0x7f0000002d80)=[@hoplimit={{0x14}}], 0x18}}, {{&(0x7f0000002dc0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002e00)="34d3ae358c704cee97886b9f3c30337fe92e862bf110aa12b5bdb3af6e34e7574a11e7f499c2d806fc55222da61b3d50ab3c1676b9d2d5bb225a93221a1e4722bad10f54e1cc874c734cf7f3717695b67072b832213d55b0418cf4004df7824edd77c8b462b51dfd5d950cde8f93", 0x6e}, {&(0x7f0000002e80)="96a15261048d08ae73ef5726dbf5b1718ea22f5b901200bf994e397f92d46fbfccaff87e65dd01668b0afb1841b8347ae2516c9b36950ad09f5f5be586e32728e52010e56ec43919d4f3f5bab281fdb4ab522932c4895b9c90a5bbbec2e2b32d2a85bf240f25ced2755c90dfd2d6bbb7c4e6bba30b33d236b90eaa11379ed697c3b7a56d3850047fdcab17e9288660f1ab167ebac6470d02a6471c8715c7aa3966b48b2da5e595cdf1e17605aea72fd8ec36f652f354a15a172e693ce8e8b7f3c29b2716e10e16c056fde6b3acc5f5", 0xcf}, {&(0x7f0000002f80)="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", 0xfe}, {&(0x7f0000003080)="dd14dec3d3d2807ba85c4ec098bc37bb01ef7d39c38e521e32ea62b687fc33", 0x1f}, {&(0x7f00000030c0)="eeb8dc7572ae311bba659c34c62f88b9303b4b479f196c4c9cc07a8f12c9ca0015f160c236aa7cd5841a884645042deb4b1f21182ce4743de290a82cf603a94e732c4c92f67a916f78af50e90185eda6b36edeceba3e0034299a7e71bb7920f2781ab6146e04b3191f6e45f71b0412c7c3b3a1c11976992500f609c6b87d41e9d67031ea80e5a515adec87519244c927e80e493640ea8d799a301902edf0c06125961d507ee16e7fabee6feed89d344c1976bff16f79956c0a76e93b85a31456e0efdc8ee91f728069b4de683e8dde792e", 0xd1}], 0x5, &(0x7f0000003240)=[@rthdr={{0x28, 0x29, 0x39, {0x5e, 0x2, 0x2, 0xb4, 0x0, [@remote]}}}, @dstopts={{0x130, 0x29, 0x37, {0x0, 0x22, '\x00', [@generic={0x2, 0xe9, "6aa32fbd406caf3bf18149fc7fdf0aaada34f9959c1c3c8761731966bcaabeeb785dd94a9351d22b1922dc5a8a5279b1db0155048f8215b729abd817d5475ea9ea5741ca155c8681425d2a3f45e7f3b1e7d8f6f1308ee9f07b03cba27cffbe93ddb50ddd264a8e6110a37233475f89061f83769dd1b9ae78e38815fe1923b975063822644f3d905131950f8d48be6c170f366ffb1d972ba47fa4faea70723a055aa7e5f3debbec01e347f679c2c93a3ff2c54b814237306ec36c7d822d269170086a0d2d01b712fb13583a7aec380fb09fc71ae72dff0beb5d78c4ee7c3642a12a5d9f3c0c4fa4cc88"}, @jumbo={0xc2, 0x4, 0xe0}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x170}}, {{&(0x7f00000033c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c, &(0x7f00000034c0)=[{&(0x7f0000003400)="0e", 0x1}, {&(0x7f0000003440)="3563de6dfadf6938e324584656c03c6ff193fe494334953d899ceaa7c8d95147a50263d294428332db6403d43911e3d13bad792dc2b7244df2847ff1726dc5f87072795b11bee9cad3ad7f8efea2726c20371760cc", 0x55}], 0x2, &(0x7f0000003500)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x3f}, @hao={0xc9, 0x10, @private2}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x3f, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x62, 0x1e, '\x00', [@generic={0x3, 0xf2, "aa8fb5e5983841949624218a7c73f8d3170dda1cee1bad528549c4c710f0f4b7882d474e351f66b627473f0a8cc35de2e996af5d958191bccf1010450f9c4bfc95c4c48b740c3297df6281453322252956ac32282cd80947d8f83f81da56e12280145f57c4727397602dc9fa708ce15912e955ef11c976d7533eadedc3b2590346f8da29d92663ad6b3e66d97994afa9718dc257e73c6a90337c8004e56e120d86c3cc2f5b430e7e1446dd66d7cab5b5242a3db4ae2e3eddebca9e4303c34c862ae1c5245e00f940daa4c770afba2d18f5231bfb724ebc8544bb34a6d29a7318c5f3a95d2616a112d229823e4a8f8c3a0932"}, @pad1]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2e, 0x12, 0x2, 0x6, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x20, 0x0, [@local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x4, 0x4, 0x1, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty]}}}], 0x288}}, {{&(0x7f00000037c0)={0xa, 0x4e21, 0xb9b4, @empty, 0x6}, 0x1c, &(0x7f0000003b00)=[{&(0x7f0000003800)="57b005831a10c94c27908042db6fbf9bcc64aae1edab824b1216fd9862140984c9c7a402", 