.549317][T21385] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 244.561633][T21385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:26 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0x4a, 0x67, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x16000, 0x3ff, 0x9b, 0x9, 0xa3f, 0x4, 0xfff, 0x0, 0xbfae, 0x0, 0xffffffffffffc471}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) 20:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0xe000000) 20:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14008000}, 0x40400d0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2e}], 0x1, 0x2, 0x0) 20:18:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x32}], 0x1, 0x2, 0x0) [ 244.569757][T21385] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 244.643166][T21442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.652431][T21442] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.653946][T21442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.671949][T21442] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x10000000) 20:18:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x34}], 0x1, 0x2, 0x0) 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x30}], 0x1, 0x2, 0x0) [ 244.688055][T21442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.696218][T21442] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x36}], 0x1, 0x2, 0x0) [ 244.768921][T21442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.777703][T21442] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 244.832495][T21442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.842567][T21442] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 244.859902][T21442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 244.868152][T21442] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.031986][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.041091][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.052834][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.061668][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.073068][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.081196][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.096499][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.104744][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.116121][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.124670][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.136055][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.145486][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.210822][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.219351][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.231046][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.239359][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.250991][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.259026][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.272627][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.281004][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.292083][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x82) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x82) unlink(&(0x7f0000001540)='./file0\x00') sendfile(r4, r3, 0x0, 0xa198) sendfile(r2, r1, 0x0, 0xa198) lremovexattr(&(0x7f0000000140)='./file0\x00', 0x0) 20:18:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x11000000) 20:18:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/116, 0x74}], 0x1, 0x7, 0x3f6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x62200, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)={'syz1', "c43fd9579abae6110fb58539c7c69b7e83a5f162d55d4fe51d403f6ba7c6b38d6f8e864b56e2a7eb9c8d3b5980ff138d4537e7d8984e4e75f8dbba702c639ce5169b462e53fc7adee29b25d1b9b48f2e52fe16d58136c03b425ff2918235306713f810ec5a54fc1dd87030f169cfad1f3733e41cef77cc6a6b0408f4e4adb670b93ed5b67378cbc1382b357e85480c534292bfd2824c817064283cdc1a8e1656857175fdd46ec0aecda487afb0434bf348ba3616712d486985214363624f0e776f424a6b1e03e59dbe0017db595690de81e8970c33f6aa000df05fc60d4d9cbfe81e1cf7cc89e9e5dad639e14cde4b5f6651464828"}, 0xf9) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000020, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@cache_none}, {@cachetag={'cachetag', 0x3d, '\x0e'}}, {@msize={'msize', 0x3d, 0x81}}, {@privport}, {@aname={'aname', 0x3d, ','}}]}}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) dup2(r4, r5) 20:18:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x32}], 0x1, 0x2, 0x0) 20:18:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x38}], 0x1, 0x2, 0x0) [ 245.300108][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.311679][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.319892][T21438] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x34}], 0x1, 0x2, 0x0) 20:18:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x3a}], 0x1, 0x2, 0x0) 20:18:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f00000000c0)=0x7b) 20:18:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 245.394911][T21497] loop2: detected capacity change from 0 to 264192 [ 245.410486][T21497] FAT-fs (loop2): Unrecognized mount option "" or missing value 20:18:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x12000000) 20:18:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x36}], 0x1, 0x2, 0x0) [ 245.515828][T21526] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.525156][T21526] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.539130][T21526] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.547727][T21526] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.572422][T21526] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.580952][T21526] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.615442][T21526] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.624139][T21526] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.637471][T21526] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.648328][T21526] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.661341][T21526] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.669979][T21526] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.694818][T21520] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.703331][T21520] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.716336][T21520] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.725887][T21520] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.739082][T21520] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.750896][T21520] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 245.766648][T21520] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.775221][T21520] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 245.787386][T21520] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.796011][T21520] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 245.808076][T21520] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 245.816285][T21520] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', '\x00'}, &(0x7f00000000c0)=""/139, 0x8b) dup2(r1, r2) 20:18:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x3c}], 0x1, 0x2, 0x0) 20:18:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x38}], 0x1, 0x2, 0x0) 20:18:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x25000000) 20:18:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000001540)=""/262, 0x106}, {&(0x7f0000000200)=""/4085, 0xff5}, {&(0x7f0000001440)=""/220, 0xdc}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f0000000080)=""/86, 0x56}], 0x6, 0x1f, 0x9da) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, 0xa3, 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 245.955244][T21537] loop2: detected capacity change from 0 to 264192 [ 245.964899][T21537] FAT-fs (loop2): Unrecognized mount option "" or missing value 20:18:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x3e}], 0x1, 0x2, 0x0) 20:18:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x3a}], 0x1, 0x2, 0x0) 20:18:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x48000000) [ 246.040026][T21565] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.049214][T21565] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 246.068708][T21565] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.077006][T21565] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 246.089853][T21565] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.099453][T21565] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 246.140629][T21565] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.149486][T21565] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 246.179477][T21565] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x3c}], 0x1, 0x2, 0x0) [ 246.188531][T21565] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 246.200257][T21565] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.208551][T21565] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 246.247397][T21560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.255546][T21560] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 246.268623][T21560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.276997][T21560] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 246.289216][T21560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.297232][T21560] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 246.319471][T21560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.327505][T21560] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 246.342326][T21560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.350379][T21560] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 246.362008][T21560] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.371084][T21560] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 246.392499][T21578] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.400832][T21578] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 246.412582][T21578] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.421151][T21578] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 246.433832][T21578] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x42}], 0x1, 0x2, 0x0) 20:18:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x4c000000) 20:18:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x3e}], 0x1, 0x2, 0x0) 20:18:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r3) [ 246.442252][T21578] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x44}], 0x1, 0x2, 0x0) 20:18:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={0x0, 0x9, 0x3f}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x303340, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/226, 0xe2}, {&(0x7f0000000200)=""/173, 0xad}], 0x2, 0x200, 0x1f) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) renameat2(r3, &(0x7f0000000740)='./file0\x00', r1, &(0x7f0000000780)='./file1\x00', 0x4) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x4, @local}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@loopback, @in=@multicast1, 0x4e24, 0x1000, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x6, r6}, {0x5, 0x3, 0x53, 0x0, 0x7, 0x80000000000000, 0x101, 0x7}, {0x71c, 0xffffffffffffff50, 0x2, 0x7}, 0x4, 0x0, 0x2, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x0, 0x2, 0x8, 0x4, 0xe05141, 0x7f}}, 0xe8) dup2(r1, r4) 20:18:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x46}], 0x1, 0x2, 0x0) 20:18:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x42}], 0x1, 0x2, 0x0) 20:18:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x68000000) 20:18:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x44}], 0x1, 0x2, 0x0) 20:18:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x48}], 0x1, 0x2, 0x0) 20:18:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) dup2(r1, r2) 20:18:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x6c000000) 20:18:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2, 0x81, 0x5) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0x915, 0x5}) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40) dup2(r1, r2) 20:18:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x46}], 0x1, 0x2, 0x0) 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x4a}], 0x1, 0x2, 0x0) 20:18:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x74000000) 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x4c}], 0x1, 0x2, 0x0) 20:18:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 246.814576][T21664] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.823192][T21664] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x48}], 0x1, 0x2, 0x0) [ 246.869829][T21664] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.878183][T21664] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 246.894881][T21664] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.903811][T21664] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x4a}], 0x1, 0x2, 0x0) 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x4e}], 0x1, 0x2, 0x0) [ 246.946361][T21664] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 246.954816][T21664] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.005111][T21664] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.017635][T21664] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.031770][T21664] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.041199][T21664] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 247.092092][T21670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.100317][T21670] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.119795][T21670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.128418][T21670] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.141160][T21670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.149291][T21670] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 247.178236][T21670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9b, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x7a000000) 20:18:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x50}], 0x1, 0x2, 0x0) 20:18:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x4c}], 0x1, 0x2, 0x0) 20:18:29 executing program 2: umount2(&(0x7f0000000040)='./file0\x00', 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) r3 = socket(0x28, 0x1, 0x5) write(r3, &(0x7f0000000080)="da77d3df343f8308e77ee35dac34d0a722e8281b16502fe0e21c769330a3507b6101c49970dc8aa17a67774d4083b662d43a02c0a74de2a7b2d3c5f7fd69d8424219784a3fcb6e22583ca83854fd15f751bf6c072ecda71dc5736175d8a9d78347d0efbca7863ce0a21e52e9ba7d53c0e2a89847d15ec902ee3093bf3c5f9adc140b0b8448a10c85916a52ddab8fe442", 0x90) [ 247.186765][T21670] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.198047][T21670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.206201][T21670] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.217475][T21670] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.225815][T21670] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x52}], 0x1, 0x2, 0x0) 20:18:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x4e}], 0x1, 0x2, 0x0) 20:18:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0xffffffff) [ 247.332507][T21732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.341298][T21732] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.354235][T21732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.362496][T21732] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.374371][T21732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.383111][T21732] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 247.413095][T21732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.421766][T21732] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pkey_mprotect(&(0x7f000059f000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1, 0x80000000, 0x7) 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x54}], 0x1, 0x2, 0x0) [ 247.448422][T21732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.457404][T21732] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.468868][T21732] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.476901][T21732] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 247.515199][T21733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.523295][T21733] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.546939][T21733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.555458][T21733] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.572994][T21733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.581065][T21733] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 247.609571][T21733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.618652][T21733] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.631148][T21733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.639841][T21733] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.653965][T21733] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x82) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x82) unlink(&(0x7f0000001540)='./file0\x00') sendfile(r4, r3, 0x0, 0xa198) sendfile(r2, r1, 0x0, 0xa198) lremovexattr(&(0x7f0000000140)='./file0\x00', 0x0) 20:18:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x50}], 0x1, 0x2, 0x0) 20:18:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000d40), 0x2, 0x3) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000c80)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = fork() preadv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000940)=""/114, 0x72}, {&(0x7f0000000a00)=""/234, 0xea}, {&(0x7f0000000b00)=""/187, 0xbb}], 0x9, 0x3, 0x9) ptrace(0x10, r3) ptrace(0x8, r3) clone3(&(0x7f00000002c0)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0xe}, &(0x7f0000000200)=""/35, 0x23, &(0x7f0000000240)=""/32, &(0x7f0000000280)=[r3], 0x1, {r2}}, 0x58) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000040)=0x1) 20:18:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x56}], 0x1, 0x2, 0x0) 20:18:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 247.662546][T21733] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x52}], 0x1, 0x2, 0x0) 20:18:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x58}], 0x1, 0x2, 0x0) 20:18:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 247.776344][T21780] loop3: detected capacity change from 0 to 264192 [ 247.785790][T21780] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 247.790444][T21783] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.803083][T21783] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x54}], 0x1, 0x2, 0x0) [ 247.825018][T21783] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.834812][T21783] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 247.847790][T21783] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.856365][T21783] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 247.906933][T21783] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.916305][T21783] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 247.937639][T21783] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.945846][T21783] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x5a}], 0x1, 0x2, 0x0) [ 247.959167][T21783] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 247.967332][T21783] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 248.040103][T21774] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.048164][T21774] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 248.065994][T21774] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.074280][T21774] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 248.100797][T21774] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.109766][T21774] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 248.145033][T21774] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.155013][T21774] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 248.169551][T21774] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.179734][T21774] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 248.193100][T21774] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.201395][T21774] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:30 executing program 3 (fault-call:5 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x56}], 0x1, 0x2, 0x0) 20:18:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x5c}], 0x1, 0x2, 0x0) 20:18:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x35, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x444080, 0x3a) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x200101, 0x0) dup2(r4, r0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000100)=0x85) 20:18:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 248.424590][T21842] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.433080][T21842] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 248.450075][T21844] FAULT_INJECTION: forcing a failure. [ 248.450075][T21844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.452031][T21842] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.471245][T21844] CPU: 0 PID: 21844 Comm: syz-executor.3 Tainted: G W 5.13.0-rc1-syzkaller #0 [ 248.479699][T21842] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 248.490355][T21844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.490371][T21844] Call Trace: [ 248.490379][T21844] dump_stack+0x137/0x19d [ 248.490406][T21844] should_fail+0x23c/0x250 [ 248.504969][T21842] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.512821][T21844] should_fail_usercopy+0x16/0x20 [ 248.516507][T21842] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 248.521105][T21844] _copy_from_user+0x1c/0xd0 [ 248.521138][T21844] set_selection_user+0x30/0x80 [ 248.529730][T21842] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.534489][T21844] tioclinux+0xbf/0x450 [ 248.539900][T21842] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 248.551231][T21844] vt_ioctl+0x26e/0x2060 [ 248.551262][T21844] ? terminate_walk+0x261/0x270 [ 248.551282][T21844] ? path_openat+0x19ab/0x20b0 [ 248.558079][T21842] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.561310][T21844] ? avc_has_extended_perms+0x5d8/0x7b0 20:18:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x5e}], 0x1, 0x2, 0x0) [ 248.569808][T21842] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 248.574204][T21844] ? do_filp_open+0x17a/0x1f0 [ 248.587787][T21842] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.590716][T21844] ? fsnotify_perm+0x59/0x2e0 [ 248.596658][T21842] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 248.601963][T21844] ? __fsnotify_parent+0x32f/0x430 [ 248.601999][T21844] ? tty_jobctrl_ioctl+0x100/0x900 [ 248.670384][T21844] tty_ioctl+0xa24/0x1120 20:18:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x58}], 0x1, 0x2, 0x0) 20:18:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x4) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) sendto$inet6(r0, &(0x7f0000000100)="e8f3faa33623c6cfb2e567169235470d35a112c5aca5917bece3196f71590707227db63645db2e5e91dc868f97119bd8054532c3e80ca248719b05d85fe91ba0b0ab20f1218d439c582e1d96976fa58c9180ec8e", 0x54, 0x11, &(0x7f0000000200)={0xa, 0x4e20, 0x4a3, @rand_addr=' \x01\x00', 0xe1e4}, 0x1c) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) accept(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000380)=0x80) ftruncate(r2, 0x4) preadv(r3, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/154, 0x39}], 0x1, 0xffffff01, 0x0) [ 248.675304][T21844] ? selinux_file_ioctl+0x8e0/0x970 [ 248.680814][T21844] ? do_vfs_ioctl+0x7c2/0x1410 [ 248.686438][T21844] ? should_remove_suid+0x7c/0xc0 [ 248.692419][T21844] ? tty_get_icount+0x70/0x70 [ 248.697227][T21844] __se_sys_ioctl+0xcb/0x140 [ 248.702293][T21844] __x64_sys_ioctl+0x3f/0x50 [ 248.707309][T21844] do_syscall_64+0x4a/0x90 [ 248.711754][T21844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.718248][T21844] RIP: 0033:0x4665d9 [ 248.722278][T21844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.752120][T21844] RSP: 002b:00007f45aeb49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.764395][T21844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 248.775610][T21844] RDX: 0000000020000000 RSI: 000000000000541c RDI: 0000000000000005 [ 248.788844][T21844] RBP: 00007f45aeb491d0 R08: 0000000000000000 R09: 0000000000000000 [ 248.800536][T21844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.810859][T21844] R13: 00007ffefe94ff5f R14: 00007f45aeb49300 R15: 0000000000022000 20:18:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x60}], 0x1, 0x2, 0x0) [ 248.861487][T21856] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 248.870353][T21856] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 3 (fault-call:5 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) syz_open_pts(r1, 0x40400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x5a}], 0x1, 0x2, 0x0) 20:18:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}], 0x4, 0x7, 0x44a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000001240)=""/240, 0xf0}, {&(0x7f0000001340)=""/236, 0xec}, {&(0x7f0000001440)=""/103, 0x67}, {&(0x7f00000014c0)=""/81, 0x51}], 0x4, 0x13c2, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) preadv(r3, &(0x7f0000001580)=[{&(0x7f0000001540)=""/33, 0x21}], 0x1, 0x6ab2b4d2, 0x8001) dup2(r1, r2) 20:18:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x62}], 0x1, 0x2, 0x0) 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x64}], 0x1, 0x2, 0x0) 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x5c}], 0x1, 0x2, 0x0) [ 249.180988][T21896] FAULT_INJECTION: forcing a failure. [ 249.180988][T21896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.198029][T21896] CPU: 0 PID: 21896 Comm: syz-executor.3 Tainted: G W 5.13.0-rc1-syzkaller #0 [ 249.210284][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.223436][T21896] Call Trace: 20:18:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x108) [ 249.228632][T21896] dump_stack+0x137/0x19d [ 249.233954][T21896] should_fail+0x23c/0x250 [ 249.238815][T21896] should_fail_usercopy+0x16/0x20 [ 249.245451][T21896] _copy_to_user+0x1c/0x90 [ 249.251168][T21896] simple_read_from_buffer+0xab/0x120 [ 249.257261][T21896] proc_fail_nth_read+0xf6/0x140 [ 249.263771][T21896] ? rw_verify_area+0x136/0x250 [ 249.269408][T21896] ? proc_fault_inject_write+0x200/0x200 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 249.276047][T21896] vfs_read+0x154/0x5d0 [ 249.282129][T21896] ? selinux_file_ioctl+0x8e0/0x970 [ 249.287716][T21896] ? __fget_light+0x21b/0x260 [ 249.293831][T21896] ? __cond_resched+0x11/0x40 [ 249.299682][T21896] ksys_read+0xce/0x180 [ 249.304574][T21896] __x64_sys_read+0x3e/0x50 [ 249.309327][T21896] do_syscall_64+0x4a/0x90 [ 249.314653][T21896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.322593][T21896] RIP: 0033:0x41935c 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 249.328136][T21896] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 249.354656][T21896] RSP: 002b:00007f45aeb49170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.364832][T21896] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c 20:18:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 249.377009][T21896] RDX: 000000000000000f RSI: 00007f45aeb491e0 RDI: 0000000000000006 [ 249.389470][T21896] RBP: 00007f45aeb491d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.400176][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.411556][T21896] R13: 00007ffefe94ff5f R14: 00007f45aeb49300 R15: 0000000000022000 20:18:31 executing program 2: prctl$PR_SET_MM(0x23, 0x1, &(0x7f000050d000/0x2000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x66}], 0x1, 0x2, 0x0) 20:18:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x2, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x5e}], 0x1, 0x2, 0x0) 20:18:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xac, 0x1, 0x3}) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000200)=0x6e) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000240)}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/42, 0x2a}], 0x6, 0x2, 0x1) 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 249.543773][T21942] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.551855][T21942] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 249.576765][T21942] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.585198][T21942] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 249.596742][T21942] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.605690][T21942] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 249.638552][T21942] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.648321][T21942] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00c0}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x54, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x26}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c814}, 0x4840) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x8c900, 0xf9) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x68}], 0x1, 0x2, 0x0) 20:18:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b2f, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x60}], 0x1, 0x2, 0x0) [ 249.681500][T21942] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.689664][T21942] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 249.701779][T21942] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.709853][T21942] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x6a}], 0x1, 0x2, 0x0) [ 249.790711][T21974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.798918][T21974] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 249.814092][T21974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 249.822184][T21974] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x1, 0x0) r2 = syz_open_dev$char_raw(&(0x7f00000000c0), 0x0, 0x6001) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x403c1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000380)=[r4, r5, r2, r1]}, 0x4) ftruncate(r3, 0x0) r6 = geteuid() setreuid(r6, 0x0) fchownat(r3, &(0x7f0000000300)='./file2\x00', r6, 0xffffffffffffffff, 0x100) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xf03f896c1f24f224, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@cache_fscache}, {@fscache}], [{@measure}]}}) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r7) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x116) 20:18:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x6c}], 0x1, 0x2, 0x0) 20:18:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b30, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x62}], 0x1, 0x2, 0x0) 20:18:32 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x6, 0x9}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b31, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x6e}], 0x1, 0x2, 0x0) 20:18:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x64}], 0x1, 0x2, 0x0) 20:18:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000022a000/0x3000)=nil, 0x3000, 0x1, 0x1010, r0, 0xaf914000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) chroot(&(0x7f0000000240)='./file0\x00') r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fstat(r3, &(0x7f00000002c0)) copy_file_range(r2, 0x0, r3, &(0x7f00000000c0)=0x2, 0xfffffffffffff000, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) name_to_handle_at(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x6, 0x7, 0x7, 0x2, 0x7ff}}, &(0x7f0000000200), 0xc00) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280), 0x7d) 20:18:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b32, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x70}], 0x1, 0x2, 0x0) 20:18:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x8010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) 20:18:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x66}], 0x1, 0x2, 0x0) 20:18:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/123, 0x7b}, {&(0x7f0000000200)=""/186, 0xba}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f00000005c0)=""/176, 0xb0}], 0x6, 0x1, 0x9) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000780)={@id={0x2, 0x0, @b}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x140000, 0x48) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0x3, 0x640200) copy_file_range(r0, &(0x7f0000000140)=0x1a, r4, &(0x7f0000000740)=0x8, 0x6, 0x0) 20:18:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b34, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x72}], 0x1, 0x2, 0x0) 20:18:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x68}], 0x1, 0x2, 0x0) [ 250.230611][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.238980][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) renameat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 250.297508][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.305821][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 250.324054][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.332471][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 250.387167][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.395522][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x74}], 0x1, 0x2, 0x0) 20:18:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b35, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x6a}], 0x1, 0x2, 0x0) [ 250.434421][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.443115][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 250.469230][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.477485][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 250.686680][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.694879][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 250.707317][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.715574][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000100)=""/79, 0x4f}], 0x59, 0xd9f, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000300), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x406b, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x76}], 0x1, 0x2, 0x0) 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b36, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x6c}], 0x1, 0x2, 0x0) 20:18:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x180, 0x14) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fchdir(r4) dup2(r2, r3) [ 250.728444][T22057] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.737417][T22057] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b37, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x6e}], 0x1, 0x2, 0x0) 20:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x78}], 0x1, 0x2, 0x0) 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3a, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0), 0x0, 0x0, 0x0) r3 = pidfd_getfd(r0, r2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) renameat2(r3, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x2) 20:18:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x70}], 0x1, 0x2, 0x0) 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7a}], 0x1, 0x2, 0x0) [ 250.954621][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.963300][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 250.978466][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 250.987208][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 250.999447][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.009760][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.022335][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.030492][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0e7057d 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7c}], 0x1, 0x2, 0x0) [ 251.071636][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.081783][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 251.111479][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 251.120153][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 251.133920][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.146596][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.168913][T22127] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.177566][T22127] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0e7057d [ 251.248130][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.256726][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 251.256840][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.256884][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 251.259157][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.298013][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.318684][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.327471][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0e7057d [ 251.349402][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.358370][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 251.372771][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.381833][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x72}], 0x1, 0x2, 0x0) 20:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000240)={0x30000018}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='openpromfs\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1000) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200001, 0x2) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/252, 0xfc) 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7e}], 0x1, 0x2, 0x0) 20:18:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9c, 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0x8, r1) get_robust_list(r1, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f0000000140)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x16, 0x31, 0x7, 0x7d, 0x0, 0x12fa001, 0x4408, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2e5839aa, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x5cc6, 0x2, 0x10001, 0x0, 0xccd, 0x6, 0xcf, 0x0, 0x8, 0x0, 0x4}, r1, 0x2, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x101200, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x800009, 0x80010, r2, 0x3f12e000) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 251.393897][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.402013][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.415587][T22122] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.424245][T22122] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0e7057d 20:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x3, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x74}], 0x1, 0x2, 0x0) 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x82}], 0x1, 0x2, 0x0) 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b3d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x4, {0x3, 0x0, 0x0, 0x400}}) 20:18:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x84}], 0x1, 0x2, 0x0) 20:18:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b40, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 251.677040][T22206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.685525][T22206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 251.704534][T22206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.712800][T22206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000240)=""/172, 0xac}], 0x2, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mount(&(0x7f0000000200)=@sg0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup\x00', 0x40c80, &(0x7f00000003c0)='cgroup.threads\x00') ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000a00)={{r1}, "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"}) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x76}], 0x1, 0x2, 0x0) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x5, {0x3, 0x0, 0x0, 0x400}}) [ 251.718538][T22206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.732919][T22206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.776069][T22206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.784699][T22206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 251.827099][T22206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.835500][T22206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 251.835882][T22206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.835897][T22206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.918101][T22198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.926386][T22198] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 251.938243][T22198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.946666][T22198] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 251.958366][T22198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.966512][T22198] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 251.985080][T22198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 251.993590][T22198] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 252.004903][T22198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.012993][T22198] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.025524][T22198] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x86}], 0x1, 0x2, 0x0) 20:18:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x11, r1, 0xa9e4f000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@phonet={0x23, 0x28, 0xa6, 0xf4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="e8a2fd5230d07af9602530dc885f8d7d6f2b67d67c8ad2331a11888897eaeddfdb7c79e11e", 0x25}, {&(0x7f0000000380)="aa9e10702819d0d86dadcd8293d4f4d5c00bcfbc4c6a8edaf3cd98803782b3a4", 0x20}, {&(0x7f0000001a00)="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", 0x1000}], 0x3, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x20044000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) signalfd4(r4, &(0x7f0000000280)={[0x2]}, 0x8, 0x800) tee(0xffffffffffffffff, r0, 0x8, 0x1) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8800, &(0x7f0000000100)={0x70, 0x100078, 0x40000}, 0x20) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x12, 0x1b, 0x2f, &(0x7f00000005c0)}) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x3f, 0x5) 20:18:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x78}], 0x1, 0x2, 0x0) 20:18:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b41, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00006c2000/0x3000)=nil, 0x3000, 0x1000006, 0x30, r0, 0xc4fab000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='.