0x24}, {&(0x7f0000003840)="4fc190e503f5f4b03c533f40ff022271be2bf062c4ea7ca557b97c49965b6ef9fd62ad33acb7e6191795d68b613609a42eb59bf7ce0d60fa50b3f6a46430b77751435e57249df08599635b3fdb1620a0f1911297e90f3cd0c38309101ceedc216b276fbbd0ab12da1557a9778b8473713c98c9228d4b17c598d851afd6b8632e364ae604444f69c1110f04daedc277b005224e4f2bf280b0e33511d58441923b39774875e6d980fa2f34c7c1d4ec233ebe4c2e16cad5c9c2b76d03aa672317a391e9fac7470e6d39b1db5d01c85ac963a21a4492e4050edb4a7d097f432ccc81cfeb222b394ad73d8904ba324ab63d36f2a2", 0xf2}, {&(0x7f0000003940)="6eb3790673c4a42cbc438ca4cb2675545cd487a0e5f7909e7317c04c62aae6d514bf6b889092ec2dc3b47b750424cb8b9d11e052c3f8e3220fef1da36fef708a94f351aa4a11569047a51cb2b579682629516e7964fad30a3bfa6d2c766e9c0bd3cb2f63852efa83dfda6c271b72d7bc481036109d28d180cca80939614b8bb743face5f5a13dd1d5d1ee789018b727fb362b8d86a01d4ed2048ef69407cff75d8765f58577aa88133", 0xa9}, {&(0x7f0000003a00)="d338b00c6db661478832c99a44e142680faaed29e59573b1ca030f47aea52689c2f94b7e2f825187192abc6a4ccc333bc71622f806b6c8a6c2aa8a34b1a379c3684bd1bb0364caacf9126511cb73993b8eed6472f2e576e0284e2ae290a173572e51bb70bed39b33ed13d7cbdb96a45a24c4ffc32856899d62a3c596a533486f2fe91b7320a26d65f68eaf1c64960bd8dbb2fa969690353802c87bfe33d83b4533f0314bfa548f1d0ff5f3433bc9f12fc9b211ca3b32d6384008fc5ee92e492ebd5b719100840882a2c52dfca5509998187e36c239ed67ef8d", 0xd9}], 0x4, &(0x7f0000003b40)=[@hopopts_2292={{0x68, 0x29, 0x36, {0x2b, 0x9, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x400, [0x4, 0x0, 0x2, 0xfff, 0x3, 0x2]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x98}}, {{&(0x7f0000003c00)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x27a}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003c40)="037d22cc5a7261c8c7d8aa9c974dac62a89c12b877c33cb44800becf96a6a407ac118303d33ef3ec14aba8ea221605cf5fbf85441c9039818b0836987bfbe37f278e54eb0b0d31620765fa646b205f09d663b3c2cd2081fbedea6e75d1dce8e665f7fb07eb456dd41939f23413323b69cade18f799a0ff735a03e2", 0x7b}], 0x1}}], 0x6, 0x804)

01:57:14 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x600, 0x806000)

[  131.008549][ T9945] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  131.017028][ T9945] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  131.067365][ T9950] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  131.075838][ T9950] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:14 executing program 2 (fault-call:8 fault-nth:24):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:14 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:14 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f00000005c0)=@in={0x2, 0x4e24, @private=0xa010102}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)="0b8d72e7b656eb330aa469528b554c0c27cf3b14934ada7650133c8737444145ab62a114e1a02aec5eb089da17abeaddc52738c3d4571fedcbf23c126f1b5e0445e82e74fc2f9ed480a6b4d3b2", 0x4d}], 0x1, &(0x7f0000001740)=[{0xb0, 0x116, 0x4650, "7f7a5d600be861f05a9e134eaa33d7eef56262d8af29975d22b8010c919c4ead8d665ce791b3f0cd81aa547b685821599261063a56b52b7a1b964338714db5b8a7a00867f21a93b6ef06374ac59d25fb3f2af23b2dba783225645d6ce07fd61978706c54de7edba1c197d8396d1549a52e2ee003059641d20dc5e43f4865a9fc44f031c2ac1b951c923a31bf2738e0a36a04669f204a1242cc3ea4"}, {0x1010, 0x116, 0x6, "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"}, {0x88, 0x114, 0x8, "09ae3c9bd57c9c3620595a33f980f32c5ed599336b6dcc8c47a25120c79df0c2e716696f3c3b81c9c32bf4d3eeb87cc8848f44ef2ef2b53f21861ed3f83837db7bf602c790c4182999ba6ab30e5733767698c93e9b192576c88108191117b9923b4ea8ba5f343124757d5e0a178d18ec682760871d4bb2"}], 0x1148}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000028c0)="c9ca078ba8ec1093e68c951ad9f5475024292133ba0a2a7403e413b64a729ce8175a8f3bda896e7a095d7af618eab1863ff01269b00cd004d3899ccdb9af01257c4a731ba636583fc4143d917089755468e990829a1877f7e1965b4859f5b99d464e901879527ab25a32591a0121223e7d763b64973f9271f71c0eb6dc976cea96037f6e77641fae2ca3e38572d513bed7688bfed45d19fd813e00a1d65ec362be2e452d8809f39d3d909a633ab2b548ea20b002c9c08514dca66d3484434f71088c2f35ac5e631b", 0xc8}], 0x1, &(0x7f00000029c0)=[{0x1010, 0x10b, 0x1, "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"}, {0x50, 0x112, 0x2, "74454b5fbc56d237fe3892ae6844dd634851d0b037f88aaba0d8b273bbd2a1ec7e47c1e84bd6ea30657e12ca481661c35f591897793af6106abaf8"}], 0x1060}}, {{&(0x7f0000003a40)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003ac0)="c20f3ea17d44d0846b792be41e425d7db1bdf29f45ee81d87f1346b46d0deddbdf91326ceba76c38b6e7a41ac73ffc71270bfcf5c32c5afb9c5213efa8fd96858fc5df911fb335681bc8c44848485102460efdb3b91a1a22ed01538a13533ebbc396557063bab77c48199a35d23de2eac838d34e0ef70cfaf948a3ebd4cd8505c528cad2881df92bcc27a3d5921c8c0cd46d5adf8c9e07f4514f987b4e79aa3b399f21ccdb88f3adca94ba4d364d63009178f483f053b7356b4fd1ec36e85df49dbad985a9463a", 0xc7}, {&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)="9169f9314ce218562f83f0cfbc75a3f72936ae814b8a0136cb790dfd4b569c9327ce5bdd49b9f62e727550d0e6d31e1074447eca7a48c2e60283f8bc55e70e1ca1", 0x41}, {&(0x7f0000004c40)="cee9f7ed82b58e622bade2ec38a74d992c1157acf87a7c2060f3f9f5a38057f320421f1c0cf43b48192dfc2aff9bcd422717e9520c2719d77a2ca5d80b8815d633cbdcb7a2785cfabc01565ae104b91d53a5de726603e0", 0x57}, {&(0x7f0000004cc0)="6e236bd022bd1952930038e34ba0abc9aec343c9a57a", 0x16}, {&(0x7f0000004d00)="0dcf69931be5c257665b1858e982888f2ef858332a49dfc971056d6219234c58a83d8dfa69cc08b0998117100d8783167014d6638127af26df63ed7c35c49cd41827e85a2a42207d63baa2ea4b91d508ffd3ff94824e7a29166fe87a6714ac7d09ed733f0954d15e55038cf6dbf10175b78f4fbe28f97239334b1e", 0x7b}, {&(0x7f0000004d80)="b1842b1368067fe03059bacd1bfe1393ffac2cb86dfd616e0447015978818db75f5bef74588b1eae6f3e1543beeb3c9322eb7534625d5a73ab2661de0e079d3f9fca301bd48b53e0f68df4a5be3261b642c20368a68a46cade2c69f4d7d1a0136edc8d65dfb5d83856cf15b6de5c6519a4e3799435e1b194cfb1a13bb692fcc2c30fa1d6c85ccc6456fe3f349c3441a2657bf667f258aee2f6ee7ad8833094b33ed44324c46b1833c29abd717a23", 0xae}], 0x7, &(0x7f0000004ec0)=[{0x48, 0x108, 0x5, "ee26213881aabc205c8409c948b774439faa4e86f238d0e1392c6f708564b8e3aefe07b38fdf5498b2dfe4ad0e2a81363d48e5a493"}, {0x1010, 0x117, 0x7, "dbfe9d1fb28b8db07dedc3ef3a0af7eabe63d3b639ec07d964f69969ca94d854d2811af11571aa8e33e72c79b9948946d96b53a9cd70d0b58a73642847945267674cf14036c69558b7ef4260a8b10f3f4d2f3aeb505636cd3ca56ca57226ff0601382488ada97929c4866163df2dd9fbcea3ca2ea08a0b5b5f42f442e0851b4208bd037888777150dcf3105542a58dc4552192aab23ee1e01c95121075fa6181fedb01df5b598cb7871e81c9d2db88cefa02ed5963608ff576bb81bf28198a1d7bc22b9877a1c16eafeeebba74ccec3e560511e43a8b15aaf503a725b493f77ab70d452588fe6d459f4bcd475532ddcb14fc07e7893c1e0e4cf1e5092e8dd89c87a3a06109f0ecf220b2f0a88216efa076f30faaa636a1fdc554514417ea30d64dacdf097bd6c020014c50c4aceb113b0e746c6582ea7aa962327cafc733bda0b5c1e5bbbe7aedd9a3fdb26e7c18f3a86bf442cd32383b4ce806ae6a591bea428a6bdda19a02db61e1a5abec85a280bad31c37371cac56a5e13283c2d1e475da54462457e5ffe6facfb8cd13f050c43186c6a9400baa62e7843e516bc8eecbeea2632930e9520911fcf02165f16b875526bd0d63969d1b8f202ea8c794b107f1c3d1d48e6dd13c1c5a567059f77ee9a0d35a1e91b21b853b03e4d09d4e437d8d7a0c970ea6fe9ab680bd5f748a0b9236ae534186c7ed7a64ad91a37b2a4c2157a3972c9c9bc7106233105cfe3cf127960d02c79c450539d7fdc391a6269c01258f9d15482b51f3c25a4a5d1b8dce5e7476f8fb65fcb3a6a2592ebcc14a10a4f5e90d7c1ff4623f135c41172abdf2b5f4defea68a4e085e13d0e2b3c0ad830dcfa70813f559c0e8b93aabf6e9745105a9a55e22168da1dc3f587b0e76805df6523ced0d4da9c63b898c0dab3d575b2a4e46a8f0f2c8b6b5706d34e014a843b82c7d7806e007a1031ad7c69efa1dd72e191ddd4f7987201f45b66996938cf171888