#\x00', 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r2) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000200)="859b5de2addd0d447c758955ac981c66409baff3b97759e372120c8e6cc7dfeed7a7220915cced1892e2d3fe304efaf73ca63cbfecf10a43144ccc0fc98b84cee87a26218b981c64e499ca7aa2db055c41836b9f6641194658a2c60731c220870c718c586d79a8107686bfdfb31b60c01fd6de6759d0cc6186106fd63651d02831ac42d41cad0d2f1dba33853d8b6444df6a58f3534804ba17f9e3b81f4f0fe924ccad42ae75aab46836815d53e59ec9594a5a8ec74b6ec42952", 0xba}, {&(0x7f00000002c0)="56805279442f9608e77588589388bd9a9ffba7d6fa5498ba64492762f45794273a8fc1f743f178b1266ff6f9c5fd7ed8dec1c8e63b2f0cfe3db966a3ef656d2a8beaaa897c9c8f1faf49667221354bf342efd50beb88eab1a5f5cf7376f72f88d0cf6884176fe0df5c15627180d6764bb86ab6dd8590ef16a7902a308cbb3c0720d1ff49673a9cb5be822b5da5ab2f1e5c4c1eaad060080a2f917771dd4f2c275153574d6c984b026e920c20d4e951ece14560", 0xb3}], 0x2, 0x0, 0x0, 0x14}, 0x90) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x6, {0x3, 0x0, 0x0, 0x400}}) [ 252.033792][T22198] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7a}], 0x1, 0x2, 0x0) 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x88}], 0x1, 0x2, 0x0) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x7, {0x3, 0x0, 0x0, 0x400}}) 20:18:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b44, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x18d000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) pwritev2(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)="2a97754eb99b65ab16c3eb2ed07528e3914389f68349f782c87db815460fb37ba7146c8b683b6045e45fd5ddef43647f7a1c10b3f608d2e50719db1205d1fb2635934c012d8e0fff52d4d4adaf5b93b05f01b84c71615f671ff4", 0x5a}, {&(0x7f0000000300)="930d26a42657ae8d7cd58a236f46aefbb0a7886f5929cf79fad9ea038a756758740be3267694babdd5655286acc038976735a3efd2ec8e76d0983187b0c2c28b5a81392c0d5334a5e03f42b52695b07715a76ce28ac9b64e2576e3b67fc92be93075e8461baf04268c761f85cb1a01d2e1fe54232bc974ab560d1ba76307df648e53ae7ea282d4ac7cb118faeba142554601e2865be8820f331e7cd224aa2e86c6d945b55b10f25e5d79d7b7482d19d71682c621a4b1ee67", 0xb8}, {&(0x7f00000003c0)="be3aa27205e52a6fea19eaaed9740a8359395e7d6aa5171026bdc2e2f26dde4a9f4b10e88e6a9119bbdbc48f8adafac6ae2c67327613ca1d06ec1480da0c22ce60ab233271c7518f1ac4fcbf782deca5263d4e8a161663bbfda708e9bfcd0f3d08a711fa1389665ddf58aea067e6595166b3829da7e0db5edecc9f49358b01c3a3cd6ff5358ff6236fb40a0ffd64df45e9df12d561ac19a14fae722c5faf40a2ce3fd5066f510024a8bb78d1849ba485896cf26beb6d18783b989f76ae691c5944594d7345d259c32cb4008f0d5b7dcc2811ddcf5c2344da80365297e04e03fa0d5166df6a67afad3d0a0e42eda3bf7bb990d9b9", 0xf4}], 0x3, 0x6, 0x0, 0x12) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6101310}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1e}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x497}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x48e}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f000028f000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r3, 0xa6c1f000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2d1ee37) ftruncate(r5, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r6, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa, {0x3, 0x0, 0x0, 0x400}}) [ 252.162993][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.172045][T22288] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x8a}], 0x1, 0x2, 0x0) 20:18:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7c}], 0x1, 0x2, 0x0) [ 252.203191][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.211824][T22288] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.226324][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.235116][T22288] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 252.278650][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.287016][T22288] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 252.304917][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.313127][T22288] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x8c}], 0x1, 0x2, 0x0) 20:18:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b45, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 252.326248][T22288] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.334575][T22288] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x825, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/87, 0x57) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) vmsplice(r0, &(0x7f0000000500), 0x0, 0x19) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xb, {0x3, 0x0, 0x0, 0x400}}) 20:18:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) sendfile(r2, r0, &(0x7f0000000140)=0x4, 0x9) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x48) 20:18:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7e}], 0x1, 0x2, 0x0) 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x8e}], 0x1, 0x2, 0x0) 20:18:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b46, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x14) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) write$binfmt_elf64(r1, &(0x7f00000011c0)=ANY=[@ANYBLOB="7f454c46b9ad8400ffffff7f000000000200060009000000990300000000000040000000000000008603000000000000a1e10000050038000200e60a08000400010000000700000007000000000000000000000000000000ff030000000000000700000000000000ff7f0000000000000104000000000000c1b4d04dec06b207133e4f02778f777dc7c48f1a86370158bcf2409c853379a688a20ce95e3cb46268abc9c846f8909062513304f9371796660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082a9e1dd5b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000006c2a63a90b3eff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/1975], 0x7b1) mmap(&(0x7f0000240000/0x3000)=nil, 0x3000, 0x4, 0x20010, r3, 0x7e71000) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x82}], 0x1, 0x2, 0x0) 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x90}], 0x1, 0x2, 0x0) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xc, {0x3, 0x0, 0x0, 0x400}}) 20:18:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b47, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 252.532247][T22350] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.540430][T22350] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 252.553061][T22350] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.561415][T22350] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.573427][T22350] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.573447][T22350] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x7f, 0x81, 0x9}, {0x4ab3, 0x1, 0x6, 0x3}, {0x1, 0x7, 0x0, 0x3ff}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x78ea, &(0x7f00000000c0)={0x0, 0x2fd1, 0x20, 0x2, 0x36b, 0x0, r0}, &(0x7f00002f4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) fremovexattr(r3, &(0x7f0000000240)=@known='security.apparmor\x00') dup2(r1, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x0, 0x10, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0]}) mmap(&(0x7f0000149000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r4, 0xb0bf1000) 20:18:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x84}], 0x1, 0x2, 0x0) 20:18:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xd, {0x3, 0x0, 0x0, 0x400}}) [ 252.608360][T22350] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.608378][T22350] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:34 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x92}], 0x1, 0x2, 0x0) 20:18:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b48, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x86}], 0x1, 0x2, 0x0) [ 252.608405][T22350] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.608417][T22350] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.608441][T22350] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.608460][T22350] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b49, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 252.628104][T22362] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.628124][T22362] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 252.628154][T22362] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.628167][T22362] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.628231][T22362] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.628242][T22362] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 252.751222][T22388] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.751243][T22388] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 252.751276][T22388] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.751312][T22388] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.757484][T22388] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.757515][T22388] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 252.770099][T22388] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.770122][T22388] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 252.770152][T22388] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 252.770163][T22388] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 252.770186][T22388] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000a00)={{r0}, "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"}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r4 = open_tree(r2, &(0x7f00000000c0)='./file0/file0\x00', 0x8100) mount_setattr(r4, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)={0x74, 0x0, 0x81c169293eebfb4b, {r2}}, 0x20) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x94}], 0x1, 0x2, 0x0) 20:18:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x88}], 0x1, 0x2, 0x0) 20:18:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4a, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xe, {0x3, 0x0, 0x0, 0x400}}) [ 252.770202][T22388] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 253.064804][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.073308][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 253.086947][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.095622][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 253.107896][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.115945][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 253.116332][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.116347][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000da630b49 [ 253.145437][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.145458][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 253.145490][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.145502][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005cc000/0x1000)=nil, 0x1000, 0xa, 0x2010, r2, 0x5a829000) dup2(r1, r2) 20:18:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x96}], 0x1, 0x2, 0x0) 20:18:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x8a}], 0x1, 0x2, 0x0) 20:18:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000017020007002e2f66696c6130f0c2b7e4b1ccad117e7e20babe9f93aa85aa50da663bda47b5904ad205ebf98ca350dbf73f3e601e28e4d73ded4a8824695dac"], 0x10) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xf, {0x3, 0x0, 0x0, 0x400}}) [ 253.145527][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.145537][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 253.145899][T22420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.145911][T22420] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000da630b49 20:18:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x11, {0x3, 0x0, 0x0, 0x400}}) 20:18:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x26c00, 0x0) r2 = accept4$packet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x800) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000a00)={0x2, 0x7, @start={0x0, 0x0, "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", "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"}, [0x761d, 0x2, 0x20, 0x9, 0x3f, 0x0, 0x7fffffff, 0x1, 0x2, 0xb54, 0x6, 0x4, 0x9, 0x7fffffff, 0xffff, 0xc0, 0x2, 0xffffffff, 0x80, 0xa, 0x5, 0xff, 0x83, 0x7, 0x7, 0x6, 0x374, 0x3, 0xfff, 0x1ffe, 0xde41, 0xc4e, 0x9, 0xffff, 0x1bf, 0x101, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x7d, 0x1ff, 0xfffffffffffff429, 0x6, 0xfffffffffffffffc, 0x7, 0x1, 0x9, 0x5, 0x8, 0x8, 0x1, 0x6, 0x7, 0x8000, 0x101, 0x5, 0x101, 0x21bb, 0x6, 0x6, 0x4, 0x5ff, 0x5, 0x9, 0x3]}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000200)={{r2}, {@val={r3}, @actul_num={@val=0x2b, 0xffff, 0x4b}}}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x98}], 0x1, 0x2, 0x0) 20:18:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x8c}], 0x1, 0x2, 0x0) [ 253.422070][T22453] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.431139][T22453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 253.444916][T22453] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.453578][T22453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 253.469339][T22453] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.477765][T22453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xfdef}], 0x1, 0x2, 0x0) [ 253.529924][T22453] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.538161][T22453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 253.599510][T22453] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.608942][T22453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 253.620697][T22453] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.629071][T22453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 253.672352][T22491] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.680788][T22491] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 253.694003][T22491] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.703266][T22491] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000763000/0x2000)=nil, 0x2000, 0x2800000, 0x10010, r2, 0xfe532000) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r3) 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x4f, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x8e}], 0x1, 0x2, 0x0) 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2000059a}], 0x1, 0x2, 0x0) [ 253.715779][T22491] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.725178][T22491] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7ffff000}], 0x1, 0x2, 0x0) 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syncfs(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x18, 0x0, 0x0, 0x400}}) 20:18:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f0000000040)="18809e48149732943f70da4f67c9627e0b038c16cd76ddabbcfa20bdf639912ffc4ed24997bd26ab0a58ca50db2fadb35191219e2f6ae7e9587aa25181d90a98d5a0c07fbf03a911a37c015320f1fee255bf319ee4b06a01fa8e5da19cc3ba592a13bf15baa18c7967607811cd889d2afcbd213d89fb8e90c41bf4756e6ea72c570b5359f45993a1f6318c6cbdece4", 0x8f}, {&(0x7f0000000200)="44bcf01b21e25f54d4b9230983dc14099d6a7fa85025a6d1de136bae57c7276d30ab7b1e08dec4330df46e01764ddf665760283a7b24754c286c5aba1e35ada9578c98e82653ea09234161387d79edc5527e8b834e60ec4c5aa5eb274179d57028b8d51aa551b4b214d60b4d3e24b37f13a370f74cda351246d726c4b0fd1b1657da25fe312df584a0c1af0f1f24c27a786156f7042507137c5c4e74c705e62180ccae3d4d18505047d7b387c2a1fcea032fe3cef5e612618b35d0a98c0cf37370f2f8c29a9d3c4dc10c6dcbd91a94a886715906de3a", 0xd6}, {&(0x7f0000000100)="e605d4fcae436b6128c2cf0569f7a00446456446ebc3ef7641813d6ea50573ca492b69d0b34bea16daf40cc00358baa59320def54ec47398852110e5357187e54bef88849309dd68c15db643cdee8f5912d69f69b7", 0x55}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="7e073cc045f004563fef89b5a7637ed029279a47a3d98a65350e7f5ec354d10463dc9208500ff6051aa24f62d44d81b1c947667c41b964c82a80990910ab7f0e119774511b4fc0a2d28af2d640f8de65ada8e3444d6a7150f3217c15f505", 0x5e}, {&(0x7f0000002380)="df", 0x1}, {&(0x7f00000023c0)="d5b5b5480fd0bd9483452e1df5e7e9c2df60c5a0622bd4899284312c8b4e02685517fc3fe031b083d1fe46a325fb8a1ede2293c9ca9eb3ff9430e962f69ab9c7506f6f703df8539ead4c2a975800657d5d7968b5afd5e75c3bd7f06501e6835312eff2890c930ab898730d7a4cb6508e24b374b5435c36a187ee2ce577c620d3509a", 0x82}], 0x8, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b4e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x90}], 0x1, 0x2, 0x0) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xfffffdef}], 0x1, 0x2, 0x0) 20:18:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x92}], 0x1, 0x2, 0x0) 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b52, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 253.935464][T22533] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 253.944084][T22533] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 253.972585][T22533] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='udf\x00', 0x10208c1, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 253.981663][T22533] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 253.993299][T22533] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.002254][T22533] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r0, 0x0, &(0x7f0000000680)="b38ed80b784bcc4a0f0adfb1c31fdb560603e88dad6312b8f7868c553468843b2f49edfd1508cc585ed3394628810217c79328a92a4107cdb27596b9839be30833a3456e64fff20168198fd16ecf26b85721e835dbf6b7b16e623daa28ea0ee2aed5e3b86268cb439f6d0c1269536c8701cb7ab572ab27f5fe", 0x79, 0x20000000}, 0x6) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000400)=""/176, 0xb0}], 0xa, 0x7, 0x20) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040)='exofs\x00', 0x8002, 0x0) r1 = open(&(0x7f00000007c0)='./file0/file0\x00', 0x4000, 0x5) ioctl$FITHAW(r0, 0xc0045878) r2 = socket(0x8, 0x4, 0x2) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000002a00)={0x2, 0x7ff, @status={[0x1, 0x9, 0xa6, 0x9, 0xfffffffffffff6f6, 0x6]}, [0x221, 0x1, 0x7, 0xb2a3, 0x100000001, 0x39, 0x5, 0x3, 0x2, 0xfffffffffffff8c1, 0x0, 0x8, 0xfff, 0xfffffffffffffff9, 0x4, 0xffffffffffffff81, 0x3, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x100000000, 0x1, 0x1, 0xf473, 0x9, 0x1f8000000000000, 0x9, 0x8000, 0x7, 0x38b8543b, 0x7ff, 0x2, 0x1, 0x5, 0x100000001, 0x1, 0x5, 0x8001, 0x2, 0x100000000, 0x8000000000000000, 0x7fffffff, 0xff, 0x7fff, 0xfff, 0x5, 0x81, 0x3, 0x100, 0x5, 0x0, 0x2, 0x5, 0x7, 0x2, 0x0, 0x153aa105, 0xff, 0x69, 0x6, 0x100000001]}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x400000, 0x31) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffff7f, 0xc0c00) openat(r4, &(0x7f0000000780)='./file0\x00', 0x4800, 0x21) 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xfffffffffffffdef}], 0x1, 0x2, 0x0) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x2, 0x0, 0x400}}) [ 254.030242][T22533] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.038338][T22533] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.060848][T22533] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.069104][T22533] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b62, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 254.082989][T22533] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.091526][T22533] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 254.151253][T22523] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.159373][T22523] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.176607][T22523] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.186086][T22523] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 254.201268][T22523] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.210103][T22523] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 254.253790][T22523] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.262143][T22523] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.273360][T22523] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.282053][T22523] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 254.293632][T22523] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xffffffffffffffff}], 0x1, 0x2, 0x0) 20:18:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x94}], 0x1, 0x2, 0x0) 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b63, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x3, 0x0, 0x400}}) 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x8) mmap(&(0x7f0000650000/0x4000)=nil, 0x4000, 0x8, 0x30, r4, 0xc3569000) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x80ffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2401, 0x7) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) r4 = geteuid() setreuid(r4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x7, r3}, {0x2, 0xf, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x4}, {0x2, 0x1, r4}, {0x2, 0x7, 0xee01}], {0x4, 0x2}, [{0x8, 0x3, r5}, {0x8, 0x4, 0xee01}, {0x8, 0x0, r6}], {0x10, 0x7}, {0x20, 0x7}}, 0x6c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) [ 254.302147][T22523] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x4, 0x0, 0x400}}) 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b64, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x2, 0x2, 0x0) 20:18:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x96}], 0x1, 0x2, 0x0) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x7, 0x0, 0x400}}) 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) sendfile(r3, r4, &(0x7f00000004c0)=0x7, 0x1200) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/205, 0xcd}], 0x7) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x8, 0x2, 0x0) 20:18:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x98}], 0x1, 0x2, 0x0) 20:18:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x300, 0x0, 0x400}}) 20:18:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b65, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x404, 0x0, 0xf}}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000a00)={{r1}, "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"}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c014}, 0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 254.530198][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.538955][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.576982][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.585618][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 254.597863][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.606019][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 254.640948][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.649796][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.662285][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.670672][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 254.682631][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.691416][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 254.713742][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.722590][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.736245][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.746738][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 254.759425][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.768044][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 254.781978][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.791803][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 254.804100][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 254.812682][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 254.824857][T22597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf67, 0x2, 0x0) 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x700, 0x0, 0x400}}) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b66, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xfdef}], 0x1, 0x2, 0x0) 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000100)=0x1ff) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x20) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 254.833171][T22597] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x2000, 0x0, 0x400}}) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b67, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf69, 0x2, 0x0) 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) dup2(r1, r2) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x2000059a}], 0x1, 0x2, 0x0) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x7ffff000}], 0x1, 0x2, 0x0) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b68, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20, 0x79) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "8bebeb894f74c3"}) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/730], 0x2df) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000a00)={r4, 0xfff}) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf6b, 0x2, 0x0) [ 255.005816][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.013921][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.029145][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.038009][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xfffffdef}], 0x1, 0x2, 0x0) [ 255.052699][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.061493][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 255.074384][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.083990][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000057c0b671 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xfffffffffffffdef}], 0x1, 0x2, 0x0) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b69, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 255.121456][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.129771][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.158856][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf6d, 0x2, 0x0) [ 255.167022][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 255.182010][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.190550][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 255.201718][T22708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.211735][T22708] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000057c0b671 [ 255.273126][T22746] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.282558][T22746] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r1, r2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x7, 0x40, 0x4, 0x0, 0xfffffffffffffff7, 0x10, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x3f, 0x2}, 0x10, 0x1000000010000000, 0x200, 0x5, 0x3, 0x80, 0x7ff, 0x0, 0x4, 0x0, 0xcd1e}, r4, 0x4, 0xffffffffffffffff, 0x8) 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x2, 0x400}}) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b6a, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf6f, 0x2, 0x0) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0xffffffffffffffff}], 0x1, 0x2, 0x0) 20:18:37 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{0x2, 0x9}, {0x3, 0x2}, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0xd1f, &(0x7f0000000200)={0x0, 0x6862, 0x10, 0x1ffffe, 0x2000000}, &(0x7f000012f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f00005f6000/0x3000)=nil, 0x3000, 0x8, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x411}, 0x1}, 0xfff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r9, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf71, 0x2, 0x0) 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x3, 0x400}}) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x2, 0x2, 0x0) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b70, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/58, 0x3a}], 0x9, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 255.402790][T22775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.411095][T22775] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.428195][T22775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.437635][T22775] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 255.452022][T22775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.462306][T22775] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf73, 0x2, 0x0) [ 255.500312][T22775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.508973][T22775] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.521528][T22775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.529658][T22775] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 255.543854][T22775] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.552365][T22775] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x1010, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000001200)=""/254, 0xfe}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x5, 0x8001, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x8, 0x2, 0x0) 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x4, 0x400}}) 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b71, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf75, 0x2, 0x0) 20:18:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf77, 0x2, 0x0) 20:18:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x7, 0x400}}) 20:18:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 20:18:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x500, 0x2, 0x0) 20:18:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b72, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 255.684479][T22826] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.693195][T22826] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.713383][T22826] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.722025][T22826] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 255.740541][T22826] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.750238][T22826] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 255.777928][T22826] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfa, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 255.786320][T22826] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.820072][T22826] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.828969][T22826] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 255.842771][T22826] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.851116][T22826] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 255.893931][T22854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.902561][T22854] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 255.914476][T22854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 255.923236][T22854] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 255.935669][T22854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:38 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x1f, 0x1, {0xffffffffffffffff, 0x3, 0x81, 0x3, 0x100}, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/33, 0x21}], 0x6, 0xd9f, 0xfff) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 20:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x300, 0x400}}) 20:18:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf79, 0x2, 0x0) 20:18:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf67, 0x2, 0x0) 20:18:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0x5}, 0x16, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfb, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 255.944371][T22854] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5409, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x700, 0x400}}) 20:18:38 executing program 4: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000004c0)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) flock(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x141140, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000380), 0x0) fcntl$setstatus(r3, 0x4, 0x6800) r4 = socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='coda\x00', 0x801005, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x4, 0x5}, 'port0\x00', 0x33, 0xc0000, 0x745, 0x5, 0x4, 0x10, 0x1000, 0x0, 0x6, 0xa2}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000800000000006000000000000000000000081000000050000000000000003000000000000000100000000000000030000000000000000000000004c0000000000000000000002050000000000000000000000000000ff01000000000000b7ce000000000000040000000000000000000000000000000000000000000000040000000000000000000000000000001e000000000000003b0d0000000000006507000000000000000000e6ff00000000000000000000000802000000000000000000000000000003000000000000000600000000000000020000000000000000000000000000000000000000000000021100000000000000000000000000007f00000025545c740f94b6000000000000000000000002000000000000000000000000000000000000000000000000010000000000000000000000000000f78cf417c8d7216cdd8619ce00"]) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340), 0x2, 0x2) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f000073b000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x8) 20:18:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf69, 0x2, 0x0) 20:18:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf7b, 0x2, 0x0) 20:18:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 256.157578][T22873] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.165724][T22873] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.192440][T22873] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.201145][T22873] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.213485][T22873] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.221936][T22873] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 256.249241][T22873] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.257767][T22873] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.269375][T22873] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.277578][T22873] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.288862][T22873] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.297944][T22873] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 256.316954][T22867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.325104][T22867] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.337671][T22867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.345702][T22867] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.357738][T22867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.365824][T22867] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 256.379575][T22867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) dup2(r1, r2) 20:18:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf6b, 0x2, 0x0) 20:18:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x40, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x8009, 0x0) 20:18:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf7d, 0x2, 0x0) 20:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x2000, 0x400}}) 20:18:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 256.389382][T22867] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.400971][T22867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.409291][T22867] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.421922][T22867] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.430486][T22867] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf6d, 0x2, 0x0) 20:18:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf7f, 0x2, 0x0) [ 256.493305][T22922] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.501397][T22922] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.517067][T22922] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.525218][T22922] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x402}}) 20:18:38 executing program 4: setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000140), 0x2, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 256.530286][T22922] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.546003][T22922] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf6f, 0x2, 0x0) [ 256.594756][T22922] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.602949][T22922] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.627332][T22922] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.636166][T22922] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.651215][T22922] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.659659][T22922] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 256.708697][T22918] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.717042][T22918] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.729645][T22918] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.738045][T22918] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.751082][T22918] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.759599][T22918] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 256.774228][T22918] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.782296][T22918] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.795767][T22918] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x4, 0x7fffffff) write$P9_RLERROR(r4, &(0x7f00000000c0)={0xb, 0x7, 0x0, {0x2, '\\\xd5'}}, 0xb) dup2(r1, r2) 20:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x403}}) 20:18:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 20:18:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf81, 0x2, 0x0) 20:18:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf71, 0x2, 0x0) [ 256.804214][T22918] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.815315][T22918] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.823745][T22918] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x540f, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf73, 0x2, 0x0) 20:18:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xfff, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000200)="16526144fe8dd8165fb2e032fe8985bb145d803ea4ed85196eb59ba3b10b0a426a0aed9b1eeafab78524384739610be3d4a3234738d4e2485b58acb85fb8605e6b1800342435ecd08c52265d1ad6e548ea236ffd13e1314898d8b666dacf4d71c6f2120d3bd4215618370e84a8ec17fd5e724dceeddb6179a69ccedd0a", 0x7d, 0x1}, {&(0x7f0000000280)="a6be3fc6fb2f5185b3b20746249bdb18783df4abb28ed44e1c4827f5122d4cf9106fb72f89efbfff6d226bdf58acc3bc3bd7869f0a8881d203f2379c85947d1eec3bd327182fdc4f9ad5dc429ca061f0366a5400ad3b50df8044a748ae82d34216f5354af7e936cd8e026bb64934ba33fdafa7594129d850e28e20bc5c9db9f669ceaf97240a77df0c3235ec5d33697a1c05b2f14b", 0x95, 0x9f25}, {&(0x7f0000000a00)="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", 0x1000, 0x785}, {&(0x7f0000000340)="3cfe24c6252eb8dd75ed5f5bc212eb7170aa85f549f40a095bf7dbea7f8e368284d8f4c6a0c6be2eefec07491230378331ca446a057d595717954253561f6a114356b4e4756ba492e5335f74ae3e724289c19f133093364fb36c0ca5f89479a08f21c71aaf30b274ea5a3d1401f4e8081ae30fc80a0e31eeccffed1aa4ce9d4fb91ff738b1a10d65f6728c4f8f58a4fd7a36a07e61bc5e9c9e4df41e336f66c5c6b822f85ae706a85561bcc4989771a3bb874095c28b6de3eeb13be4f782366180fbfef650a1b03613d76c9fa493ec5f4d153b0b20c3", 0xd6, 0xfffffffffffffffd}, {&(0x7f0000000140)="3348be6d1719d94b81312d576117961fbd29797ac39d26f4c9d13719f7d505c3d79f1488a0917e", 0x27, 0x401}, {&(0x7f0000000440)="d5a28a1e1dcebb8832bdbbfafca196da226c4e9f06407709ecfe47f877e9c7edef", 0x21, 0x20}], 0x2240c0, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@nonumtail}, {@shortname_winnt}], [{@euid_eq={'euid', 0x3d, 0xee01}}]}) renameat2(r3, &(0x7f0000000680)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000700)=0x2, 0x7) 20:18:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf75, 0x2, 0x0) 20:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x404}}) 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf83, 0x2, 0x0) [ 256.920650][T22978] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.928984][T22978] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 256.948465][T22978] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.956612][T22978] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 256.968027][T22978] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 256.976199][T22978] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 257.018703][T22978] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.026909][T22978] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.054814][T23002] loop4: detected capacity change from 0 to 16383 [ 257.059406][T22978] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.070786][T22978] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.070885][T22978] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.070898][T22978] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xd8, 0x72, 0x4, 0x3d, 0x0, 0x100000000, 0x40920, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22d36a3e, 0x0, @perf_config_ext={0x3, 0x100}, 0x0, 0x7, 0x0, 0x0, 0x35, 0x4, 0x3dc, 0x0, 0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x5, r4, 0x8) dup2(r2, r3) 20:18:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5410, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf77, 0x2, 0x0) 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf85, 0x2, 0x0) 20:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x407}}) 20:18:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 257.095488][T23002] loop4: detected capacity change from 0 to 16383 [ 257.104067][T23017] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.129212][T23017] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.140459][T23017] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.149953][T23017] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5412, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf87, 0x2, 0x0) 20:18:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf79, 0x2, 0x0) 20:18:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x229081, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf89, 0x2, 0x0) [ 257.309172][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.317867][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.335959][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.344026][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.355808][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.365065][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 257.406529][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.414826][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.427269][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.436482][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.449107][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.457514][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 257.501252][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.509302][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.522144][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.530843][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.542859][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.551782][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 257.566181][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.574576][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.586147][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000200)="c12340fb3a31501da7d86d03cf519479c3275de085dde079320d96c4e8d9c3a02cfc3b5a2ec4ccf43e03260898a1b8d25fbf9188b62a673ea0d540f7cf8010a3956bdc1674936ddf2a0036b47690f56b01a830f9dced5068fa7b46dfdcbb4608f0be832b724582e5b3766e9578c0bc3c9ff1d3b375c2d3d7c8e90995a98110a30e3d792a14446924e214764643c270aadd1c28b71d365f79140189d310722688d0673fa2ae0011dcce6c46759bae306a580e75105e2b133371ef5cc2d3d852cce75674ede6e50a809a3d68bbe3156ca7c72216ee01b225d4b679c9d09cd6a1f4690792410736fa3e", 0xe8, 0x1}, {&(0x7f00000000c0)="6af4c66caba55add6c7712928e4efc3e0906008aa2404c8109fb24ab74acfd82eea0b922490acf7e", 0x28, 0x9}, {&(0x7f0000000100)="4ba928581e7b8cb7abc8ad6909b9fabeedd8f77c11ec2ab130583139cd365aacbe6cd684e81c9383c45fc013", 0x2c, 0xbea}, {&(0x7f0000000140)="852fb7f9c458d39675976626185866938f7f", 0x12, 0x9}, {&(0x7f0000000300)="c14457f2239cfa080bbce8d5a2a5ae7e42aa4e2044184340975f87fded051673cf1256f13717a6f13ecb1b229b86d95ea0befa614a601a59e4458d3cf44c33b7a541d3b544d4", 0x46, 0x6}, {&(0x7f0000000380)="6c0bba6967e60a8115cf8cfa8684b41cd69776afa86cdd1bdb64a418c63b245f698a77be63bc6b3ab8a51ad7259f2e05b22875475fafbf47e4", 0x39, 0x3}], 0x8804, &(0x7f0000000480)={[{'**+$'}, {'+-#{{]'}, {}, {'{@+'}, {',/}!/$'}, {'\'[-'}, {'}{-!\xfb'}, {'+$-\'^^\\}\'.