e4b46bb0c0fc7df16819188f56dacd5948d007418782d9b5f4f9851df13c1f15dd6d2a708236b612f143a1343db07d2af0db64a4c87dfb74b92cdd56eec8c9012b0329cdf53a502822e5b7656b31a1c5a91f190fc2abc871db5cf8418c60ea358399b3e3e0774e9c6e97d067212da572aa18150d340fbe8c6026f12ae85491581bb1d846469f946ed267612f427dcb9f1f1f4055c13718b04424b46b7968e3d977e5faf7b3afa7fc6c18b35d79d2484c2b6b2ba2cfabeae0d8bf00dd3a527535585679eec4ec1dd8ca93fba61919805c7a853903824709dbc09bd737015fbe0102b63ae6cb68f596e20a35c2d9beb2320bf45391843edec208531f8150819b885fb7fe97c628101ea61551b360cac45a5c682626863b4a8119a44636c6b48011cb9e5e574ff73fc542c6289a1a34448b80617de516b0af0a0808002020fc9aa36d83da09d5698dba86df8bf40f541b34e1f13c83afae3c6302af6f0275da4deee2e1f5e62394717de8e0ec7030166e2fe77ca4d5ac34277ce9787cc49efa05564c2af274e6ef77ca52676fa1e40bcf868c342e572decda6d891a1a15e167f7f501e8d90cd6d75a59c61408837df2c9c3f5f1ba5b5b512f8425867b1d1d9c2b322d7fede0b1fbc18f86ba67edc321a9e4b51ea635193f01a0c496b8acb0587821243c847f37737cddfd4337b652609dadeb7b6b1b6cbc9603b21e050df3b6a922b34b59ff901fc2897166fa5491bb1bf16a8110d8a58a1da7cf9d7d5792c5fe833b3132c29a4ed41b6bdd79bbe97ba8ea90dacae9c2a70e13134410acc5ad0c1c0bee71e7f5585e1b73f7b9dd93028e7878552c4c0bd9b4f443e0084b0b27ed0fe94db20d801daf948c2b2ec5dd433396ceea338d78fd5a66676dfeddac4f3c4b9d01ed371c624728c08abcaa751c250621a0dfcaf2d25430f73fbe4e6abd1cea89b5f223917e14fd53308f8547932d91142af8aba89f4935a6ce5584e468384d5db9e59ac2a9ed9e2c05ed9c3ac30ec54a427d11f0707821a677d550325479c5a69d54fcd4ad9de40825b5fb2a7be78730749245a64033c0f2a1aeb11f363a1593e6731ecb14a9021c657b8ee03c02d48deefe199b7af09b38824434b716e07447e46fe5b4b362d83bcb339671231279086444b509a41aa4a733048b0ba77cbba0cbb19642b83de01d4906fa6b87df08106f8ff616c41a567e83790a6f3e9aee3076fcf2642be86b0995a36915df7249781f643848caaec938c261e57a6d650f351d417374a8c29d3c90081911e0cabcbd0af6f3e7cb6c5f30c0aadd971fcf8299fbbaa524809cdb008323cda285e1feebc649a1d1cde127acb243056f958210830a011c302a1d2226834e85ab52881fca028f81cefa16d706a8ca8c9640294af04cb763f1684ada890629b96bf1eb05f9c4f472e9bf1b270e224ba7531270f9701971691d00a9f9d4fb252cb3d90a30074e31de7feaa8ce888772891b0b7e30547bdfa0056cfa7745a060075650fba592fe198914c654376ee467e3fee94446b59cd37c38867217e7eee956eba94568271be72e42d8cbe00e22570aa114ba82536a5f1015e94d9bcd78e81ab58b20056f414f928c81c3a80886fd363f1452ad7aaae20e771ce60a96a28e4b612357f5d9fff7041a72cbe5d14d3cddb61e0cd6ab2ee2ec5c35e6d046ea9e4dd0259837e7b647c67ee974e0cb08de3ee58f95db3c9dc3c9cf71626d42cb882048a32c40fab6978a198a9084902560fad4d7ae1521a7399be41622d751b3533f98bb464afbc007ba465599420a4754947678ec64bbfbf885f0febc6e678da7833a80a3852468b52a08664640c82a801984ec2657e9ecd904785d88d4c46623bd5c29d0c872d18dc0208d9ea0ff2af0926bc016a242e7fafe26b2ba6c6d24ef926fe67084bb47d289cc6c5764b98690089d15bed94eaa3ab242ebdad85589a13746b3e948714183fa9b0684861e01ad9f21a60f77e9cf270455ef6a0f733c2d7e69519d6b11cf6ffba291b18d4d9b2d99f2dddf08c18b8649cc4862d93ee837a85595261d362b2509b0669c5563cfe4fd8c7b03c8bed4b8bbe267548e866e71f40e67d90dfaa0d60c846e3a9b3fb4b1028dada2515e4c2a1c22ec17cd14984e82dbaf845b1018ab2167506553a80c90fa5f584dd046a6752c3ad33099d53e05071a5877c83af59dca53d2165910aa831728bc91269f2584f54415986cd406b02b7c0d0be06a697ea7fe8f348f8d8ee2b9fd7574c1053a358f387b5827b718e46c9456c60077376ad4ad31d9c89ea8cc32a4d0dfe0ae2ca0ff9a66662c6feea343d19755c6278078aaacebaa635fd812cc42b4e43db440f19967958dca368e18f3e02d5b927603484bcaba16d8f3eb201c57bd9842f7e53ba87214a9997c36f2193338460614b8b9c922883870fb85e2e8bd00178987953b4ae2fe0269ce4bdaaa78bc707319fe77353db61f5d1573a4a108611553b8dcaf5d296a68c14dbdf02225e5a37c515550449eeec1e91a5175f4a0e8762f8a02f4f7574e20ac3e364a611ff79025968e6cf415afc3fba2a37cea96a033b465febf6d3bc64f6924a8cadbba44fd8bed26af9e7fd4aa288234f184f31a222d97a40552ce11668642d0ce8b7533c060910ce48bd4d1cd627f1bbd5ad580cb81fc6fcd5bd359903146463c06b35865f4496346a955d0b72e56eff8383007ff3fb30084e10825c07ec983856ee6137d570f42111216f6367cf5372084c406dfae7a60f17f0e852673fdd37d9ff2c832538ada7f0804c98963200c3f9f2ee21184a05f6afca4fd509dfaaccd299c965898cb1b8fd6517784106b6beb0c5078245a4240f2cd1497c5829932e20df295cc271328c851eedaf7b66c7b47f2f004ee7507d79f2c9d01c7f0d151f9cb89d705bc4abf1ca56df393946c2333d6dc23c04efa4f3a5f5b6a2e4a6a24978b526fbe3e654c0b43cb76617f1dd5ab48895ca65bd81742d28a87a1cec0d0c7dd348775424632c56ca323750e82d3cb2de3b314071716391f6f057b92907412c7b35d58f6779a2a213df9a2b0ebd95d54b3448ef529ce589abeee4d8b35171b64453bf869a921b883603ca54e0dbc4d82e45ae4828144c1499d7f2dfd95d993c4db8a0746e5d545aeb0e84db52cca161270d2b8e0702bda097e6af5e941d350112684a8491518fa07e85f60b0660d690fee80d40cd9bca4e76bdf31baae846fdb39ac1aaa6d9a9ccd773b60b96dc94f49bb9ad8c41c5ec14a66987463ed6e848b3b460b033db190b1a4d572c386b43aa6dba1508d4185fa0fa3605d61e046ddbc835c96da4d617468157ab733be0ec5afec67b3671b049924be3447af3d1df7d13e3cd8f7b1285bd1c14c70bc2036c568c5bab70f453b2a1cbad3dfb344dd44db2573e8aa95841a4ecf23011e360d6ea977f701bee536f765f77d62d769a6b507a9b0d06c2bd96cd86f6916dfc0369c1e8e6769800dbe8476a4d6c2f81edc47b2c6b4cb858f75c0a61b5ad19d0953346945a71c03b6a33118f8512993fb58c0c97ad6d6f243c6c53fea25994cd94a0b801925b46b4999fa023da8de3a33fb7c5f236bd7e34eeadecbed925c36e1cf1923d2094a950b5f099b42adbf6e9cdb593211fdee63ae8b56c603e00ba4701cfdb36d5ccaab62a8be45bf05637d7043edd74d244a1ba8d15c4b773780c8ddcb432e34b7a6d91b303e990fdafd5066a01cc845b89ec69fd366780fa5eaa42a8510f7d62cb1d0df5044f8d3994d420e1a025f3fcb66f1be61e098104e784bd688b4210ee5c2d2e9dfd365b8fd6d6b32dd98b109362566faf08ac2dc58fc80bd04ef4e64401ca8737ebbe7500127d7a08803d09603a9afb2c32b379a19e555cbe9fa2b75dabbd2abc8853fbb86ed72111c2ae7c69e9d83add0d46f12ab12057d58ad741df9dc00c0ac61842e27b0de53f4be40bc118f6d8cf22d6a4ed2f6dbf6717e60aa07ee693810347c3b0b9ff2107583f4bde950207a510dca839052dc28a2fdca14caee6e8f7894c53109d94d77c02e24381595efc46cb096a51fc5c98ae953cc58213113d84db8c82ab8f22f5d3da68cda5f520463a7fdb5d470945b19b5f9d8632e8cab15512dcd108419c802bf004c4dd12fef927001f9ce565cc40648c0de009058b887b86193f86db05882b445377d95b000446e47f8e070312b7a088d7528bcad307b942538f72408399ea4d62d7b3d47cdd0df407d33d0cd480e75f0c98b5d02feeaecefd61b79dd3a3300c52faf5e755156b6175452bca5238f7fb592eed85d82caa546cbec75727bac22604734ee5607da3d74d0ed35078104f0033ca815a18d1c1168c24101cb15a83e343515759d7ddef8c65fc71ca8994544eed99bc9fd06d3ab79f61bbd245e34e97c68a0ebbd223544b88efada46b28773504749fc70ef79be6eee4f735a09b5073877283004700eb719a66a76efd3fe6661888614e46d637d43405383df213662f80bd641822b367c2731bd1c2889e500627d99188c929840c5c10f31d3cd17e4101e024abbf199e3f3d8cb89369e23d5d289ef147edb3072f747c3ddc0a7cb86d0c33db7833d13d21c24eed1d822beafacbc4a2d0e272e15d824168122cb6210d53094f24ec150db84f02483b5b3c2e721c40572316f213a2bc041b027e8011820ced9044f587345682324e8f62f809b60c4975196d9869614d4d2151ca80908c0a93051c56440374902ec265796ffa269ba1fd1483936642881e6b48eb9a5603cb568295daae7b80a8ca13dc2a1b6d26d8a528cec8"}, {0x50, 0x116, 0x1000, "c68d95a0dd1a728bdc1465f407b3367e27f16993c90332354a1fa790059726b1f71e6455ebe6137d6e0a66007c4243d0cd6b4b001a3cb41683b9669a05a1324a"}], 0x10a8}}], 0x3, 0x4000000)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000008c00000036ee07bbb944b502178d2083d14e271667a119a2fe12c40efcaf4ec3276ad0804e170c22191c6080b7aeb56382bd930a1f06dd375fecb2a3a9e44bc4643af94fcd852badb621bdbde444fa214133e8c1201f52531ecbf0f73c7bd4c2c5e47a9dfbd033876adb88e66fbcbb713db9d3669edfaeb731d1bb2c5822aec0f830d367080d00004817ba80fe45"], &(0x7f00000000c0)=0xb0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r2 = gettid()
ptrace(0x10, r2)
syz_open_procfs(r2, &(0x7f0000000540)='net/rfcomm\x00')
recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000140)=""/106, 0x6a}], 0x3}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendto$inet(r0, &(0x7f0000000480)="6f3da657529d068da218e0c60c175169d0b385aa737eb528575bb6a887671f630003d14841816b13f5a4f86f17635a1eaabf8633a7142d85856157376fdcffca4f08e207ec8642ada6201aa46f55ec514b87efff40cfdda54545e8abbb9c9492b15bb9", 0x63, 0x4, &(0x7f0000000500)={0x2, 0x4e24, @empty}, 0x10)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:14 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x11, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:14 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1100, 0x806000)

01:57:14 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=' ', 0x1}, {&(0x7f0000000440)="583749b90f186c20590c7fe522ebcba6ac818752ae8fbc0e0826e426143dcac9a0b420f9aae3bfccb8bdf1b70c68326a14852fc431708561dc9c0b85d10a890ef21e7237a5317bf1b4c3f42f1295d043a9414e2847e25febf714758c24bec1bb87c2ebc136b9c52b5dacc2e86196959413e21319148f668e5fcf948ef0ce31b3faa79bf2d2871ad9bf50ad474963c5733f028c6558e4b47e", 0x98}, {&(0x7f00000005c0)="e4e4ae0e3b083374b2854bd5dae298bce80c095974e1c004d0d806c64dea36a1de16353706161aa7cd30f34b43fd9a82125bf501112e777b7cd2ef541722fbc4951bf57016abb35822e166959094be0d1def19281de28318befb4afb4a2ca1ab410c72f002a7a7a49c9ab2fd5b6d2062041ea265c64ff25645320111391bf11a46bc436d27405643802307dcd52f124234e12a36b7b11cf65b351f0331b073e77e247490f33704a4909a837c782a241cd9348bf0aeda6c1b6c8efaaf7e1db1f71ea7ca922bf9327e0503ee78ea102e2d40daceb043201f1121d945bf386b674177a5613fab6ab9e50baa5b653cfc8e1d416c0950586eed62", 0xf8}], 0x3}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x8, 0x0, "322e18d19803fc39966db57fa6be1216771b0823326e6091117113612ebc70c2f95c70839c1a865eaab204e42098d30cad3282cf6a1883ca0ffffd028c6bcfed5ab8bf39442d1f9ff29df8a57464037a"}, 0xd8)

01:57:14 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=' ', 0x1}, {&(0x7f0000000280)="fb207830c1b073a94a42dcb209944c6a37f793011bd4b2707d073be630e3224ccc6b3776f68721b70fd748e059dc03430d84665d56099dfe9653652223a85dbf2522f6b6bea883d6d8b2b131254b5ef31380a86012faf036f6d05a9f3cea1e4bc610747f8de21436614903c14798efa1d6187fe58f865557b5181043bd566254332cbc97b6403b2fa0a1626804ca24495df32c19f6cedc6b90aeb61e698e3127f5a426f1ee4e0f1d9b64b678db7e630fbba76b04b19581cedc62ec901fef8d81df82949478012ab7f5db79abd811c8bc2871822d1d522096f23d6c360fbb99a2", 0xe0}, {&(0x7f0000000080)="0c9d5a720f36fe61b82d496a104360c0bad289d772f17fc3a7f6a741c6a8290cf820c36713b70683fa9786689c34e77c0666c8b502aea361d4678d78f0694fbfeb37", 0x42}, {&(0x7f0000000140)="820141d7924e5b9896cbd2638854801ef7b48a0c0c1991e7a51f8539df61b2ceb4c5c5de6e2cacad8b4b299a23e77e0e680d00a93ce6eef71805", 0x3a}, {&(0x7f0000000440)="661a4c2e9418f4de0ce54ed0f407c1934b38c9285e7c3716083d1250a18c0353367558bacf0f221d5d784c0d99fa465b81f32793a546fa1fe0d121808de528915336adc478dd65dba2906036b32a607fefea55ab0edc61b5d0b4c373a68b9e0a70e76697a3d5a327e78ae81b1641162575df939b04bd94808f93f8beaa25ed84de368662b0686a191a3ae79f46e2277dba3b9e9488f1ab58c1b4dc4e9cca0a3f008f8d90626f0c", 0xa7}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="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", 0xfe9}, {&(0x7f0000000380)="4b6f69f41236bacd01dea6d93c40b82cadc284e3bd244411273629815a63638513bec6d5f66714b249604afa7a86e56594f00f5726faa8e285476a301a752d8500adfe16ea71c0d8ac6620e29cc08aadd70d53e97f7b00d940d385376df000d2e8dff0c255f9ce2854baa69a08810f4f", 0x70}], 0x8}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  131.218665][ T9966] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  131.227075][ T9966] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  131.257692][ T9968] FAULT_INJECTION: forcing a failure.