-@'}], [{@dont_appraise}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '\xd6'}}, {@dont_appraise}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) mmap(&(0x7f0000659000/0x2000)=nil, 0x2000, 0x1000007, 0x10, r2, 0x9e07d000) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r3) 20:18:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5413, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf7b, 0x2, 0x0) 20:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x2}}) 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf8b, 0x2, 0x0) 20:18:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r1, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f00007bf000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0x10000000) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x7, 0x9, 0x1, 0x20, 0x0, 0x3, 0xe2182, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x20, 0x5}, 0x124, 0x81, 0x8001, 0x3, 0x7974, 0x2, 0x2492, 0x0, 0x100000, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0x9, r0, 0x81c0bc38269fe54b) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r4, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="3a210ba31e1c7a551bbed6e6ef237fa71d8fbbf7baa3c095aae950fe8fecf2194d9e440dc844e6c29f45e1002bd73b6665aa6663d1f3c466d373773f10015438bd3a74e2e72603c8b62ee77b5dcfcc08453dd8a05cefce441d6f9bb3b5bbfd77ef4609c008c5172466a417f44c2e8fab1a10efb7b5ab9c0cdf5d4c6dbde95a15d7c58fad3df257b95406994c931524194f32d587e53c36e9907dcc21c9ed6c3e2067cb1314a8e9e30b0deba20a0b792581c46474cc16de04f85e9fe4b176dc098f65471233ec624f0b3931856a30dc8ed100d312bb89c5bb4522b947b55c52985c986a59dabc280ae53faac7efad21c3ea89464693", 0xf5}, {&(0x7f0000000300)="aabc620d13fca02c6298fbb7d4563f590a7b8913a8831ec74e09db116e216241c963013aa3684f61cb0f4c6cc49967249eade3b16d3d91ff19f1b8dccc6ab87a6812c72f43c12dd17a3e5921771eaf945a1ef1561c8d70da75260bee0d9a13b3b9fce0e52361d265e6e46adbe24bbb0c673abf92656acbfd4bc2e22c4a2a4db8c560bebcf136dd7fdbd8582fd3c94ec3808b213056921d82aa737aa53fe2962a2cd84ec94b07d658b0af57c76aa5705152d536bade107adeebca23a0dee8f557a1db88e9095e0b27f8897b33", 0xcc}, {&(0x7f0000000140)="d0e47a55eb013c34263846204b82c70e3f4e94cd40667504a5fd3ad938ade1f6286421c572a28f4d315fd82456362d025b0816d5e54118", 0x37}, {&(0x7f0000000400)="a927cf16c41f46d67eda40c792338d5c6ae9697ca9be15b46e3fa4a39c214ec0da090b104bbcb9670d9f508b687e979df6ee0061151a7549bd6b5d14ae0404ce57aba24c24df11", 0x47}, {&(0x7f0000000480)="309f188cd62d674b7e755043f830469ccf512483aafb81ca2a0b87ef2f7290e2d009a309eff5a2db257fa3e165f6b7394f7e5784199c8fd0aa", 0x39}], 0x5, &(0x7f0000000640)=[{0x50, 0x119, 0xf9, "2a2297302136f8cb3131abcbdbbc1f5661cb42ab4c591354ab9918101c95884fb4b738e98ec0ed89ec75dc876925f58a2b65f50d5bfcb8cfd51799"}, {0x40, 0xff, 0x10001, "e713d55c510cecc8f35d3dd9806246e7e060558a8e53d8d3c1bf75e3cb87a631438e5f0fcd6d992aeb39ff20100e68f4"}, {0x108, 0x107, 0x8001, "c818a475638cb7a49bc3f2a47d1c56dff8c94ee5f4a9d47f2af24e94ecc595d50702dc215555addd01da2f084fc9bd8a1fffb5f3845a0a3671ef8d149d3e497ff189cd5ac54d2d3f45ef6e281f1fd4b4a94d74ba5a45536fecd1b3d693394b6dc9b99273ca85395905d4fe420fa0bee6c77f12da69a68d10579d0a556c9c1529ab5500c4d5a4abc1fd16808364b248d22c8a3f284ee7bfa2854101c80e63fbdff6654939f9770c6b7ef700006431ff734550c87f7fee5641d9d22c0721d556b3add2bcba75c00cf518e5ff901614fa2ddb58a24e603ea5f2defb80676d3240d404ad3a94b12c682ce33f02309a2c64e6351d5cddeb"}], 0x198}, 0x0, 0x4001, 0x1}, 0xe2) r5 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 257.595357][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.607139][T23027] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.615677][T23027] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf8d, 0x2, 0x0) 20:18:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5414, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x3}}) 20:18:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r1, &(0x7f0000000400)="e9c0b8c58bed030ad9b48f399e5540356eb3cf63293ac4196c506997ba064cb5c26f48792c83e4c5aa9e3d7589d420a2d7f87019d1983ee46d010c2ee078d3ea752d23ab33569beb8beed6423eb7b3289f15781e092fb001dd1201fadf6ae5a8c8ed2e2d951b4d29b28e70828988d0cdf46ca0645767af521db9b73ff993a9c662e778ca454f67e66f7913649dcffc3dfb4d2ed235d6584d9b07ba346a0a7c0ca23495350f32290477f92da5e5146c6c425144740ba1adbfdffeef9cdb874d411a811a571c47f7a9fd7a", 0xca, 0x24000000, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 257.682699][T23083] loop2: detected capacity change from 0 to 11 [ 257.701214][T23083] nfs4: Unknown parameter '**+$' 20:18:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf7d, 0x2, 0x0) 20:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x4}}) [ 257.741154][T23083] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.749709][T23083] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.791111][T23083] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.799715][T23083] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.811173][T23083] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.819519][T23083] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 257.868795][T23083] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.877389][T23083] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.890344][T23083] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.899219][T23083] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 257.901264][T23083] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.919475][T23083] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 257.945035][T23120] loop2: detected capacity change from 0 to 11 [ 257.951961][T23120] nfs4: Unknown parameter '**+$' [ 257.961112][T23077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.970025][T23077] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 257.981713][T23077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 257.990069][T23077] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 258.001694][T23077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.011287][T23077] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 258.025377][T23077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.034779][T23077] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 258.046589][T23077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.054934][T23077] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000750000/0x1000)=nil, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0xdd14000) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x42, 0x20) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r3) 20:18:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5415, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf8f, 0x2, 0x0) 20:18:40 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/94, 0x5e}], 0x5) ftruncate(r0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x20) r1 = openat(0xffffffffffffffff, &(0x7f0000000740)='/proc/self/exe\x00', 0x20280, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) ioctl$CHAR_RAW_REPORTZONE(r3, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="7f00000000000000020000000000000000000080000000000800000000000000a79e20ddff348bf63087f388fd000000000000000000000000000000000000000000000000000000000000000000000008000000000000000700000000000000510000000000000001027f0700"/144]) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000100)='threaded\x00', 0x2) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140), &(0x7f0000000200), 0x2, 0x2) 20:18:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf7f, 0x2, 0x0) 20:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x7}}) [ 258.067848][T23077] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.076306][T23077] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x300}}) 20:18:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf91, 0x2, 0x0) 20:18:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5416, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf81, 0x2, 0x0) 20:18:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xbfc904529450dfbc, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f00000b0000/0x2000)=nil, 0x2000, 0x3000005, 0x10, r3, 0x551c000) dup2(r1, r2) 20:18:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5417, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x700}}) 20:18:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf93, 0x2, 0x0) 20:18:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x70) readlinkat(r1, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580)=""/4096, 0x1000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000001200)=""/190, 0xbe}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000001380)=""/225, 0xe1}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}], 0x9, 0x9f1, 0x608) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 258.401313][T23181] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.409431][T23181] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 258.424742][T23181] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.432900][T23181] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 258.444564][T23181] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.453073][T23181] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 258.476524][T23181] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.484966][T23181] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 258.498131][T23181] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.506409][T23181] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 258.517652][T23181] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.525756][T23181] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 258.543226][T23193] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.552007][T23193] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 258.563855][T23193] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.571919][T23193] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 258.583335][T23193] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.591718][T23193] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='f2fs\x00', 0x1b22810, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x310c00, 0x1) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x12) 20:18:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x2000}}) 20:18:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf83, 0x2, 0x0) 20:18:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf95, 0x2, 0x0) 20:18:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5418, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8480}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf97, 0x2, 0x0) 20:18:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 258.751746][T23206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.760059][T23206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 258.771921][T23206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.780293][T23206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf85, 0x2, 0x0) [ 258.795423][T23206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.804232][T23206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf99, 0x2, 0x0) 20:18:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf87, 0x2, 0x0) 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 258.857405][T23206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.865720][T23206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x7e) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0xc3d, 0x2, 'client0\x00', 0x4, "f1c8c765bc4a035a", "80bb5ba0b79720b9171c4e1864b41e6514dfb01f9ca67fac18dc37bb75b841b3", 0x401, 0x1f}) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x2}}) [ 258.900137][T23206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.908597][T23206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 258.922834][T23206] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.930894][T23206] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf9b, 0x2, 0x0) [ 258.989612][T23200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 258.998743][T23200] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.021534][T23200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.030213][T23200] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.042794][T23200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.053849][T23200] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 259.091836][T23200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.100529][T23200] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.112779][T23200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.121371][T23200] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.132918][T23200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='openpromfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf89, 0x2, 0x0) 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x480802, 0x40) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x80, 0x8000}, {0x1, 0x4}]}, 0x14, 0x2) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/147, 0x93) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340), &(0x7f0000000380)={'L-', 0x9}, 0x16, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) lseek(r3, 0x7ea6, 0x1) 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x3}}) 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf9d, 0x2, 0x0) [ 259.141414][T23200] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf9f, 0x2, 0x0) 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x4}}) [ 259.227588][T23268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.235724][T23268] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.254395][T23268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.262793][T23268] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf8b, 0x2, 0x0) 20:18:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = geteuid() setreuid(r3, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x3, 0xa, &(0x7f0000001a00)=[{&(0x7f0000000240)="9c5b50796e2877b2010a0a77dd71e5a72778ed199ba030569d4f42562b696adc55dcfb9dc33989bb79d126f749e7d279668089225af77a55a05be16cab3f29e4be9b03670a8bbfc86bf8bb1b523a575ca073b91a9c7eb22d0a4064dde778dba9d76729c601bd17be3f99d94b0c8589708f8901e1f890acd4101dbb223f152cea5a183301e3a1a08388eaa6a75f91a321bf3d2269720908c781cb1c29d28e4cf963", 0xa1, 0xcc7}, {&(0x7f0000000300)="98692e068b4a0d1089a397de51e11170ff9d09baadfe924974f1cd713d2d66b66e669dd9af7b6f93cff8810a3ad2f7b155d15b7ca11aa0e3f5dcc1070487c809d3d30916d941125e05ed49711f1143e60ae28ddfe3bcb6581f026fff9d3d766967d7a50511a1e8e2ebbda7b31c99ad047f40b7383991205d181d741ca1c113c4f3dcab", 0x83, 0x3}, {&(0x7f00000003c0)="bb62b824e82e7b6debcd4272639fad3d09b48e5e34ba553dc4bdfdc687ab4037e323a17f08a75cb9653ab7e604e5f4", 0x2f}, {&(0x7f0000000a00)="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", 0x1000, 0x1}, {&(0x7f0000000400)="288c7558e31f7a14e3eea6d98b634f14db3f16a46402b0f85acdbceb7339a7feeeb7c49e096667a5d9cf16565d0b4f98be105233cb7373cd77184fb3f1461a38f9bb6c4ea6709c1e8687573f4ffe5016172b20eed22bcdca3a6b50d86d82ef234b30279a909ca537dac3e9f1a2da53862d323d43929bfb3c9556ba054d8f918dbba412fa14acceeadc43eb24910c9ff88098acefa7d87d4fe9012d68c97f4172969704eb17506a244d790aadfb", 0xad, 0x7fff}, {&(0x7f00000005c0)="867a49951373133dffffa67ebee95b5f0ebc849a13c6851e846f535f61bbbd208dc3a7b2f0ddc9a2e0fd1d4b832ff758ee0ec5b7c69c8945b7989f9df42a5dee6e9a383d846c296d5f5b92610f622f6795f75a548db6efef5364841e669f88ef734fca080940489b74035fc311aecacca70c548a024e43c83500e5f29421c32f744647bbf8b6563f3282735a7a4d8cb1c283ec701b4040dfde3903915f4e7da5afbf43e813c61831d66c4e14383f9d4e87697769d80979d66fad59a07bf9d29c32", 0xc1}, {&(0x7f00000006c0)="68a6b47d53e551ef8b5f3245e87feeba53db4ad0d6635066a7050bf05ed14b8d3d4fba324dc6a926891338389aa2b42d582395bbaa3a870d8c4977c579b47aa58ed994550ffefd7ca97fdbbf5c4e7d2577cbf37c86c98675aaaee0022cbb73c447be5ce8f8d414847ed676340d178cdeeedd18a0d0537de22ef42a502d5b24461422316b251daaa86d185dbf36faa3c3fbeb9a17b99b5349bc0503e92089", 0x9e, 0x2}, {&(0x7f0000000780)="00db0dd94f01c5c206c986e8f1b4110770db8b1ff1f12455ec2c5a995f0ccf916b7a43b4409560570e7098498034f248aa96f7588ad7798d07c679ea436df8b992adeac29e296746b2ab65b89c414e47e23733544c4320d55e641e3f856039410ce4336d6ded3d817cb9aed2341a284acafda0a27ca54c7ee23a5a08fa4be7ef5deba7a5f7045c0675fc6c7b0f7a87fd8732fafef796275be6d3dcc7e8c03bf284fd71fe2e", 0xa5, 0x401}, {&(0x7f0000000840)="8f91a454b882f70e6d4d18f28f1f8c77c266630d72993bbb7ffaad5420b3ee96d937e2d541ec4755b7a7a4ae90ca052e83c41dcd888f2a57fe69d1576a943fe3b7e66fb3bd1b81565dbedc7961ac564aa9d33d35670f4223875874e8a07e42ada2a14cb2cceaa3f1e2c2e0524db5df4aa320cd27a1", 0x75, 0x800}, {&(0x7f00000008c0)="f74e7b6acaa8feafdeadf5bce9707ffb79e8cae9a2ff24ad47792ade11252c187232e147839bb72a0b399e6aa576bd138368e95a9c6c398298147820ba50f94002b4d48088c8ddeac4ac20c0f5d633fb5ee5dcab373b18e1e35c848582749aa9859ffaa63346fe6dbd28dac8558934ab195e02f174f00a0477cd06d5b5864fd59984f251", 0x84, 0x28d5}], 0x40, &(0x7f0000001b00)={[{@huge_always}, {@huge_advise}, {@size={'size', 0x3d, [0x51, 0x2d]}}, {@mode={'mode', 0x3d, 0x5}}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x35, 0x25, 0x36]}}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_within_size}, {@huge_never}], [{@obj_user={'obj_user', 0x3d, ')\'#'}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, ':'}}, {@appraise_type}, {@dont_appraise}, {@euid_gt={'euid>', r3}}]}) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4, 0x80000) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x0, 'memory'}, {0x2b, 'pids'}, {0x2d, 'memory'}, {0x2d, 'pids'}, {0x2d, 'rdma'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2d, 'io'}]}, 0x32) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 259.266904][T23268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.282819][T23268] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5421, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 259.338180][T23268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.346758][T23268] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.372572][T23268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.378336][T23297] loop4: detected capacity change from 0 to 127 [ 259.382160][T23268] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.388898][T23297] tmpfs: Unsupported parameter 'huge' [ 259.406082][T23268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.414623][T23268] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 259.470958][T23306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.479209][T23306] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.490733][T23306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.499205][T23306] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.510776][T23306] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x7}}) 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa1, 0x2, 0x0) 20:18:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf8d, 0x2, 0x0) 20:18:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x10}}) mmap(&(0x7f00004b3000/0x3000)=nil, 0x3000, 0x1800003, 0x80010, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2800002, 0x11, r0, 0xbe518000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f00000033c0)=[{&(0x7f00000000c0)="e29f4d58556e104691b0e3d5659c0371975622f0229a9c6521de16d2919e51915b45d42b35e6bf", 0x27, 0x5}, {&(0x7f0000000200)="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", 0x1000, 0x2}, {&(0x7f0000000100)="1684b4e83c348a4dc34045afff3664bee169a4478d53dcfa7e1bcc9179ea171ce2e43dd5bd6be1db047e0c04798bf18ffb0842c5e0ee10842c64b61aba17750895d2076ee7049cc43d4da15fc9f6676300e387dcbbc300beec211524179542a12e03e5ed980c1a50a751997f850c825ed5e25ddc7744a3162b03dbbeb9", 0x7d}, {&(0x7f0000001200)="5f64c459c8109976f263c76263e7526a0f1ba0590ab3a091110563eac5303cdf9b9f2fcd638b037eecaef9c68a284ab1012b4548e397b96e042e5f8142a7b880bd7493508919c5302ee5a915f82c7541a891aa7e349b82b0312cf6457cff43f2b39eb9cdaa15b190273fb543b9e8e9d7a1ac99a06a861850733ea33543bcf8debf0df5c90917aee7807f3515ad8f9f99c0e5392c7cc1a01e3f16122a16d543967e2d2abb43b611ddc0e68639e1672d2c2b88e2f5b0525a0d6d9f2dda695322", 0xbf, 0x800}, {&(0x7f00000012c0)="7990f19c66d288453c8fa626430b0c51c56903be27de44993469de21154d5d307fe2aabafb637caccb4a4a8ec80861c465915274ac7ccfc84121d630ceb1d6121879281cee97b51ad398382b81e39abd2b4d6bc285c856944ec6a1f4f7f9eec3ebdf75817f29d4be1ce41651bb16f0c31ba2fcd4b6d1caa3f4458bc187f42fdd5217996bfc701dbc78d7710693ecbbddc87247f909a520ec402389581cf28726ab80dd1b69926c47994c8bf2a85ec6b80974a12d460ab25f7b46d6213c4fc0d61a87587a3b3ba542a2507ca94e72b019c714019ac47fed3ae975d92d1ab350c864853b642a175a540f5acd7a5a85e51136dfee7b0e5259868bdccfccdf9da13db82b25a7e1486795ed64ccf68903fde77b890e07211bbac579c6dd696688bb0b872927e528cb26d2ec11645c3ce2ded71b97fe8d9e38393a17ad264e0dd50cdb4f57204d7cef42afb752a5039485cc912a8d82bdeef5059c1f6f5c7579224264b393b06ca60da511584f858d160d1d05582e81a48465176dca3634bea3549576d09d00d2b614ad41e7975bb6c562b3e8ef7e1668662a2f7d203c303a172d62ad4090d5abe15c0f3007e07c930cbc83982b0e6aa24ba57208e7c819ee7dabdcb366033a2b5690bbb48ac18eb9b9f6bec40579099b22f3bc62b636a005c313a3defe7129f9c639c196cb93f30dc99c6481f45acab7646d090ef3c92777900c160c50ec22a763f829fa32257d3a52f8ee157c5b606963da2727a3e22ed60d38ea7e67b19fbc97c0b57baab3f2592a07a7fa2199543ebb6b61a40016cca7134dbf9ebda2d0e0f5cc6464c2f9a2d6a167e27a7a7c328aa19f4af8fda4a7a38dc89245211b2ae98f763a412cc595a081857408cdb751d74aeba6d97a36709bda743d9de803e87c080111e3b814c5fdc60418fb072312ad4f85ddef62bec72a689c75cb62179a04ff1b4402155868b21eb2ea8efaac525b7337f05ef6a9d5748dfb806e78a090eacc20638fecfe1ad5056e6ff85563d7f1fd2033aff9168315aee8d310dc9ee5060b3faf3539283d34f27ef16b51466b339fe72601b954ec10ff51c30f02d1753349d0b5a35b7ebbd0d556c41f81f11968b11657a5400846ba8913ce089cd4d69ba4081cc9771f8c7d48bd51b292684c633c84fb9ef083e10c0d7bcf0c7f5cfe7f5516c071ffcd91272df85ef67dac1dde334e53f04191c6817442a59ba59f2314d20835375dc99b31a78baf0dcf2f224b044a3bb408092efc293c91fb32f59d79a371bd92eadf92ad7db94b5934e69087b5413b2890de63d2d2d2df675327718e9d9235944207c25caf342d9f59e4d588fa05b7647272cee1d561169d21ab18f868184849ad7b36eb81aa01d99df945144fe38e2ec621bcbd299ae43f9656368d06ab621b4755cd487861d1c38ef2074b303abccf726a635561542b32fb26f24c8faf172de136e8f8cd83e9ee1d6c74c1d9bcd89d6b756c397cb2092b23bb1d70f86dcae267cfc200b047d7d482a570f88f616bd20018254f91eb9c5023bc61139dfd1ac632e491aba971fcc3674a1462ed5f24b33a274421344405afe29f5381d75c488615bfcb1879625721f7060887eef92fd91a8ca0a86a920916bf6fecb90cbac5e667fa635904d137b395863358e50515bda9b787a5fa3c5708fb04c6855319a6fd2232b5043ab54d5ae485b2122ee78b3239e9ab5024417a4fba84cd65ff3447e429081350674969e355738363e30ef2c37f1e16115fbf48e9dc86764d1661c646428b1e82c24196eb62a8048613e39ac4da0f7f35e5ed2d33da29f70667753dd228da1c81074be325de4e816584800d0ed6b6aa76f44df2618fae5740e23d4bc59b864a71a7ebaa5f8ffaad1a912b1dc4f8eae471e88457b47368ab7b383f96a5fb3d4c17ce8257ee978eef01fac3fed41b1ef491fc6c80ff95dd7e5e32a2028031f6f71a78f86486a1fc0805982e02898e5c7a552b486bf3f6cea2ad900ac3a7f9a609e965bc449b7f0bd3283e0759b669490770d4d3ddb7109306886ea576158a3bdeb59e5933d5b419e3f9d3a60ae88fe8b42947df51f2fa0899841a631ee8fcd41b52dbd44f4a7fddd0d2af3ae94fee58043c8df8459bd8f2ed26d4a1a1dda312cb93cbab187ccf6d0d2b8f528a5624a55ef155a2a9e913d336a1184878dccc9c6b2f6a138c8718b0b1f10c1fd9af45f7bcf2e21de905d0f647ea7dccc9bb8a0da22b20f5278f5bd4c3a623706b11e75844730c8b2b40b6c688b4c5f3476419c5335cd3b948e6a67ab3dbb6f50f09105e92ae6cf9b4531589db7eb011f1e00a0417c114e55b9e6b099f581a0b3f6ef59e2f73cc82248742be6d017363106a58515c2a9c031ced9966c7310efbddc3bf1ff69bd5020c6858e01f702559ce8b9afaf4b1e2d197440124f5f3e89358b13ccf5d12f9a4081675089aba561c2c1fa75b012e8c9e0048f80390887e4a3d38749d7d85e4e4eb0eb96b97dc8d7521514a51b2090dc4acda220c4ad22bea5f4b942ab8c5d022b4138096f36145354fac89d9aa98a7a3fc8e6fc5e66588a37bb2c678ec9070e462470be515b126530302b75847233b4b013e7853592bf8709049d9a01f02ea68de0415d121d908e9b6ae9d05da06b5a2778de8ba4c9b9760b8217498fa184900ed220f9d811a51f3c838e32ddf9afa501f93a196ee5fffbe20c896b47a0b0f0647ea4dc249819565d1dbf4400fd65f76e1b481f0d9ff2d912708543cc245aff4b7905545e20071a5a0d8010b36c51d2cf0a4f747e21933242deaaa8f8bf01e63d02c2180822896ea138aa734e9d50b5d2aaa127d0e33e959a5bb7c21b02d76f792f6179ab0209241f136df7e86e34129806a1a8c93d5e4e62b8a9a51c286dceb7cbc6d2895b978a2ffe98673df561f04f8682c6490c6084f1ddf953d03f177f895f696094a01c9a68c7887e1cbc864c02ee124dbb8c5ec0fa2f15bbc94d41c80e6da30667a2dcc9a4d335ba534eaad02e5ae7123fcb02b9240db54fbf730a85e8c8a611f5c65e4103d85bddfc7652cd68805d3c18f8d3a2aa20d2fa01fc2b7e355f089e8816c2cc979aad539df9b003696a2be10696df20177b83339b31c628ab7987a09a49ff274f640ce889995fff7db5e0a092098f581aeb13794baa3bed27f052dd2c6922b250437eec251a0d679023c35c0d89c34d6580928d6a7b65730e46d69807e8296f9c4fe0dd94c4d3093e42c5ddeccbf1b7005b055d6195be54e92d84b39fcb92eb372c6858f03a558732f7de0631b7d4cd1533cb9e385d8fa281a6d71c71fe7e3346fc43a976b8f9078418efa2791c84b06df01150466b0ad4fcfe84dbbb8453a0d61ec430dc5a298c85a09e67b39a5172be5e15d136b050d61166644648441e67b3fc9b5ff939ed3a5edfc504884e4095fc303fdaa6f384a8e1d93ebe872b6e03d2d5a6577c45a0eb922ce44e2137addbc12534bf53bca04df3aab73e0e97257a9b014be0e3f68bfd9189f52c7a53cffab956ad9c9a1e396ec1aebfc8b24728cbeba92de162eb4f4de65219c1c32c5504bed9aec69cd60a61d644fff7f426d0206b14d4938ad072c39e4665d427fab13be02183ad01efc42e8233a713fde3e65bc4806bc8c9b3787d6f289202d5330dd5c9d1d55107f220829a051fd628cb267605cfb70a2b9913625d22deb80fb084189f0ebe6ebc4e287236f5829ab4724093d3dbf809be8a8d92db9e974e1919d2c6697fb3e0694a18d1584c8317c34b14817156b543d6a8a0905ca43cad52b8c90035bd507b9f10a96699c84059a494e8b95d84ae5c972d3f97970426fa3ae5fc6822f8816fa4be0daf5935334be10e0142af06ef97fdfe9cce98dacce709115059784050fb53fe8c74c647abfaf2c894c3d315349a12ecdb91ef2edad8b185e9c2fcbe932fdd9e59749ceef091d895e8ecaf5c3d4cc04ce973cbf235f69ec346f79bee586fd550f91e3d15f7001e2721f09ffd0a1d4661ef41d462d4392d8d4c0146d7f9a77305a0a07dc1f5ce6bf7e55e1948bdfa6b1559c0a66d612d6ffc088c06a85d2185811c11a933bad690291010587fec43239f5766c4fcc37f66b63940eee939599f6cdf66b060423719abf509f2c1c8a41abec15bd93642c4df981829c53ce4fda1565b324733b0be9bc0ec100c8956c73488182d8f896ab966295546b97ed4f4c791f23c861bdfe27e9e96c276e7395db9ce4a935fe7ace6d64280cf90b4e826485ed4ae34fd11053b1789045603904a254128eb448b4c2449335e80f402ffeb9da785bd7b2ddd62042f89bc9893160f657e79fba1812d21d97661ba11e40b8109608add2e8330349dc44dd1f8d7df3c66614e9a9832426153ee11db573d89a42b7fd0a0e0842b9670464927aa64c96c82b24386f28783c8fac10ca437c80f5ac075773005a6555554301c63a0db3bd7f1f854aa681f07e2c15154f031ec1cee32e7bdd99a6c00c1535d020dd15ab1f31d17ea4e8f5273276a1781cedbc822d0a63b416b60f91c7b8ff60e2de97c371086c4b8b85515ebb06f1fe97b2ecae813155d0a4f1302141f2bb6cd2922a178937f4524dddb2d59f8fc4164f0322ac792a7d29f92dfe2ff6031fac3f2165608becef8ff215261aa73cdf427beb1a68f2f5aceb7c2a394d4e0b921fcbc15a25f8718dd3f1cc1a2181847f087bcb529f2bacd732dc330d4cd1e2feac910c0f17c098f963f23a7eb7a3955ee1db62249c3233ae2e604d2342d3529f8a1f4f09bd7ac80f711bfcfcb5ced2c5a0935e64d94970aec36e075e3296c5ed3bdbc006504df97b9e943323b9cf428ab37a851f93b1138fb0691c05f2f2609e351e4ed4bf963501229823c7e952e4eaf5e48e5daf22508bdb868008510ef1f5f75ab0799b28de60ffbf7c8c2167c67887204c6369dbca192d661ec0ffc8be97f3031fb0b1e1ba26cb3cf4be6718ac55507ac125c0b08005ebbe54e2d647394f15b57c20adee251693e78c922b7cf085a14892f0b43ba052a2b366513104634ba042448187db3b772fc374c1e4e4b0a0e68a62aeaa727191b09c538a18496a6deb2fea3ee87bc7908068daaedcba350a0aa69d5a917c45854446420c8f0a550dee263c9c293f86463ce3a902e5866788889a5f7e077655416b48ced9d2d510ca606a1c8fc5d0a0574d7d871930502e2c09dcf901bf60e30228717d662702ab8667d30702135a1728795aed412c073042bceb92276e014d320c31a166805057497c708bdaf4784d75c44aaff944e0ba02bf3ad6316e473036d3ff19e2e277abc73fc12e0021e9fa5064d4e80f3e2cddd3e7f721e17f9410350365e2b5ca7d4d7d752e906c45f182feaad3b37c144ce9b26b0371fe4db852d92c49f61d5ae37b506780e05562bca7ecdd2705c40c37f662e3522ff303b9300c1c21f49603d69f1d7378b57a37e166c4df8d4f2829a70e80bdee5297b712f8f18aae6709a5e0d9e24a2c0bfde57e6bd478596c5db4cbea9789da41a48f1eeb72c2671cf650f119865349f58576780329333862ef5a575519462bbdbcba71a7d333808ad3eb134edabd15ec10c1575a47f563ef340abc618c62caf8a43546094589c77d30157ea7bb610cf44fa23711be4e092d57355215f8dddbd46523642610e4cba9e18f0acef6dd7f41277e68c3cfca0623d3b124015e42c4e0c2b23579abba81dada019fcb13f236cbe077b49632ce272dcc08af674262038b408e957c5d852adc058a0642e00c1b7c0c272c185198a8d51884215c0271b4e44a312cd6d553fbe8048c", 0x1000, 0xfffffffffffffffd}, {&(0x7f00000022c0)="bddffc4810df5caeaf2cf098349e752bb8e75182346f257063f62335390fff85dc298cd81641928695657b2bdc1cc03886d00d88dfaa9e6117168adace5cc87fcb951b35372800da01920011b6f79ff7e80ab4c586c27a39c5c540483069a5378202283b0e2e678e201e58805a6f7d8d07dd9e8d37707f3f5fca4fb39e6621e3bb8c452932c963b77c072f56c18afcc6f7797c071ce2002d461d7662fa6a9935c4bc748e6be5da31be36d8d2d6800088626aeb40486d4ad65dab69314ac7f41cc95df205a7c206e232e188fe845e3ae2c4e6a264", 0xd4, 0x80000000}, {&(0x7f00000023c0)="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", 0x1000, 0x3ff}], 0x1020, &(0x7f0000003500)=ANY=[@ANYBLOB=',#@[\',fowner<', @ANYRESDEC=0xee01, @ANYBLOB="2c6861738000000000000000734f2c7063723d3030303030303030433030303030303030a0dd0468c07e5c9a5e550cf23030332c00bf774b2982e38f0bbd805f000800000034cf0066545d72"]) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000e, 0x80010, r3, 0xffbd1000) dup2(r1, r2) 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5422, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 259.520295][T23306] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf8f, 0x2, 0x0) 20:18:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5423, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x300}}) 20:18:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='rootfs\x00', 0x40001, &(0x7f0000000200)='\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 259.630036][T23334] loop2: detected capacity change from 0 to 264192 20:18:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa3, 0x2, 0x0) 20:18:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x700}}) [ 259.703277][T23334] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.711753][T23334] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.730833][T23334] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.739354][T23334] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.756764][T23334] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.765426][T23334] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 259.792001][T23334] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.804232][T23334] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.820071][T23334] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.828426][T23334] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.841209][T23334] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.849471][T23334] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 259.885216][T23327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.886361][T23334] loop2: detected capacity change from 0 to 264192 [ 259.893673][T23327] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.911729][T23327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.920510][T23327] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.932348][T23327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.941647][T23327] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 259.956352][T23327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 259.964774][T23327] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 259.976142][T23327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/4, 0xfffffffffffffe37}, {&(0x7f0000000080)=""/201}], 0x1000000000000221, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf91, 0x2, 0x0) 20:18:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x2000}}) 20:18:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5424, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = fsmount(r0, 0x1, 0xb) ioctl$BLKRRPART(r1, 0x125f, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x110) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa5, 0x2, 0x0) [ 259.984619][T23327] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 259.996051][T23327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.005376][T23327] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5425, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa7, 0x2, 0x0) 20:18:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf93, 0x2, 0x0) [ 260.076172][T23386] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.084430][T23386] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.107271][T23386] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv2(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/99, 0x63}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/105, 0x69}, {&(0x7f0000001380)=""/101, 0x65}, {&(0x7f0000001400)=""/53, 0x35}], 0x8, 0x10000, 0x80, 0x10) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000014c0)={0x6, 0x7, 0x5ed, 0x8, 0x18, "c90a507ad9cbb5901d1df3bc2d2b63e54437ba"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x7ffff, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nsfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = fork() ptrace(0x10, r2) ptrace(0x8, r2) ftruncate(0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4) r3 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x240, 0x40, 0x24}, 0x18) fstatfs(r3, &(0x7f0000000200)=""/187) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r1], 0x1) r5 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 260.115506][T23386] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 260.128509][T23386] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.137318][T23386] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa9, 0x2, 0x0) [ 260.200397][T23386] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.208601][T23386] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.288591][T23386] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.296933][T23386] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 260.331269][T23386] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.340098][T23386] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 260.414166][T23383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.422837][T23383] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.458473][T23383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.467618][T23383] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 260.501914][T23383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.510609][T23383] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 260.554218][T23383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.563588][T23383] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.575823][T23383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.584756][T23383] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7}) dup2(r1, r2) 20:18:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5427, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf95, 0x2, 0x0) 20:18:42 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{}, {}, {0x20, 'threaded\x00'}, {0x20, '('}, {}, {0x20, '/-&:#{{,]&&--!\'('}], 0xa, "e70c4b41706e8432b7fb5961432b6a5dd6975787289a4d56a5bdae31c033978570c392486fec2480aad77e89b1978b423d3b26bfd5bc7d887c92e2faaedc6070d3d0b8cab36a499aafcbe743d86c3af9166e85015c82173865170c74b9dbea4759ca70431cc892e394d51877100c1540667924fa2806e0bddb37e936b8f24aeb9eb50882df66a0afd5deeb10b6a3afc786b52aa8ba52637e7d5db2089be45dbf6376b6524ed512373c2e2c35eaf36c"}, 0xda) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x6, 0x3, 0xff, 0x7, 0x0, 0x8001, 0x10500, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10, 0x400, 0x4bf, 0x0, 0xd6c, 0xfffffff7, 0x400, 0x0, 0x2af, 0x0, 0x10001}, r5, 0x4, r0, 0x0) 20:18:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfab, 0x2, 0x0) 20:18:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x8e) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x42) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 260.596449][T23383] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.605575][T23383] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfad, 0x2, 0x0) 20:18:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5428, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 260.688645][T23444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.699163][T23444] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.719985][T23444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf97, 0x2, 0x0) 20:18:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000140)}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f0000000480)=""/22, 0x16}], 0x8, 0x8, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffff41, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x800, 0x1}, 0x20) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r0, r3, &(0x7f0000000140)=0xb45e, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 260.731836][T23444] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 260.749475][T23444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.758457][T23444] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfaf, 0x2, 0x0) 20:18:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5429, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 260.815659][T23444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.824335][T23444] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.871934][T23444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.880341][T23444] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 260.892102][T23444] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.900472][T23444] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 260.973856][T23478] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 260.982495][T23478] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 260.996253][T23478] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.005514][T23478] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 261.018973][T23478] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.027634][T23478] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00001c5000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0xd7b1c000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 20:18:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf99, 0x2, 0x0) 20:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 261.156731][T23496] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.165791][T23496] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 261.190485][T23496] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = signalfd4(r0, &(0x7f0000000040)={[0x1]}, 0x8, 0x80800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000080)={{r3}, "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"}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x2000, 0x3ff, 0x102, 0x2}}) 20:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xfe, 0x66, 0x7, 0x10000, 0x3, 0x3, 0x2, 0xac, 0x40, 0x2, 0x800, 0x7ff, 0x38, 0x2, 0x9, 0x6, 0xce7}, [{0x1, 0x8, 0x3, 0x1000, 0x3, 0x5, 0xff, 0xba}, {0x6, 0x7fffffff, 0x8, 0x3, 0x2, 0x5, 0x4, 0x29e}], "a10a7c771561563db9d93b90944a78922e1f97f84af49a387a90d32b8edf8ac600854170718d801d4e2cd1af99147c8351be97e0d469e49344f5238c1dd3c749c1501e46302e5ef354ed67a0ffaad80b1151164515fdf9437f030590143d152df046177ae32e9d5646c3d61b3eae71c3ee450e254da495b37e4e2a405bdfac33f544394a56f784b2d2095b9be6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x73d) 20:18:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb1, 0x2, 0x0) 20:18:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5437, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf9b, 0x2, 0x0) [ 261.199273][T23496] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 261.213444][T23496] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.222253][T23496] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb3, 0x2, 0x0) [ 261.258174][T23496] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.266626][T23496] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5441, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf9d, 0x2, 0x0) 20:18:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x2000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000900)="81e9b8583d7d7048e4004b9ae7e8096df46994b47e8453e8a135f2342ee6d36cc1c79833cdcbb5e8112739cfd50c78de38134b955dfd4d25a1f884118d0b832292b189f2be4f434ab696990ebaa09881f712da2b8ad12d9ab1f6bd01635f567e5ba99b605fcbbaed7a7639649bb708aaf6bb686856319611319cee119280687b94711e8c4b44a3a1778f2ec05d4dde8cbfbf9c5d166b386c6ee2243ad167a4178c4081bc679f3d456f993efa48bfcfd8242300a14bd1957480b89047c46269a05b7fd533cdc872666b1769aa8099869dd8") ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000008c0)={0x1, 0x1, 0x5, 0x14, 0x1bc, &(0x7f00000004c0)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x4, 0xa, 0x1b6, &(0x7f0000000080)="1a55cdffbe1c70a45805c3f14ec0373e4b0b319401a3784a1b8c87a411bf77ac87d250bb42084827ebf71a182cf453ac30600337b851d06616b1f7b00330e84f01caa3c6d0ea1983142b142a2c3e7e8f83d0b3af455f4427196fdf0d85f616434fedd62e6209df9c327507958613e38c0f5de18b64ba6c569511f10433eb8cac57caa13bb370bb64e60369767f8a3fdd746ec1f6023901f6be66045803d343275e2978ad548f050707b2aaf15c802167adb3cffc349004e64a5edab66a5fa8480d001733a081b0341a608c5059f3287dc1780f181bfde84994e10d321476979434f930dd4fae176b9aa4852d44234b9e77f3f5e66c8d0db0c59e5579f1d897bde6c0407543ae1d1e0154bd5684ba3320c5cb5a53288169b38a342d8ce7f0421bc1f671d0ddbeb6b73653539c7d5e70859578c3122001c4c7e443ca48b1fa6681b0406659ed0d50b904d0cee82b610f8f7f85d9a14d20d05da53694b0bc1564535e5c38dc5fb07b92db8a9b43ca7163fa135d9a482838e2a8eea93cbad224e64b576dc25ee296ea288897a47b9c70d8c69a0f5497bf55d3fb5d7d68d7671d89a7608994467a55249aaac543b630f5d5003779c2671d58f0186429d4090bab6ce52403bb46e91b25e42bd0e1b8a2d436ba2f67134bf8ff15a79e3850a25a0c306d3510536cf6e2f158c32c9bd7cea2839c9ed4d0ff7419a67a86e01e80afc29f14ef28520e4d08c9785183d636330741301170ce40755f9a7d843aa6c0b8f26843b143503db355c7b7dae292b9dc5aae2cdbae3f0318e302daeac31e125dba5a2fd2d1e7053202a65d7e309a7d7900d14089413b5de9222a0d39515b04f8466329e54c8597bebdc528636927e271f354b05e90f13a7fd8fa961e622fac02411eeacc6318dc50715fcd9f09c268af25d017ab5ba47bb0b2fc00da7f48a7ac84bfd9903dd62481d8d8e72772a79516e5ac0d781439daa6bf7d3e0a89d2c9ac463824ed0da72471fdf4238e6bbf5b1cee387b42058f1f005571bbf51cd514a42e808e85d0a3c6bbb464fcaa08afcf2c99e9a5dbf70655a6f8d8afbec8859eaa11c9e2c51681248e7a21ad2c30d27b00d1294dc8be24869e51ee13d72c394096dc504e3128a46ec12593b5de108a00b3e16f29bbc15b6c3b9b9e5b99e815a73073eee3260b8c8eb2304f9c7f70f16236a958d123c7b8549340b26bfcd4a98b5511beb701c9b67e0c07402b61f7a7e0be2b6628f53fa0ad1827714f5d90f60ed3b30f15a6d060cff8368f31ea71ffac0b73c6b463907638de153844116952746316a7815812b59288006b01d1a8687309bb143f5f69df234552367e1ebb2363aa7a380a6ab0f0988b215158c8a5cc9d3b10404c818755d05c53a5e3cdca26917f03398fe9056371b6ea7ef953999871847cf41b9dd967621b8eb0c17913df16ecb64149"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x3, 0x1ff, 0xc1a}) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000ac0)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 261.302864][T23496] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.311128][T23496] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 261.326626][T23496] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.334970][T23496] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb5, 0x2, 0x0) 20:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x802, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x100, 0x100) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x2, 0x7, 0x2, 0x800, 0x916}) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r3) write(r1, &(0x7f0000000040)="c7068b950ee0b0524f6210ad2be05f7ec6faf01a303fedc18a7af44cb566701e93f0f4377a055df3b1671f75216979a8aaf755e9e45b62dbd3e47a187868a17f38a045c1fd4b89de74248e76b402063816a60a0ff2965ef943c57c16dcc7ca71d6d5a9dc2d1aa12e927d53053b195e57982ad02d267a87e1e455304977a66de6f20b3f4367eb6565498ae9e93a7d3501fef675d12e2c82550c09e676d98130ab72304da2bbe47f80f1a238ce40eb687142a09e38081632e2b481a5ad97ac7ec9c1521e40920988399ba2e751983fabb837cd9490baa8b220bf81001c0d3b0190d79ca5208d7b440eaae5ec4c3cdd5208a71c71e990988c", 0xf7) 20:18:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xf9f, 0x2, 0x0) 20:18:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5450, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 261.496612][ T25] audit: type=1400 audit(1621109923.745:23): avc: denied { mac_admin } for pid=23539 comm="syz-executor.4" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 261.527591][T23544] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). 20:18:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb7, 0x2, 0x0) 20:18:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x4, 0x0, 0x408, 0x0, 0xf}}) 20:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat(r2, &(0x7f0000000100)='./file0\x00', 0x8400, 0x4b) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) openat$incfs(r4, &(0x7f0000000140)='.log\x00', 0x4800, 0x0) mmap(&(0x7f00002e0000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x9595d000) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) fallocate(r1, 0x41, 0x7, 0x0) 20:18:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5451, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa1, 0x2, 0x0) [ 261.530487][T23547] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.547823][T23547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 261.578759][T23547] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.588269][T23547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 261.601085][T23547] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.609668][T23547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x420000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 20:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000a00)={{r0}, "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"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000400)=""/237, 0xed}], 0x4, 0xfffffffd, 0x355) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 261.665785][T23547] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.674758][T23547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb9, 0x2, 0x0) [ 261.733347][T23547] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.742424][T23547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 261.755252][T23547] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 261.764457][T23547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) perf_event_open(&(0x7f0000000040)={0x271e414941dd7b3a, 0x80, 0x8, 0x89, 0xfa, 0x5, 0x0, 0x81, 0x4c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x81, 0x9}, 0x1300, 0xb8d9, 0x100, 0x6, 0x4, 0x1, 0x7, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x10, r3, 0x9) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa3, 0x2, 0x0) 20:18:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5452, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x545d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfbb, 0x2, 0x0) 20:18:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x1f, r0, &(0x7f0000000140)=0x9, 0x3ff, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x402200, 0x0) renameat(r1, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f00000001c0)='./file0\x00', 0x101000, 0x100) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x1, 0x4, 0x402, 0x5, 0x4}}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000180)) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa5, 0x2, 0x0) 20:18:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000039f000/0x3000)=nil, 0x3000, 0x1800003, 0x10, r0, 0x5a83f000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfbd, 0x2, 0x0) 20:18:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) 20:18:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5460, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 262.024704][T23592] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.033418][T23592] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 262.062926][T23592] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.071281][T23592] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 262.086242][T23592] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.094601][T23592] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 262.119607][T23592] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.128031][T23592] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 262.140590][T23592] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000140)}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f0000000480)=""/22, 0x16}], 0x8, 0x8, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffff41, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x800, 0x1}, 0x20) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r0, r3, &(0x7f0000000140)=0xb45e, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa7, 0x2, 0x0) 20:18:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5600, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) faccessat2(r3, &(0x7f00000000c0)='./file0\x00', 0x2, 0x300) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfbf, 0x2, 0x0) [ 262.140609][T23592] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 262.140639][T23592] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.140650][T23592] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 262.166029][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x4001) mmap(&(0x7f0000511000/0x2000)=nil, 0x2000, 0xb6c778e900232aa7, 0x4010, r1, 0xd1168000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x381300, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r3 = accept4$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000380)=0x6e, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0xd, 0x80, 0x7f, 0x4, 0x81, 0x8, 0x0, 0x0, 0x601, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000200)}, 0x2510, 0x2, 0x8, 0x5, 0x7, 0x557a, 0x7fff, 0x0, 0x4, 0x0, 0x7f}, 0xffffffffffffffff, 0x7, r0, 0x1a) open(&(0x7f0000000340)='./file0\x00', 0x801, 0x44) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x6, 0x0, &(0x7f00000002c0)=[r3, r4, r0, r0, 0xffffffffffffffff]}, 0x5) socket$unix(0x1, 0x2, 0x0) 20:18:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc1, 0x2, 0x0) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfa9, 0x2, 0x0) [ 262.166050][T23598] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 262.166081][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.166129][T23598] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 20:18:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@getsa={0xd4, 0x12, 0x8, 0x70bd2a, 0x25dfdbfc, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d5, 0x2, 0x6c}, [@algo_auth_trunc={0xab, 0x14, {{'sha3-384-generic\x00'}, 0x2f8, 0x200, "ad9442de34972105906e0cf2771976590d93de4bdcb0953525adcb043953fbbaf1b2bb37cbf91b484fb37724440a9fe2423be2ba1b6493d7da2ded44457475994716d0993d35548ab8c5c79fb2108e35197df82709b4eabf4779fea09b424f"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfab, 0x2, 0x0) [ 262.166158][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.166172][T23598] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 [ 262.170544][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.170618][T23598] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 262.171309][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfad, 0x2, 0x0) 20:18:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc3, 0x2, 0x0) 20:18:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000200)) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000000c0)=""/158, 0x9e}], 0x1, 0x0, 0x0) 20:18:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xbfc904529450dfbc, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f00000b0000/0x2000)=nil, 0x2000, 0x3000005, 0x10, r3, 0x551c000) dup2(r1, r2) [ 262.171325][T23598] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 262.171418][T23598] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.171431][T23598] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5601, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', &(0x7f0000002080)={0x800, 0x3, 0x12}, 0x18) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) getresuid(&(0x7f0000002140), &(0x7f0000002180)=0x0, &(0x7f00000021c0)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) setxattr$security_capability(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0), &(0x7f0000002300)=@v2={0x2000000, [{0xfffffff9, 0xfffffff7}, {0x8, 0x200}]}, 0x14, 0x0) lsetxattr$system_posix_acl(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='system.posix_acl_access\x00', &(0x7f0000002200)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x5, 0xee00}], {0x4, 0x6}, [{0x8, 0x2, r5}], {0x10, 0x4}, {0x20, 0x5}}, 0x44, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001040)={r2, 0x8001}) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfaf, 0x2, 0x0) 20:18:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x80ffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2401, 0x7) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) r4 = geteuid() setreuid(r4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x7, r3}, {0x2, 0xf, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x4}, {0x2, 0x1, r4}, {0x2, 0x7, 0xee01}], {0x4, 0x2}, [{0x8, 0x3, r5}, {0x8, 0x4, 0xee01}, {0x8, 0x0, r6}], {0x10, 0x7}, {0x20, 0x7}}, 0x6c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) 20:18:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5602, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc5, 0x2, 0x0) 20:18:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2514000c889f620300090000000800090003000000080006000800e300"], 0x2c}}, 0xc0c4) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x9, &(0x7f0000000040)=[{0x400, 0x4}, {0x9, 0x8}, {0xffff, 0xec}, {0x6, 0x3}, {0x7, 0x4}, {0x3ff, 0xffff}, {0x0, 0x4}, {0x80, 0x800}, {0x7ff}]}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000560000/0x3000)=nil, 0x3000, 0x1800003, 0x4010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x30) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb1, 0x2, 0x0) 20:18:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc7, 0x2, 0x0) 20:18:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000100)=""/153, 0x99}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000300)=""/231, 0xe7}], 0x5, 0x3, 0x5) 20:18:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5603, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 262.749075][T23727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.757717][T23727] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 20:18:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x41489000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000a00)={{r3}, r4, 0x0, @inherit={0x50, &(0x7f0000000100)={0x0, 0x1, 0x8, 0x3, {0x0, 0x1, 0x1c, 0x5, 0x6f0b}, [0x800]}}, @subvolid=0x1f}) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb3, 0x2, 0x0) [ 262.801375][T23727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.809993][T23727] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 262.821864][T23727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.830240][T23727] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5605, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 262.860307][T23727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.868768][T23727] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000a8862d34 [ 262.913417][T23727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.921787][T23727] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002975d207 [ 262.933903][T23727] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 262.942078][T23727] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000027b85303 20:18:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file2\x00', 0x100, 0x103) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000012c0)={0x6, 0xfb, 0xe4a, 0x0, 0x0, "b145e3180bb48426b58ee26ae64909d4", "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"}, 0xe4a, 0x0) 20:18:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x5) r2 = fcntl$dupfd(r0, 0x406, r1) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x5) 20:18:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc9, 0x2, 0x0) 20:18:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_elf32(r1, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5, 0x3, 0x7, 0x40, 0x2, 0x6, 0x9, 0x2c9, 0x38, 0x1da, 0x4040, 0xfbb, 0x20, 0x1, 0x9, 0x101, 0x2}, [{0x2, 0x800, 0x400, 0x100, 0x15a84fa3, 0xfff, 0x6, 0x663}], "46e8303a54fde65706ace1d7472fdea7f209a9f4871bcb75502614e2ab2ef7169ee46762ec8e1af2cce6b9c8f117bbf6e27b88c7c1629cd94b9a5c779af42c604895144415534befdc54fdac92f49d5a0a47839e8917f95ad795480122622dc43d0c6e43af38b9806d76c64db6e1ed5f288cf70d8bae42dde940e970ae1691c464c27bfc434b213fc144ea9976d7d454c91c54a7d79d621dae397bfa57e23b512670d269713dd6b209af0cbdf495e82a01c9910720820f0cd81cc1faf0bdde11d548603d32d8c4c15cae6c67da86bce02f57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x72a) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/236, 0xec}], 0x4, 0x6, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = accept$unix(r0, &(0x7f00000005c0), &(0x7f0000000640)=0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r2, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/176, 0xb0}, {&(0x7f0000000900)=""/188, 0xbc}], 0x4, &(0x7f0000000a40)=""/247, 0xf7}, 0x0, 0x40012020, 0x0, {0x3}}, 0xfffffffc) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) 20:18:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb5, 0x2, 0x0) 20:18:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5606, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfcb, 0x2, 0x0) 20:18:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x5, 0x400, 0x0, 0x3}}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 20:18:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb7, 0x2, 0x0) [ 263.108043][T23797] loop2: detected capacity change from 0 to 512 20:18:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/172, 0xac}], 0x4, 0x0, 0x0) 20:18:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5607, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 263.157284][T23797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 20:18:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x138, 0x7, 0x7fff, 0x1ff, 0x1, "fde74d797993340327e3b43c8dfc5a588c09a7", 0x429c, 0x3}) 20:18:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000081000000", @ANYRES16=r2, @ANYRESOCT], 0x52) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000100)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) 20:18:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf32(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/1365], 0x550) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40100, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfcd, 0x2, 0x0) 20:18:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5608, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfb9, 0x2, 0x0) 20:18:45 executing program 0: tkill(0xffffffffffffffff, 0x1d) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0xfc00}}) 20:18:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfbb, 0x2, 0x0) 20:18:45 executing program 0: r0 = dup(0xffffffffffffffff) openat(r0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, 0x6, &(0x7f0000000440)=[{&(0x7f00000000c0)="20ecb47aa215928db232160de966733d7a9d1910b2a4bb836346980f591cf817a241d89fd185f34250f67a3c45e7b6dd2e069bd5cc16e9ba80f54330bda921ce401a5193f8602509", 0x48, 0x9}, {&(0x7f0000000140)="9e68afd9875a58573b9e8182b84880d93ac60038f881f84479a0b788ce783058560922379822fc10d1345f506e0dc1bea66c827691666424ecd8a029a0c1447aa15d75812d958f85be967a988ebe41c7fdee09c6f843ca1253c6e2ac7a038deaebcff78ce2a45824e69551e8ab47eb116b8e1e3dba143a15b7344fbe2d16288347608fc22c0ad508d18bec1ab6a54a205b60f3fd1b4dbda429efa89e", 0x9c, 0x100000000}, {&(0x7f0000000200)="41d30b7fc632bc59751219e2c44a513fdd064929e797ff3ffe9a5a7e04b0e44ea088ed01f5be49c3f4622d6915466ed52369b8b8c41b84f7a2f7f72b2f6e6b06606251fa", 0x44, 0x7}, {&(0x7f0000000280)="5f2a64794fa70c2b8f", 0x9, 0x7}, {&(0x7f00000002c0)="75e72bb354fecb81d758117fd90c872c6244fff5850356d0437a76c1c08939607d9c3111cccad9f1ee5b7303431d447dd9a9c3f2b22d8941e36c2b87c1a98d9f8e10e05c459b555df717a1e5620d886a1564f3d46c6aca1a6c05b685ab4ddd8387b27020d5fcfc66be1347555179be3193e81a6e53486f9b7a0ca85aec8e7d9b385bfc6d3ca3f737fd04aec951611a5067fb9d1dbe8762621278d1369b0f759a46c243d7abfb87ae830b00269c6f25ea5e6e8866c6b88f77ae0ae75aa03f67f39788b9bf2312d8e96869", 0xca}, {&(0x7f00000003c0)="a0dd8d541f71458620460802ae2691c86d2d6e548306799d9de5685eb3665940b8c74f90e3eaa052a21e5ee392b4f20a4652b94e5fe24f177260e026f2fb82ea619ca65669905834096f1e69407fc5a7005e0fa829bed9348912851add825102bf75d0e252be1c42e4", 0x69, 0x2}], 0x240000, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}], [{@fsname={'fsname', 0x3d, '%T.#%*-@+}\x18-[)]\'}:'}}, {@permit_directio}, {@smackfstransmute}, {@subj_user={'subj_user', 0x3d, '.\',+}}!'}}]}) syz_open_dev$tty1(0xc, 0x4, 0x2) 20:18:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfcf, 0x2, 0x0) 20:18:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x5609, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1, 0x5, 0x5, 0x7, 0x3, 0x6, 0x7ff, 0x11e, 0x40, 0x163, 0x0, 0x5, 0x38, 0x1, 0x200, 0x4ef, 0x9}, [{0x60000000, 0x9, 0x8, 0xfffffffffffffffe, 0x6, 0xb3a0, 0xffffffff80000001, 0x1}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x978) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x400) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'geneve1\x00'}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000800)=[{0x30, 0x117, 0x84ed, "716d3cc93596adc1f373256e69ccb802eca947157f5a91ad09bc86"}, {0x40, 0xff, 0xc32, "973af222c166fc5eeeeea7e2ce3df5e2ccc3df0088d9ceee5aed48bb74b44f383b663e3ccd34b393db2a7944138d8a"}, {0x70, 0x105, 0x6, "9cf990a628262eed1246415b9806ca23fe58bbf6df3d3135fed07c28796772f3be5d589d78d589e2eeb81e1e3ca372eb40748708ef063e6a631433eceabb972f14863eff725326aab62d7cc5745f98c62c2435059dff3173b52c1330"}], 0xe0}, 0x8090) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/229) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x10001, 0x21, 0x2}, 0x18) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) [ 263.604627][ T5] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5 comm=kworker/0:0 20:18:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfbd, 0x2, 0x0) [ 263.666071][T23870] loop0: detected capacity change from 0 to 264192 [ 263.669875][ T1321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1321 comm=kworker/1:3 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd1, 0x2, 0x0) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560a, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/138, 0x8a}], 0x1, 0xffffffff, 0x400) 20:18:46 executing program 2: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000a00)=0x0) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4}, 0x40) r3 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r6, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x9, 0x4000, 0x12345, {0x0, r7}}, 0x59) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r0, 0xa2, 0x0, 0x0, 0x0, 0x0) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfbf, 0x2, 0x0) [ 263.772824][T23888] loop0: detected capacity change from 0 to 264192 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd3, 0x2, 0x0) 20:18:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) flistxattr(r0, &(0x7f0000000040)=""/147, 0x93) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc1, 0x2, 0x0) 20:18:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@raw={0x100, 0x2, {"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"}}, &(0x7f0000000100), 0x400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fcntl$setstatus(r2, 0x4, 0x800) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x80000001, 0xa, &(0x7f0000000ac0)=[{&(0x7f0000000380)="ffc08dfd89cc710ba418e73aad3d09a69984b3b0f6e992282ee101e2a4af644b534a30ff868a9809f447b65828d48ddf4acf6cd640a17082354427608cf0915e6c6a5692f6265dfa539b899a6b51cbeb2028a1a201a75baf971ed0c643d4", 0x5e, 0x5}, {&(0x7f0000000400)="32f7e5b65d67af97764299997581934eaed6861e02000391433e3446989548d20810fd7ea1d76b5e618a388f19a23106348b9f5b5b9a15673d4b96af81d115cc1d416b9882967d44f4dd843ed1d02565a5108a58cd83aaecab7a96b2179773a6398f2459fcd10a0de428be825e97b0027dc3d4b1a0095b67e79ae5a4734a964ee5059fba97e8ba326bf7d0b274efa23c5edd2b152383cc469cbd3ca18b51e3822650e92e24d6ff393a", 0xa9, 0x2}, {&(0x7f00000004c0), 0x0, 0xed9}, {&(0x7f00000005c0)="3d2358937fa5a56caf6dc75a698e08be4e46b78de9cd85699ab085061bc994fea705a7f419", 0x25, 0x8001}, {&(0x7f0000000600)="11bb24a6ea4954e3263d669a6bc014dfbe6cd92967127fc7e3d834bd2ed28383f5eb881ac5718f3d25b46063ffc090ddbd6d4f32cafc8b2dcaeadce682e3cb662df0be3427a3c6a5f20666007947526bc6f67491c51ae3178fa872dcd17661e802c24d04c49f06bc09fd9db3c9db11aa126e579c6648f6d491e13a0a8ca9954610a1985ae4772c310570bc49054f0cbd748f1a1f8a3151afa359297cf08c5b5bddc510c4107092e4d98b76460047964b3fd98217e6fe00bec7580ac92bcdc2e2a125c0963a60bfe2c2fb2f08e4702ca96a1cc04ab272326c368c45fcef284cc8f564927209dfec5969a7cfad04", 0xed, 0x2}, {&(0x7f0000000700)="ec7fdf536a613b31dacd6ca0c3963eb35212adf1caf7858834625dea0770bbe433e8d3215431e17e81a56e52e964055ddc170869590c0716bf117733e7413fd24ac5f819d52fa9a81957e8656a9db81e9fa13d2c9d4c20200de36fbcf78b5c288aba9aed02ed5a018a13b3a336b2179d32671c8b723f4091ad97b93531d2c5f096ff4939b3eeb3fa1b797287ecab07cd1df997a4aa17003d0b903ad98445e731f02d4a344102ef5d2070ae6e48ac1e34c1bc37853a43b4851705f498a774759296253db0254424f8dc7e8c", 0xcb, 0x9}, {&(0x7f0000000800)="64a5ce51b1d74cd6ba6e5c38", 0xc, 0x3ff}, {&(0x7f0000000840)="2cdaef7d10d1299e1ee16275af2f0a3ee5064a903463db0805bc9f2dd15f08626696bf5cade8d085babb8ebc3d3096775fb5a614095e0037ca043695d342b325a95f339c98182c37b8505ebf0ce1b92da001f18d0d", 0x55, 0x7fff}, {&(0x7f00000008c0)="0879cf7028a07ff23688f76034927e8270e02faf35217d6412a35f13b9deac496388afcc16d081771b324772df9ec02a6987c5c29ff371100fdb7eafb22e0064a7fd6e63301baf21b9ec8a62263c6fee1452b3baac5630f53bded2c9a926618e87fd8221d6f667c942790fd4b7d23d3ba70368a573db7464bd3ee34fa5d3c72ead1f86fb78edf65bf57839329de246adc2f8eed3ee289ef980607d9ddee0f586095b3e80e11ccb0ff493bc505adf0b6a2f305a7be6adf29fec4829503311180859872e7261a66efa74a018764f84065dd64e62ae2d0b", 0xd6, 0x7fff}, {&(0x7f0000000a00)="963b5fa22c7888b62e1e97722ac31957cf71bc0a1a8bdd06b4d976ea2b83caf69926b61cc94dba83710999913dddb62656a5b67ef8b219a052380174774088fddfbea2bafc1bd6e513a2c5f672c0aaa8a4ceecbc122901d7f133ff652f4600f3f20ce8096a30f1dcd5166cb896b81c870c6bbdbc80db6402f0618c37505a3f129e97bd", 0x83, 0x401}], 0x100000, &(0x7f0000000bc0)={[{@nodots}, {@fat=@tz_utc}, {@dots}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup2\x00'}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x0, 0x36, 0x63, 0x65, 0x0, 0x62], 0x2d, [0x63, 0x36, 0x65, 0x33], 0x2d, [0x36, 0x30, 0x34, 0x31], 0x2d, [0x36, 0x62, 0x0, 0x64], 0x2d, [0x30, 0x32, 0x36, 0x37, 0x64, 0x65, 0x5e, 0x31]}}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}]}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd5, 0x2, 0x0) 20:18:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x80000000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x6, 0x8000, 0x5dce, 0x400, 0x1}}) 20:18:46 executing program 2: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc3, 0x2, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd7, 0x2, 0x0) 20:18:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="0a2712d5ad81702b7b3144a3b9", 0xd}, {&(0x7f00000000c0)="e1026f34334b105a9440cbf3a6e49b1237457f3540430b5db672202798b72e5aafee29000c6ad2bac37f859506802eb0", 0x30}, {&(0x7f0000000100)="8ca4b47a99b833", 0x7}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="47268b9e60f45edc476f5f7e8db721a712f4082c11d52feb8bcc66281da51a6b008a1e168c4f667899f32d2f5a58520256d4771970d650b622245865c68c6e8a4fa7e69f9accb9a779c5a076b64cf9a8279245a913279343e63099d8656928d68a8d821c600df789091e22a058261581295e148bbdb0ea92fbe614d8d4b00772bda1abcbdc17ad6ef6bc14a13f5f89802803ede530aa306e4b02713b012ec7999f9b772441eebea7d94f6a181d", 0xad}, {&(0x7f00000012c0)="1b319303416e902fe71d9812c7ba1be01a021635ba06adfe48127ca59b02a287bba0d61965d590e2d1c6a7e7b947322f0505a921874afc824dc38914d87f4ca82f84780dc102fdf5a6ba", 0x4a}, {&(0x7f0000001340)="fd871deea6ad41116c9658dbecc380512b2a85bef2919632690d28833553f32143202df8e7cf66cb1ab0301bbba3c84aff12d91115740018e7211273e83acc4d5cc0762fe45a2e7aaa62d17c5ecd856eb72163855576fb6ca0e6af8b3fe0c11b8288de759c", 0x65}, {&(0x7f00000013c0)="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", 0xfc}], 0x8}}], 0x1, 0x80) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000140)={{r1}, 0x0, 0xa, @inherit={0x70, &(0x7f0000001140)=ANY=[@ANYRES64=r0]}, @subvolid}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x20, 0x4) [ 264.032900][T23936] loop4: detected capacity change from 0 to 264192 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560e, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000001c0)=""/196, 0xc4}], 0x2, 0xffffffff, 0x0) [ 264.126201][T23954] loop4: detected capacity change from 0 to 264192 20:18:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x12301, 0x0) sendto$inet6(r1, &(0x7f0000000080)="12f45bca969d9f55c7d73bf23b3449baffd19d346f1a15f27f71413fdff11cc23f60c41a909385f4", 0x28, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @mcast1, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc5, 0x2, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd9, 0x2, 0x0) 20:18:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/255, 0xff}, {&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x5, 0xfff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001440), 0x282040, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x80000000) creat(&(0x7f0000001400)='./file0\x00', 0x42) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560f, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) umount2(&(0x7f0000000040)='./file0\x00', 0x8) r2 = signalfd(r0, &(0x7f0000000180)={[0xffff]}, 0x8) ioctl$TIOCSIG(r2, 0x40045436, 0x1a) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = syz_open_pts(r0, 0x238000) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000140)=0x2) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {r3, r4/1000+10000}}) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc7, 0x2, 0x0) 20:18:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x81, 0x20, 0x5}) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2d1ee37) ftruncate(r3, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfdb, 0x2, 0x0) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x40049409, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000000a0beeb52e6f6ced1275dc00526cc63f7ffe7f2f9ec8a0fc840c440ad15353438b7628a8bc26670e061871cde7f374e2c8b0db1e79db52301676783928125b1bf6ce2ac9b7d0e8097d271ef67573250a8527158deb468b1c67df14dcc55e29865f3729f1c6978f463e81445f008bbe3963828a7ba15b56faea7db7217cc7a5e45339f1f402447034e43813108e6ba46eaf6e3a431d6134b7b4f122dd7"]) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@usrquota}, {@grpquota}, {@sysvgroups}]}) clone3(&(0x7f0000000400)={0x2000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x35}, &(0x7f0000000280)=""/29, 0x1d, &(0x7f00000002c0)=""/243, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa}, 0x58) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x81, 0x3f, 0x4, 0x0, 0x2, 0x3, 0x3, 0x36c, 0x40, 0x10, 0x4, 0x1, 0x38, 0x2, 0x1ff, 0x68, 0x5}, [{0x60000000, 0x3, 0xffffffff, 0x7, 0x2, 0x951, 0x9, 0x80000001}], "347f83820be79f4416ab09d4f11d87141babf01ba8e8063f25636030228a5a104e0cdff9295a5236adbe2aa33db33a091faa28c0b5884245af7d11e2ac36414afda23147ede333e8675eba37b51b7b92773047efbfa6bed561c5c93a3d03781fa49b6ea637ea69fc8cdd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) 20:18:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) ioctl$KDMKTONE(r2, 0x4b30, 0x200) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xdfb47000) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/201, 0xc9}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/172, 0xac}], 0x6, 0x7, 0x2) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x8000, 0x92) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000006c0)=0x80000000) ioctl$TIOCPKT(r3, 0x5420, 0xfffffffffffffffc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000680)) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000640)) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfc9, 0x2, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfdd, 0x2, 0x0) 20:18:46 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x4802, 0x10e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2900, 0x8d) r2 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x107841, 0x143) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/111, 0x6f}], 0x2, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000200)=""/240, 0xf0}], 0x2, 0x6, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/1, 0x1}, {&(0x7f00000005c0)=""/156, 0x9c}], 0x4, 0x1, 0x40) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000300)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a00)={0x1, 0x1, 0x1000, 0x44, &(0x7f0000000800)="cee2664a126851c46abb75dd8be7df568d938b812fc4519c82e4b33f5503a99e317031371ae66a677b42f2a1de875c999c9db8e0eb778ee624ef129c5aa201b73ce54071", 0xcc, 0x0, &(0x7f0000000880)="c05a85a62555244d6440160aef1ff800d486782825781e6cf5e727a451d16715fda69f092d218976a9003408149273d86ff95cdd13c6698b1de2c8aa1887ce4ecc59bd8bee3d8b7306ff713c57cc393597647d565de708e3d9a84c729eb666c0bb406053c86e476c198ac1bcc709289b312f6b8cd7d2456244b3c8b10dd0f67dc1b8c089ca33427eb60a22d2e41e27873c5cb1f122107ee142f7beb96725842692fa40d37fb141ca52515bc8288b977d902bae40874f5a301276b01dd6a5cefc0d72c99f83c22a81eb803ba5"}) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x40086602, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 264.464774][T24025] loop2: detected capacity change from 0 to 4 20:18:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x90010, r0, 0x35637000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 264.511634][T24025] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem 20:18:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2400, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x300, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="d994ad05e41ea7bf268b230e", 0xc}], 0x2) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x40087602, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfcb, 0x2, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfdf, 0x2, 0x0) [ 264.553346][T24025] EXT4-fs (loop2): Can't read superblock on 2nd try 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfcd, 0x2, 0x0) 20:18:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) ioctl$KDMKTONE(r2, 0x4b30, 0x200) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xdfb47000) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/201, 0xc9}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/172, 0xac}], 0x6, 0x7, 0x2) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x8000, 0x92) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000006c0)=0x80000000) ioctl$TIOCPKT(r3, 0x5420, 0xfffffffffffffffc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000680)) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000640)) 20:18:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfcf, 0x2, 0x0) [ 264.618596][T24046] loop2: detected capacity change from 0 to 4 [ 264.625525][T24046] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 264.640066][T24046] EXT4-fs (loop2): Can't read superblock on 2nd try 20:18:46 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x240004, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe1, 0x2, 0x0) 20:18:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) pwritev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="26f3d50fb2cd06cb3e528c891a998d5f6ab8c17e20981b8a29f70e22bff2c9dbac0cf6bb4c5b9e02183ebde7fff183ee9701191ee11e67ed6b8036208a3a2eb91efa86804a307a4a5a76ba1b1ffd637d788255dcc2353969585ef4429ad21c05a6e88803df3ad2503b65ca8aa3a7399de2d70ef188a524c495ced1bbb5a3e3c04d5ed2a132d24dcd900376f8c74f4507271264c1c229c51e1b5b4fb1839d7e93781d02c2fc7f48a3d5eb43fa8854871a389c2265bdd64a8b4a9aa293ed72b71293f974574db12f61b7d8b56323", 0xcd}, {&(0x7f0000000140)="6c50a9f91b64f5136347e4741f573388907a3115aebd11c2b1c20467a54ce12cff0aeff06b8de3aa954f42cfafe54eaf4d32262f9222a992d5dba070cabea768a926c1b5f2cbbfbd8e513dbd80a0f47a5ce05699584f99ca3d40da451c5e9878cb5bdd794e843225ec4602633fc3fc4ea89a386da1a8d95105211be6cc71e8e943429b0b6b3491651fa44d006dff4e698bc696718ef87b69c961217d1c9d8c51bf7c3e3965311bc5f43a1868a07e0e07b475a82ae78bcaa1173324dfc946e4802e10ba71530864d25e0a864d1792ceddb618f8df2cbc9693faf75e37dcb99df1d3fd0e9832a689046cff20710ece8c68898f08837bf4afd7", 0xf8}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="6a3789c319476c6f3f978191289fb845a64c64af5977fe6dce5783435add9b649f2c6c3d9edc4accdeb05a43dcd561e2dc9a57d37b334296017bc1569992ebdaf52789a233ed575daad53f2cdd740b41d2e3829c205a9e547591f7601f35972415644491ab732c808ba8f353bc7674a524aae296602a36c982f2d6e0cddbb646ec334ae89537f5ce5a020ef008f1654dcec3f803a7be35e97b81462108e74fcf07ac5229bcaa69e8359dce451999308f21f569ae088e74bb9878e69d06a274c0e53b1da03f", 0xc5}, {&(0x7f0000000440)="953b2f850fc729207a071461dc57721540403a353222a07e573c35202002e1434516c0fd3934337364951a92a599e49b0ef67d82b291cfee50126c5696964b7ec01895671f", 0x45}, {&(0x7f00000004c0)="ff839f2a41274e20e4e8c1681cf241d079cb2b2ef53df82d7e89c8d64bbeaff96e257983d06db901e5d690870073685bda3bd2348d192516940f13f3fc239757da16989770c055e1ecb359bb208d4c85eacd9916db3fcb22368619872ef2d14d988bb3dbd4514078190c5b039684f6bf4b748897467e0eaec7dc0d1f29d2e599d60612b025ba45a9a8c90a3770ff29a63c7d719b8f683a52898def4c577424feb1758b695dd0e568e16ef54ea65b75f5fd99fd5f5c4196357bca88b0909bcda3a3278473690e5972631bb63e40c646aa49cfc884e7789fce2dcf2678f32d4fac60b63a38215f11be5b97", 0xea}, {&(0x7f00000005c0)="3a04eb1f92fdb48d045206e853ad872c353630c6d4f3db3c10d0a934f7a32a6c5322cf9c219bf94eaecc56ee78720ab79528621fcd7a4426f54073e10f8e6aa49f7ef81394cbc4fde0b5190dda90a5ed2562594a1433db2d4b5dff7296fde6f8f3e8018e64d9b1dfdd2f95786e4582", 0x6f}, {&(0x7f0000000640)="f2d14f7cf28ed9ad9a79b9ca7364c957707904c952b81f1e1e28745038d8f867d25aa24803cb89150f2a8933a7b214addbc05fa8469d7d18f07ee8f5e8ac7b41fc8abf1a91f62dbcb0e480ee0e82ee993963f60736dd8a507110d4c1b2c41a009aa0e0305d8a920a192851ab568c47e2bad6ee0f1aaa5fdcb474710bbe2fa514146e41d36f421d611a4f74f12f5f43fd5658b3e0f6e38b47475c2adc7c339fc926e08840064301bfeb7ecff1b32aa0f51b6be47432e39b5565e4647db2f195739dd6b0837751c1c40d9728aea42d5713809f", 0xd2}, {&(0x7f0000000740)="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", 0x1000}], 0x9, 0x0, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) ioctl$KDMKTONE(r2, 0x4b30, 0x200) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xdfb47000) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/201, 0xc9}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/172, 0xac}], 0x6, 0x7, 0x2) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x8000, 0x92) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000006c0)=0x80000000) ioctl$TIOCPKT(r3, 0x5420, 0xfffffffffffffffc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000680)) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000640)) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x401c5820, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x100) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/248, 0xf8}], 0x6, 0x7, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sendto$unix(r3, &(0x7f0000000100)="64d79bf1c57d067fbdd4ca36864811e460ead8b1cbfcca25d3b33faac537f5ed54baf614c0ebbaa0f26ba833d29db2d3aeb221d747a82f96b527e1336a92806cae", 0x41, 0x4c040, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4020940d, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd1, 0x2, 0x0) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe3, 0x2, 0x0) 20:18:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x9, 0x8001, 0x3bb3, 0x8, 0xc}}) write$binfmt_elf64(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0xb36) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x100, 0xe8, 0x8, 0x6, 0x2, "aee2dbda7c0733a9"}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) ioctl$KDMKTONE(r2, 0x4b30, 0x200) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xdfb47000) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/201, 0xc9}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/172, 0xac}], 0x6, 0x7, 0x2) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x8000, 0x92) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000006c0)=0x80000000) ioctl$TIOCPKT(r3, 0x5420, 0xfffffffffffffffc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000680)) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000640)) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd3, 0x2, 0x0) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x80045432, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe5, 0x2, 0x0) 20:18:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd5, 0x2, 0x0) 20:18:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ftruncate(r5, 0x76) write$cgroup_int(r4, &(0x7f0000000200)=0x4, 0x12) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000001c0)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/199) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r7 = fcntl$dupfd(r5, 0x406, r2) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x4, 0x8004, 0x800, 0x9, 0x19cb, 0x9}) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x80045440, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe7, 0x2, 0x0) 20:18:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r3, 0x7}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000675000/0x3000)=nil, 0x3000, 0x8, 0x4010, r0, 0x0) r5 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r8, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x80000001) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) preadv(r10, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd7, 0x2, 0x0) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x80086601, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe9, 0x2, 0x0) 20:18:47 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x19, "00008000"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)={0xfffb, 0x81, 0x101, 0x3f, 0x0, "364240c138db3028"}) r1 = eventfd2(0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0xe8, 0x35, 0x5d, 0x3, 0x3, 0x6, 0x3, 0x80, 0x40, 0x187, 0x3, 0x3f, 0x38, 0x2, 0xfff8, 0xbb3}, [{0x2, 0x0, 0x5, 0x3, 0x7, 0x200, 0x0, 0x3}, {0x1, 0x20, 0x1, 0x9, 0x1, 0x2, 0x5, 0x8}], "e7b74d807ed527d7af73735a6218552cb029d4cc3e38871acaabbc676778126a17f52b4dc3dda5bf", ['\x00', '\x00']}, 0x2d8) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x9, 0x3f, 0x1, 0x0, 0x0, "ffda99647ac1c1278de2bbf0d8c61223bbb12b"}) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfd9, 0x2, 0x0) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x80087601, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0x0, 0x0) 20:18:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x6000, 0x5, 0x3, 0x6, 0x8000, 0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfeb, 0x2, 0x0) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x801c581f, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfdb, 0x2, 0x0) 20:18:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0x92c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x9, 0x40, 0x0, 0x0, 0x0, "224c25e90d8fc40deb12d10e775b61888f1ca8"}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000140)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x4, 0xf2, 0x2, 0x1, 0x0, 0x81, 0x200, 0xb00610c7253e9cc9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x41142, 0x7fffffff, 0x3, 0x0, 0x0, 0xfffff800, 0x9, 0x0, 0x4}, 0x0, 0x6, r3, 0x2) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x0, "00000007000000000000000900000000001000"}) ioctl$TIOCSIG(r1, 0x40045436, 0x32) creat(&(0x7f0000000000)='./bus\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) 20:18:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0xc0045878, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfdd, 0x2, 0x0) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfed, 0x2, 0x0) 20:18:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0xd9) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = fcntl$dupfd(r0, 0x0, r1) sendto$unix(r2, &(0x7f0000000040)="916375aed3e467bc974417be9c468779e40d61874506353e4eca14c0b799c3d45d5df65d8653c45675a60ea935cfcf7ae4f0149da8fc0af905f73c3ef6fd1e938c03765e064175820e7b2501d02e2bc339d314c609a8bc70c98dcb72c015b46be76d3d3b183d1269323a4c615c583d82d8ae5fe68fc3a1bb22d88c9fc55460bbe1c6e99e92e9528c6d8ac1930ecf6599d8583e7d77b1bb2aece052cba3d11139a8e3c72881483d58c6fe95c005978a7cf0854571f1532a606c981e03ac227e052b6dac3e77d961f2c7ba2b946f0bf5c1ad8bef6d548c8719bee13838b14f3a27f60e75159df45fefd9", 0xe9, 0x4015, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x404, 0x0, 0x4}}) 20:18:47 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x8, &(0x7f0000000780)=[{&(0x7f0000000140)="a524da06eb2c58a046b2d9287a58711381bdeff1", 0x14}, {&(0x7f0000000200)="99e44399ce1b6a95605140f9ed347fb4c226521744fee2abc72047cd6cd40415d2f5ea132bb2fcbcd69eef2ac745c1b267884cb5a250e277a15122dbec44f3dcfc49b7789a7ff099637af4c4a14f5a985e4b75d0338a7b13460ba9df7ab3cba188053dbcd325c74d2fbef715caeb460d3918beaf9c100f2ea197c5cf6ae9c95c35e1787f82785175aea9b3cd29c654e2e6a0e2ae06adbd2169ac609f9f4afd05a397ef299f749e10b8", 0xa9, 0x400}, {&(0x7f00000002c0)="476ae7796e8997c0b8789dafec51a55c9f65c49aec07d37a82379e12de16102a908d54083d39620d8392e342dcdd6f1e8b874363340325043bd0f976aa7d26ecbddd161af62f32299f43d68e9721dab8dcbf1d1b839e61cadb67cecd0340b6cef538d98db17195c3680e4ca3160dde9c2f9488e16c94f296a87b676669ca5ea7742e67b8e45f8fa5931679c24a08d54648f48a541f2d212e0fb76a9dac664630c3a64db5e9ed1ffd5eea74c91f06c375a72c76d190f6d4298f972cd309e5134022c02dd463a4af30a3c66b7d8b63f1eb21622e17c83f8c4c5d7ddb784af93ac078204e9384be8f14ad897620e9d904c076ed", 0xf2, 0x1f}, {&(0x7f00000003c0)="2db9f3fc1ab3655b40d1b1194a51ead956a1b0e88be47234e586269a1299dcece6fffd63483a5f31121c29a252496eb4740528913d45339c8e562ce9c4b715b5b691432f471ce4c2291563196b2f9f7b79cbd2e5539e95a2f5fb15f037eb8ea058c01313617594b0e5a53a24ba02a7ed068f3b37d48ae605255a258f029986a76da1658ea9e9440000000000", 0x8c, 