[  131.257692][ T9968] name failslab, interval 1, probability 0, space 0, times 0
[  131.270478][ T9968] CPU: 0 PID: 9968 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  131.279188][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  131.289325][ T9968] Call Trace:
[  131.292634][ T9968]  dump_stack+0x137/0x19d
[  131.297039][ T9968]  should_fail+0x23c/0x250
[  131.301464][ T9968]  ? mempool_alloc_slab+0x16/0x20
[  131.306516][ T9968]  __should_failslab+0x81/0x90
[  131.311283][ T9968]  should_failslab+0x5/0x20
[  131.315877][ T9968]  kmem_cache_alloc+0x46/0x2f0
[  131.320650][ T9968]  mempool_alloc_slab+0x16/0x20
[  131.325506][ T9968]  ? mempool_free+0x130/0x130
[  131.330190][ T9968]  mempool_alloc+0x8c/0x300
[  131.334683][ T9968]  ? ext4_es_insert_extent+0x1825/0x19d0
[  131.340335][ T9968]  ? iov_iter_npages+0x211/0xa00
[  131.345256][ T9968]  bio_alloc_bioset+0xcc/0x480
[  131.350019][ T9968]  iomap_dio_bio_actor+0x511/0xb50
[  131.355116][ T9968]  iomap_dio_actor+0x26e/0x3b0
[  131.359945][ T9968]  iomap_apply+0x1e2/0x400
[  131.364346][ T9968]  __iomap_dio_rw+0x5af/0xad0
[  131.369161][ T9968]  ? __iomap_dio_rw+0xad0/0xad0
[  131.374012][ T9968]  iomap_dio_rw+0x30/0x70
[  131.378328][ T9968]  ? ext4_file_write_iter+0x4e1/0x11d0
[  131.383771][ T9968]  ext4_file_write_iter+0xa04/0x11d0
[  131.389041][ T9968]  ? ext4_file_write_iter+0x4e1/0x11d0
[  131.394528][ T9968]  ? rw_verify_area+0x136/0x250
[  131.399365][ T9968]  vfs_write+0x69d/0x770
[  131.403586][ T9968]  ksys_write+0xce/0x180
[  131.407863][ T9968]  __x64_sys_write+0x3e/0x50
[  131.412432][ T9968]  do_syscall_64+0x4a/0x90
[  131.416844][ T9968]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  131.422778][ T9968] RIP: 0033:0x4665d9
[  131.426667][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  131.446316][ T9968] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.454706][ T9968] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
01:57:14 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x900, 0x806000)

[  131.462659][ T9968] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  131.470610][ T9968] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  131.478586][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.486538][ T9968] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:14 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)

01:57:14 executing program 1:
socket$inet6(0x10, 0x3, 0x20000)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000280)="71eed8d52e0af0b6f609520aa500f9c376aebd1ab0a38b432e10189a23e23bf284dc7cb393da8df670d09438d2bd762f14b2318f934ef883c20f61c0b33103181ec3acbfcd205eec7f9175664c5ed689494ec7c8cf1b9798c5a41f2bdddc4134ed89c5508e20609f3e1240376e9605a50cd4b6957a4c22d1a310df2499d9946e1e51d424478e2bf50e70aad3662449e623252a84fa1a098a9d971a0973713ead80852d94bffd8010f455427da59851f84118bc04", 0xb4)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  131.515899][ T9976] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  131.524268][ T9976] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:14 executing program 2 (fault-call:8 fault-nth:25):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:14 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x12, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:14 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1200, 0x806000)

01:57:14 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x9)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x11, r0, 0x6687a000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:14 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000007c0)="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")
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, &(0x7f00000006c0)="81ff98765d254747daf3a14f3752aecfe480dcdceb9bece4bd9f8a9472414b2047527b8f1e538cc26999c1e788216170fdc35293a165a9c369fb07599ee03c5120535df2b262689956b1e8da370f62c56011983b93520fca3ec60ea0df7c89a2e9e30ceabe744509912353cb865ae2c4a93df597b33fb3fb5bd92f42cb15c7e23693fc4f049d2af7b84d492fe5fc26b9f3db852ec070f4c6fa81b73c2c2386ffac87799ed6404b564eac7848c5bdcd5ac31e4a738142e5ea406ccfa673f0e606f4effdba229f6498d8e9a076d81830895cef279620dcea661b1f99deb9368b8c33e70bb978087b8061f9ee038caa", 0xee, 0x4000, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e60, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="204ea5c53bfef9aaad2e450239d7b0b3ebe7e09370fe21e60874ff4e22d3a3720260647170198d4be953a3537508006c047b4bc0f3e99ce84cf7d6c8000000000000000000", 0x45}], 0x1}, 0x81)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x5, &(0x7f0000000340), 0x4)
recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f00000005c0)=""/246, 0xf6}], 0x2}, 0x740)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x160e)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x2, 0x3ff, 0x9, 0x7f}, 0x14)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000000280)=0x4)

[  131.654915][ T9991] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  131.663327][ T9991] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  131.686825][ T9989] FAULT_INJECTION: forcing a failure.