0x9}, {&(0x7f00000005c0)="60364d88d38c92eb4abcfd335c2c9c73832db75b764744110ed1c268ab3346454b8aca91c1b74b493e60f74c1ef37ee22c158dec2b597c57161bf6fb6b30e8dbdafd544e73299139439f5b6a0c2c2ff2eb3da0c3b3118f6991af274ac1ce554642f23912a03e2de73983d94fd8d0b848247990a977150a3c3fe25a95ba58cf42f939d7868a238e006f11601cd61f63dac8a63b8082441327bd60e103c6b54335dfdcc7bdd88288cbd2561f73350957ecc973eb4ce059afc0d84a63575fb3bb35da1e71bc58603acd61904745bd33e8cec42dbd85", 0xd4, 0x4}, {&(0x7f00000006c0)="893d8ca9656fb3c6392e9ded78b5a7f2a0bacb1d9ffd59bf389c787036986a98099c026c72b8122fb0059992cfee7ff495e1db1f72c11e1364a2cabbc515ea00d4c2f44d772b5fedd577f9e5a5dce9399135af73fd1440c2a31f7328e00da66e43ef35015c7e5baa15cd98ed6feebe975e61d5fb47834e2cbb06588920dfd6b5d52d5735053834322b18d33fb198a06692e76e359b77059986c7892c4ce5976d4d18f8d67bbecca6077b070bde65ce79", 0xb0, 0x8}, {&(0x7f0000000480)="fa045bedc73d3012d8cb99628355c5ea0969984b83a0741bddbd7c", 0x1b, 0x6}, {&(0x7f00000004c0)="505c4117df80df96931ee25cac3f608542d78de83a", 0x15, 0x6}], 0x4, &(0x7f0000000840)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19ce}}, {@minixdf}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0x8}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}], [{@dont_measure}, {@euid_lt={'euid<', 0xee01}}, {@hash}]}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:47 executing program 2: r0 = fork() ptrace(0x10, r0) ptrace(0x8, r0) rt_tgsigqueueinfo(0x0, r0, 0x27, &(0x7f00000001c0)={0x7, 0x4, 0x7fff}) setresgid(0xee00, 0xee01, 0xffffffffffffffff) r1 = socket(0x2, 0x800, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) setgroups(0x4, &(0x7f0000000040)=[r2, 0xee01, 0x0, 0xee01]) socket$inet_udplite(0x2, 0x2, 0x88) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100001) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x3e9, 0x1, 0x70bd25, 0x25dfdbfd, {0x39, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x9, 0x2, 0x3f, 0x0, 0x1000}, ["", "", "", "", "", ""]}, 0x38}}, 0x1) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r5) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) 20:18:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0xc0045878, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = pidfd_getfd(r0, r0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfef, 0x2, 0x0) 20:18:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfdf, 0x2, 0x0) 20:18:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0xc0189436, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff1, 0x2, 0x0) 20:18:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe1, 0x2, 0x0) [ 265.795304][T24251] loop4: detected capacity change from 0 to 64 [ 265.824258][T24251] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:18:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0xc020660b, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 265.945235][T24277] loop4: detected capacity change from 0 to 64 [ 265.984524][T24277] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:18:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fcntl$setpipe(r0, 0x407, 0x98f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:48 executing program 2: set_mempolicy(0x4003, &(0x7f0000000040)=0x76, 0x6) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e20, 0xffffffff, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) close(r0) set_mempolicy(0x1, &(0x7f0000000000)=0x8, 0x4000000000000000) 20:18:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe3, 0x2, 0x0) 20:18:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff3, 0x2, 0x0) 20:18:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fgetxattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)=""/183, 0xb7) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x3, {0x3, 0x0, 0x0, 0x400}}) 20:18:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) mmap(&(0x7f000024f000/0x2000)=nil, 0x2000, 0x1000009, 0x4000010, r1, 0x2f2af000) 20:18:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000380)=""/47, 0x2f}], 0x3, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000300)=0xf7d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:root_t:s0\x00', 0x1c, 0x3) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000086acbddea3fb6c5544e13926fbfd0017010007002e2f66696c6530"], 0x10) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x1a) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x28002, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x6) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000015c0), &(0x7f00000001c0), 0xfffffe37, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) writev(r3, &(0x7f0000001600)=[{&(0x7f0000000200)="02818fa12fc655ef0a9705678ecac342e82ab9edafd5c6fe440d739779b8b6181475c3316b536cd6487156cca7f63f5d81dacf4e8d1e7a78df6e38bcebeaf5bb848973704c855edd2250f0824e9755df3a9b2cb51efc9497ecc760a3eb2342b8599c5384aa525351fb3be02fc74f67893d5985969ec36c950eddd9cfb705", 0x7e}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="cdf99623ddce3e9b1975e5a2dd4644a0b01a74581a39a290bc7cb39b7924d67acb33848aaf55f8c35bf18573bbfb59c28477a655c74d006e91", 0x39}, {&(0x7f00000012c0)="9ae0688b77fd07a7ebe72a63f5603d747c5c7d89a0ca7a0f9e2d61010d4f2dd1ed55f0cf48f5762fc8afb4f540238d010e22cb515f5622322fb69a704d62ee53c3d8541729cd9a682e30683d7a777234d97d8684364d4c28e4016c893599c4dc16c1e6b35583e1e84893e78c0e7d8db3b44454", 0x73}, {&(0x7f0000001340)="7c3dc127e9b13a82230c614130da4490170997b9a3fe99a84a091da1fc93d14ea19feb24e7a33486fe4e4fad23122b9a4d4e50688a091693dfb6c6937d3beae8770cb96bbc0caf9179276a349fda3adaf91ac5246b130ac8cc230dc09c7789f0452ebb639c4380ad751a60f500edf1493164ba0c8835b7c84cfb69d45fc55f8ef7ae688eeae01b14c35ae4a801bee5", 0x8f}, {&(0x7f0000001400)="3f8d3c75a68e47ddc3d8c6ad523c748c72ea0512adae8efdc9b454b0ec9788168550dc54c2c96f0c7d16d48e92d797bd8362869f3d06d4817088cb889ac8d34196014e9a240f508a72be66809ffa1c509d7d61e594fc653b277968db6098a22ac821ee5c3ab94085fcace9b02734f62efb6c7f3b334345edc351c0d08c99cd708d178ad4a0e6f41da904277561e8ba6b73c8afb5bb3856098ccd5f2f76ffd361ad69dc8f744c9609bd145cb9b93fc9f5e62926362b4e4dd3e435a0d4f136032fcbdf9b35a4619800e854bb9b7b70ff5a99043644923e2455", 0xd8}, {&(0x7f0000001500)="ce6013c0c64eda335b34bf2e45903883ad92afa2de747a25dc50cdd2679743760f5de717bdd2f330ee8944fa9c05f2ffdaf01b60a9d42b37ea5a4af4fbbf241293a7e960525bb0851e8793516b440d5504ca61efa34f27e099d07564e8315391a0c2166246127c26e191c27a907cc94a4f00401e9b8f976fe08c3283ea6ada49dd7ea7a10837c8e0", 0x88}, {&(0x7f00000015c0)}], 0x8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) 20:18:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="04", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)) 20:18:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x4, {0x3, 0x0, 0x0, 0x400}}) 20:18:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff5, 0x2, 0x0) 20:18:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe5, 0x2, 0x0) 20:18:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = fsmount(r0, 0x0, 0x72) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/61, 0x3d}], 0x1, 0x4, 0x9) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff7, 0x2, 0x0) [ 266.393286][T24348] loop2: detected capacity change from 0 to 1024 20:18:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe7, 0x2, 0x0) 20:18:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x5, {0x3, 0x0, 0x0, 0x400}}) [ 266.434069][T24348] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:18:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfe9, 0x2, 0x0) 20:18:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = geteuid() setreuid(r1, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x9, 0x4, &(0x7f0000000400)=[{&(0x7f0000000200)="e2e7c39ba24cf9f2225c54626d7af875cb0d6bd58060d518663119bcf1c3ab8c28b98c50c93aa4fddcc2374307fc41ecb05912ba6679a6d63b37bcbda75c1aa8f8d2a1b17484f69f24ba333dea78d64b3e0956461d975eb50864ccaa9c7bf9fea75916eeea78b569a6fc54fc46fc47360839a1", 0x73, 0x526e5a60}, {&(0x7f0000000a00)="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", 0x1000, 0x7f}, {&(0x7f0000000280)="a0fcfdb3e906cbbeabb5f0096eb33d2234e45e5b630745388a9bb888a8c4e2d66442f25c499e403b7122e452b36be6759fc58e70f4a9d712893d6a1a02ea47a8382680b0f1f522e969a117aa037b554c91ac5e3e101c252ccf81f9e3dd6694ec5d1d895dee17aa51dc4e4689e1b39ea3ac26d2411d76057c35326b57ab193a8616c474d9f9213093b42b1745f2d55df7d7c6c12f60c603fe35cd8c0c1a9e8b0e13d9", 0xa2, 0x2}, {&(0x7f0000000340)="4e42e447c0d77847c0cd6e24e5144ea8aef96ff8f3ff82094bb789152f39b30036930a4dddddd47106ba789e8ff6f3ce6d752daa7daf3132e816b34628cd185cf5da1b63cd5f2dec978545d9a6f855d006ba7df7838d895152efa39c2fca49385707e8a03c6802d7f93ba9ae95ed570d443963ecb75891db686d2f2b5e0181316c408adfa1c2c142", 0x88, 0x7f}], 0x2800024, &(0x7f0000000480)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '+)+&'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'cgroup2\x00'}}, {@euid_lt={'euid<', r1}}, {@pcr={'pcr', 0x3d, 0x34}}]}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) getxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000500)=@known='com.apple.system.Security\x00', &(0x7f0000000540)=""/175, 0xaf) 20:18:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff9, 0x2, 0x0) [ 266.491823][T24348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 266.500740][T24348] EXT4-fs error (device loop2): ext4_quota_enable:6432: comm syz-executor.2: Bad quota inode # 4 [ 266.511448][T24348] EXT4-fs warning (device loop2): ext4_enable_quotas:6472: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 266.526300][T24348] EXT4-fs (loop2): Cannot turn on quotas: error -116 [ 266.526323][T24348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.616387][T24389] loop4: detected capacity change from 0 to 118362 [ 266.623313][T24389] cgroup2: Unknown parameter 'smackfsfloor' [ 266.669238][T24389] loop4: detected capacity change from 0 to 118362 20:18:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0xd9) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x10, r3, 0x99971000) 20:18:49 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10200, 0x91, 0x18}, 0x18) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x5) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {}, [], {}, {0x8}}, 0x24, 0x0) 20:18:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x6, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfeb, 0x2, 0x0) 20:18:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xffb, 0x2, 0x0) 20:18:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0xc3960000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x3, 0xfff, 0xdff}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000200)=""/252, 0xfc}], 0x2, 0x343c, 0x4) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000380)) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x5, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f00000006c0)=""/206, 0xce}], 0x4, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = geteuid() setreuid(r1, 0x0) quotactl(0x0, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)="c9a086534d350ebc2c3a2145b21a7868ae4251b6f9a8da828e32edea3493d974af329d78cd7702b59e563d9693e6bf394803d27ecf60910c229d516d5d79ce6e74f9e253e843dd093dea48f7c5afa6374b20b19240c119101ac61bf1239071f3b89a774bc4e5") mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800012, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x7, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfed, 0x2, 0x0) 20:18:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xffd, 0x2, 0x0) 20:18:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0xa, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0xc0300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x1002}}, 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x27c33aa2fd819f67, 0xa1) 20:18:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xfef, 0x2, 0x0) 20:18:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x80000002, 0x2, 0x0) 20:18:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='nr_blocks=k-06%gm9,huge=within_size,nr_blocks=\x00pL%5-m64,nr_blocks=3-,rootcontext=root,appraise,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',mask=^MAY_READ,fsuuid=c\x002b7d10-\x00234-21\x00e-0afc-ab0252b5,obj_type=],hasd,ob,\x00']) unlink(&(0x7f0000000100)='./file0\x00') mkdirat(r1, &(0x7f0000000380)='./file0\x00', 0x104) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x76f3, 0x400001) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000340)=0x3ff, 0x3) 20:18:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0xb, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x3, 0x2, 0x10001, 0x3, 0x3, 0x0, 0x2eb, 0x40, 0x2, 0x10000, 0x101, 0x38, 0x2, 0x0, 0x7, 0x1}, [{0x2, 0x1, 0x1, 0x5, 0x9, 0x1b6, 0x80, 0x5}], "41d2f7bc52e000cbe15a89e1acbf27c053c1ac09199a759e317d0199af5b3266c180f95022", ['\x00']}, 0x19d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000002c0008002dbd7000fddbdf2508000000550090005f9311ac0fa70f9d933f3161882faf6b7af81380bc3f1abea3e551e6e3b87e716e2ce67dceb5388467ff2693b171c03bf5ee57884c7465eded27953cc5eb1fa0ba4a05dced93a7578bdf8e73a2d213449a000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x7475c000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x401}}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x98002, 0x60) 20:18:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48000, 0xc0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x208200, 0x10b) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) r3 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r2}, &(0x7f000003f000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) 20:18:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff1, 0x2, 0x0) [ 267.658362][T24479] tmpfs: Bad value for 'nr_blocks' 20:18:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0xc, {0x3, 0x0, 0x0, 0x400}}) 20:18:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x3, 0x0) [ 267.696602][T24486] tmpfs: Bad value for 'nr_blocks' 20:18:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 20:18:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x9a, 0x0) 20:18:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0xd, {0x3, 0x0, 0x0, 0x400}}) 20:18:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff3, 0x2, 0x0) 20:18:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0xe, {0x3, 0x0, 0x0, 0x400}}) 20:18:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x2) r1 = clone3(&(0x7f00000004c0)={0x8000000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x3d}, &(0x7f0000000340)=""/151, 0x97, &(0x7f0000000400)=""/84, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58) process_vm_writev(r1, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/68, 0x44}], 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000001b80)={0x1, 0x2, 0x401}) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000200)=""/146, 0x92}], 0x1, 0x7, 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) readv(r5, &(0x7f0000001b00)=[{&(0x7f0000000740)=""/114, 0x72}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/177, 0xb1}, {&(0x7f0000001980)=""/165, 0xa5}, {&(0x7f0000001a40)=""/29, 0x1d}, {&(0x7f0000001a80)=""/102, 0x66}], 0x7) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mount(&(0x7f0000000540)=@sg0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='reiserfs\x00', 0x25061, 0x0) ioctl$VT_DISALLOCATE(r6, 0x5608) readv(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/37, 0x25}, {&(0x7f0000001c80)=""/201, 0xc9}, {&(0x7f0000001d80)=""/109, 0x6d}], 0x3) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000001bc0)=""/5) 20:18:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x4, 0x0, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000a00)=""/123, 0x7b}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f0000000300)=""/8, 0x8}], 0x6, &(0x7f00000003c0)=""/158, 0x9e}, 0x400}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000007c0)}], 0x5, &(0x7f0000000880)=""/146, 0x92}, 0x1}], 0x2, 0x2000, &(0x7f00000009c0)) sendto$inet(r1, &(0x7f0000001d00)="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", 0x1000, 0x4000044, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x20, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000280)=0x65, 0x4) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) 20:18:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={0x4f8, 0x0, 0x500, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x484, 0x8, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b3e4c57dcb16bd491cfa6280aaa510239f0a9e6f7729ade6b304284ab554622"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4000}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "34f3999838d27b255384e433f09c6e7f418e3d24cccaf5c9720e8b5b06eeea88"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x1}, 0x24004080) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff5, 0x2, 0x0) 20:18:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) 20:18:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0xf, {0x3, 0x0, 0x0, 0x400}}) 20:18:50 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x100, 0x0) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)=']\x00', &(0x7f00000001c0)='-,\x00', &(0x7f0000000200)=':&&\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='$[\\$[$\x00', &(0x7f0000000340)='\xc8\x0e\x00_\xe7mi(s\xe1(Pk#\vJ\x90g\xf8\xd7\xf8\xc0\xab\xa5\xfekFJ|\x10:?\xfdu\xf9\xcaqm-']) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = dup2(r3, r3) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x4, @local}, 0x10) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)={0x55c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x401, 0x0, 0x1, 0x10000}, {0x7ff, 0x30, 0x7, 0x6}, {0x20, 0x40, 0x9, 0x7ff}, {0x4, 0x1f, 0x1}, {0x3, 0x2, 0x7, 0x800}, {0x8, 0x9, 0x81, 0xfffff001}, {0x0, 0x3, 0xff, 0x5}, {0x20, 0x4, 0x3f, 0x9}, {0x1, 0x3, 0x1f, 0xfffffffc}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r7}, {0x194, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x4a, 0x1, 0x400}, {0x4, 0x7f, 0x2, 0x3f}, {0xf6, 0x8, 0x6, 0x3}]}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x4}, 0x4) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) 20:18:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x11, {0x3, 0x0, 0x0, 0x400}}) 20:18:50 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x11, 0x4, 0x2, 0x1, 0x0, 0x4003, 0x8040, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x302, 0x6}, 0x207, 0x98, 0x80000000, 0x8, 0x8000, 0x6, 0x4, 0x0, 0xfffffffb, 0x0, 0x8}, r2, 0x200000002, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x298, 0x0, 0x53) 20:18:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff7, 0x2, 0x0) 20:18:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x0) 20:18:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x4f, {0x3, 0x0, 0x0, 0x400}}) 20:18:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x2) 20:18:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xff9, 0x2, 0x0) 20:18:51 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x18, 0x0, 0x0, 0x400}}) 20:18:51 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x1, 0xc) renameat2(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x4) r1 = syz_io_uring_setup(0x70c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) r4 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x2b}, 0x2, {0x0, r8}}, 0x6) r9 = dup(r1) syz_io_uring_setup(0xbdb, &(0x7f0000000300)={0x0, 0x1386}, &(0x7f0000d1a000/0x2000)=nil, &(0x7f00007dd000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r10, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6000}, 0x7fffffff) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101003, 0x0) io_uring_enter(r11, 0x67e9, 0x724, 0x3, &(0x7f00000000c0)={[0x3b]}, 0x8) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r12, 0x0) preadv(r12, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x6708, 0x0, 0x0, 0x0, 0x0) 20:18:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xffb, 0x2, 0x0) 20:18:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x3) 20:18:51 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) mmap(&(0x7f0000850000/0x1000)=nil, 0x1000, 0x800006, 0x11, r0, 0x969ad000) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ftruncate(r1, 0x2008001) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x78) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 20:18:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0xffd, 0x2, 0x0) 20:18:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:51 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x240200, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4) 20:18:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1, 0x4, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) 20:18:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x80000002, 0x2, 0x0) 20:18:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) sendmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)=@phonet={0x23, 0x4, 0x5, 0xd0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="ac727d048765a7a7c3e29ed661382afcf381a96fac9ca6360956252db9fc9e247eefba270690256409f7413ec7cf9c1794f3edcec51500eb6c54b4cbe88522199a4e00", 0x43}, {&(0x7f0000000140)="c51266472c986194b04ec389617fde96fd0b57156ae267720f210f2e000e7ab12d29388c1bdc2b068cddb8e5b1e9943b7e60b2d2095cf050dfd9ce8e1c75c610513684e0726e20c7339f73e1cffd04095a375fa770146d50dc532c52ed1bdd22af478023f7295afeafb695eef6e6a4ae9a7183ae1ab29443b0b38226a1f5e1a2f488b6d8d88ea04eba9da2101b6ec8c9f6b6886961b3607fa46f04545622b134766c2882df30e186f3493d747739b3401b5ff2d10b69368ca0a3d6f1763fefe6fce257e5ee80b3f011236d58966726b771", 0xd1}, {&(0x7f0000000240)="a3363908b878a06f9808ab5fa8ca8727eafbebb2e51c1ab555321725adc7046ae8ee50e2c02be0e504a4fe0e43ee55b7561d6bb3fe590ab3d797c8c673b014f5794e2f035b5840fc6b1eed037b98750157589fef1011001dcf3ad6063c6b087387b3601a266c4725d2498ceb6ca7871626aaaf44c33399162dfea7e7485c9fa8fea8910edd8f7ac14cc1de263ce2e22e55a128ab071ab91bcc8dbf304b9a2fa8c4b278eb1e242de385246800ad496a32c79aa2b8f59f13b97ed5ef3c2c9857c11dcbfe09761ba2", 0xc7}], 0x3, &(0x7f0000000380)=[{0xe8, 0x104, 0x9, "cd87d8ac8fc01d8d244cc8f5109b94dbecf721e92ef488d11add0ee4456a76a65d3d7f0ec9ac6abb40ca2cd2eacee07b9962da4b26bb16b098cd7a8c1b6d1009526d1ef4abdbcfc6cf78780c12627fca2af698fdfd58b613a6d101389b2c59023979093d49cfdcf7aacc88b85efd706d3793b3cbdb875a004ed9ea6b17bb943a85ee9b2f11543d148e01ba45d6cafb6b456349b24f82fd31ba6034f4985f8cd7d9fc3ce20f30d15e5d829acd72d06cf9afa4cb405f3d415da118db412a58db3294f74c10bd1437cd1749b92a473fed5a84264b84f0"}, {0x30, 0xff, 0xbe9, "748fb7ea8291c32e2f2e44e5400900000000000000c6713e9332a9"}, {0x58, 0x101, 0x3ff, "dd73e8d9f991a355f07f01068d6fd3231242ae99bf36055f9b11d47e71a53c53407f03c6e85ffe5c35150daf1766085e51e59b9ab4c5960303c48eaba55f85b5ec249c3d50e4"}], 0x170}}, {{&(0x7f0000000500)=@qipcrtr={0x2a, 0x7ffffff8, 0x2}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001d00)="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", 0x102}, {&(0x7f0000000680)="7d8eab9e28867ad92d31355bf521c990d44dbebf9108b58b495da51a94d8a11a4a8d60287fb6cce0a18471ea8a09d2a7516950dbc5a2b907ad4a90b845eafa13d800054ba8dbf436ce9c292abad8f7f1c9b82e06a67ab1c16ff8a1ca63e77388099bb5c369586242c560f9eec1b34a887aefbefcb8c1bcacabfc81e23c99d144f07487e5dda68b2558514e105a0b38c6a8cefe4325dc40de9ad7b003aa11daffed748c3b44ace6fee17c23fb6f50843c8cf13f9564ca521e82a5e97eba839ee0d4b2c6fefccc9ae4211997f9c82a737f3c03393377c670204e92743f62787f1c642693590298f1022684d6f0ec05c67e6ac1f4113c7ba2", 0xf7}, {&(0x7f0000000780)="6b7fc6e305a77bd2c083598e05e6b263a09af8af53b6fb43760a9c85bc8fe7dd489c635372af2c6f028456950b7919f50204a049c5c5b787de44a5b08b192f77b640028e4dc15a11bcceb9819ebb09e1d489122f83425401832e8802f95dbfbfd609291edb5ae0a8ce9c595778e8ab74dbe29e03a5e57c201119212b053bd8df243347f0f8a175d6", 0x88}, {&(0x7f0000000840)="287109e5ad2ec50b4e39361de21b2a600a38df80a6147d3bc31c91f73e06416033815ef90a3a499d48af5ef91ca35fafeb4235a2912948443d859d308c3fbbeec7c2001c67b0c8efcb7f7a092db8938ee542dd035f1545aef404cfad122f66d08a20e89310dee5008625c850c339ab48b369b112eb260f2a6e67707f12cb393d0f7957b6857a1714c7ea9d0d926d2d02ca206893299a07df48bc130aee478b02f2a40f71f496d61e0e36ac6679a2f90beb20991eeb17c2edabcbadc0362003", 0xbf}], 0x4, &(0x7f0000000940)=[{0xd8, 0x108, 0x1, "a766eb388f5f83ebff9e2f9c4a2700d0ff9facb502dc278ef51acb2bf2afb0a89f6860a50ee3c245508e70ba3f1eef73dd4991cfee0ba6bf4acaae3c19984a0ac5b2b0d978301e53766674af05621237232ec3055541067ba9d0ce5633b4e54a2545acbc12f4f0569bd59d3010d1b8f9aee00cb8112e08969c7febfc8fc5ff8cef88f87cab736dfd9e49ed61c10f70ef9012953a1a0b9a2e516f7051e6baac9dab5554431168bbbf431389f6db85123ddcff7e582eb14a2e36e69660aeabf462bfa7"}, {0xb0, 0x10c, 0x9, "b2a7be50d4916af99dae41822a22623153c7f8164421be527312f2a1e533f94f9d2b9ad3fad2a492fded471df4db03c8b42a366fb4475d7e992ec69562be315a370ed658832bbf793e7612e68c9a97dff001224446093c317192c304d7927e1f9da1db1fab23bff5b087fdb748552fb98004d5765122ee425b083a1e758acd3c8adbf35bc7936c3277343a0028ff79a33247b613ba52b6c6ffb2"}, {0x18, 0x10d, 0x4b93, "35faa064"}, {0x18, 0x100, 0xfffffffa, "37bd"}, {0x58, 0x10e, 0x4e84d735, "21edb4591b2c63543b9af82d520aba73a072f98b4143cfab336d78b1eba4ecb687c56f61c6f98db0d2a6397e2fe03cae6a9b6354dc587e2bd3e64cdc80a17a95f7c6904a62ae68"}, {0x60, 0x10a, 0x3, "3b7bb1a19870d1573622740a45abf148735ba50380cb347f74667b5d0ca51b58fbafff32440406723025a9483aed856cf7f1e44c0f7ad2f844d51c69c6b02e8999a7093c81937adf9b030b118bd20c"}, {0x68, 0x3a, 0x8000, "c2a42faa1549a6e8cf0a43db852dc40b97551898fd68ff7988ecbd3497109e9ac1b2ccfb91fa1f3a9e589cc3ca3317b5b36707b9a32640f7e11edeec9ce13734f67867ade7f73ff0f3a237b3bfc4692b239c97f0"}, {0x50, 0x113, 0x7, "3b008928ffc0520c08cf82a0135a9eac305180cec0c8e2797535121225dfe753c3d73050a9c87cb5c6fc9b97bec1a45e332d10edf4c098a3f9f05c437aba"}, {0x1010, 0x119, 0xffffffff, "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"}], 0x1338}}], 0x2, 0x40004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x5) 20:18:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x2, 0x0, 0x400}}) 20:18:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6) 20:18:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x3, 0x0) 20:18:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x3, 0x0, 0x400}}) 20:18:52 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7) 20:18:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x9a, 0x0) 20:18:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x4, 0x0, 0x400}}) 20:18:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) 20:18:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mremap(&(0x7f000092a000/0x4000)=nil, 0x4000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000bfc000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) remap_file_pages(&(0x7f00007f1000/0x1000)=nil, 0x1000, 0x1000000, 0x6, 0x80003) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x3f, 0x0, 0x10000}) mremap(&(0x7f0000739000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000870000/0x4000)=nil) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000e8c000/0x14000)=nil, 0x14000, 0x100000b, 0x4000010, r0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 20:18:52 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x8) 20:18:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x0) 20:18:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x300, 0x0, 0x400}}) 20:18:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000040)={0x4, 0xfd, 0x1007}) 20:18:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x0, 0x80000000}, {}, {0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001600)={0x0, 0x0, {0x2, @usage=0x1ff, 0x0, 0x8, 0x200, 0xf, 0x2, 0xffffffffffff8001, 0xe0, @struct={0x1}, 0x3, 0x1, [0x8, 0x4, 0x58, 0xffff, 0x6]}, {0x100000000, @usage=0x9ca, r2, 0x2, 0xfff, 0xffffffffffffffff, 0x9, 0x80, 0x62, @usage=0x100, 0x100, 0x0, [0x5, 0x6, 0x6, 0x1, 0x8, 0x7946]}, {0x200000007, @struct={0x8, 0x12}, 0x0, 0x20, 0x2, 0x83, 0x10001, 0x15b575bac000, 0x28, @struct={0x5, 0x1f}, 0x87, 0x8, [0x20, 0x4, 0x7fff, 0x538b7e3d, 0xfffffffffffffffb, 0x80000001]}, {0x401, 0x1f, 0x96}}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x311000) writev(r3, &(0x7f0000000940)=[{&(0x7f00000000c0)="fade2c33840ed55d5da04569eb", 0xd}, {&(0x7f0000000100)="da237f76b2e5cd119716a57164b528a8a673cb32e3b2d1ac31a99b9caf61a3bc82184814b7be4e483ee56db3a952eb445c2feeeae115b25d0147a56498e5e80e59e5d9bd98b617f399b046c639daf29bcc69476b39609d6a6b5105c67c0d9d682d8bb7ddf508d68eaeaa64a57e0421722f2d58b78c6e5f0ede5b64bf901941901e49dd596b82ee3fe12b6eb38043e57c8849957ef261e340048da04c5e1c63401acdaeb98ac2b7b5281e47ca9ff2f5e2685a147742c990bb268a2673c17634bd13aa89e1a5d66d09782ef8caa2c29799d95cdf025ee696a89e12d9a10eeeb3a4fb1730a5d4a7383218d0e20beebb528e03b9", 0xf2}, {&(0x7f0000000680)="368cc3c8bdb71b606c816cb6026e9eb0f77952019f8261aef3ca34b055b8cd51ee2c790d215b97cec8fdf447a4af3451bcdb0de475f8bbc1afe266b2611bba3e5c2b07b4828d4131b1d896e130b8c09b358fa9835515969b212880366a1b70d94abc225759c6a4d63c68634460c331a72e29940792478859ff9952", 0x7b}, {&(0x7f0000000700)="78d90bb01dabadf88a90cada9b1a4f2b43b9576202349b0b5dcf078638bfdfde6a32fc81beb970a6f930", 0x2a}, {&(0x7f0000000740)="e4630a12dae7cd9168802c429a75aea9d74a0e1b76b2d81378a9948c9c7dce701e50fb20c879f21ce4620a10161954482a88aa671eefc593c094783eaa5a7946eeafd08355d6ef0bcbf35b127374a223ce9ef76df98cd8d58041f2c4d090cfd2bd28ecdc4ab86e988be7dd398597785106a751e117a653e50f83d8651befd695ac75f0cc6c5095a8baf2a49d33f1737be1ca1f11d23a1b18e3175b68ec86060c45a4645c73f1d99e9afbacc31c6bbed2750e643dce7092ed49c8bf01e88a1403a3b5e0cd56a75c", 0xc7}, {&(0x7f0000000840)="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", 0xfc}], 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000280)={r2, 0x7fff, 0x3}) 20:18:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0xf000, 0x400, 0x6}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000080)=""/134, 0x86}, {&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000580)=""/237, 0xed}], 0x8, 0x6, 0x2) 20:18:52 executing program 2: socket$inet6(0xa, 0x6, 0x7) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x78, &(0x7f00000013c0)=0x10001, 0x4) fstat(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x20, 0x4, &(0x7f00000012c0)=[{&(0x7f0000000100)="f32cb38644e463bf87bfcf375df1a6cc626e7d868b7d3e622f0871905a9153b412f06783c9d542e71537b960709bc56c384c49390977c1dd6b477435a30c1c3b86f5d0f45d76729c0c58cb29f69fa7e98a66055f070110", 0x57, 0x48000000000}, {&(0x7f0000000180)="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", 0x1000, 0x5}, {&(0x7f0000001180)="10e8c60730d95ed674617a60d5803903e2689e63338d4a5df436ac3ba8e7e0bbfd038cc8973dfe9f402ab3397d07b970163e3833b1185b8bc64f45c55975d1fb23bf5ec2874bb3ea2e674e8ce69b8ee721678ff95668997748fb8d0ce9b75a740a396f1d7b7703b7ea", 0x69, 0x6039}, {&(0x7f0000001200)="ec963a5e51608d80ab06d60c6ee2bfdceb2f310e5e47270632522a8c9d2111cb2fe6492ea6443ff2fca48a895ca495156885cc885c4a76ff6a2969b4db3df424cbbc96604429b3c2efdab641bf47dda5003aed04582a76410a7eb6a8540b1798b9c7eb70011c0eb1e860c0cf7a8b7a1ef8de4ec083f584d67acda403416f8b90419dd4b52b73f11583d808e65f079a2c2a794a1c125b18e5ac935c26410d2f47446a5bcf29d9d26ebbc9cd260286", 0xae, 0x9}], 0x40000, &(0x7f00000014c0)=ANY=[@ANYBLOB='nr_blocks=#06,huge=within_size,mode=00000000000000000000007,huge=advise,mpol=prefer,nr_blocks=tj,measure,dont_appraise,euid<', @ANYRESDEC=r1, @ANYBLOB="2c686173bed69ff9138ac14d0f6abd9db1c3df51f40cc1b6119ca7ecc79be33ca98d51cd3c9d091be39b347f99a337323407b05d0f7fdbde980a1af09e"]) r2 = open_tree(r0, &(0x7f0000001400)='./file0\x00', 0x8000) getsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000001440)=""/112, &(0x7f00000015c0)=0x70) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000001600)={0x1f, 0x6}) 20:18:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x2000, 0x0, 0x400}}) 20:18:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x2) 20:18:52 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x9) 20:18:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x208000, 0x186) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0xd9d, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x20, 0x79) sendto$inet(r0, &(0x7f0000000140)="bfae67bd9a3605d8100946741ba93eb81ae7a5a237ef5d35e2fd168939f54111ece1fe0887e3de2a258d6783bf249546c2a7fdc010fad00420dbe9a2a6f33513c199b4cd68d0b4739e067dc1b986afc31232c5f623a8a875681b8057d952553946aab9a6749ef59a1ad849e5024aa0b1dca8d375014b6ef2f88b98d29e31f293322cf8998d649e46bf7d1a1e50fc693ef082", 0x92, 0x20000080, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) sendto$inet(r2, &(0x7f0000000280)="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", 0x1000, 0x4000, &(0x7f0000001280)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0xafb9, 0x420002) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10) ptrace(0x8, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0), 0x40, 0x0) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0x0, @remote}, &(0x7f0000001340)=0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r4, &(0x7f0000001380)={0xffffffffffffffff, r5, 0x2}) 20:18:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x3) 20:18:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0xe) [ 270.615145][T24779] loop2: detected capacity change from 0 to 1 20:18:52 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xa) 20:18:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000003d80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/166, 0xa6}, {&(0x7f0000001c00)=""/1, 0x1}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x4, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/289]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) [ 270.667943][T24779] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 270.679035][T24779] loop2: p1 start 1 is beyond EOD, truncated [ 270.768401][T24779] loop2: p2 size 1073741824 extends beyond EOD, truncated 20:18:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4) 20:18:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x2, 0x400}}) [ 270.850327][T24821] FAT-fs (loop4): bogus number of reserved sectors [ 270.856898][T24821] FAT-fs (loop4): Can't find a valid FAT filesystem [ 270.937271][T24779] loop2: p3 size 2 extends beyond EOD, truncated [ 270.955238][T24779] loop2: p4 size 32768 extends beyond EOD, truncated [ 270.964170][T24779] loop2: p5 start 1 is beyond EOD, truncated [ 270.970556][T24779] loop2: p6 size 1073741824 extends beyond EOD, truncated [ 270.980133][T24779] loop2: p7 size 32768 extends beyond EOD, truncated [ 270.990597][T24779] loop2: p8 start 1 is beyond EOD, truncated [ 270.997252][T24779] loop2: p9 size 1073741824 extends beyond EOD, truncated [ 271.007190][T24779] loop2: p10 size 32768 extends beyond EOD, truncated [ 271.015567][T24779] loop2: p11 start 1 is beyond EOD, truncated [ 271.021804][T24779] loop2: p12 size 1073741824 extends beyond EOD, truncated [ 271.031011][T24779] loop2: p13 size 32768 extends beyond EOD, truncated [ 271.041409][T24779] loop2: p14 start 1 is beyond EOD, truncated [ 271.050162][T24779] loop2: p15 size 1073741824 extends beyond EOD, truncated [ 271.059357][T24779] loop2: p16 size 32768 extends beyond EOD, truncated [ 271.067510][T24779] loop2: p17 start 1 is beyond EOD, truncated [ 271.073757][T24779] loop2: p18 size 1073741824 extends beyond EOD, truncated [ 271.083318][T24779] loop2: p19 size 32768 extends beyond EOD, truncated [ 271.091537][T24779] loop2: p20 start 1 is beyond EOD, truncated [ 271.099540][T24779] loop2: p21 size 1073741824 extends beyond EOD, truncated [ 271.107390][T24779] loop2: p22 size 32768 extends beyond EOD, truncated [ 271.115942][T24779] loop2: p23 start 1 is beyond EOD, truncated [ 271.123100][T24779] loop2: p24 size 1073741824 extends beyond EOD, truncated [ 271.131677][T24779] loop2: p25 size 32768 extends beyond EOD, truncated [ 271.140391][T24779] loop2: p26 start 1 is beyond EOD, truncated [ 271.147634][T24779] loop2: p27 size 1073741824 extends beyond EOD, truncated [ 271.155877][T24779] loop2: p28 size 32768 extends beyond EOD, truncated [ 271.163946][T24779] loop2: p29 start 1 is beyond EOD, truncated [ 271.170888][T24779] loop2: p30 size 1073741824 extends beyond EOD, truncated [ 271.179014][T24779] loop2: p31 size 32768 extends beyond EOD, truncated [ 271.186423][T24779] loop2: p32 start 1 is beyond EOD, truncated [ 271.192986][T24779] loop2: p33 size 1073741824 extends beyond EOD, truncated [ 271.202297][T24779] loop2: p34 size 32768 extends beyond EOD, truncated [ 271.209966][T24779] loop2: p35 start 1 is beyond EOD, truncated [ 271.218299][T24779] loop2: p36 size 1073741824 extends beyond EOD, truncated [ 271.226457][T24779] loop2: p37 size 32768 extends beyond EOD, truncated [ 271.233886][T24779] loop2: p38 start 1 is beyond EOD, truncated [ 271.240263][T24779] loop2: p39 size 1073741824 extends beyond EOD, truncated [ 271.248598][T24779] loop2: p40 size 32768 extends beyond EOD, truncated [ 271.257249][T24779] loop2: p41 start 1 is beyond EOD, truncated [ 271.263708][T24779] loop2: p42 size 1073741824 extends beyond EOD, truncated [ 271.272842][T24779] loop2: p43 size 32768 extends beyond EOD, truncated [ 271.280651][T24779] loop2: p44 start 1 is beyond EOD, truncated [ 271.288191][T24779] loop2: p45 size 1073741824 extends beyond EOD, truncated [ 271.295928][T24779] loop2: p46 size 32768 extends beyond EOD, truncated [ 271.303575][T24779] loop2: p47 start 1 is beyond EOD, truncated [ 271.309988][T24779] loop2: p48 size 1073741824 extends beyond EOD, truncated [ 271.318300][T24779] loop2: p49 size 32768 extends beyond EOD, truncated [ 271.326547][T24779] loop2: p50 start 1 is beyond EOD, truncated [ 271.333240][T24779] loop2: p51 size 1073741824 extends beyond EOD, truncated [ 271.341122][T24779] loop2: p52 size 32768 extends beyond EOD, truncated [ 271.349163][T24779] loop2: p53 start 1 is beyond EOD, truncated [ 271.355736][T24779] loop2: p54 size 1073741824 extends beyond EOD, truncated [ 271.364156][T24779] loop2: p55 size 32768 extends beyond EOD, truncated [ 271.371856][T24779] loop2: p56 start 1 is beyond EOD, truncated [ 271.378721][T24779] loop2: p57 size 1073741824 extends beyond EOD, truncated [ 271.386484][T24779] loop2: p58 size 32768 extends beyond EOD, truncated [ 271.394396][T24779] loop2: p59 start 1 is beyond EOD, truncated [ 271.401228][T24779] loop2: p60 size 1073741824 extends beyond EOD, truncated [ 271.409441][T24779] loop2: p61 size 32768 extends beyond EOD, truncated [ 271.416839][T24779] loop2: p62 start 1 is beyond EOD, truncated [ 271.422981][T24779] loop2: p63 size 1073741824 extends beyond EOD, truncated [ 271.430804][T24779] loop2: p64 size 32768 extends beyond EOD, truncated [ 271.438727][T24779] loop2: p65 start 1 is beyond EOD, truncated [ 271.445061][T24779] loop2: p66 size 1073741824 extends beyond EOD, truncated [ 271.454088][T24779] loop2: p67 size 32768 extends beyond EOD, truncated [ 271.461949][T24779] loop2: p68 start 1 is beyond EOD, truncated [ 271.468371][T24779] loop2: p69 size 1073741824 extends beyond EOD, truncated [ 271.476284][T24779] loop2: p70 size 32768 extends beyond EOD, truncated [ 271.484452][T24779] loop2: p71 start 1 is beyond EOD, truncated [ 271.490808][T24779] loop2: p72 size 1073741824 extends beyond EOD, truncated [ 271.498493][T24779] loop2: p73 size 32768 extends beyond EOD, truncated [ 271.506218][T24779] loop2: p74 start 1 is beyond EOD, truncated [ 271.512697][T24779] loop2: p75 size 1073741824 extends beyond EOD, truncated [ 271.520532][T24779] loop2: p76 size 32768 extends beyond EOD, truncated [ 271.528500][T24779] loop2: p77 start 1 is beyond EOD, truncated [ 271.534685][T24779] loop2: p78 size 1073741824 extends beyond EOD, truncated [ 271.543458][T24779] loop2: p79 size 32768 extends beyond EOD, truncated [ 271.551435][T24779] loop2: p80 start 1 is beyond EOD, truncated [ 271.557600][T24779] loop2: p81 size 1073741824 extends beyond EOD, truncated [ 271.565549][T24779] loop2: p82 size 32768 extends beyond EOD, truncated [ 271.574023][T24779] loop2: p83 start 1 is beyond EOD, truncated [ 271.580273][T24779] loop2: p84 size 1073741824 extends beyond EOD, truncated [ 271.588568][T24779] loop2: p85 size 32768 extends beyond EOD, truncated [ 271.596152][T24779] loop2: p86 start 1 is beyond EOD, truncated [ 271.602833][T24779] loop2: p87 size 1073741824 extends beyond EOD, truncated [ 271.610902][T24779] loop2: p88 size 32768 extends beyond EOD, truncated [ 271.620089][T24779] loop2: p89 start 1 is beyond EOD, truncated [ 271.626667][T24779] loop2: p90 size 1073741824 extends beyond EOD, truncated [ 271.635819][T24779] loop2: p91 size 32768 extends beyond EOD, truncated [ 271.645140][T24779] loop2: p92 start 1 is beyond EOD, truncated [ 271.652680][T24779] loop2: p93 size 1073741824 extends beyond EOD, truncated [ 271.661462][T24779] loop2: p94 size 32768 extends beyond EOD, truncated [ 271.669420][T24779] loop2: p95 start 1 is beyond EOD, truncated [ 271.675651][T24779] loop2: p96 size 1073741824 extends beyond EOD, truncated [ 271.683952][T24779] loop2: p97 size 32768 extends beyond EOD, truncated [ 271.691418][T24779] loop2: p98 start 1 is beyond EOD, truncated [ 271.697723][T24779] loop2: p99 size 1073741824 extends beyond EOD, truncated [ 271.705408][T24779] loop2: p100 size 32768 extends beyond EOD, truncated [ 271.712871][T24779] loop2: p101 start 1 is beyond EOD, truncated [ 271.719255][T24779] loop2: p102 size 1073741824 extends beyond EOD, truncated [ 271.727615][T24779] loop2: p103 size 32768 extends beyond EOD, truncated [ 271.735332][T24779] loop2: p104 start 1 is beyond EOD, truncated [ 271.743569][T24779] loop2: p105 size 1073741824 extends beyond EOD, truncated [ 271.752496][T24779] loop2: p106 size 32768 extends beyond EOD, truncated [ 271.760273][T24779] loop2: p107 start 1 is beyond EOD, truncated [ 271.766625][T24779] loop2: p108 size 1073741824 extends beyond EOD, truncated [ 271.775098][T24779] loop2: p109 size 32768 extends beyond EOD, truncated [ 271.782864][T24779] loop2: p110 start 1 is beyond EOD, truncated [ 271.789265][T24779] loop2: p111 size 1073741824 extends beyond EOD, truncated [ 271.797745][T24779] loop2: p112 size 32768 extends beyond EOD, truncated [ 271.805256][T24779] loop2: p113 start 1 is beyond EOD, truncated [ 271.812016][T24779] loop2: p114 size 1073741824 extends beyond EOD, truncated [ 271.820039][T24779] loop2: p115 size 32768 extends beyond EOD, truncated [ 271.828101][T24779] loop2: p116 start 1 is beyond EOD, truncated [ 271.834769][T24779] loop2: p117 size 1073741824 extends beyond EOD, truncated [ 271.843815][T24779] loop2: p118 size 32768 extends beyond EOD, truncated [ 271.852195][T24779] loop2: p119 start 1 is beyond EOD, truncated [ 271.859425][T24779] loop2: p120 size 1073741824 extends beyond EOD, truncated [ 271.867335][T24779] loop2: p121 size 32768 extends beyond EOD, truncated [ 271.875318][T24779] loop2: p122 start 1 is beyond EOD, truncated [ 271.882372][T24779] loop2: p123 size 1073741824 extends beyond EOD, truncated [ 271.891367][T24779] loop2: p124 size 32768 extends beyond EOD, truncated [ 271.899088][T24779] loop2: p125 start 1 is beyond EOD, truncated [ 271.905535][T24779] loop2: p126 size 1073741824 extends beyond EOD, truncated [ 271.914062][T24779] loop2: p127 size 32768 extends beyond EOD, truncated [ 271.921851][T24779] loop2: p128 start 1 is beyond EOD, truncated [ 271.928653][T24779] loop2: p129 size 1073741824 extends beyond EOD, truncated [ 271.937042][T24779] loop2: p130 size 32768 extends beyond EOD, truncated [ 271.944235][T24779] loop2: p131 start 1 is beyond EOD, truncated [ 271.950527][T24779] loop2: p132 size 1073741824 extends beyond EOD, truncated [ 271.958812][T24779] loop2: p133 size 32768 extends beyond EOD, truncated [ 271.966342][T24779] loop2: p134 start 1 is beyond EOD, truncated [ 271.972646][T24779] loop2: p135 size 1073741824 extends beyond EOD, truncated [ 271.981117][T24779] loop2: p136 size 32768 extends beyond EOD, truncated [ 271.989080][T24779] loop2: p137 start 1 is beyond EOD, truncated [ 271.996266][T24779] loop2: p138 size 1073741824 extends beyond EOD, truncated [ 272.004744][T24779] loop2: p139 size 32768 extends beyond EOD, truncated [ 272.012746][T24779] loop2: p140 start 1 is beyond EOD, truncated [ 272.019514][T24779] loop2: p141 size 1073741824 extends beyond EOD, truncated [ 272.027487][T24779] loop2: p142 size 32768 extends beyond EOD, truncated [ 272.035029][T24779] loop2: p143 start 1 is beyond EOD, truncated [ 272.041678][T24779] loop2: p144 size 1073741824 extends beyond EOD, truncated [ 272.049798][T24779] loop2: p145 size 32768 extends beyond EOD, truncated [ 272.057674][T24779] loop2: p146 start 1 is beyond EOD, truncated [ 272.063928][T24779] loop2: p147 size 1073741824 extends beyond EOD, truncated [ 272.072370][T24779] loop2: p148 size 32768 extends beyond EOD, truncated [ 272.079974][T24779] loop2: p149 start 1 is beyond EOD, truncated [ 272.086593][T24779] loop2: p150 size 1073741824 extends beyond EOD, truncated [ 272.095421][T24779] loop2: p151 size 32768 extends beyond EOD, truncated [ 272.103453][T24779] loop2: p152 start 1 is beyond EOD, truncated [ 272.110211][T24779] loop2: p153 size 1073741824 extends beyond EOD, truncated [ 272.118474][T24779] loop2: p154 size 32768 extends beyond EOD, truncated [ 272.126378][T24779] loop2: p155 start 1 is beyond EOD, truncated [ 272.133217][T24779] loop2: p156 size 1073741824 extends beyond EOD, truncated [ 272.141157][T24779] loop2: p157 size 32768 extends beyond EOD, truncated [ 272.151792][T24779] loop2: p158 start 1 is beyond EOD, truncated [ 272.159453][T24779] loop2: p159 size 1073741824 extends beyond EOD, truncated [ 272.168793][T24779] loop2: p160 size 32768 extends beyond EOD, truncated [ 272.177668][T24779] loop2: p161 start 1 is beyond EOD, truncated [ 272.184150][T24779] loop2: p162 size 1073741824 extends beyond EOD, truncated [ 272.193071][T24779] loop2: p163 size 32768 extends beyond EOD, truncated [ 272.201507][T24779] loop2: p164 start 1 is beyond EOD, truncated [ 272.207905][T24779] loop2: p165 size 1073741824 extends beyond EOD, truncated [ 272.216020][T24779] loop2: p166 size 32768 extends beyond EOD, truncated [ 272.224699][T24779] loop2: p167 start 1 is beyond EOD, truncated [ 272.231157][T24779] loop2: p168 size 1073741824 extends beyond EOD, truncated [ 272.239062][T24779] loop2: p169 size 32768 extends beyond EOD, truncated [ 272.247843][T24779] loop2: p170 start 1 is beyond EOD, truncated [ 272.254443][T24779] loop2: p171 size 1073741824 extends beyond EOD, truncated [ 272.263805][T24779] loop2: p172 size 32768 extends beyond EOD, truncated [ 272.271777][T24779] loop2: p173 start 1 is beyond EOD, truncated [ 272.278497][T24779] loop2: p174 size 1073741824 extends beyond EOD, truncated [ 272.287316][T24779] loop2: p175 size 32768 extends beyond EOD, truncated [ 272.295346][T24779] loop2: p176 start 1 is beyond EOD, truncated [ 272.302386][T24779] loop2: p177 size 1073741824 extends beyond EOD, truncated [ 272.310293][T24779] loop2: p178 size 32768 extends beyond EOD, truncated [ 272.317794][T24779] loop2: p179 start 1 is beyond EOD, truncated [ 272.324164][T24779] loop2: p180 size 1073741824 extends beyond EOD, truncated [ 272.332131][T24779] loop2: p181 size 32768 extends beyond EOD, truncated [ 272.339686][T24779] loop2: p182 start 1 is beyond EOD, truncated [ 272.346282][T24779] loop2: p183 size 1073741824 extends beyond EOD, truncated [ 272.354562][T24779] loop2: p184 size 32768 extends beyond EOD, truncated [ 272.362641][T24779] loop2: p185 start 1 is beyond EOD, truncated [ 272.369048][T24779] loop2: p186 size 1073741824 extends beyond EOD, truncated [ 272.377063][T24779] loop2: p187 size 32768 extends beyond EOD, truncated [ 272.384416][T24779] loop2: p188 start 1 is beyond EOD, truncated [ 272.391434][T24779] loop2: p189 size 1073741824 extends beyond EOD, truncated [ 272.399271][T24779] loop2: p190 size 32768 extends beyond EOD, truncated [ 272.406426][T24779] loop2: p191 start 1 is beyond EOD, truncated [ 272.412810][T24779] loop2: p192 size 1073741824 extends beyond EOD, truncated [ 272.421246][T24779] loop2: p193 size 32768 extends beyond EOD, truncated [ 272.428839][T24779] loop2: p194 start 1 is beyond EOD, truncated [ 272.435221][T24779] loop2: p195 size 1073741824 extends beyond EOD, truncated [ 272.442996][T24779] loop2: p196 size 32768 extends beyond EOD, truncated [ 272.450582][T24779] loop2: p197 start 1 is beyond EOD, truncated [ 272.457059][T24779] loop2: p198 size 1073741824 extends beyond EOD, truncated [ 272.464880][T24779] loop2: p199 size 32768 extends beyond EOD, truncated [ 272.472531][T24779] loop2: p200 start 1 is beyond EOD, truncated [ 272.478727][T24779] loop2: p201 size 1073741824 extends beyond EOD, truncated [ 272.487389][T24779] loop2: p202 size 32768 extends beyond EOD, truncated [ 272.495074][T24779] loop2: p203 start 1 is beyond EOD, truncated [ 272.501311][T24779] loop2: p204 size 1073741824 extends beyond EOD, truncated [ 272.509378][T24779] loop2: p205 size 32768 extends beyond EOD, truncated [ 272.517008][T24779] loop2: p206 start 1 is beyond EOD, truncated [ 272.524312][T24779] loop2: p207 size 1073741824 extends beyond EOD, truncated [ 272.532219][T24779] loop2: p208 size 32768 extends beyond EOD, truncated [ 272.540018][T24779] loop2: p209 start 1 is beyond EOD, truncated [ 272.546489][T24779] loop2: p210 size 1073741824 extends beyond EOD, truncated [ 272.555536][T24779] loop2: p211 size 32768 extends beyond EOD, truncated [ 272.563386][T24779] loop2: p212 start 1 is beyond EOD, truncated [ 272.570126][T24779] loop2: p213 size 1073741824 extends beyond EOD, truncated [ 272.578328][T24779] loop2: p214 size 32768 extends beyond EOD, truncated [ 272.586292][T24779] loop2: p215 start 1 is beyond EOD, truncated [ 272.593176][T24779] loop2: p216 size 1073741824 extends beyond EOD, truncated [ 272.601092][T24779] loop2: p217 size 32768 extends beyond EOD, truncated [ 272.608609][T24779] loop2: p218 start 1 is beyond EOD, truncated [ 272.615186][T24779] loop2: p219 size 1073741824 extends beyond EOD, truncated [ 272.623179][T24779] loop2: p220 size 32768 extends beyond EOD, truncated [ 272.631207][T24779] loop2: p221 start 1 is beyond EOD, truncated [ 272.637444][T24779] loop2: p222 size 1073741824 extends beyond EOD, truncated [ 272.646024][T24779] loop2: p223 size 32768 extends beyond EOD, truncated [ 272.654838][T24779] loop2: p224 start 1 is beyond EOD, truncated [ 272.661299][T24779] loop2: p225 size 1073741824 extends beyond EOD, truncated [ 272.669471][T24779] loop2: p226 size 32768 extends beyond EOD, truncated [ 272.677516][T24779] loop2: p227 start 1 is beyond EOD, truncated [ 272.684305][T24779] loop2: p228 size 1073741824 extends beyond EOD, truncated [ 272.692503][T24779] loop2: p229 size 32768 extends beyond EOD, truncated [ 272.700854][T24779] loop2: p230 start 1 is beyond EOD, truncated [ 272.707092][T24779] loop2: p231 size 1073741824 extends beyond EOD, truncated [ 272.714774][T24779] loop2: p232 size 32768 extends beyond EOD, truncated [ 272.722193][T24779] loop2: p233 start 1 is beyond EOD, truncated [ 272.728505][T24779] loop2: p234 size 1073741824 extends beyond EOD, truncated [ 272.737083][T24779] loop2: p235 size 32768 extends beyond EOD, truncated [ 272.746424][T24779] loop2: p236 start 1 is beyond EOD, truncated [ 272.753502][T24779] loop2: p237 size 1073741824 extends beyond EOD, truncated [ 272.761537][T24779] loop2: p238 size 32768 extends beyond EOD, truncated [ 272.769984][T24779] loop2: p239 start 1 is beyond EOD, truncated [ 272.776254][T24779] loop2: p240 size 1073741824 extends beyond EOD, truncated [ 272.784514][T24779] loop2: p241 size 32768 extends beyond EOD, truncated [ 272.792558][T24779] loop2: p242 start 1 is beyond EOD, truncated [ 272.799565][T24779] loop2: p243 size 1073741824 extends beyond EOD, truncated [ 272.807887][T24779] loop2: p244 size 32768 extends beyond EOD, truncated [ 272.815382][T24779] loop2: p245 start 1 is beyond EOD, truncated [ 272.821887][T24779] loop2: p246 size 1073741824 extends beyond EOD, truncated [ 272.829804][T24779] loop2: p247 size 32768 extends beyond EOD, truncated [ 272.837735][T24779] loop2: p248 start 1 is beyond EOD, truncated [ 272.844911][T24779] loop2: p249 size 1073741824 extends beyond EOD, truncated [ 272.852947][T24779] loop2: p250 size 32768 extends beyond EOD, truncated [ 272.862855][T24779] loop2: p251 start 1 is beyond EOD, truncated [ 272.869959][T24779] loop2: p252 size 1073741824 extends beyond EOD, truncated [ 272.878433][T24779] loop2: p253 size 32768 extends beyond EOD, truncated [ 272.886278][T24779] loop2: p254 start 1 is beyond EOD, truncated [ 272.894501][T24779] loop2: p255 size 1073741824 extends beyond EOD, truncated 20:18:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1) splice(r2, &(0x7f0000000080)=0xfff, 0xffffffffffffffff, &(0x7f0000000180)=0x80000000, 0x80000000, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44000102, 0x0) close(r1) 20:18:55 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb) 20:18:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x5) 20:18:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x3, 0x400}}) 20:18:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r4 = getgid() lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x4, 0xee01}, {0x2, 0x7, 0xee00}, {0x2, 0x5}], {0x4, 0xe8f350bb9070c792}, [{0x8, 0x4, 0xee01}, {0x8, 0x4, r2}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x5, 0xee00}, {0x8, 0x5, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x0, r3}, {0x8, 0x4, r4}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x2}, {0x6}]}) 20:18:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x4, 0x400}}) 20:18:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6) 20:18:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xc) [ 273.020594][ T25] audit: type=1326 audit(1621109935.275:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=25020 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 20:18:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7) 20:18:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x300, 0x400}}) 20:18:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb) [ 273.237123][T25223] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 273.287515][T25223] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 20:18:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffc, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = fork() ptrace(0x10, r1) ptrace(0x8, r1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x800004, 0x7, 0x0, 0x100000001, r1}) [ 273.362460][T25223] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 273.377603][T25237] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 20:18:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x2000, 0x400}}) 20:18:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xd) 20:18:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x8) 20:18:56 executing program 4: r0 = socket(0x400000000010, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000100)=0xc) write(r0, &(0x7f0000000580)="2400000021002551075c0165ff0ffc020200000300100f0000e1000c080018008000a000", 0x24) socket(0x8, 0x80000, 0x108) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00449378fe855e205e529dd39164dfab9696d92890316eaaef994f5c2c17da924b9271764571740040890669618c703d8ec0350114a3f7473944e0506b17cf16a6fff2d8b4a666d9c6d9ba813a30e0caf25af3e5a60e9ccf73000418671806be99415ebc01e4ffb55de59e2656ea3a00"/126, @ANYRES16=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 20:18:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x42, 0x0}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @local, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x401}}], 0x18}}], 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x113d00, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) dup3(r0, r2, 0x80000) sendmmsg$inet6(r1, &(0x7f0000002640)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @private0, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="a94f302ba372c372e3ee69ed65e88c12a9de22438c3a0040520299cb1908db16a6a57fcdcf7b60d6c59d2f70643d28d5b3", 0x31}, {&(0x7f0000000100)="2520811ba74279f4b31ba427355747ee9ea442d18d4785d5c76dbfedff2873e48230a2957c9b38ebae1e3542bf279356ee143b16c958c8141dd7b908a6986299fedbf408b6d77be757f3035a91e769b5d25f3a888e5863ca7230af1e0ce321d89b7d909b9dc78271a4d59ab9d72d4d4fe16eea1dd9c3361759db60d105c0be6a58e1c62c5fbb2cc401b6e6b2a52f425a5b2a9e72b75849f757556fd9d5ed9cdcf6d2f3fb55c4262feb0785c2ecd0dfa8c810a95b9c98b1f0bd79197c51a63e0c75834eff471c6d482b7e28ceef6eef3a9479d19cde5566f125a74dfb38908ba7868cc5bfcd58bcdc5d3876252975dcf5240f25", 0xf3}, {&(0x7f0000000200)="8f6520bac5eb19a829d0020a5c57c1d5374fd983912ffceb6b0f50b74da6db6a0edeb7849d8707d4c435e62c1404a5d7b8801f7c2137c75a9f194a00e7b3d63c8978d3d88f21d881cae2018cad96e49416a501df658b333bcda0e88f6f447c85433009354c1da858e95b819ab3d1e7e1aac10976aeb8a98b78886534fe391d1583cf7d147a3b440977e223e058b7e2fddaf84c2aeb80cbb6b4033d95832b94f3e15e17fe4ba31f70616f692a8e672193f7f7e5e6bf4b93ee99442a849623b1ddbb35378c89330addb77736e3013fdd1999d5e08fc9066f0728ece016", 0xdc}, {&(0x7f0000000740)="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", 0x1000}], 0x4, &(0x7f0000000340)=[@dstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0xcadd}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts={{0xf0, 0x29, 0x36, {0x3b, 0x1a, '\x00', [@pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0x20, 0x3, [0x40, 0x63e0000000000000, 0x7, 0xfff, 0x6]}}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0x8000, [0x1000, 0x2, 0x8, 0x5, 0x5, 0xffffffffffffffc0, 0x7ff]}}, @jumbo={0xc2, 0x4, 0x20}, @jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x2, [0x100000001, 0x6, 0x2, 0x8]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x3, [0x6]}}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7f}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x2c, 0x7, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xf9}, @ra={0x5, 0x2, 0x40}, @ra={0x5, 0x2, 0x1000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x88, 0xa, 0x2, 0x8, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x208}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000000600)="3a7fc06d67330c9bc19119f955b7a60b5a44ec80d9af2a4ece0f41d895e15ba59df4241736ae9f7f0b9c55c83494a6446cf209d095e55fa625a5c700b9841ce9545a34ba2639f371636f4fb3226363ac6532699a9f683d1dddc7b8d2497baee7311de3b10045a50bbedb361e0ca2a223885af95c8ec10e0f96c8785b8711880b549b33edbd9572efb6bad40c3a87db2b5906c2c000f174cb8736919c74f07b157fd3d6f7abbb657df80b48bcc3be1e4f2edf141ce67f5a870e2266964401f91603c1a3d9c81044acf41f32c258ea2c9d", 0xd0}, {&(0x7f0000001740)="6dd55a57ac1bec879e66e037f6182095deaf7f8e65bf1d50be961915cd49c8bc4711bd78aa03096d809902578693e9e7c0dc5b13b3c623445a9d07ff5a7ec9d24d42b65af83afdfc0381ac744e794c9832b0ee4829dcbf5a012837616da502dfa5d55b9e4e45c39ab2109605d89acf83a4a6aba03be18cb38d9a8705889949bea24c0bd819be26c1f64e5197ca307b62575be569ada9d80d724c6aa0c52472ed4697a105fe27135364d33072b432d5014d13c9c1659ceaed0bf8cc1de70af043c54e", 0xc2}, {&(0x7f0000001840)="41d31253453281a40ffed5f280203d021fef45b7631c95e92eb34f7ed03a25ce83e36a3050bd7da119030ba6303c96eb3fdbf4a0ec843d0fedc66442f347722d7ef89604cad637265077bbb1cd1fa9c0cd0bd9ea15a2b59b84ad20d213a657492342a6a6b52606f6015640e3afbba9532f1d02078304bec06f65e27b425f8b3192d1255801e4bc9809fbac34d4750da924c36b608e63c3dda0ed95663c4455fd", 0xa0}, {&(0x7f0000001900)="654ae0612d8001099024fe1cf8d2874982c95eb1761fc706dfd612152e3caba4214aa85740075ab625d659a69aabd82017aef55cf20e1cfb3b07853438bdebb0a354a7103eb9498a23f43721119b7cdb87f97a75dea63ba596327270e60b64eaa69015b672423eab69fe42bb3410908634b6a8dfe6d67999745abe3e1bc9d7c18e321104c706116550c47545e4aa", 0x8e}, {&(0x7f00000019c0)="d3f2e106fc12609a673f4c2cb3b7377cb2759092aa20b421d8663729e75304d08ca601912d1338bca242ea31f65fa84ddb91b7346f5ba4cb8e792350546bfe6a64d37635d6167326620943b87596b447097d1ac181123faa8c860b8051c5937e432d8192ebcb68818f2b212895ac61d141c559dbfe35", 0x76}, {&(0x7f0000001a40)="cbaa141ba9c0247f5fadabf53d481b4e9da820023f07e28520e5455f0787e23beac6dc52810641294a02d60adaa8f9dc3151e197a8dba1c42343d63fa74fab2a50af11f718edd9dab515b64199ef5f7f938666d4362fec1dfe520fae2ae04c42d3ae5273bef1842d969e50bc00e1f775d75c795bd287d5864e730f6138d0f55ac46ce8f3d7490ef9d3d6283af458fcf1c9746df7fd1ed4a745a713dbfd5f746428a5e917a0c32f49d05c9a82ede6036ba90678fcfaa64a020d4a108f0305b8dde04409213b170b6a707ae6e8bed97405b348a633be9c4e27e2758f38e1bca363f9f582936a36", 0xe6}, {&(0x7f0000001b40)="8c0788e55533f1feb38a78e7ca5e547a54d20aa77d35a039ebef346e967673f661de891f08dfeb3d14cd56c150754b8556af023620f8d6f8f0d83d05478ae743e154ab4283c9", 0x46}], 0x7, &(0x7f0000001c40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @jumbo, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2f, 0x3, '\x00', [@jumbo, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x100}}, {{&(0x7f0000001d40)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001d80)="244d4f819492e7d40fb14d02475344ff429fd82d57e44526de1709822e", 0x1d}, {&(0x7f0000001dc0)="f4208a297760771cfc0ee1e3ca4a1c6e3881f84d0f9dea4b97f26034356f4108e871a2997c23e3af25a83acae6e9165cd936283c072d9928279bdd7db75604550b82e5426420788b6ae24fdcbb71082b2bd0392eea96580f8d6939552bb548c2ba2cc5755d83021ab0656ef24c500701056266eaec0f504d476c1e41f51d34a777ced73a389ea790126f2206d44a2f5e63ff1a8f1af4569b9468b2d4abfc9667e7d8d3006679b106bc8e99f5003e193014d5795e9745a12633546c035809862f5ce180526c03e9a2fd09b02c1dad590eb9812a7b099e282a9ff441c07d5553cbc052", 0xe2}, {&(0x7f0000001ec0)="97dfba79af4619bfa216a12dd37830ced6659526826f3e8775eae24ffe9fb925ccbca1", 0x23}, {&(0x7f0000001f00)="9058b5ac66f156595b1ed224e304efe62bf1c41ef2977275504a01675fb88ef07f09ddb5e81cc46f020de04c89993d49fdf92fb973f65b240e3f72d6a0a1239583c7ba644f669b85eafa4100bc958c1d66e826e28212138f12a3f04aa0b5c128d5a35397bd52f20e8119c07cf79c43cfa593179793098d48bc1ede0e04d7bf54e9a04998897982755470d8d7927f47ddb87d4841913ced1e226e06326b69ea2a024af781ed16e90ef4f83c71a1dffa93e17fe781fa85bf17fc28d90cbd7fe1cb460a7eef693b2e978fcedaecc318a20cb99721355af27c563807f91e7633b27abff737923561789d54", 0xe9}, {&(0x7f0000002000)="6b1467cdff120a718c13048782e82e2e6781249a507ab4fbc188f971c67176e82da9f1b5d3c62297ede91eb3cd339a60200dd894", 0x34}, {&(0x7f0000002040)="cf2f8209368d9c7e14426fa262759658fad9366c460394f4b55c3ae63f91503e2ffb12cf887cf38598b4b7aaa6c4e1bb9c586ff0c5fd4a725dfdcb766fe8b004941b030a619eb08e3ce19316f65e45e55c802ff48c8ba5fc70a29fd60eb68ea97470ca32ca4fe9b70635a0b43d0c40a59fa40b5fc4da74e8644274ce24992a85746c61751b09b9c615c0d4a23f55b793b93c19db5f6b77fb5722074eecdf3287e9875debaa040c", 0xa7}], 0x6, &(0x7f0000002180)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @pad1, @pad1, @jumbo]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x22, 0xe, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}], 0x110}}, {{&(0x7f00000022c0)={0xa, 0x4e22, 0x716, @empty, 0x7fff}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002300)="3a217efab288ad", 0x7}, {&(0x7f0000002340)="38eea13afe798d228eafc94be4cf6f5561ecb1a261adcef72c8d795aaba017edf4708495003b", 0x26}, {&(0x7f0000002380)="459ef7996bf28609dfe9d408e6471c6accef4009c2bf58a759363804c6a4f4053f914abf1b75a5f9ce92340cbf0d088680f088befa0367cb81fc78e3a94f510b2f275c782cf3f2f465d7f37ff7c91af314a5a7c8e21a7cfe137e87c30afcc9a0e9ae67daa80607ea4711f326284557bc87782f79785fc8fe", 0x78}, {&(0x7f0000002400)="d01d3d7bb4631c2871403fc967eb8d8edcb5bf26c04579898af8d347d444873432724a6b1f873b991ab8b61e30884313b5f4b67a23cdc64da1b68ad1f8b28f0e90494952d4082000e1db59e84df5bfb5cf2c89390d2c3430844408620bff79fa9f7b02fcaa786c78fa2332ddd02aa3740121117b0bad62967f7e2f8f633981126b097cfe7a35c406f62ab4595d97d2fa2c5836d404e48ba18b8e214ec0ef1f7a244615432f39546b348f5a740f5200fa19c063fd64f6048f9531797270703e7be51154280c90e18f384d36e5fbe2785abec805cf80ffbbb302759c9692cb748d81296b3ae525def591", 0xe9}], 0x4, &(0x7f0000002540)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, @remote, @mcast2, @empty, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0xd8}}], 0x4, 0x48010) 20:18:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = eventfd(0x9) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2d1ee37) ftruncate(r5, 0x0) io_submit(r2, 0x5, &(0x7f0000000640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f00000001c0)="368a9b40238ab2524f32c538da05b3fc14395615fc44eb28e633b06878b3745540b4a23a928252ff871f36e8e4ee20c61c107804a702d8167030ed45aefa1f0c367da4323781194315458e3cb682c1ad70a302fcf8dcaee06a4014570a8f41817b1fb5d2cdc90e802962da4d41c0a47d3c5d09ff754851ce3eba6104a812c343", 0x80, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3ff, r1, &(0x7f0000000240)="81c5acca3acf3e1f0aef405e48e61c93b7fc61d6c210881f9260f554e87d31c2a9cfd208321e500e872b9bcf17c8a438f833e2e5871185449d2ca1a6cfbab325dbe4c829114a89157a5b7b86466c681e81ab01e94f77591e460a0f06f4887ee48cb3885fd28fd8cee4fefa5cf0f6f89287ba1f2ee98097e0cb9590893396ee460cdb64c3c3e439bd97a3306167b31e5417f3b055eda4651721bbea7e0666400579a10ec412f378e57e9d3130310cbb6d54a616059016157e9f96d691dc889c7bd044e9578587766e51ed2e245be2d4e1983a91d89106f609ff9f27", 0xdb, 0x5, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000340)="960e8f3fa992355015f41efe90032a69d24f654902357b33059630a9043aa44dd3cc22d40e6299631a8f77ad06ef9d88ed0979177b47d4c0881362bf389b3a11f6bf67d08d00e6c39fd353faf79c55e75f147072d4c1cd7de241f0e8e2f647e6a5536f0e8edc624ee714201f1af56ece3cef1ceed935f16621ac0c327332ea42b5d49c6a1ef28925e89e415bd94f7b4c5ea43d3f3e18609e28bc19a0dffcac51455b6282b35ca2ed758fa8778ded12e480e415b143450994c9a1b7e3664744d871db45d89dd5d2e5402d43ae6eaa1fba65e199b1228983d3cc142a918e153fe8841620c122250df9a5a6ade165a604db4f77", 0xf2, 0xfffffffffffffffd, 0x0, 0x3, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xfffb, 0xffffffffffffffff, &(0x7f0000000480)="f5e69065fbc2d77908b956ccd87515f3458736323792640b893666f25e4e4c23e05d83bcab0ec6928ddaa39219028c9546a7fb8d058cbe2e54a452780875573d3a8dd0a1d037ab34571933702da2200a9d53b8c026d168d44ca8bd9277115e8ce8858e5090f9d6524ffae8cb7054abf7d3a411a55ec0c46188783473be2607bc5839e4e167400f2b4d481f814672eb0d4071da0e44cbff28c3b3224fc332dcd561a572331fa9b137", 0xa8, 0xffffffffffffffff, 0x0, 0x5, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f00000005c0)="f3f7e543f61987612e216014e3603db0580824f254", 0x15, 0xea, 0x0, 0x2, r5}]) 20:18:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x9) 20:18:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x402}}) 20:18:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc9) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r2, &(0x7f0000000080)) 20:18:56 executing program 4: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x100, 0x9) unshare(0x4a060480) perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 20:18:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xe) 20:18:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xa) 20:18:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 274.182391][T25294] Y­4`Ò˜: renamed from lo 20:18:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x403}}) 20:18:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x10) 20:18:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000300)={'sit0\x00', r1, 0x2f, 0x58, 0x7, 0x4, 0x48, @remote, @remote, 0x7800, 0x7, 0x8, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="620bea"], 0xe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) 20:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20800, 0x150) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = eventfd(0x9) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2d1ee37) ftruncate(r5, 0x0) io_submit(r2, 0x5, &(0x7f0000000640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f00000001c0)="368a9b40238ab2524f32c538da05b3fc14395615fc44eb28e633b06878b3745540b4a23a928252ff871f36e8e4ee20c61c107804a702d8167030ed45aefa1f0c367da4323781194315458e3cb682c1ad70a302fcf8dcaee06a4014570a8f41817b1fb5d2cdc90e802962da4d41c0a47d3c5d09ff754851ce3eba6104a812c343", 0x80, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3ff, r1, &(0x7f0000000240)="81c5acca3acf3e1f0aef405e48e61c93b7fc61d6c210881f9260f554e87d31c2a9cfd208321e500e872b9bcf17c8a438f833e2e5871185449d2ca1a6cfbab325dbe4c829114a89157a5b7b86466c681e81ab01e94f77591e460a0f06f4887ee48cb3885fd28fd8cee4fefa5cf0f6f89287ba1f2ee98097e0cb9590893396ee460cdb64c3c3e439bd97a3306167b31e5417f3b055eda4651721bbea7e0666400579a10ec412f378e57e9d3130310cbb6d54a616059016157e9f96d691dc889c7bd044e9578587766e51ed2e245be2d4e1983a91d89106f609ff9f27", 0xdb, 0x5, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000340)="960e8f3fa992355015f41efe90032a69d24f654902357b33059630a9043aa44dd3cc22d40e6299631a8f77ad06ef9d88ed0979177b47d4c0881362bf389b3a11f6bf67d08d00e6c39fd353faf79c55e75f147072d4c1cd7de241f0e8e2f647e6a5536f0e8edc624ee714201f1af56ece3cef1ceed935f16621ac0c327332ea42b5d49c6a1ef28925e89e415bd94f7b4c5ea43d3f3e18609e28bc19a0dffcac51455b6282b35ca2ed758fa8778ded12e480e415b143450994c9a1b7e3664744d871db45d89dd5d2e5402d43ae6eaa1fba65e199b1228983d3cc142a918e153fe8841620c122250df9a5a6ade165a604db4f77", 0xf2, 0xfffffffffffffffd, 0x0, 0x3, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xfffb, 0xffffffffffffffff, &(0x7f0000000480)="f5e69065fbc2d77908b956ccd87515f3458736323792640b893666f25e4e4c23e05d83bcab0ec6928ddaa39219028c9546a7fb8d058cbe2e54a452780875573d3a8dd0a1d037ab34571933702da2200a9d53b8c026d168d44ca8bd9277115e8ce8858e5090f9d6524ffae8cb7054abf7d3a411a55ec0c46188783473be2607bc5839e4e167400f2b4d481f814672eb0d4071da0e44cbff28c3b3224fc332dcd561a572331fa9b137", 0xa8, 0xffffffffffffffff, 0x0, 0x5, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f00000005c0)="f3f7e543f61987612e216014e3603db0580824f254", 0x15, 0xea, 0x0, 0x2, r5}]) 20:18:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x404}}) 20:18:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb) 20:18:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x11) 20:18:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) truncate(&(0x7f0000000000)='./bus\x00', 0x0) 20:18:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x3, 0x1f}, {0x400, 0x6237}, {0x20, 0x7}, {0x1f, 0x20}, {0x5, 0x7f}, {0x8, 0x3ff}, {0xf, 0x7}]}) syz_read_part_table(0x0, 0xa, &(0x7f0000000000)=[{&(0x7f00000000c0)="0201bfffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffffee000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="b7fbac25edf23b9cbf56229967eb29f23e3eee353f18ac3216bdaafe03dfe1a560e060a0d3aec8a2bd003dd9e0cc5fe65fb0f31335612d4be8db5d7be9001af281878765633aa648b0f456831fad7530aa9cf6176f5565203010acfdf4f2ad7c0e8b4f8dca86e071967af0a2", 0x6c, 0x3}]) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0xe6, 0x0, 0x400}}) 20:18:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xc) 20:18:57 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = eventfd(0x9) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2d1ee37) ftruncate(r5, 0x0) io_submit(r2, 0x5, &(0x7f0000000640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f00000001c0)="368a9b40238ab2524f32c538da05b3fc14395615fc44eb28e633b06878b3745540b4a23a928252ff871f36e8e4ee20c61c107804a702d8167030ed45aefa1f0c367da4323781194315458e3cb682c1ad70a302fcf8dcaee06a4014570a8f41817b1fb5d2cdc90e802962da4d41c0a47d3c5d09ff754851ce3eba6104a812c343", 0x80, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3ff, r1, &(0x7f0000000240)="81c5acca3acf3e1f0aef405e48e61c93b7fc61d6c210881f9260f554e87d31c2a9cfd208321e500e872b9bcf17c8a438f833e2e5871185449d2ca1a6cfbab325dbe4c829114a89157a5b7b86466c681e81ab01e94f77591e460a0f06f4887ee48cb3885fd28fd8cee4fefa5cf0f6f89287ba1f2ee98097e0cb9590893396ee460cdb64c3c3e439bd97a3306167b31e5417f3b055eda4651721bbea7e0666400579a10ec412f378e57e9d3130310cbb6d54a616059016157e9f96d691dc889c7bd044e9578587766e51ed2e245be2d4e1983a91d89106f609ff9f27", 0xdb, 0x5, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000340)="960e8f3fa992355015f41efe90032a69d24f654902357b33059630a9043aa44dd3cc22d40e6299631a8f77ad06ef9d88ed0979177b47d4c0881362bf389b3a11f6bf67d08d00e6c39fd353faf79c55e75f147072d4c1cd7de241f0e8e2f647e6a5536f0e8edc624ee714201f1af56ece3cef1ceed935f16621ac0c327332ea42b5d49c6a1ef28925e89e415bd94f7b4c5ea43d3f3e18609e28bc19a0dffcac51455b6282b35ca2ed758fa8778ded12e480e415b143450994c9a1b7e3664744d871db45d89dd5d2e5402d43ae6eaa1fba65e199b1228983d3cc142a918e153fe8841620c122250df9a5a6ade165a604db4f77", 0xf2, 0xfffffffffffffffd, 0x0, 0x3, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xfffb, 0xffffffffffffffff, &(0x7f0000000480)="f5e69065fbc2d77908b956ccd87515f3458736323792640b893666f25e4e4c23e05d83bcab0ec6928ddaa39219028c9546a7fb8d058cbe2e54a452780875573d3a8dd0a1d037ab34571933702da2200a9d53b8c026d168d44ca8bd9277115e8ce8858e5090f9d6524ffae8cb7054abf7d3a411a55ec0c46188783473be2607bc5839e4e167400f2b4d481f814672eb0d4071da0e44cbff28c3b3224fc332dcd561a572331fa9b137", 0xa8, 0xffffffffffffffff, 0x0, 0x5, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f00000005c0)="f3f7e543f61987612e216014e3603db0580824f254", 0x15, 0xea, 0x0, 0x2, r5}]) 20:18:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x12) 20:18:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 274.868153][T25358] loop0: detected capacity change from 0 to 264192 20:18:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xd) 20:18:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x25) [ 274.967033][T25358] loop0: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 274.988182][T25358] loop0: p2 size 1073872896 extends beyond EOD, truncated [ 275.205193][T25358] loop0: p6 size 1073872896 extends beyond EOD, truncated [ 275.228248][T25358] loop0: p8 size 1073872896 extends beyond EOD, truncated [ 275.250628][T25358] loop0: p10 size 1073872896 extends beyond EOD, truncated [ 275.267144][T25358] loop0: p12 size 1073872896 extends beyond EOD, truncated [ 275.284635][T25358] loop0: p14 size 1073872896 extends beyond EOD, truncated [ 275.302595][T25358] loop0: p16 size 1073872896 extends beyond EOD, truncated [ 275.320081][T25358] loop0: p18 size 1073872896 extends beyond EOD, truncated [ 275.343360][T25358] loop0: p20 size 1073872896 extends beyond EOD, truncated [ 275.365561][T25358] loop0: p22 size 1073872896 extends beyond EOD, truncated [ 275.384166][T25358] loop0: p24 size 1073872896 extends beyond EOD, truncated [ 275.395876][T25358] loop0: p26 size 1073872896 extends beyond EOD, truncated [ 275.405116][T25358] loop0: p28 size 1073872896 extends beyond EOD, truncated [ 275.428671][T25358] loop0: p30 size 1073872896 extends beyond EOD, truncated [ 275.439028][T25358] loop0: p32 size 1073872896 extends beyond EOD, truncated [ 275.448554][T25358] loop0: p34 size 1073872896 extends beyond EOD, truncated [ 275.457942][T25358] loop0: p36 size 1073872896 extends beyond EOD, truncated [ 275.466739][T25358] loop0: p38 size 1073872896 extends beyond EOD, truncated 20:18:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x2}}) 20:18:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xe) 20:18:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x48) 20:18:57 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{}, {0x0, r0/1000+60000}}, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0xfffffffffffffffc) 20:18:57 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x20, 0xaa93, 0x1, 0x7cdc, 0x0, 0x5]}, &(0x7f0000000380)=0x78) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x80, 0x80800) r6 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x20}, {r0}, {r3, 0x1}, {r4, 0x428}, {0xffffffffffffffff, 0x2692}, {r5, 0x1410}, {r0, 0x4200}, {r6, 0x8}, {r0, 0xa000}], 0x9, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x38b]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x2, &(0x7f00000000c0)=[{0x6c}, {0x6, 0x0, 0x0, 0x5}]}) [ 275.475361][T25358] loop0: p40 size 1073872896 extends beyond EOD, truncated [ 275.484895][T25358] loop0: p42 size 1073872896 extends beyond EOD, truncated [ 275.494430][T25358] loop0: p44 size 1073872896 extends beyond EOD, truncated [ 275.515546][T25358] loop0: p46 size 1073872896 extends beyond EOD, truncated [ 275.563152][T25456] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 275.574715][T25358] loop0: p48 size 1073872896 extends beyond EOD, truncated [ 275.605707][T25358] loop0: p50 size 1073872896 extends beyond EOD, truncated [ 275.638875][T25358] loop0: p52 size 1073872896 extends beyond EOD, truncated [ 275.655262][T25358] loop0: p54 size 1073872896 extends beyond EOD, truncated [ 275.666769][ T25] audit: type=1326 audit(1621109937.915:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=25452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 275.667737][T25358] loop0: p56 size 1073872896 extends beyond EOD, truncated [ 275.705525][T25358] loop0: p58 size 1073872896 extends beyond EOD, truncated [ 275.715601][T25358] loop0: p60 size 1073872896 extends beyond EOD, truncated [ 275.724090][T25358] loop0: p62 size 1073872896 extends beyond EOD, truncated [ 275.732372][T25358] loop0: p64 size 1073872896 extends beyond EOD, truncated [ 275.740957][T25358] loop0: p66 size 1073872896 extends beyond EOD, truncated [ 275.750609][T25358] loop0: p68 size 1073872896 extends beyond EOD, truncated [ 275.759351][T25358] loop0: p70 size 1073872896 extends beyond EOD, truncated [ 275.768407][T25358] loop0: p72 size 1073872896 extends beyond EOD, truncated [ 275.776535][T25358] loop0: p74 size 1073872896 extends beyond EOD, truncated [ 275.785910][T25358] loop0: p76 size 1073872896 extends beyond EOD, truncated [ 275.795192][T25358] loop0: p78 size 1073872896 extends beyond EOD, truncated [ 275.808980][T25358] loop0: p80 size 1073872896 extends beyond EOD, truncated [ 275.817709][T25358] loop0: p82 size 1073872896 extends beyond EOD, truncated [ 275.826263][T25358] loop0: p84 size 1073872896 extends beyond EOD, truncated [ 275.834869][T25358] loop0: p86 size 1073872896 extends beyond EOD, truncated [ 275.843824][T25358] loop0: p88 size 1073872896 extends beyond EOD, truncated [ 275.852307][T25358] loop0: p90 size 1073872896 extends beyond EOD, truncated [ 275.861232][T25358] loop0: p92 size 1073872896 extends beyond EOD, truncated [ 275.870008][T25358] loop0: p94 size 1073872896 extends beyond EOD, truncated [ 275.879135][T25358] loop0: p96 size 1073872896 extends beyond EOD, truncated [ 275.887545][T25358] loop0: p98 size 1073872896 extends beyond EOD, truncated [ 275.895928][T25358] loop0: p100 size 1073872896 extends beyond EOD, truncated [ 275.904333][T25358] loop0: p102 size 1073872896 extends beyond EOD, truncated [ 275.913005][T25358] loop0: p104 size 1073872896 extends beyond EOD, truncated [ 275.922048][T25358] loop0: p106 size 1073872896 extends beyond EOD, truncated [ 275.930971][T25358] loop0: p108 size 1073872896 extends beyond EOD, truncated [ 275.939454][T25358] loop0: p110 size 1073872896 extends beyond EOD, truncated [ 275.947731][T25358] loop0: p112 size 1073872896 extends beyond EOD, truncated [ 275.956920][T25358] loop0: p114 size 1073872896 extends beyond EOD, truncated [ 275.965517][T25358] loop0: p116 size 1073872896 extends beyond EOD, truncated [ 275.974191][T25358] loop0: p118 size 1073872896 extends beyond EOD, truncated [ 275.982419][T25358] loop0: p120 size 1073872896 extends beyond EOD, truncated [ 275.991337][T25358] loop0: p122 size 1073872896 extends beyond EOD, truncated [ 275.999500][T25358] loop0: p124 size 1073872896 extends beyond EOD, truncated [ 276.007891][T25358] loop0: p126 size 1073872896 extends beyond EOD, truncated [ 276.016271][T25358] loop0: p128 size 1073872896 extends beyond EOD, truncated [ 276.024234][T25358] loop0: p130 size 1073872896 extends beyond EOD, truncated [ 276.032543][T25358] loop0: p132 size 1073872896 extends beyond EOD, truncated [ 276.041653][T25358] loop0: p134 size 1073872896 extends beyond EOD, truncated [ 276.050086][T25358] loop0: p136 size 1073872896 extends beyond EOD, truncated [ 276.059021][T25358] loop0: p138 size 1073872896 extends beyond EOD, truncated [ 276.069148][T25358] loop0: p140 size 1073872896 extends beyond EOD, truncated [ 276.078398][T25358] loop0: p142 size 1073872896 extends beyond EOD, truncated [ 276.088021][T25358] loop0: p144 size 1073872896 extends beyond EOD, truncated [ 276.096279][T25358] loop0: p146 size 1073872896 extends beyond EOD, truncated [ 276.104850][T25358] loop0: p148 size 1073872896 extends beyond EOD, truncated [ 276.114235][T25358] loop0: p150 size 1073872896 extends beyond EOD, truncated [ 276.123323][T25358] loop0: p152 size 1073872896 extends beyond EOD, truncated [ 276.133008][T25358] loop0: p154 size 1073872896 extends beyond EOD, truncated [ 276.141776][T25358] loop0: p156 size 1073872896 extends beyond EOD, truncated [ 276.152557][T25358] loop0: p158 size 1073872896 extends beyond EOD, truncated [ 276.161076][T25358] loop0: p160 size 1073872896 extends beyond EOD, truncated [ 276.170071][T25358] loop0: p162 size 1073872896 extends beyond EOD, truncated [ 276.179152][T25358] loop0: p164 size 1073872896 extends beyond EOD, truncated [ 276.188182][T25358] loop0: p166 size 1073872896 extends beyond EOD, truncated [ 276.196318][T25358] loop0: p168 size 1073872896 extends beyond EOD, truncated [ 276.206087][T25358] loop0: p170 size 1073872896 extends beyond EOD, truncated [ 276.215508][T25358] loop0: p172 size 1073872896 extends beyond EOD, truncated [ 276.224548][T25358] loop0: p174 size 1073872896 extends beyond EOD, truncated [ 276.232925][T25358] loop0: p176 size 1073872896 extends beyond EOD, truncated [ 276.241945][T25358] loop0: p178 size 1073872896 extends beyond EOD, truncated [ 276.251144][T25358] loop0: p180 size 1073872896 extends beyond EOD, truncated [ 276.259920][T25358] loop0: p182 size 1073872896 extends beyond EOD, truncated [ 276.268606][T25358] loop0: p184 size 1073872896 extends beyond EOD, truncated [ 276.278571][T25358] loop0: p186 size 1073872896 extends beyond EOD, truncated [ 276.287622][T25358] loop0: p188 size 1073872896 extends beyond EOD, truncated [ 276.296053][T25358] loop0: p190 size 1073872896 extends beyond EOD, truncated [ 276.304446][T25358] loop0: p192 size 1073872896 extends beyond EOD, truncated [ 276.312849][T25358] loop0: p194 size 1073872896 extends beyond EOD, truncated [ 276.321559][T25358] loop0: p196 size 1073872896 extends beyond EOD, truncated [ 276.329806][T25358] loop0: p198 size 1073872896 extends beyond EOD, truncated [ 276.338153][T25358] loop0: p200 size 1073872896 extends beyond EOD, truncated [ 276.346572][T25358] loop0: p202 size 1073872896 extends beyond EOD, truncated [ 276.355674][T25358] loop0: p204 size 1073872896 extends beyond EOD, truncated [ 276.364100][T25358] loop0: p206 size 1073872896 extends beyond EOD, truncated [ 276.372748][T25358] loop0: p208 size 1073872896 extends beyond EOD, truncated [ 276.381525][T25358] loop0: p210 size 1073872896 extends beyond EOD, truncated [ 276.390735][T25358] loop0: p212 size 1073872896 extends beyond EOD, truncated [ 276.398774][T25358] loop0: p214 size 1073872896 extends beyond EOD, truncated [ 276.407006][T25358] loop0: p216 size 1073872896 extends beyond EOD, truncated [ 276.415213][T25358] loop0: p218 size 1073872896 extends beyond EOD, truncated [ 276.423696][T25358] loop0: p220 size 1073872896 extends beyond EOD, truncated [ 276.431866][T25358] loop0: p222 size 1073872896 extends beyond EOD, truncated [ 276.440278][T25358] loop0: p224 size 1073872896 extends beyond EOD, truncated [ 276.449337][T25358] loop0: p226 size 1073872896 extends beyond EOD, truncated [ 276.457825][T25358] loop0: p228 size 1073872896 extends beyond EOD, truncated [ 276.467397][T25358] loop0: p230 size 1073872896 extends beyond EOD, truncated [ 276.475750][T25358] loop0: p232 size 1073872896 extends beyond EOD, truncated [ 276.484303][T25358] loop0: p234 size 1073872896 extends beyond EOD, truncated [ 276.493579][T25358] loop0: p236 size 1073872896 extends beyond EOD, truncated [ 276.502043][T25358] loop0: p238 size 1073872896 extends beyond EOD, truncated [ 276.510931][T25358] loop0: p240 size 1073872896 extends beyond EOD, truncated [ 276.519550][T25358] loop0: p242 size 1073872896 extends beyond EOD, truncated [ 276.527645][T25358] loop0: p244 size 1073872896 extends beyond EOD, truncated [ 276.535684][T25358] loop0: p246 size 1073872896 extends beyond EOD, truncated [ 276.543932][T25358] loop0: p248 size 1073872896 extends beyond EOD, truncated [ 276.552501][T25358] loop0: p250 size 1073872896 extends beyond EOD, truncated 20:18:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) renameat(r0, &(0x7f00000017c0)='./file0\x00', r0, &(0x7f0000001800)='./file0\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x0, 0xffffffff80000000, 0x5}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0100ffa1030000c3010000b3c70000cc03f4ffff000000000000000000000007e1f33e8d31ee80470d6969f08ceed678218ae523d196419df7fd5a1d51ea61512a64df77b00841e985711d40eb771f2376f3a5a6dc207e9f0721a907fe9eb5145da65aed58ae73623a3cc1534434729ce93e3a"], 0x44) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0xed, "e341257a742322a6fbd7153f3f56fcdf003eeaadf612deab82571e213501d029decede0a96d12a5fc324b9144aad94082db2ce534550a479927981ad320caf4ef2605df805c15027b6e22f2db6e8f62ca36e375d4f47710548844472d86af02a0a028e3ab542f226ad811ab4d585bf77c15c9c51ff23c0c8093cafd1ddb42804b657de4e6e275623409c11005cf198fec07158f4d7871d20c46534bc6956c20999df9bc8170b97f0c81fb66a5c2247a1c817388bfbd0e66290ce906ae91142cefcf6decef5ea7a680f404bc31d6eaa733ac8d504ebc7fbb5cab0146dfed9ec88ad8018b682f5793690288a4d1f"}, &(0x7f0000000100)=0x111) preadv(r0, &(0x7f0000003b80)=[{&(0x7f0000001840)=""/193, 0xc1}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/48, 0x30}, {&(0x7f0000002980)=""/239, 0xef}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/247, 0xf7}], 0x6, 0x0, 0x3ff) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640), &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup(r0, &(0x7f0000001680)='syz1\x00', 0x200002, 0x0) preadv(r1, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/131, 0x83}], 0x1, 0x0, 0x9) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000680)={{}, "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"}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800005, 0x810, r0, 0x2f331000) 20:18:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x3}}) 20:18:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x10) 20:18:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4c) 20:18:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x3c, 0x0, 0x0, 0x1b, 0x0, 0x5dc2}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe00480f3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x10, 0x0, 0xef013080, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000011c0)="36b96eaae963c04b64e7b5e325ec3ac223b6fa738009ac76061ac4d7459d5b693628b448bb8ce796148f43d85b799a55fc3d1053970e3cf005a2b14eadda0e4775329747f3a1401ee76735b42e8ce6929927a13b1c3455d3860aaca4995a001de66b8a1b3086d3fed6a7487956f837fb59ab3658eef1f79ea2137247f6c4e13ce0cbe44e228dae620a1628e4835d8663ebbe3d7c0b6864d4657c42305be94f70bcdc6e8b368131eed0c1a0cd07ee236788c23f8958901d8207b0bb2984fe2f43a2d1ea7e4710bb6075b56697edc888638bdae38c18ed280aee16dcb5eb9bb49b0c2994664a0813b1a6db1bfb", 0xec, 0x10, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @multicast2}}) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000580)=ANY=[@ANYBLOB="02fdbfdce30ee47040cb8ff16fef81d4d81a00770b000000000000"], 0x11, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967483641ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r3 = socket$inet6(0xa, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003340)=[{{0x0, 0x2f, &(0x7f0000000380)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000200)=""/4, 0x4}], 0x3, &(0x7f00000003c0)=""/234, 0xea}, 0x8001}, {{&(0x7f00000004c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)}, {&(0x7f0000000740)=""/87, 0x57}, {&(0x7f00000005c0)}], 0x5}, 0x3}, {{&(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/57, 0x39}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f00000001c0)=""/49, 0x31}], 0x3}, 0x4}, {{&(0x7f0000000a40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000c00)}, 0x1ff}, {{&(0x7f0000000c40)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000003480)=""/207, 0xcf}, {&(0x7f0000000dc0)=""/64, 0x40}, {&(0x7f0000000e00)=""/253, 0xfd}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000000f40)=""/210, 0xd2}, {&(0x7f0000001040)=""/223, 0xdf}], 0x6}, 0x9}], 0x5, 0x10020, 0x0) 20:18:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x107081, 0x4) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) keyctl$restrict_keyring(0x9, 0xfffffffffffffff8, 0x0, 0x0) [ 276.561513][T25358] loop0: p252 size 1073872896 extends beyond EOD, truncated [ 276.570254][T25358] loop0: p254 size 1073872896 extends beyond EOD, truncated 20:18:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x4}}) [ 276.646958][T25693] loop2: detected capacity change from 0 to 4096 20:18:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x68) 20:18:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x11) 20:18:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000015c0)={r0, 0xffffffffffffffe1, 0xfffffffffffff800, 0x4}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000001600)="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") r3 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1a, 0x50, r3, 0xe7c78000) vmsplice(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000080)="cd7ac8c6d1965814ae3eb503385c6d6f736c0ea7c65d13fec918900789c8790332c36db440d515a9132533a3682f42f381876e05a0f650a5896749a0f4f00b43e656dca03576a7058ae93b4eb979e03036543e8f91f82e777cac901811ac6231693f704113657eb7841a231b1f489f5e9e05e6e8f20064027898567df7f4bb0ca19620c36083b97de31255de0ca9bc", 0x8f}, {&(0x7f0000000140)="e925acac8de18f9f26f7e8c3c24c9eb5c5ea91fd3564c9ef4c36c7697bb99771930b60b252ec969d215371dc6c899a05295037d180156527a5f7e0d2540f38d30d3425549d3099c8c1bf7915b7232ce14906224a1e6ceba738a516332ced89852d45f9c2b6571604107f4a1d41c93ea36ec6fd51d16bda2825052420c0c1022f3c9fcf93075446730329238a51bd79caaea46b3f8945ecad5ab682feeb9baa2d9b83f3802b128813631d515e42209f03de8d26d5f720ce673528ab8ac236a3a97a96b580233b0eb79c0aa2ffc985aac8cebf3dc404", 0xd5}, {&(0x7f0000000240)="0ced11166eb3591f219f6eca4e74e427895b796e901163e68a2a5acb6b542d829be4b8ad36ae324e173b77360878f4a46ef22f0bcc7c5cea1299f68a61b5e545f7054556eb1970df52d6ebeeefcd638961a52a9ef098d95bd6c8c8ca0815f52f7dbd1c89e8037a6324dfba93f3c7", 0x6e}, {&(0x7f00000002c0)="dd82dba23a71c9a29e9f0f65dffe95bf9f8e6f00318b3c2194c93fb8c8e025700ea901fa27a2533542b2f89ca2dfc4842935cc13ba00cecbf9141d35fa68031e1ae36be1a9c91d9391afbc7f66ab7dec026996aef11cfa7bda82edb311591bcfe83b9367f329b6eb9ce60662be861d1f467f34cc388745572960f3fb0ce82d316891be198fb16b704c2d0d94d17ac3bbd4660f6f3cf1b96f951c51c2cef6557696b68b1aa077c7d361758474619a18caf18bbb621198d2ec2a21aa70f4bb76238fd5c4f01d040fef4db11e3b936230f3286b103c03d19a7aa4912401dd61765e08b2a8885458e020653b69a673e887a581edcafc8f9ec043c9c82ccd80ad4bad74b1d895899a9b2785637310d7da0c0c4a873e6f83105bee4f4b2cf0f47f258ca76350bc9fe75126b392ffa481b82c5b377724bb9198365f96f404e4323f0117f605a256aebf291e02cb94329b210efafeec377a197dd752b8e64cec182e6c3d661821badbd265009e24a0599eb892c1e51c6781f07857fbe55f9c5d79c2979c6964c0fe0adbf60c557a315ed6350d335688527f1cbfee0b40df3461da457deddf5fb8cce8079f5ddbd4a696ae7b510bf894a227c5ce124bc7e1a196fd74fe351c4fcddc0215775f120019cb3f5cf09ece1a97fb94c77fa6a4cdd55a494bfe3a95283495e6cb9f59b7689602c64c6e636f1f205be2737a808f308ade8a9a71e21fef7ddc607628ea9e943381fa0349306521e786c8d8b2d79ebb6cec057c49fe3c5654bbcb6d22f5e4d9ade2d639762ad2fe4e692c7e392712a181cc080b19d186d568bd95ed6fff2761fd1ad962bcbe3380eea6d011e408d996be5ce9c960eb7dda8f71ece21f75f2c74b2cebaded0ccbd519534517f4facadddd6939c328a06ae7168f2443ae9aaeddfb3e3d3d47c0d235777bffd9a6f02072b02cc6d9532716c169fb48395280bafc5f9b0d58318057750da9e8e3837adfc887b7f0ca4b3a478cfc95517bbaae31cd445f1c1b9345b4511c0564476da0c005fc26b36d8d582f8d3426ac0037cbd3b262a6d40d06d3a1a4977187a03b3476092b65f81cc2041afb39c0d2aa47dbf513a4eb78a265626ddb528f743262530c4905283c7026d8052912058bd8c80089bdf7ff4e356f71694d92578d65e7c68609db8a444c977fdc7a87a2c10d9e9f637b47f4b58fb09abf50d2f75c553038c7542e7dc7250f316f0b1577406c38696c4da79637f6d6ab73bc49128148d06ec11eb840ac103a956f1b91b83a973ea88cc9825e21661f60188fa2a8285ba2448eb3c12e7e3e543ec5748b253a28f8a9bbb4a54b4ed4d452144e3c82781f8c0b6607e977c97a959898792fe97c4ee3219e80222570828b3056af0eec0da9769f0ece2abd22b3b8fca9745027e05b53c21bf263d25bc0a0e4e1810c50e69b0b78ab08143dec51fbe5325971807827fd16091c9fdae14a28bb99bc22fe8fe4f50ebd97a9a15f76d882b13bb754a4ec927553261444842d0ff5f39c24a7cd0b7e6cce5e18414a4c6f059a9ee279232cbf9f2f1d0ba1d7b2b0079efdd66a163b8d2ecfed59d28e2672cf8a3d2c326d8440cfcdfbd62981105575535792de50f344d725d839ac1280f51201c7781480a43db5486e018e7a233a0c94be84be3674be504a0d968a6a3a38a536804d3895975acaa58bcd9b913bfc88beb41a5c371f31d1407a118f15afc0522ca4bf286598957ed2b234d424b786606db1cc75007148adff7bea5ce99823f6186c3f3230bb43247c0a0c67fa6a738a3221ef4f00874b7335cb1f2aacafe8b7a54a7d558a391bc6740aa321961dd1525b40025a63fca1dddf90d490a52c84704896517479499326db02f6c6bcf3bb8dd3ce401c9b128d537b504cc8b112863f8327c3d1a704d7511f3005ec4e511f10aa31106a195e6136a85b8204be9ab7ca02d8bda8145d17834174d9d275f488e0abddcca165d0d84d18d323129aa8e95b9e665d1db618f3cd951cd788e182f25e60941f057a686bc3bf23f945db12a217871c6046ccd51322cb91014b1a1ad5f7f60878a98dc6d0211fd40994c1a06c6c94d42c5bc970889d1fe7104885eb5a330e76b641703607569c8bf3e0e45f4df67cff6a070c3e19d47782da0bc308f93b86bb15678dd200d2d73d388ba64fa839ffbd462a77f8310728da176dff8001fd05e1cdf575164482cd5e826d9b2bb66acb8b297ea8471e405e01b64412305cda1f56825f1df0e8a1f406bf187a74f0650123f52177eed4a845df22a78952f667c19078aa6cb27c835a336ef13e493652691bb1889117746a534835634ee655518625d74d8d0a6cd51aeb1639484d763a1b6231718ef7452c732d17a840a99ddcf7c30d2a293485c12cad5d21d550878cfd430d423239079ae1cbc5d0f78b1a41145d8677825903e310256490728dea5f35233be62ece959e1df5fd8aa51716c0c326b27c4f0d47ad75589323c87afe5bfb868a37e5adec4fc59d1a6d031f6be1b501bea07ccb8e63e20e0c4446fbae2fbbd4f3aaffe89da65da5d9c9c6a2d767ee191a7e49a9ca718139692d1dc0d22ea1c50a328e0b9417350233a625228c241c98002af0f0f51dbc485e9fdd362774475e89b21b611564ab016eba82eeff2286f172f5a8c3620a746409cf56710a9cb13ee502e38878f18dfd55040f109c92926c75158533f554fb27d8da8fd3569ee7d89a5096203147d711b2d32c04db49085c7fcd831c4bc07cbff5c9bbc6e82103bb95b42e0086a4f2319aac72f46131bd0dad27a0946fb0f563cf846aae551d19d2059bd599dd4558e9f7d985fa6d953d02c5a0b6071bae71410898328e72b5262044699543dbdcc94de174a5bad95eef1a8c049f5071ab73bee2f580a637f2fe16478a758fee5af5e459275f1cf3a538347e8170d00abc7b67399a6a320f6c3b1a75e3eed247e9589282ee1877f4e1a458067b69956231a228e218057219092386a00d6809c56c9f965421a8d671ae305cc617851b33eda2e48c14092b28fee0cd1ceaeed9ca8ae48cd2094f586e107e7f345b19270a4650106bf130c57b671dbceb1d5ca3735355b16ceb0becad76f46937b7417ec2264d962a2c471d69dc6dfe7df6bc58c4909f9f667e1cb22ea9b17b650167ab83e1d86122d9f6a947cb4d6f963f3f15ffc3f92bc71e6ac000dc42f01f93a6416ff8316e224027fb3589f86e745498fc338edb89ea4841d06b6a78344b6d9d1a050789276fb6c52d47d6a2fd5dbe3ea7eb5276398eda809ae74b4f858dc9e47973fe805a75cbb44a7c28c8731aac4f066e27b179f2dfb180f3d393ee96c4f03580bd41ecb54b6917d3f0682f8feb2855e527cfbc95e6387154ce0ae2271cd9f76da77aacdb9b1c56062d822307c5ff22c291927cae52b7e1921617fa4b6694b84b4bc44db9efca22870fd688b2c267ad3e3f4883b69014bde997001ee6db0e51c1309cb45149213261f5d57d1c521957e36e27bb50ad1b473ff0cedff325ba1f6239f5a96ebdf0264edfe7967e488ae09d11de2e6532e9923cda37c2851b733469faead10657f1c15ee7b4dd41b5b3d7884609e3414f4402453ee5783cf770e3bdaf4dd152a50f2af16f250de8796d24bff73824d3e2aa265e04e44f24fe52ae58e0b646bdf889d6b7011d55206263c2becbe87733fac621e0b92b8d13d1b36ab4df68b911256e243519f4d7572b07cb124a0a23615b054276c20af4342f3c9a0058e5b2b1158c6f6452e4516d9dacc752638bd4d33bb70ffb3e6100a4789509de3df8cc161985c64dce308ddd3939dba1a4dd463cd267be042c67dc041b57c9dfe0682b9cbc022dc60d1ea02b4fe5d3be61c7f1d5f92093e091519c94a16d4c448652b4d05ad8434520bdebcae1ff84a947c6c8b3bd165f37cd5f1cf297709426ee21491f96f765fa599622e0e1bfe688bfac56bd11439f385351eb95833476fdd6dd3310896caedfb23c626ef95035745d4eb44f6e573dd4a2eb8b0f5025f10598585bfdc98bf2f1ac747a8f64135171510c7e6428b989b2faf13de8c6a3d3baef3a0bb85bf6fcabd8289fe2accde7f99068530252f5d98eae4e3f45f5460cd39c7179d927884c1918c068b372d627ed7692738c32b074bbb3d7711b51161fc6d2bd009f87853338c4b17cadf47e043090b6ebabc89a7899e0bcc751ce6fb998e3909391a5e93aae6c5bf7c82c713cf0ae9cfe12d42e56fcd0ef46bc0446537b390da28cf14f26c163b5586294c42fded7020107873b6b595d1a09525e994bd06e947fb87de09d6f0d5611de5945aed46f72d7da3353e1fdfa777dfeee3380162473fda0df44a5940dd06d3eaeda18e424922ee02bd0ac9eae9230882918b36e6a06bd724095a61dbc3969d49930c302e4c6be8de75bc8cc296ef99602987d4c5c2312d556e9177166d733f39c9e2c19c4d37c5afc5e3b3a9050649752908b974661bbf8127de749b4bc37b9b31a06040cc0445b844ee751fd68e56606212e08a4bc4f6c16086775d909f8d47f13d5ebae4af1fb66a965ec6352c54d615e33e4994ac7101aeccf928db813f3599a8203a206f2ee97e760fdb961902605c77195d5604e149f4392a9e0225ce368cc98b6060de1de43014b64226359d0f79da36dd7a3191a8d4d883989eaf8438b393befaeb5d0511f3ce5c9d7ea5a2c3522248f3c9b0e94dc611aee1c9aa3cce3c1f2e1de1648f6c0722537e6a9650facfb1e9e36d96288b96f16cc5c9a5d1188adc2fa3432ba7a889fcc737cd82c01442e57b1232ee554854c5621634b4fdb55e9203df8b3e02319f6216ac2526cb627129b02f7f8e405c7ab3dee77f3bf5ee78704e8e6fbb129504f518a343fcc87dea41f9e5d67bd0ee7764093c578f7497958928014222177259fba616716f2bf7753cec425b9024cf162553e140234711b4857c44dec4c1a06f47b7ee0ccfe0839666d1e751cdf1977e40178bd221403fd2cb4e82749ed80c413fe4681523eaefa87926a7307ad6964773a0f159f104d4ffcce3323c24fe2b505e769f6503cc6b244d21e804147763b5aeb5125ceb2879d7213d32c3aade2c2335deade6257a812363c2cef81a23a46e73388ec3f0bf9d3dcd9f5a138e0e9c324c873e765ecbbabd37d308fb4eb385b250ed9ca8db68546f303c623fb0819a866495099e0493d0fd60045b0f553bf68be8a2f3b30901a9140f6c09525d910d67349ec81a77ce8769bf66fefa36df1bef66d0dc49d1465b7a2a604641bf5a46aaf426902bf0ffae1f7a4efa327f778603d1021389b098e5da46c9398a114feaa2d9de68f799a8602a6df9e2508e55e97ee3d2f3a1785b1223f6a79deba7863675f36ffe0a2881a242c3558a576b603882b89d74f7927bec2cf7340b465031413c9639e61dbed71ac83e0687dead26acf8498742109449660354874247330df5d9b57a5b2b5f5b74e0f07e9337a4e4d2654dc3e0d3a46bf74abec4339d15fe63c914b56eb451003977749b099bb536d374c5e525edfa877f5e7c32be660060b7540eee5c324baeca86b823f62328fe57ac25465eb3dad2dff01b8de5bf9ec14328df571d9a13f3c15afdf2d99f7ae927fed40a686deb9059638962aa1a91ef5908a6aeae5f09f59940e54ca334a707af0c0d1a6b5529a65e301349da2844b116e82a7d273a45231a1f9a6648b7ca7dbaae81c15da4fd7810d068ec699d73236aee879716f069f645642ddc7e19cc860daa8f3fc78d8eb0272b7ac4a7bc7eedca2438cf1ee41399e11919499fab7b1f477680878a1", 0x1000}, {&(0x7f00000012c0)="b904472e55ca04d8", 0x8}, {&(0x7f0000001300)="79411f", 0x3}, {&(0x7f0000001340)="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", 0xfc}, {&(0x7f0000001440)="af99a26d363b299cc79b793e91c6d135bd674832780968f407fa5ef4b74fe1dd1e195c9da5e924833eeafdead8b80aab10ba48cac64efc4e8dc115023ce36d3fe3e0ce285745536c8d0c92d65ee731", 0x4f}, {&(0x7f00000014c0)="3c2ab79d0d", 0x5}], 0x9, 0x6) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x300}}) [ 276.795722][T25693] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 20:18:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x2, 0x3, 0x811}}) 20:18:59 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6c) 20:18:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x12) 20:18:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x20200, 0x100) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x403}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 20:18:59 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fchown(0xffffffffffffffff, r0, 0xee00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r2 = fork() ptrace(0x10, r2) ptrace(0x8, r2) r3 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, r2, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) ptrace$getregset(0x4204, r2, 0x6, &(0x7f0000000140)={&(0x7f0000000200)=""/118, 0x76}) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) 20:18:59 executing program 4: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) chdir(&(0x7f0000000340)='./bus\x00') close(r0) 20:18:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x2000}}) 20:18:59 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x74) 20:18:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x25) 20:18:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) splice(r0, &(0x7f0000000080)=0x6, r0, &(0x7f00000000c0)=0x4, 0x7af, 0x5) r1 = mmap$IORING_OFF_SQES(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x0, {0x0, r2}}, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:18:59 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r1, r1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) ftruncate(r2, 0x2008003) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0x7) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x0) 20:19:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000007c0)={{r1}, 0x0, 0x12, @inherit={0x60, &(0x7f0000000100)={0x0, 0x3, 0x200000000000, 0x9f, {0x0, 0x1, 0x4, 0xff, 0xffffffff}, [0x4, 0xae9, 0xfffffffffffffffb]}}, @subvolid=0x1f}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000780)=0x1, 0x5a) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x156) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000240)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1b) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x796, @mcast1, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x3}, 0x8) 20:19:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x48) 20:19:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) 20:19:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7a) 20:19:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x5, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffff8, 0x44000) sendto$inet(r2, 0x0, 0x0, 0x85, 0x0, 0xfffffffffffffe13) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/148, 0x94}}], 0x1, 0x0, 0x0) 20:19:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x5e}}) signalfd4(r1, &(0x7f0000000040)={[0x400]}, 0x8, 0x0) 20:19:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4c) 20:19:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x2}}) 20:19:00 executing program 2: clone3(&(0x7f00000002c0)={0x48901200, &(0x7f0000000d80), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:19:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x300) 20:19:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x2) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/220, 0xdc}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x5, 0x1f, 0x0) 20:19:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x68) 20:19:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x3}}) 20:19:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x500) 20:19:00 executing program 0: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x97f9, 0x400}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) ioctl(r1, 0x8001, &(0x7f00000000c0)="085acfcfc72fe8da5a02239487b9cbf5f5842d0199b5636cceda4109881c6f9ec1670cdadf075713d2796d6af8bdcb1a50f061d5ea8498dc4d9bbe6f7f62cd75fb21a29359da14f4a7f5e1e128a223be52df60bd4a3520e439d9b8269d6e45bd18a80b7ce9b66c5fe613b4c6074594c835b08c226f0c7e1b82ab006aa8b2c007d9141268fb50d8920167e47d408bcbf389489c4b78ecd60bd77ba735620fedfc00825508a608bfc0") 20:19:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f00000001c0)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0xfc3, 0x80000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="4850677440bf9f8d00057fd5962d5a4b2ccf5e78a4bbac969dd9da245bc75cd1ac7b28f31c2bdf771271c00611945c9551aceeefe6ff2ea3d7d26759278c072b42ae70cc564102818fcdf514a380c22b973382ff4a1ac78a02ad9a813f60338f37ef85ba1405af11aa19d31bbce3c247c76203d90d49bddae36c57434b2845aa756b9d83e94a665314b9e825eefa3bf8d5affdd9b54c2dbc40c279e568a2f9e6387f63804e6dd7e739f70e", 0xab, 0x2}], 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="2f6465762f6c6f6f702d636f6e74726f6c002c2f6465762f6c6f6f702d636f6e74726f6c002c2924257d2c2f6465762f6c6f6f702d636f6e74726f6c002c2f6465762f6c6f6f702d636f6e74726f6c002c646566636f6e746578743d757365725f752c666f776e65723c0347bda63a5807698887e12e697e763c3e10917864f24d7aff86fb517481117e47e0718e18", @ANYRESDEC, @ANYBLOB="2c736d61636b66730657016861743d2f6465762f6c6f6f702d636f6e74726f6c002c7375626a5f747970653d2f64653227cfbc615893a7d2762f6c6f6f702d636f6e74726c002c7375626a5f757365723d2f6465762f6c6f6f702d636f6e74726f6c002c646f6e745f686173682c646f6e745f686173682c7063723d30303030303030301a2e48218b47bf3030303030303030303031322c736d61636b6673666c6f6f723d2d297b232c66736d616769633d3078303030303030"]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) clone3(&(0x7f0000000680)={0x21800400, &(0x7f0000000440)=0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500), {0x2b}, &(0x7f0000000540)=""/101, 0x65, &(0x7f00000005c0)=""/103, &(0x7f0000000640)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) fcntl$addseals(r3, 0x409, 0xc) fcntl$addseals(r1, 0x409, 0x1) 20:19:01 executing program 4: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040009101a020700", 0x33a) r1 = accept4$inet(r0, &(0x7f0000001080)={0x2, 0x0, @local}, &(0x7f00000010c0)=0x10, 0x845e5a9ea3c2fcf4) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001100), &(0x7f0000001140)=0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) write(r2, &(0x7f0000000080)="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", 0x1000) 20:19:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6c) 20:19:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x4}}) 20:19:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x80) 20:19:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x600) 20:19:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap(&(0x7f00001bd000/0x4000)=nil, 0x4000, 0x200000a, 0x10, r1, 0xf5a88000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug}], [], 0x6b}}) 20:19:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x300}}) 20:19:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80280, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 278.843966][T26149] netlink: 254 bytes leftover after parsing attributes in process `syz-executor.4'. 20:19:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x74) 20:19:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x700) 20:19:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 20:19:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x0, 0x2000}}) [ 279.665146][T26149] netlink: 254 bytes leftover after parsing attributes in process `syz-executor.4'. 20:19:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x700) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7a) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x900) 20:19:02 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) getsockname$netlink(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2d1ee37) ftruncate(0xffffffffffffffff, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000000ed03000329bd7000ffdbdf258d2ce416202e46f10f71bcf302e84a17b91cca1bedbb5c02f9c5a5adf91c47c35554765a4c78ae1ad9e0ad01ba02ef4677d3a071049fbfbf0371386e5a372cb0b6199930475338cfa80237b03ae4f36ecdc35815e9c688ebf28bba7ce50f8ba40276b4bc1dbcad35667192228061a835414a0815b97794c6575da69ec7eaae4cdaab4fc8cef0413a"], 0x98}, 0x1, 0x0, 0x0, 0x40400c5}, 0x8000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000340)) fcntl$getflags(r2, 0x40b) write$cgroup_int(r1, &(0x7f0000000240)=0x9, 0x12) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x7) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x404080, 0x0) fgetxattr(r5, &(0x7f0000000140)=@known='user.incfs.id\x00', &(0x7f0000000180)=""/143, 0x8f) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000080)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x5c, 0x1) close_range(r5, r0, 0x2) 20:19:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) acct(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x20010, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) ftruncate(r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x1, 0x6}}) 20:19:02 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0xa4}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) 20:19:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x200, 0x400, 0x0, 0x2}}) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000000c0)="a2e619f9", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x62) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="04048bfd9dfd6dc139dcff03d5cb6c182f0c53581167ba1c962c442b7918d77f272c55cc4618af1eeed80f1bf675941115922e11"], 0xfdef) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1400) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x234041, 0x0) [ 279.815075][ T25] audit: type=1400 audit(1621109942.065:26): avc: denied { associate } for pid=26201 comm="syz-executor.0" name="tty1" dev="devtmpfs" ino=19 scontext=system_u:object_r:unconfined_execmem_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x300) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xa00) 20:19:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x701180, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x1c3000, 0x150) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/233, 0xe9}], 0x4, 0x3, 0x8) openat(r1, &(0x7f0000000500)='./file0\x00', 0x20002, 0x14) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x3, 0xa, 0x187, &(0x7f0000000080)}) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x500) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb00) 20:19:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1a, 0x19, 0x14a, &(0x7f0000000040)}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x600) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xc00) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x700) 20:19:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x8802, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xd00) 20:19:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x4, 0x2ed) syz_open_dev$tty1(0xc, 0x4, 0x1) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="62747266732e0083db5db6d25548108ef6f8f7219ae2a50f0010000000000000234cec070838a5de57e1d8c8"]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x3, 0x0, 0x10, 0x3ff}}) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x900) 20:19:02 executing program 4: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000140)=""/97) r0 = syz_io_uring_setup(0x6e8b, &(0x7f0000000000)={0x0, 0x0, 0x29}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x10, r0, 0x8000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r4, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r5}}, 0x0) socketpair(0x2a, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r10, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x9) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd=r6, 0x800, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/123, 0x7b}], 0x2, 0x8, 0x3, {0x0, r11}}, 0x9) [ 280.396078][T26212] Process accounting resumed 20:19:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/58, 0x3a}], 0x4, 0x8001, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[r3]}, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xa00) 20:19:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0xfffe, 0x400, 0x3}}) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xe00) 20:19:02 executing program 4: r0 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x100) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r3, &(0x7f0000000040)=0x800, 0x40) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lsetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="9fd8b93b30"], &(0x7f0000000180)='}%&}@\'-$}\a\x00', 0xb, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000001c0)="78245b78b551044bdc41677337fbdff5c35a8a53f9c561402fb7826d9fc90f4ba30d1c97a991eb13a7c5838d6552207a6936ce4c45d1b552c06f99623938c3e32cd11926900d94a3346fe392f2d2b76cad1db5043730d1e220d0a97e3627dbc37d82014c8d8811e255b42c2018845c6ea1de55b24708a1c591c1708bd5ee11825474c0a7c1ecdb265edc7684ac7ce91db82390bf6d1a2163ae4d45c6fabfa6459bec3806daffa82b79b572a715e78ad45395008747928c91088fb66d227be2f1a885b302575d6a142fc43a2f0e1f2505c9ab52f88298c1864efecdee56f8f87c996ee90ac8f0a4948052", 0xea}, {&(0x7f00000002c0)="98adc8bae56843ffbe71bd24f46868b369d1e5b834cc97370886977a4dc404eb133e7b11fce719d90822617f8496f2df3b62fcf579d94beaa80dddaccdf1871f1aa4c64ac78142914888ff143a8106", 0x4f}, {&(0x7f0000000340)}, {&(0x7f0000000380)="18d5a8561cb52887eb68669a2f8417651d41557763549ffcc0f033b9d91bfe0bab35230093463de7718c95d9afd941057a9d8ed8efcc57fceef49600850cadb15e332e818d0a5e0d9aa681309cc182c1e15c0d911476917e551c975acf6744eb4aeee7135740e16df8a52a044c24c74a666d0a22efc1a9a60c493abe1feef0cde8a5810b93006977d4613f48b537ca0fc681f7601c5b766b27eb0b207718d6c828d0c9af71512e84b8482059418eadc699966d3424e5c8d92518fc39", 0xbc}, {&(0x7f0000000440)="7c2504ede40a438621a9e234fa19f7f56836b77854ac40a9a4a0295c9456d453f2261919d570af7cbf99dc2448641acf5dcf67b80c16cf0412447ab6af6728662381bc725340aa878751a629a034fdd64944b8d952d0ce39e812dc6f8784a7a872ded29259c33f96066ff7eb12af9d76895fa4fa8441c2febf551055a42553e65d9c242f79ec9791db895446b67bef437bfea305e3d44e79f86fd3de4413c8939ce8716aa13549e6751047ef4ec67c85faf0821eb9f578108bec2ecd06c7c9a7c996f3f51c", 0xc5}, {&(0x7f0000000540)="d6c724ce972cc0cc467f2fad22d024c2d902a95051ca0aab8bb7886dd3877a37ecf0d468f53d303b678795eaeb131f9f744ab308c69fdc7ae6cd7496165f9d9b3a803aff870d6575c6036c96797612d23d8ecc5e17ebc27da96a8d14e369db04e4d3af48829a2080a6eba9b1db5cbead4aaef0d51d", 0x75}, {&(0x7f00000005c0)="b86898585ca1962298a693136477210ece66817be410649ff0f00410fb85ec31a3e07bc060ea4a1bfdedfeefae0296a48f8bb8dbb4bb43c32cf84e334e0ea41650d54a4c0862ed90ef46742bf96b701b689f2d6cb77800d212e1b5e9feffadab5b51a6fa2199fcd66460d66e0ec92a2eb0dd3de8cdf6d445a6654401c96ac488302f1382b200336081", 0x89}], 0x7, 0x9, 0x6) ftruncate(r0, 0x200004) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2d1ee37) ftruncate(r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 20:19:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb00) 20:19:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600101, 0x141, 0x1}, 0x18) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xffff, 0xf71}, {0x40, 0xffff}, {0x6}, {0x1}, {0x8950, 0x8000}, {0x6, 0x8}, {0x100, 0x4}]}) 20:19:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40a80}, 0x18) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='<\\\x00', &(0x7f00000001c0)='+)\xb6\x00', &(0x7f0000000200)=':\x00', &(0x7f0000000240)='&[\x00', &(0x7f0000000280)='^$[@%\x00'], &(0x7f0000000500)=[&(0x7f0000000300)=']/\x00', &(0x7f0000000340)='}.&;#\x00', &(0x7f0000000380)='+\\\x00', &(0x7f00000003c0)='\xb2(/)\xc1\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\'+\x00', &(0x7f00000004c0)='[\'(^\\:\x8a.\x00'], 0x1000) 20:19:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x1100) 20:19:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x705100, 0x43) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) semop(0x0, &(0x7f0000000100)=[{}], 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x402}}) 20:19:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r2 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="600da0390f64618f90a365273aadd41ec55a30a0cdea1693ae884476813e431609c76955bb1139790c80435f623d41115c41dbae5a115611590d6769d7923b93c37ad49307f9f314f1912de10e18edd4dda93628199be5f727f7fad52c49c8cb221196265568af8ac01809e6e0cd26a795e385bd6226eaef58b2bf8559cf6116cbc0206a109426cf58c75db3977d95f54411482dc7a4c2a1eec15800648d3038d25a7d45677303d211cd973933351c88fb69a0c58550cc9047cf937745821ffc62e17142ee190f907a2215c6cef3c42ae05683a718073ec1b26aef1f71c95aee758f56d060ab39036ca623aad212cd", 0xef, 0x9}], 0xa0000, &(0x7f0000000440)={[{@quota}, {@nobh}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, 'version=9p2000'}}, {@hash}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) fcntl$setownex(r2, 0xf, &(0x7f00000004c0)={0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x0, 0x46, 0x0, "b21a460ae2f358afb672e7c409360fcc7a1e39bafb18004014e985274ce9f6ad10e3a1a09ba745fd7aca0e720b1361cf09fd1a35a1b8f8c55e8f7954b6b4ccc4c4751107e0ff8d248ca3b9b52fede157"}, 0xd8) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = geteuid() getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000600)=0x0) r5 = geteuid() setreuid(r5, 0x0) getuid() setresuid(r4, r5, 0xffffffffffffffff) setreuid(r3, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_any}, {@version_9p2000}, {@access_any}, {@loose}, {@version_u}, {@aname={'aname', 0x3d, '$!/.\\()+.'}}], [{@fsname}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', r3}}]}}) 20:19:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xc00) 20:19:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x1200) 20:19:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000280)=""/97, 0x61}], 0x8, 0x4, 0x74) symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000005c0)={{0x2, 0x3, 0x3, 0x0, 0x609b}}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000600)={{0x3, 0x3, 0xffff, 0x2, 0x6}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x2, 0x400, 0x405, 0x0, 0x10}}) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x101000, 0x104) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000580)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x12000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc77e7d80af114f1a, 0x11, r4, 0xcfb06000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) [ 280.883520][T26338] 9pnet: p9_fd_create_tcp (26338): problem connecting socket to 127.0.0.1 20:19:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xd00) 20:19:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x2500) 20:19:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x6e842, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5000}], 0x1, 0x600, 0x0, 0x3) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x5a) 20:19:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x145) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4800) 20:19:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xe00) 20:19:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/106, 0x6a}], 0x4, 0x2, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/72, 0x48}, {&(0x7f00000012c0)=""/45, 0x2d}], 0x4, 0x0, 0x4) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4c00) 20:19:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x1100) [ 281.156184][T26388] loop4: detected capacity change from 0 to 87 [ 281.242460][T26388] attempt to access beyond end of device [ 281.242460][T26388] loop4: rw=16812033, want=105, limit=87 20:19:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) fcntl$setflags(r0, 0x2, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 20:19:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6800) [ 281.386113][ T4761] attempt to access beyond end of device [ 281.386113][ T4761] loop4: rw=1, want=230, limit=87 20:19:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x19c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x100000000, 0x3, 0x27, 0x800}) 20:19:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x1200) 20:19:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x8, r0) prlimit64(r0, 0x2, &(0x7f0000000000)={0xbcaa, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6c00) 20:19:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) fcntl$setstatus(r2, 0x4, 0x40000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x2500) 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7400) 20:19:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x810, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r0, &(0x7f0000000040)=0xffffffff, 0x1ff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="28e0bbe2402ae653b6174a4b6119d0ee06d6ebe5a3d22472c716dc0f6e994395b60822daaa572457fb2938a1775836c2d4cf62", 0x33}], 0x1) 20:19:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) flistxattr(r2, &(0x7f0000000040)=""/147, 0x93) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4800) 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7a00) 20:19:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40281, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/40, 0x28}], 0x4, 0x14a9, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x100000) 20:19:04 executing program 3: semget(0x0, 0x4, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x20010, r0, 0xffffe000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = semget$private(0x0, 0x7, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001340)=[0x4492, 0x8, 0x1000, 0x2, 0x2, 0x2, 0x5, 0x315]) semctl$GETNCNT(r3, 0x0, 0xe, 0x0) semop(r3, &(0x7f0000001300)=[{0x1, 0x1, 0x1800}, {0x2}, {0x0, 0x8, 0x1000}, {0x0, 0x9, 0xc00}], 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/106, 0x6a}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/96, 0x60}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x6, 0x3, 0xffffffff) open(&(0x7f00000012c0)='./file0\x00', 0x48000, 0x18c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4c00) 20:19:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x5, 0x6, 0x7, 0x282, 0x1}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x1000000) 20:19:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/211, 0xd3}], 0x1, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:04 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x451a}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffd28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0xe5, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054b00)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "0cb45a349c0a37"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000055b00)={{0x0, 0x80000001, 0x3, 0x1d5e, 0xfff, 0x4, 0x0, 0x10000, 0x4, 0x20, 0x2, 0x9, 0x4, 0x6, 0x33}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000055bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055fc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r8}, {r9, r10}, {0x0, r11}], 0x8, "efad9f6049b04c"}) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 20:19:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6800) 20:19:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a3c00, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800009, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="b216b4c24f9c2190cbc418274456893a956c3ebc47a4a5b5d290961f75b6d0e254af9f70d62f557339d465a1fa014be7e20a1876f107aa2a8d81417c49f05149ac52f07c00c746bb2d18d93401bb2233265f3b33dec9a8a6717f0e85281f870536985070131fe4da9bd90cc95c43a4d0b9d3d29aeaec5e7e4c726593861fd00f597ec7da4cdae9acdc6401f7510a7e2485d93d42a030dcfdc10ed581ce8a113371ed662a93a6ba20714a9ca1285345319848786cb5eb78636d669da08c67eb41f87d87963063cc0109b76b028c0ad6a88781e3e6e6209fac41aabf22eb190b617faa8f1fd90f7917ec49ff630cc699ed65", 0xf1}, {&(0x7f0000000180)="723ad963f7f75cce1c30d3a438529e8bcadc3438c6236537ad4771537dc5861a3302ddf1f6fad8bf25847b907c2ff55396cb198024bf96e815d96a8be3dad4d4367eee08ce3804294baffdfb4d9f", 0x4e}], 0x2, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 282.381705][T26497] loop4: detected capacity change from 0 to 6 [ 282.400029][T26497] FAT-fs (loop4): Directory bread(block 6) failed 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x2000000) 20:19:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6c00) 20:19:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x253, 0x5}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 282.536697][T26522] ================================================================== [ 282.544853][T26522] BUG: KCSAN: data-race in copy_page_to_iter / iov_iter_copy_from_user_atomic [ 282.554291][T26522] [ 282.556625][T26522] write to 0xffff888132724000 of 4096 bytes by task 26513 on cpu 0: [ 282.564885][T26522] iov_iter_copy_from_user_atomic+0x2e5/0xb60 [ 282.571499][T26522] generic_perform_write+0x1e4/0x3a0 [ 282.577082][T26522] ext4_buffered_write_iter+0x2f2/0x3f0 [ 282.582827][T26522] ext4_file_write_iter+0x2e7/0x11d0 [ 282.588239][T26522] vfs_write+0x69d/0x770 [ 282.592509][T26522] ksys_write+0xce/0x180 [ 282.597010][T26522] __x64_sys_write+0x3e/0x50 [ 282.601816][T26522] do_syscall_64+0x4a/0x90 [ 282.606249][T26522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.612997][T26522] [ 282.615519][T26522] read to 0xffff888132724000 of 4096 bytes by task 26522 on cpu 1: [ 282.623430][T26522] copy_page_to_iter+0x320/0x860 [ 282.628589][T26522] filemap_read+0xf06/0x1230 [ 282.633615][T26522] generic_file_read_iter+0x75/0x2c0 [ 282.638921][T26522] ext4_file_read_iter+0x1db/0x290 [ 282.645339][T26522] vfs_read+0x565/0x5d0 [ 282.650129][T26522] ksys_read+0xce/0x180 [ 282.654528][T26522] __x64_sys_read+0x3e/0x50 [ 282.659331][T26522] do_syscall_64+0x4a/0x90 [ 282.664454][T26522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.670984][T26522] [ 282.673599][T26522] Reported by Kernel Concurrency Sanitizer on: 20:19:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x3000000) 20:19:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7400) [ 282.679980][T26522] CPU: 1 PID: 26522 Comm: syz-executor.2 Tainted: G W 5.13.0-rc1-syzkaller #0 [ 282.690793][T26522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.701650][T26522] ================================================================== 20:19:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2, 0x4, &(0x7f0000000840)=[{&(0x7f00000005c0)="17077f00b5c51689ecfa68f50499556667205e2a98a2f730472b09ff449c1ec893542ab3d9727fa4277a4b92733a0b38218e0407621e503d27bd", 0x3a, 0x4}, {&(0x7f0000000600)="3c49d264a45f9daa7ae69484255f90daf205330a694851c1ad3290f2b667062d303bdd808b97066d4063e5514c927805b575d1cadc79505bda9c758869714c9e051fdd02ddbc256776", 0x49, 0x4}, {&(0x7f0000000680)="c90d1e73a5cc2793e9d69adbb66713f7b951f420d41a53fdbf91c2671479c958e9759879ff4b54ddfa0987bd0570c5c5b9e962ab6cefa5f572773a5244c7c100299924ed06ed91f9eb33905324b4f9d1e97c82dbbbc9d3a9349d1ab8db66ebaf0310414920c2b4f51e9f1a67a2bedc62899586cbcc71930c9ced9420683b503a5368f4240bc77d78b9f9d760df9126c1379c24b48032e637a94f26df", 0x9c, 0x9}, {&(0x7f0000000740)="abf4b66f0d45daf829385d93b4a5f8e3390ff2a7b5f148f947e6006df2ffc984dd78843f0142a4a21bca7aef0f3de6ce32f5ec08f5dd09a9104aaf60e7751556aa076892ed388e16dea7701977f3e4d0faa2c7bd08e151c6d62b6c20b94a3a150f0417b05bb39c5021b417586a7f1e0207bc436974744eaf98a25c171ff302706a0f2e06166cabc301a75e796ef5a32b8beebd9b4391e21d3538e39009ec66940766883cfe745b78a9394c4f0c0fc336f034387dda7ac27dc6b4f860f6b4e98cbadca9e2ac06e6d85610", 0xca, 0x3}], 0x802080, &(0x7f00000008c0)={[{@utf8}, {@shortname_winnt}], [{@smackfsroot={'smackfsroot', 0x3d, 'ah\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'ah\x00'}}]}) r3 = openat$incfs(r1, &(0x7f0000002200)='.pending_reads\x00', 0x4440, 0x20) mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x2000008, 0x110, r3, 0xf00f7000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) mmap(&(0x7f0000248000/0x2000)=nil, 0x2000, 0x1, 0x1010, r4, 0x197a9000) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="6bff528f6f5950d9dc85b194fa033be6eac34ab312", 0x15}, {&(0x7f0000000080)="2bcef919101f15210209f41effc11b07539c65883f398583a5f0e83dff6f4606c215", 0x22}, {&(0x7f00000000c0)="4a19fb1d736e31b38bd22d903f0933e2dd85c0190dabc55a7e17645dafb7d55b7f4a7c6a27088becee71a891dde8fd5edaca5950e0b7109c99786219", 0x3c}, {&(0x7f0000000100)="e04b43a4e48c1fb45f80ca3d993b017c227701503c72d37a584cdc7493b925b36dd0bbfd0c78e04dff94d53411bfee74c88a396313842c84273f2f068a6ed0c808c4ea741c6681c80ade0c50811fa7de25318eed3aa4946b0d9ad1ad980bc8bea85409817dbc338566c2b1d9b4c3b806e6a65fcc7847f34d51e5b0d6cbca0197bc4d1aedab78d3d83fa82a4937880ba5816a0cb7f77617c88177037a665dc62edeea5584923db3c7b3da69925043a82e1acc424848614527fdc86ac179d2abeab05fc08bba3e4059501e5321a19c22e72680ee", 0xd3}, {&(0x7f0000000200)="46091ba0ea507a02a59cba01ae951a97d485123568c440c2b1af2665fd6f0244654a2b1dcb6e6aa0b36acbe8ebfeca3e46e2a4435398d364bd0efc3491753d2c048b694af92eaa00d9a10989634349baf969aabb18dd7e4b24274078a763858d5bc6331f348275bc7e105fe1969be3bd144c5d36b847f2d36d34d5ce5dd7d97e27cf3b44b87048787b76fa560532268c432035e9cf0a74bc70006cefc55dff42434db8699fa2cfaf9c782b6a22ef48a83c47e41cfe30fb8b61e9ad95b7a6d0864da70ebe9633176f8d34f1316708049666711b55f362f74aa5c5dc6fb5fa035554d957fcc368322ee5f804acaf1dfed96c", 0xf1}, {&(0x7f0000000480)="c2a52cf1194174bb338e48b752a872041c00c732016aa8f5965ae90680ad079c6d1119e6f033b637dabb35cc9f64782865f227bd6be2f58e6f2e89d58f4fa8610291fae661586f5490d24ba6f4b4ac8ed001cf022c66e6e0249b59768af57b7ad60c2cfec1117ba8d73c69f58e1185d061be1e5f2d77089ef1b5b9d85263dc26cf2f0ccc64a40cebb2d0d8547a4700e3a02fb47958028bf38c1350eebd2d2464142579928a508761383ee547e5a4faf756f0d745", 0xb4}, {&(0x7f0000000340)="c6d52b979fa0f6e89858654be7a8e85893933adbc2cf3c87ff79f762640c47251e0acf28f3a3516c91eeb27b4651ea4916aef12efa58152fafe9ab5db8173b788a6eb434bb7f8f4a7c50f48054e8c220768d36207fa78bf5118b8d1948605ebadcea2a3ae77b9acdb1e5d598d2675fa64d7f19734100000000", 0x79}], 0x7, 0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000440)=0x1e) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/65, 0x41}], 0x6, 0x40, 0x9) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x2, 0x4, 0x3}}) [ 282.777132][T26536] loop4: detected capacity change from 0 to 6 20:19:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4000000) [ 282.819567][T26536] FAT-fs (loop4): Directory bread(block 6) failed 20:19:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x451a}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffd28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0xe5, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054b00)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "0cb45a349c0a37"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000055b00)={{0x0, 0x80000001, 0x3, 0x1d5e, 0xfff, 0x4, 0x0, 0x10000, 0x4, 0x20, 0x2, 0x9, 0x4, 0x6, 0x33}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000055bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055fc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r8}, {r9, r10}, {0x0, r11}], 0x8, "efad9f6049b04c"}) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 20:19:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7a00) 20:19:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x5000000) 20:19:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x6, 0x3}]}, 0xc, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) mmap(&(0x7f000074f000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0xcea29000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x8, 0x0, 0x400, 0x40, 0x1}}) r3 = socket$unix(0x1, 0x1, 0x0) accept$unix(r3, 0x0, &(0x7f0000000180)) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x1) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r4) 20:19:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x100000) 20:19:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6000000) [ 283.134332][T26595] loop4: detected capacity change from 0 to 6 [ 283.168245][T26595] FAT-fs (loop4): Directory bread(block 6) failed 20:19:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x1000000) 20:19:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f00000022c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002340)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8820}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x5c, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0xc044) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7000000) 20:19:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x2000000) [ 283.331623][T26621] loop4: detected capacity change from 0 to 6 [ 283.355108][T26621] FAT-fs (loop4): Directory bread(block 6) failed 20:19:05 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80c00) creat(&(0x7f0000000040)='./file0/file0\x00', 0x80) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266643b9b3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX]) 20:19:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x3000000) 20:19:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x8000000) [ 283.538812][T26652] loop4: detected capacity change from 0 to 6 [ 283.544241][T26653] 9pnet: Insufficient options for proto=fd [ 283.559345][T26652] FAT-fs (loop4): Directory bread(block 6) failed [ 283.588820][T26658] 9pnet: Insufficient options for proto=fd 20:19:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000040), 0x0, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x9000000) 20:19:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4000000) 20:19:06 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x7, 0x3, 0x4000000000, 0x0, 0x55, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x1) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x2, 0x7fffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x1, 0x1, 0x6e14}) [ 283.910412][T26681] loop4: detected capacity change from 0 to 6 [ 283.939836][T26681] FAT-fs (loop4): Directory bread(block 6) failed 20:19:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xa000000) 20:19:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x5000000) 20:19:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') mkdirat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x118) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001380), 0x800, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a80)=""/252, 0xfc}, {&(0x7f0000001b80)=""/120, 0x78}, {&(0x7f0000001c00)=""/24, 0x18}, {&(0x7f0000001c40)=""/127, 0x7f}], 0x4, &(0x7f0000001d00)=""/206, 0xce}, 0x1}, {{&(0x7f0000001e00)=@ax25={{0x3, @bcast}, [@remote, @bcast, @null, @bcast, @default, @remote, @remote, @rose]}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001e80)=""/207, 0xcf}, {&(0x7f0000001f80)=""/213, 0xd5}, {&(0x7f0000002080)=""/252, 0xfc}, {&(0x7f0000002180)=""/242, 0xf2}, {&(0x7f0000002280)=""/120, 0x78}, {&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f00000023c0)=""/69, 0x45}, {&(0x7f0000002440)=""/70, 0x46}], 0x8, &(0x7f0000002540)=""/28, 0x1c}, 0x1}, {{&(0x7f0000002580)=@x25, 0x80, &(0x7f0000003640)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/28, 0x1c}], 0x2, &(0x7f0000003680)=""/190, 0xbe}, 0x6}, {{&(0x7f0000003740)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000037c0)}, {&(0x7f0000003800)=""/200, 0xc8}, {&(0x7f0000003900)}, {&(0x7f0000003940)=""/123, 0x7b}, {&(0x7f00000039c0)=""/27, 0x1b}, {&(0x7f0000003a00)=""/174, 0xae}, {&(0x7f0000003ac0)=""/210, 0xd2}], 0x7, &(0x7f0000003c40)=""/4096, 0x1000}, 0x10000}, {{0x0, 0x0, &(0x7f0000004c40), 0x0, &(0x7f0000004c80)}}, {{&(0x7f0000004cc0)=@qipcrtr, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004d40)=""/45, 0x2d}, {&(0x7f0000004d80)=""/251, 0xfb}, {&(0x7f0000004e80)=""/180, 0xb4}], 0x3}, 0x2}, {{&(0x7f0000004f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000005000)=""/111, 0x6f}, {&(0x7f0000005080)=""/86, 0x56}, {&(0x7f0000005100)=""/197, 0xc5}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/225, 0xe1}, {&(0x7f0000006300)=""/109, 0x6d}, {&(0x7f0000006380)=""/23, 0x17}], 0x7}, 0xff}, {{&(0x7f0000006440)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000007600)=[{&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/135, 0x87}, {&(0x7f0000007580)=""/102, 0x66}], 0x3}, 0x8000}, {{&(0x7f0000007640)=@l2tp, 0x80, &(0x7f0000007900)=[{&(0x7f00000076c0)=""/176, 0xb0}, {&(0x7f0000007780)=""/144, 0x90}, {&(0x7f0000007840)=""/4, 0x4}, {&(0x7f0000007880)=""/86, 0x56}], 0x4, &(0x7f0000007940)=""/115, 0x73}, 0x81}], 0x9, 0x0, &(0x7f0000007c00)={0x77359400}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = syz_open_dev$rtc(&(0x7f00000016c0), 0xf7fffffffffffffd, 0x8000) io_submit(0x0, 0x5, &(0x7f0000001800)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0xf, 0x0, r1, &(0x7f00000013c0)="7ff6342c12bd227a2aae2efc6c82b55b96a20f01c3a978bac1c4b971bb23c92c466024257c66dc3947e03a5e529fa804291b6e8caaf03ea6db1b36a97948d7ce634114fd38244580c47a48797daa43f109768326b6c9202fe78cb73a9d88f131ac129af9cf1865f9ebc9e2a03dccd22c1cdbea480a61caecac432ab009dc6ec7ea3e9487f21a2ec6a69d2ba2c35f51a3ce36317ced9ffa2306df84634f4b8f75d107a5536a398f4914ca7449f6e0499b37cc8b26152dd3c97aca9d85b3873a8524", 0xc1, 0x10000, 0x0, 0x1, r0}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x6, 0x3ff, r2, &(0x7f0000001500)="f5b334eb8f6b9e3d308504128048382572d6e7a6ccf61160df3aed0f5c12e7e23942733fb71d504bc1f94bfeafb17c2e17e0ea81d79f22aad2151d946ebf23f8b9f8bcf523acd0330a5d3bee609f4f1c1ec8a54349e48e1663debf87a54fcdfdd1663d475eaa5fafabe7bee8fe6d64403c22616316b375e67a4e79807258c0890faae1055dad100a0365acc22a98f732678dd86da30db8a0901ac540", 0x9c, 0x3, 0x0, 0x1, r0}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x8, 0x4bc, r0, &(0x7f0000001600)="817973d8ffd909b22fef229e511943563a1c9e997319c3d414118f72270956053c1bcb9f9315da5358255243fd8178066a3bcca4aab60d805be7670c2d30552dc7caf470713ed69c9dd1f801c4a2791ca8786c10b86712e22848459b27fc49fb3a", 0x61, 0x3ff, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x2, 0xfff7, r3, &(0x7f0000001900)="8a955b03000046364db8b4cdc09e80d8a9d1fbac8cf4d748cd54079f99b383d01a466a42bb5de7e8a825216f8bdcbc9fb7dfc34b6b4a39a6132c5e6ae1b709f3860af851736b9e79f0ca00"/96, 0x60, 0x100, 0x0, 0x0, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000001780)="ed18055811c03616fbefee27c4b06b28b296b80f619cd3d93b82d238e3840687f38b3aec4943be20bedb4c889d6787348bd21aa130abb6f0", 0x38, 0x7fffffff, 0x0, 0x2}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="8e83adfce1289242effad7f58991f59c4eb85c432b6953f25ed6b8f8e4e9", 0x1e}, {&(0x7f00000000c0)="18c5df98d8edbb3833d5b6a4902c8d356b44f1a0985da5825984fe59804595ce8c235fd120eca170f2f9d55cf004231c901f2dee1a7b334d1bb3c8dfc544b0014cfb242fd6c35035b1133994b155791f21e3c3b7eaa0566263754a22c6e757e92d242427741228ae9be2107393005e69d48f04a5c85b745d7ebb36d9d10bec29ba32cf08b7cff37e83289a037ec94a7b4fb9c663e010b80d03d28ea0a8537e30912c3f179c6bf1ed17a6b18499da7afa4bb7da13778714c590739a1e2cb324d8049be46acd61cd1030ae2e7203e244cec6b658fb48ca525ab4", 0xd9}, {&(0x7f00000001c0)="1e3000c472039a2d361d883eba98f769c24ba08239c05b217bf0985141417af55111574aa284fbef9d54a23a0faa88ef1b9f9e742785c283f9b23b1421b4472aaf80c4d2dfc78a70726695c09e901bf4b98f75bdff60c63a5568ad391455aafe6677c08551b42362a11fac", 0x6b}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="b7f6c6176135f32dab1920766a231b25d1b8f0d4dd580b707e8b83bc2f63a0189231935b091023c9", 0x28}, {&(0x7f0000001280)="777db9abd16ecd687184f6f5bd77bcc1678cc5162a03ea87629853482890c66d401782daf881c1564145bc3ec00de95d86e7b56c9aa851d0f7dc457c3f7eda114d50702dcfaf782cfbe15ffcf32369c5314b19ff6187bce52bd49d02bfff85e543c6eca02c2d45467e65553d4fac288d19", 0x71}], 0x7) r5 = openat$incfs(r4, &(0x7f0000000040)='.log\x00', 0x8000, 0x4) writev(r5, &(0x7f0000001a40)=[{&(0x7f0000001980)="cf9ce87c441773843f73a56b185ecd7cba461fd1a7f32596ce1b8dd35475058c33a38f936af01169b5c27ffc02addc1992dc3120370e0d03813c02b3c5fe04425e2b5a84206622c98c2b702a2d6c362faf8740426764a1b39941c3fb64480ad1a82b71560c0f76513673e5eb7e158e184a0b8d4ca99dc0c0ce2a870bef0a2fe1701ce397", 0x84}], 0x1) preadv(r5, &(0x7f0000001380), 0x0, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001880)={0x2, {0x3, 0xffff, 0x0, 0x400, 0x1, 0x1}}) ioctl(r3, 0x8001, &(0x7f0000001680)="f16b70") tee(r6, r2, 0x0, 0xe) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001700), 0x12040, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8810, r8, 0xb38c7000) [ 284.080166][T26708] loop4: detected capacity change from 0 to 6 [ 284.091501][T26708] FAT-fs (loop4): Directory bread(block 6) failed 20:19:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb000000) 20:19:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6000000) 20:19:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x80400, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0xb23e) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001640)={0x2, {0x3, 0x2, 0x0, 0x400}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000001440)={0x7, 0x0, [0x80000001, 0x7f, 0x3, 0x1ff], &(0x7f0000001240)}) ftruncate(r4, 0xffff) write$cgroup_type(r3, &(0x7f0000000180), 0x1ee6ebc) r5 = openat$cgroup_type(r0, &(0x7f0000001240), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001500)=""/206, 0xce}, {&(0x7f00000016c0)=""/178, 0xb2}], 0x2, 0xfffff801, 0x7) ftruncate(r3, 0xcb3) sendmsg(r3, &(0x7f0000001400)={&(0x7f0000000040)=@ipx={0x4, 0xfff9, 0x81, "227781e03760"}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001480)="4a52149b2b322788ea0bc1e6bf5f18b2287f2c6c5e63c141a9655f438125d0c50de7eda744a7dd388f097ad4d1e23424c002ca9cbe3d13f2411f315e40768ad61a3b3686f06c27b0193ff075a287c04a884ff2291376273d57af06fee0efd8530d07b5f2779d0f9f26db", 0x6a}, {&(0x7f0000000100)="9e822157b3be2d1adf9f2bf3935778122b0cbb42f1739fc745f60bd496f5ffa421089f1d95d2306fc0da9a5f85f38bdfa2de3aa2b5cbd99cb3e0b95d26ebc4cd9b1eda2e116c96ef3c5fc4771a205cbf337fad2ee3090b2cdc584f864e988dc39e52f03c1f35b020a0f8580e55c4582470c72c498b7be07d21fe48f5a2de36c40d065ca9d89b392bbc106be41ed4208feed1e2993aeeb47963395685f07467abd6ccc07a77837d9a14c4a597f0d8f8ce7f0a8452f213ada752aad6919058abe7b64b8f549132494cf836b35842a5efe4fa191c8fb1262e6fd5781dfdf2acf23abee1db73d182f6c4a98c07d438a1c2fed160067fb871cee2b7346f6f247945a79ec5dffe25f698494caf01b3c7ead11b06c962ce8bd3a6d8e0ff59ccf92fbe96ea25e8a6fd630b698cf602e8e17c40a3ee7cf4580d8c0a802640499d2026493710a84eeb9b0452b7f8f0da71af4bb80b9c5d0efd43ac9c7ada1e380648ff2b5ff9530fd2aa358b968edc3021e7d200ec270a274b03d9f1156d11ca05d725905503550894dd8ea834928d8b6de5a75c430af6ba4cf5cd81b11461e076425f694c4c5131ed57a533b56cb31aea520c5d655c52670cb00ed5592e3ef7325802256f219edb747a7fb4f484be28a72934d9a07a75a8e58a1e60a64855bfd567a445b38df536f1496bd2b50f024b6767d655e6e52c65fab3b26b7b80f93871dc36260a670f98dafc8ba4860d16e26bd484a3cfeff291a126d7e76da2c5eb5adfd722c895051bd95a8fca8bbe8c1268ef70b19fcd4a478451dfd92da62d7eaf072bce553f1aae1ce0805e7253e594b65049a675a492ce1f8c3522e48cc515238fb6a4578dbeb4c2bb71c77c1a0611cc5dc011576bb596004549fdd08c99b1c617e77721f5c627bc1e3448b1ef07714ff8630532343ef7bd5fb72b5b154ceab158aa74f761e525ccb98bbdbe10d9d9fa969e1e9dccf98014f663d10f0ebc3a6982dfd0fbb84c8f8642612e7551874d4cf7b02696374de767f05afcd6f2cdb4cb865ff9e6a6d71e8081c4491cb7b339deaa87343485708e70e0fee435ef65883cdccf822cb2a6a6dc7d304c804025902949d404a515eb618beea932f730e3a772c37f6b5a1b7e4623d37024dfa3561d2effcebc1ce1b194cdff89ff9f04db8a0514e1ab6f80a9bd190647a483b9ad02b750ca2aa0b6459a668dae6316a7c354b83096f1443b8391f415247f6f938d78dc0e61d2aa21f08d3f956149a77b74d20afc1b57fb7c535c946350b389c68f829243588a659de91f354928b56ef239a59276419b16db822a93c2b26f234cefbd99fd11b6115470e26879550697dc49df21fac2fe18f0dccc2a4982f95fec3ede223b82ccf705df98926033769c871b8c247287062aec3fe2c5f6988f8f637e3a9972e3a303dd6124144d03765e7e972a7c3d14d48086b65de61513b451e90a4fda483935de7e19b256ea53897bbe3757e82b6f442543f060db0aa39eb7b5588bd1a79c1fe6cfc364d14134166c34632c85d24581491218a3de38d13e0ea24f43f2db6ac7919be5a471cb72c3247cf21fdeed76d591af4e2096f23234702c8a2e283cd465e037cc24b7ccfc9121357fe858b3302967b03cc9e7cf60ed08348edcc17badbb2545c4d7ad743d7d59b7453e8abe12adc9804b0500b5a89b085386f0f5db1db73fa8a9a1b6c9e596fbe861134d50a16943cf08339dda40d2209eee163de20b1969ce87dc1274475386f99d05f609b3a4c1be2d9bb6c6a9e466a3f96a858878b93a69e4fd417c21f3a4db4d309343e6da05e9022ede9f0ac286375891c11b5cb1a07a06ca5449e723c20d2373d1ba1835ed2a0da0f4b719c8db020c844e9952057b732b585036077a908469231230a083c6beee43e5968a51ce206e41d60d067906b9a18883dd1c062d732b8c1fc15d967a3741c221a218f203490d1c68b2f11cea7d11d90e40242a6554d3fdf1a8a82e815f7eeff827f0dc357853ade7266f4d0b184409c870cefff1e4bf93f1a3271c3bce03dedef518c03707b9fc8f54e8b2630f1ab293ae19be42cca83f208bcd62f2c2399db6db49542a89613d21ae224c8a345c48c9ff23e84d9570f81259390796bd2a1b406228d019157c30484e941941abdd62e4de7c18d69f488be1c7238e95bc9378bff4eb45409399e72da4f9f82f76cb6ba733a6a29ed0167a8c831975a27d463114d643460f00ec46af54860f3acdc2a000272eb550f68f31f6d69f7cf1ba55f14ee8c596de0fbe0395f5d4a46028e20291e90ce8d0654aeb7eebe18600bd17879e97926def37c205d459f63b1594ea98ac752c93b13ba1f648d8f61660dbddede4b2dedcdfbee0a5a48ec88ffe44c34f312c3e5c1198a4d8802ca8b96023bb234299aedca14127b16e5c6bb8b7217375aa50b83d3d2a2697e906297a62b22fb1a4c6e389eacdfbd17cf4f1ae99bfe7f169b36c6b8aaa71baf151d78afcc7fd441729ec2b1ddc713273bf145e4d5a94d8907ee081875f5406ee5afc5e998db1dd188d79856c5d903e67fe7e62373e5e4a41a48ae72ea1a6e638ce0d3dc838a96945e805c7408ce6545c989c8343295958a65b29c940ad05e24f62f848ce68687967aa0c9459496014b96f90d9e5d6b8976e6fdc69712c3f51477ccfd98d6356c0a29cab922028f70b06db9c820006876cd185bb547b13aa94c0ed8ee4662334de50c63e0796bdbff08f9add728a8b332d23eb2d6f6049e1f2d545118e4dec88a9e5bb7d0c7d80da7be586a6af7301ab3f005ea0dc4fcdcd4772ccf2e5f0f9e39517c243bb874a468f4ada2214f7738c3ef1c9f048debecaed7a2523720d17afdf185a90a2e3dd5758e0619fe2a241d1c6b5e528dd0fdc6f63d69bdb4f2d513873cda83e1888415be35bd70c5f6db33f448c314bbc51159cb0c93460702571dc15258af9b57090dfc7945b1b98722580726869d1535cb185f8ad959f33406e459abbce2c43dfbdde4e30e47b39f3abca4d57e3c2e334a2d541dbdcfe2596794e778b5ab51cfc0a136cf64075ff4f59cffdf4493e4a6337a2838e1f503eff47389c4314ccca55685959e847fdc9b129c335067e7b8efd25eeb6c62f17cf2ddf7d8116e8810b7e1f4c77e7a9ea71b72fef1a93f1a44e71c76b5966c70da76c8a894ad692cc901412d2a2a16908087ada91900a4356f4f728418f6741f182efd56170f0d0a5cf07be636f7b42b421b7d167e00c57b6a13b87b5d785891a00055e65136064c2ca1f378ddebf41539371a0c6e3c385e57b43afd945e985516f129c65e40a70bb35894de619a5bbe2f92f0c6246c892f6835fe14ad1196ce518606f69989b5595ee2fcee4f9b7c1f3ec8dd547d5189c50b4a233c3cca82c4215c7a489e2dad1682e40c4e03c40593f3564f4c48f1c1641e3bea3f14c3b047e3d37f8c215e6fa107fd74a8bff1b2ba3946859a0def86cdd0d785b4aa9bce08fcb3119a22adf1212d5d85e39a8255608fda5e577ebf1f252f337bd7194f4b78378d50def92b63e84c47668d3713402490eaef4f65acf91e748a4bea6938f2f4d6e2bafb9e256484becb2b618d02945b37b0e2303845c1e400619e8b038b48cd1010d407a4d9c8a63342115039a5e2c388d01b19e667200401197ec7f00aab127438d5535dda506416cc68a3e231f0c9949e39eda56adfab999f3543a603ec82ef011dfec7ba05834d960b73a2b32b94f885a32361e7ec433a5ca9f31bb949311213dc648147e57b5d9f5fe161fa4b58cafc907e81614258eba43dd75aa70a0ca64a64009e91a15ccb2739e6a86a8569df062b86b2b7fb74d6c315c423894ba5ee302adf45cad25b0bcca56a97b8d381a8277fc67fa0ea2f54677ada01584237b9e76f35d0246a60e4efe4b2a67d56ab6d2d1a50be4dbf588e8fb19eb629185414955e691396e9b5c3db1fd188fda8df9fe97eee4bf60d2d74811a16ddfff4115e05b8ba4196ddd29bf25666098e29ffe8831fc5a0d3f41d8d5fc8d6e69626bd3a4188bfb75f93f9154246a8f2069b2baa21e1ee53f21fbfb38950719a664118e891e440fcb2752cac05856c3b5a3f2e9e6c179bff9d257fa6f61168fbfb44db955e7bf469683408f52dd587df0fde72783c104a90c9a63d3f888ce4300a4f5259e4b2eebf386cf5b18072af61a66539afa710886d27b11992b93be6f84f28d6ffd60cc51078014a57d3a1555fafa88a7ecb949830cf8fed953f08e2352a8d04de22601de42cb77d1360b57e9e06fc359df923b837919888accf1ef97656c53a7eeca94baf1deeb745f328718078e3419a9a3f6c589a64ca8d598fca7d57069592b183a19c4d272a7afa74b499335083ebbc6d277960bbfd1617d96fa554f6517d495218f104cc4054f3ecfffa36cac7982990fe5cb07e1883513cbfd1f4fb621e551d7013c886ce8adefaed843eb188d9cac22c86be96759e3a9098f784274f4f7263cc65b83368b1c8464b1edececdbbb078526b997c352273f5c5828a2252bb4d8f7e24f13dcd09a82c6f2630c3e3f083d268599ee3f694e6c428b35e39443abd95d83262ab0eafae3cde9a23d4216c92f96ead0cbb3ba701c6cd0ea8e0ca9e5b3025e0164aed7cf5107adc808357f17e90f17f3685a32141380025a813928ff209c249e8fe53afe6b5c763fbb094409a736bf39a92c58a5bc75bfadc1ed181b57975273ae5709732c4277340d8aecd0277f342867c7b91f5d4760ceb7b1a6b5af23d5be3d1a0dd0aca7fecfbf0538e879a1056a06d5ac01692a329028adf5cf682a495466641e39332c5ad8ac49b4b9d33597610f5fb5f94e5c8dd78400f9e828513b354913267e4a0aa1721740fc25f4814a059c5c0b87a9f3ce1359c091f44602fa1ff828187792ce7cc2db5cc74ad3bd36034a0e1566a19c6d57749bc85e4c4cf1acecb8ffc1a530f72e27cd7b04249957557e251f4c10728d9df0f797fd89752c6e105b0597c99a5cced1b58f6be95c0ef96537a65f9d950752be2dd4cb45d5039dc2c3723a3f0a9b68ad1b349908a76ea0af2811cdbcdae068cd2a07a4d6f83d404e4ea993bb1270ba3669d9d265daa44b7187abf9014f9520045b6d12d106c2009f38fec4764628cf91109139f0329dee46c7e7ffbf440c6a2367f4027d3393e3557a35df888131c0c5415699c62eb3f0a00f39b635da01ca410574cdf3edfa69d4b70e5d4498efc3e0c2bcc0bba0e846f41a74a315445ff0d82f149246839296c9a2ac4a57a8973abfd2422a032ccd0100815d2c4290edcb78fc411821d4fabe7032bc04147adf586f0138758015b8db13459ca8ca34a839a21cc4a240ebf5da8c0941a4b0c15f7a8accb29e83af2fc331638244f322c2fff3fd6a6762cbab21d536d1292690f81491fd3611f1ca6ef1dd2b12df7cca3f7ffcf1c70ef68cce99509a22f49ba57d1dabe4f4363bc0c809f308bfc6ff8cfcfec6df4e8cd4c4dc08f94857fc00af179d5684725722e9f92a5ad24c124578a1a909ba10b2d515d12cd380c5525b3584c87467719b383c6d3c0fae20f154482ff3adde5dad3018a16247aa8265f9ad0e0f552dd69c4d281561318dd66ba5a566a67486776be3905e256102ea214a13141ff610188d334bed986c76a415748939bfe7b5a2ab554c8034651fba90599c689a152db5154eb835091d262c0a61a151635969ea61c7bb4a01ef3ac3e6b26ca6c07a9e41b9238af092379891eb977fd4b83a1cc0f9a17dcf27ec4ada15136fe49d5bba483d2498cff630ea9c73c693e76caf5a5b825e", 0x1000}, {&(0x7f0000001100)="a9ddedb70f73f8674c78f5eba74de24cbe6fe6336629436d1443e27dac682fd964f99f88605c5aceb4554a38e9e3bd4240a0a8f4920802d5cb2a4fb72c2587bbeecd0c8b1ce1e04ec53d53185944b58155e44e822d3c9e52f37b", 0x5a}, {&(0x7f0000001180)="767cbb8ab941dc03c403655c87b1c388d56413eaf2a384b58ece136ac240a8a20f28b5992f524db2cd74f8b706c0689e807ea5ec4802aa65577e3786ea1395c1c62f4313a1552d96a54aff013e4e68d9083c21449fd5f06b5b66aaa08afba803482209c02c8371a2506432261529a501af023f1c63ddd82a125c7ef08f31883cb521ba34e3e2e9942eb9938b7d47c3256f7fd0a9", 0x94}, {&(0x7f0000001240)}, {&(0x7f0000001280)="5d999dd26a121f574029ecefb0eda6ec576ee7cfdc9716bf8aa04585b7ecb8ad9b83111a36d79c286e56001397f4c6a3ce39c7e2652ddb2b603de7", 0x3b}], 0x6, &(0x7f0000001340)=ANY=[@ANYBLOB="8800000000000000000000003f00009b1664e701ac88565c60dd408c4c4aa427dd051b78d8ea27aa5a4a36e7b248085d7f70c34a80406800c3c945aa14858764dd5e5b41efa434cd2b2498dc1963919c3a8387e64198c553777db2c7b8967d6fad5225b29b5ee0ea1fb39ef8864bd22e023ff13493a976c698f8de00"/136], 0x88}, 0x1) 20:19:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 284.206141][T26728] loop4: detected capacity change from 0 to 6 [ 284.214083][T26728] FAT-fs (loop4): Directory bread(block 6) failed 20:19:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xc000000) [ 284.294198][T26744] loop4: detected capacity change from 0 to 6 [ 284.364637][T26744] FAT-fs (loop4): Directory bread(block 6) failed 20:19:07 executing program 2: creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cc513d34c6373ba5c9c6ab24b00aa11515998f5690b0c31b4bcdc35b08dc930ae475625b8100b77b11fd4c423cf17c6e058cf58ba383c51377944afbe5b71b7ddd4e5755d87"]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1f4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc84}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2ec2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74e}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x375}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ad7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7bb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x0) 20:19:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7000000) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xd000000) 20:19:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0xffff, 0x0, 0x2}}) 20:19:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x1d, 0xd2, &(0x7f00000005c0)}) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0xffff, 0x200, 0x1f, 0x1, 0x81}) sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000200)=0xb02, &(0x7f0000000240)=0x1) r3 = fork() ptrace(0x10, r3) ptrace(0x8, r3) rt_sigqueueinfo(r3, 0x38, &(0x7f0000000000)={0x40, 0x550, 0x1ff}) setns(r1, 0x0) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xe000000) 20:19:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001300)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 284.800071][T26770] loop4: detected capacity change from 0 to 6 [ 284.838579][T26770] FAT-fs (loop4): Directory bread(block 6) failed 20:19:07 executing program 4: utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x8000000) 20:19:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x7, 0x0, 0xe628}) 20:19:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) open(&(0x7f0000000040)='./file0\x00', 0x30102, 0x2) 20:19:07 executing program 4: utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x10000000) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x9000000) 20:19:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3}}) 20:19:07 executing program 4: utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xa000000) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x11000000) 20:19:07 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001300)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x81, 0x28) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xb000000) [ 285.194826][T26855] loop4: detected capacity change from 0 to 6 20:19:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCSIG(r1, 0x40045436, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) pipe(&(0x7f0000000040)) 20:19:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x40000, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x12000000) 20:19:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001300)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xc000000) 20:19:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001300)) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/149, 0x95}], 0x5, 0x1ff, 0x4) ioctl(r0, 0x800, &(0x7f00000004c0)="8ac7fbc716edd98db6c447974817efd6b353b2aa5dca7ede0ccff1b976e035a0a095469cebc7e4684d5cdfd8eb02161a73af9ee68aaadbaf18042cb6944b1ae24f3ae9920e0bece32571a1533d0eb72fd4bf26a046420ab5d283c5ecdb4083a8fd6c2a42874b9cdb1e5e4e90111ca2c8459f322b39b7413706cdbee5694d3713eaeead7014fec87b1fa8cbfc5b0f7847110294d2e2e6ff033414bbf568b94b336d3c11228da13b3ae2463daa286423e43a0460777e78dcfe933eb0b4b16ad37a43be9636cd587be7081c305c20b6") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x1, 0x3, &(0x7f0000000740)=[{&(0x7f0000000640)="0851307036bde2", 0x7, 0x7}, {&(0x7f0000000680)="5a63aa4ae2bcf0801bb06404fad382b9259c77c876ee1e12233bdda3facbea54c5125d623feb5f741e73aa03bc48e45cc4d82ec4daecd78b7989616edb5b6c65bd99af79f5b4ad0d37be7d9f36fb4acce9977fd6db562d268c1cc5de16cf", 0x5e, 0x9b}, {&(0x7f0000000700)="87747479da14b5ca4da9e71bb7ba2f1a7e1a0b33d2ae5b1a21f0da16a8", 0x1d, 0x4}], 0xa8005, &(0x7f00000007c0)={[{@utf8}, {@numtail}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@shortname_lower}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@appraise}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x30, 0x65, 0x37, 0x66, 0x34, 0x32, 0x61], 0x2d, [0x33, 0x66, 0x63, 0x34], 0x2d, [0x31, 0x34, 0x64, 0x33], 0x2d, [0x61, 0x6a, 0x30, 0x39], 0x2d, [0x39, 0x30, 0x65, 0x33, 0x64, 0x0, 0x62, 0x38]}}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) preadv(r5, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/11, 0xb}, {&(0x7f00000008c0)=""/150, 0x96}, {&(0x7f0000000980)=""/84, 0x54}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/31, 0x1f}, {&(0x7f0000000b40)}], 0x6, 0x18000000, 0x2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x25000000) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xd000000) 20:19:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x3, 0xfffe, 0x400, 0x0, 0x1}}) 20:19:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001300)) [ 285.515392][T26893] loop4: detected capacity change from 0 to 6 20:19:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="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") ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x48000000) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xe000000) 20:19:07 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001300)) 20:19:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x2000004760) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001300)) 20:19:07 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4c000000) 20:19:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x10000000) 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000040)={0x0, 0x2, 0x3, 0xfffffffffffffffa, {0xb, 0x9, 0xffffffffffffc8ac, 0x21180f1c, 0x38f}, [0x517, 0x8]}}, @subvolid=0xfffffffffffffff7}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x120) renameat2(r1, &(0x7f0000001100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x5) preadv(r1, &(0x7f0000001380)=[{&(0x7f00000013c0)=""/58, 0x3a}, {&(0x7f00000012c0)=""/130, 0x82}], 0x2, 0xd9f, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f00000010c0)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = signalfd4(r0, &(0x7f00000011c0)={[0x4]}, 0x8, 0x81000) ioctl$CHAR_RAW_BSZGET(r3, 0x80081270, &(0x7f0000001200)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000001180)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r2, 0x963d0000) [ 285.713132][T26948] loop4: detected capacity change from 0 to 6 20:19:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/221, 0xdd}], 0x5, 0xd9f, 0x10000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001300)) 20:19:08 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsync(r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="ba664549b7bb248233e356a6c90161459b17882d2ae7", @ANYRES16=r2, @ANYBLOB="d95b00010000000000003200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000066000000"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010083a01ef97755dd82"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/icmp\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37) ftruncate(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, r6, 0x17e7c6c974a05bd9, 0x0, 0x0, {{0x32}, {@val={0x8, 0x11a}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x68000000) 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r2, 0x5, 0x9, 0x80000000}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4, 0x20, 0x400, 0x9, 0xf}}) 20:19:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x11000000) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6c000000) 20:19:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001300)) 20:19:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x12000000) 20:19:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000001300)) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x74000000) 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x82) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) [ 285.894513][T26989] loop4: detected capacity change from 0 to 6 [ 285.926354][T26999] netlink: 'syz-executor.0': attribute type 282 has an invalid length. 20:19:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x90401, 0x83) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x120) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000200)=""/178, 0xb2}], 0x3, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000040)={0x6, 0x5}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x43, 0x0, 0x400}}) [ 286.047058][T27016] loop4: detected capacity change from 0 to 6 20:19:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001300)) 20:19:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x25000000) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x7a000000) 20:19:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x228, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0fb88195324b7bf04d8ebcd05b6092cfacf816f3aa0205f9e9d074d2e3294ebee68c55"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xee, 0x3, "28f7988c88236ff8c1400bc2551ba9c41ba58d332b7e59c03ca04045a1be58e9f3eff55a1390531586c6d4942355dd503517515edc1f21721f88254da22347811ed3bee8da1cce08ba7d6703c79107d71c9e150508bb2bef8264860f384eff8047c23863b2e505d3974abe4130ca34e62a006039a68632da768af537af525eb70965dd0f586032e38cfd421097b42ad1616628db5e2f7b6249d6b260f5f38e2dd713118b0598f81322565ef4fd3cdfad32abd6f12837e3122f4bdecf2c2d2ccc1dde73c3c17c5a94afcbc9f3df6df5c532524943c3eb1c9eada333c68b95a53570cf9d5d0b00c0ca2fa8"}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x5, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xadc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6086fd38}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe1}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000340)) 20:19:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x48000000) [ 286.234593][T26969] netlink: 'syz-executor.0': attribute type 282 has an invalid length. 20:19:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r4}}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r8) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r7, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r8}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd=r0, 0x1, 0x5, 0xfffffffc, 0x0, 0x1}, 0x3) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/95) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x1, 0x401, 0x23456}, 0x7f) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x1, 0xcd, 0x8, 0x0, 0x1}}) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xf5ffffff) 20:19:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001300)) [ 286.318198][T27051] loop4: detected capacity change from 0 to 6 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(&(0x7f0000000080)='./file0\x00') fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) r2 = fork() ptrace(0x10, r2) ptrace(0x8, r2) kcmp(0xffffffffffffffff, r2, 0x6, r1, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) 20:19:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x4c000000) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0xfffffff5) 20:19:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001300)) 20:19:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x0) 20:19:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) splice(r0, &(0x7f0000000100)=0x20, r0, &(0x7f0000000240)=0x401, 0x100000001, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x4040) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x3) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38002475801f00008e023bad481f4ed710f70356a60000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf2501000000080005000000000014000200776730000000000000000000000000000800050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 20:19:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x68000000) 20:19:09 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) ftruncate(r0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1be) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0xffff, 0x400}}) 20:19:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/self/exe\x00', 0x40, 0x0) fremovexattr(r0, &(0x7f0000001200)=@random={'osx.', ',}4\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xdae, 0x2, &(0x7f0000001140)=[{&(0x7f0000000100)="3b285d329da4133bf1fa76cfef1c65d344a3b7e080ea8ce147f82c2e043eaade433b2c62b0c48b4437510eca635e2323db14397a183e20351fd819add0820992120cfa9560c58dcc0fe16eddf504ecc638f1036fb2a616706113d85f84ab2678a6791f91078bd956279f44a6574f808f25b34e774cb87285aa6122c3afa57906b36ede92d67e588ea9932447a962f634f93451ebe5be04714072c078c4637766d2f63ab3a6ee4cda6128228bb2c0a7a3ca7fbc3dde181e31f04df632289c918e3e77f2c86504bb1474a2171fdb485877bde0ad3cf83238328df1958a108d80d79ae1068ed33457b50d01b4e1ce4dd702d5205e26d12ad8485af2d2ab28f7e0c5d89f405c15748988afaf6ad85de74a4b3c12c60370c570366b60bbb0edc7ec223084de0f36b2671d4f54958b7934ed3fc2076e64db0710d37c17944730fc8f31f65d613b0ffeb36a4590d1399e89beaa0e1be65b2433c3ea473659bd3e7af749b6e5fb2e53e423ee38fee0b2c14767090445606229d553f16f26fbc14db5b3c3189f941102089d85c42807240f07255da23630443a6a2880087c4ebbe6bcec26f5f49736edb5dbb10865283379865826680da33d094ceb3b3be03dfbc2db436bd51ac591b81158dec0deff8c65481bff65aa1ba79e8f4cdb634cb20eb0ecc5a97ceb89722d655fdaba6e17918f59866a0165cd7034a0ef873e9257930c25bf253d056b5021958ce937baf193c134342113254793168e8426f054ee721295e35c822f95d1148b6badf5cafeac8d796816a1a34fe2b6ee01e848b19cfd223ef8a055bfb96ce6ce6b46a48070058c85c0b643a7228ddabe28cb88b8bc7cedd845f9d26c4e83ff386fb5e5bd0549d9a44d3bed6dc67c18dfc56be6642de4f06b25aa4430a81127b51a8a427df15e2070d98fd75219ad50223dbc5dddd5d8a7199938699dcb9009c8363862765a43c0d2822417f9634adc03253dc4e1c4acde9ffefe9f879eabc9e3a313db8087944b436b681f2492124a2b97023fe2a1af31df4fcf6d433df125f61df56e88945b70a720bfdeced76e3131d7a04c7ae7dcf506bf58603c18735e807a51af611d0a54b3c989a5f9434a683fc67d372ded192f53c2739906eead98d2a3f9c80773cabb6a0da03d306c8e044dbdf99e8a550e3a0e5003f8a73123160da30ee9fd926b4bfa40cec0b3e58b97bf16c539772c98fc6c4b9856830337026346d87af29019633824820c986fbe48706edb15a06ef210c5c77ec0cb7dfc2e7ffd14bf7cf0a718ddabe7b2b2958318378996a1d6c4215aafa1cfec398d29ac038c834d2f17736165c3a85450f8efc4cdb27e6ebb3398bdb81c380a1327b62efff25d3ba59386f346a9034400eac8801cd5123ad741d44afe068308b435951ae7b05b2b4707b1b6573df1059e87775b4e772672bc437a185dcd16b37504c4240ce2df0574ae60624e2c2866047a22bf4abcb531ed5de0e5971f9ea36a8bfb5bc11e875b36b953624b52271db4ad8c3ce5ad06467b1624b780148a8cc6a299f363277868b51ce468c0785268c51866c30694e1a041909e900a1f7ed32b04072124a84d802a0aedcc318d5ebe9e171ac6878a362c6965a2af4695a6b1a16a8449b41d63a5134dfb6b79dc682110ae33ea2f6845c65c7a13e5117d00a66c1f7b51837e2d1712db50a71b66e5770ec667e7d5ce143c09ab044ca75f9614a2d3f8273482973c73050d3d0bf409a6d18f4096f46bd9c2698984f219f1ed34ed11117e9aa7178f2b356144238dded6216185b758a40e38001fafca508fa78ed12e91409286d99ccc00034d9a81e40f16bfe1c84a49a7c0ca218d00614dccaf05af4306635d9835b881a82450ff3ec2367dd526f2c45d69fde5eb32b11bc06b5aa6d3835ada1b8edad787cbd840f2586435d3cacb0374f34f9212ea2819d98e813976e73d574443be4be5525993c47816756c46e7a1df7b6e443a418fa52664ac4bb0ed6980523ea033200dbce7d2d61d2f6fd107adbbeefb228809bc7cd5105333c5418e3d524258c7c50d26df3eb48cf7b63a6849b7a443aad8bdf2b3bc697b46c9ca2ead4907cc230f3d70296b2f83611c69960f9738aa6615d30489b4d523cebdbf93092a55b311a2619d00a3a0c9702949073148ee544c9011e6f37a17634b0e8944dbf13d507380148ef8e3f787c1f35ef211f495d065bdbc69d38cf737cdeee1baa7854c545115d3a96592cc99ce2f60db75976f778dcba72ad407f2f8cb97bdd74defa471ae9c4270a3205ef2d20121fa804dd8d255efe499eff4685c2859e0adaa09e8a1b0f56116507fdd08a3f8c1a4f38931a19f307d71f8372f0312d12e646efd1634c1a78593b7c2db123988959a70c7cd54c5eaa12247749879b623d2f98016710adf8a48820ee49a28b9f6cbd66fde93d3f658d02da4b269b89318dbe3b5cae2af31770a4a51725b81960c505565d9b26d6fd356d216db0c9a08aad186f9b5aa86a6d28faf6caac48357b9ed28d9cf87cfc6f7b3df9ea70fbf45c2adc734485acaa5f3ab78cc6a88deca33e3585918fbe955bf2873250d85cb80e827e18a4d689adda2c8b073795d877763e24c936aefd5d8432ec497997fdeab4cc907f305c3a5d9d1ee3509aa29547d83f061e586f0c42079ecd11732f28c831294a8d31d19d8d6a389667eff0b273ef0a32a556bd40a2eb157aee3ff858d4caa5b1e3c2942b34ac3817db0bb6eacd839c3f2c2d8fafb20f458a054221d81e5bce270b6fea2a4db91c3e2149fd8ce4d81eed66d7366031dcab2625c9d65d49fa034221ab39ddeb948b264f21dc9df25da007dc3303827e97207af71b61ea6318375d1a7a37ae68e7d903ea4edf93c09d9b27f42e7b0cc0eb08e0c847cfdf84898472a7a1b274e95d31d921d523407767f2bf77fd98c05a362e65f3436e6cea7956190a161e51ff9923052df5591e7e7e97e3778c3f8ceb0b0a65265489d2b4437f6eb76e81d01783ae12f683863f008f453fa4fe1591036eab8e2af200e756206c7cc5323d663453407e5b50ebab380e205a59d68ed7e96920d5df27636d8151fab4bb0a2c0251f025bbc41af9953bdac85d1b6aca0cf7ef1ee5685a2b33944961111e2674aa9976264fcc1b215f08307b663bd8fd1f794bf2ab2d67cfc01282e2f99e0561416f97ee102e139a609cc604427ac4c543c0f36baaa9b2120dcb0533f6f7ad965face6f06bf724dc8572ec71de59875f73fd02f9fd7b23d66af5fdcd23295b4f2905757329df01fa5b7ef136eb7090def1da76501c245870ac71f5163e1c26188bd7dadad37d18fb87cdbf7eac66a53cf54f34f65462decef9991b97078ed23499fa13f6013fc29ccf5e4315fd0bafeb8e4f82b1a7fd678f7a8b3b6bc8843aaacff04e262854c38fed8a8465e21e44f0d2c236da82df33bd93a9ca7c390f30503ca215f4380d74ffdad3cf86b3eb6a07898684dc6f356c08e44a086b379d67a5279a16d27f701aff631bc34f7f698d22b6a2284347b2eb43f990317af8980d767a79a1d25a9b1e1a43af2cc588504b46042c8502dc40267c7f2b4287f8150ee009e0090b46a650acef9167446014775d485ee26105ae28fcead131137d4e43a1ad2d19411b4778b0cb4314eb240a5fbb8105a0ab98f3b56f344572336896aa6eba86659c9f3e00f672fa11fcf2611fb887230845d1fedf036e9ff50c89269e5395dd2838d0a342628f9734438b3609df0584f2f4be590fa22148d2b5cd9ebe14c4db816bd38d10a7f6e28dead3b62cfaf4f62ea4197bb3207a66e0ad60083c96f06be53bf88828422c1241bdf3c53ebd4b37bc7b1a8c9747b42e533e3e227d4a1f0d3497d2f2bbab09638f381035b308a88645a50d7180f24593784004b1a6f36709f296ae98ae867bf7b08bd4df26e56fe3aa87b171fe7baba5a9d180927c5d97f44230d6e749bbb849f39fa362ef1bd7f90eee7390d1943138f27862969921e6ce85322d20cf78052b5ca75f563b532ae91fb46e830748c34e261e79396b912b18e3b0c9bc8e160c0a49c4be3d6bfe3fadf2104651500eb1883e08e4aff77f557e13643cf6cb64865b11c36610861250a8c725b40489bd688d54677cd67532e48af82cd3c0535b11128fce265e7dbfff3b3b9d903bfdcd29ec08cbf709deb8d2cfd0f22132773aee29d59d14154521e6255249aed74711eb47a9593cc5f9d8a75f3dbdbaed295695f7344039de0e0b8991bedc953a72363634cf47cc5ad072f8e6ac7df9c0f17e8cd9f96a6e59b279b5ade48565d24632203673f99b053f539775d7d2852671c95f6b2c5dccea99f5d42cd0b17642e02df5b0b52b3d0b0806a5eedb7e6e8e8034a0047871e1ffb94fd40f11cce51864c9183696554f6ccca5dcdccb7a5f8c9d5af7f003be6ec47f6fcda01bbff0f0290d414e9241e9cd1d65de38b938c6a6fe3fa028cc9e2d6bfd4fde37df191265e3b645c77e9f11b9b2233f69f9e26d2cb544f08d688861cc81f63885268110893f97909345f864d0bd284664d7cacb912260b74be8fb2d16b265dbdb15a2f10045e5dae3366eb3a278eaff0e6e32ece139d6a91f8b248f46a50f5daa53ec06ba8f4aaf78bd01eef7f2d2d71b0d9259a5e26918c41fa30de955d569179ac5f9bcf17bd57d7769729ae0a2d5aae9ed0d8e24625471e467bec9c27a9b43f0f25f1c6e25e7a2995a704a34b8f318c4a3a421edf98184f8d550e003b09cfb93d8ffff80d5c828448d2388e32059c6a5b065939ee0b0c8c27b2466422c9987547cfc4df848f091c18440db1217641fe0f2973abbd14734ee45a4c8d8f55eed272cd9983b3f7892913f34b69de41e637a0c39e1ddf8d1926ecde54d1cdd1c5f2e586574758883269bd1b1cd6dad0f1c45e04daeaf4ba1ea580425c0ceecc638751e2c1b9fd3e8f554dd9b148607d3ff4f5299cc64dc30fcb69c7f39b4c993c6341237669ea253fd86f80af479898a45c737bc5a05905d3f46d3505ca7e21e12a89dce57630c55218016bcdc9228953a19bc0870f7efa5bb0a9b7eb7bcc6c837e488b444a01faa0dcb212db8a279d9c8f1abdf8873042d2bf2d3388e45be5aa1e559ee2658142e50ccb52031530ca749798da9f16e1dbfc192b2d6d5f2a8de4e5c1b92bbc5cf1724c25d7053c9e9a26159d9937e1757a41cef9e7eeac0f63444d157358768a191fc601b40bccf8ee42a6b95bb69dceb33f104732efe0661f320305f24aeaae62f77e7be2aa1f2f9b9e7c97dd502cf6d7896d50aa6213d3b5d2adc46e066abe09a342c31c14336ad258f714bb52a5b3ffcb59372499864644fa30861b88d72aa93af8bc856316cf4238da8914efcab9f2fcc85e8c48cfaa21ea0d6d7c0fbe19633a327abb41d84ee56e5dd642ee0c82a584e1cad2d6f327e03aadd1abc4e56c2d2dc29ce4de792bbd5366ac179fe1b593f35324a67c2c7f0143da508565ec3227cda3de1cb2b512cd958444f0fd09f70d84e03da9e7606cc14320f633a9b6d438b372b054dc788d853b82b59a9c72e2a310b8c712742de552d9363b8f601940f0a4d676fd8a393c40f08f885891370fa268ad1c10b546d6c7a77f35b853c4f9503888e380c121e602898e095e2b38f5bbee1e31c247cde8c710e64c5cbdd4bbfff4a2b25d5b848a15b3e1d73819c47f3258889c10a9a38958a4cac5ad3f059c3d29df4c838d77c72c7b9bf42439676543d027d6105631e894351d61e05b4753eb5cbae37b6323a09ce54911486603783709bb75d7c730a4b26dbf4098fcec4b", 0x1000, 0x2}, {&(0x7f0000001100)="7066d530d76d7111a97cf8978990802b126720948a23818907f56b63d3d4ee14c4245eb7561525bff2051c3bd8e3e631d6f3f71e602967", 0x37, 0x6}], 0x800, &(0x7f0000001180)={[{@nodots}], [{@fsname}, {@dont_measure}]}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x180) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) openat(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x101800, 0x1b1) 20:19:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x10, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x0) close(r0) 20:19:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001300)) 20:19:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x6c000000) 20:19:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x74000000) 20:19:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:19:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001300)) [ 286.817991][T27121] loop3: detected capacity change from 0 to 8 [ 286.839106][T27121] FAT-fs (loop3): Unrecognized mount option "fsname=" or missing value 20:19:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x84800c, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2d1ee37) ftruncate(r1, 0x0) close(r0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x0) [ 286.889772][T27137] FAT-fs (loop4): bogus number of reserved sectors [ 286.896489][T27137] FAT-fs (loop4): Can't find a valid FAT filesystem [ 286.922977][T27142] loop3: detected capacity change from 0 to 8 20:19:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x120) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001340)={0x0, 0x3, 0x7ff, 0x80}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001300)) 20:19:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ext2\x00', 0x388189c, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x2, 0x0) [ 286.970911][T27142] FAT-fs (loop3): Unrecognized mount option "fsname=" or missing value 20:19:09 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x3, 0x3, 0x68e, 0x8520, 0x4, "638a88435fdda5e8ea05b57e7eaab85fdee897", 0x3}) 20:19:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000