[  131.686825][ T9989] name failslab, interval 1, probability 0, space 0, times 0
[  131.699457][ T9989] CPU: 0 PID: 9989 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  131.708207][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  131.718263][ T9989] Call Trace:
[  131.721544][ T9989]  dump_stack+0x137/0x19d
[  131.725873][ T9989]  should_fail+0x23c/0x250
[  131.730395][ T9989]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  131.735673][ T9989]  __should_failslab+0x81/0x90
[  131.740441][ T9989]  should_failslab+0x5/0x20
[  131.745062][ T9989]  kmem_cache_alloc+0x46/0x2f0
[  131.749851][ T9989]  ext4_mb_new_blocks+0x2e7/0x1f90
[  131.754959][ T9989]  ? bh_uptodate_or_lock+0x57/0xf0
[  131.760099][ T9989]  ? ext4_get_branch+0x28e/0x2e0
[  131.765020][ T9989]  ext4_ind_map_blocks+0xaab/0x1620
[  131.770199][ T9989]  ? ext4_es_lookup_extent+0x206/0x490
[  131.775642][ T9989]  ext4_map_blocks+0x6d2/0xef0
[  131.780387][ T9989]  ? ext4_iomap_begin+0x3e2/0x620
[  131.785397][ T9989]  ? __cond_resched+0x11/0x40
[  131.790130][ T9989]  ext4_iomap_begin+0x4a3/0x620
[  131.794969][ T9989]  iomap_apply+0x8d/0x400
[  131.799293][ T9989]  __iomap_dio_rw+0x5af/0xad0
[  131.803962][ T9989]  ? __iomap_dio_rw+0xad0/0xad0
[  131.808804][ T9989]  iomap_dio_rw+0x30/0x70
[  131.813199][ T9989]  ? ext4_file_write_iter+0x4e1/0x11d0
[  131.818665][ T9989]  ext4_file_write_iter+0xa04/0x11d0
[  131.823960][ T9989]  ? ext4_file_write_iter+0x4e1/0x11d0
[  131.829469][ T9989]  ? rw_verify_area+0x136/0x250
[  131.834352][ T9989]  vfs_write+0x69d/0x770
[  131.838615][ T9989]  ksys_write+0xce/0x180
[  131.842839][ T9989]  __x64_sys_write+0x3e/0x50
[  131.847412][ T9989]  do_syscall_64+0x4a/0x90
[  131.851812][ T9989]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  131.857697][ T9989] RIP: 0033:0x4665d9
[  131.861595][ T9989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  131.881247][ T9989] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.889652][ T9989] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  131.897618][ T9989] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
01:57:14 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0xe3, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:15 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1300, 0x806000)

01:57:15 executing program 2 (fault-call:8 fault-nth:26):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  131.905607][ T9989] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  131.913753][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.921796][ T9989] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  131.936049][ T9991] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  131.944532][ T9991] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:15 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000280)="ea1ad045b518d3309616606ac17ce6d0d4a629a91e99b4c4c96b3479a769e56b3ef811d27ee56c796b83d626a08b23ca384603fafc33a905dd63b0335483275914fad6db5c729697b5fa36000758", 0x4e, 0x10044000, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x9, 0x1, 0x0, 0xfffffffe, 0x7f}}, &(0x7f0000000140), 0x400)

[  132.064921][T10019] FAULT_INJECTION: forcing a failure.
[  132.064921][T10019] name failslab, interval 1, probability 0, space 0, times 0
[  132.077694][T10019] CPU: 1 PID: 10019 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  132.086456][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  132.096525][T10019] Call Trace:
[  132.099787][T10019]  dump_stack+0x137/0x19d
[  132.104160][T10019]  should_fail+0x23c/0x250
[  132.108558][T10019]  ? mempool_alloc_slab+0x16/0x20
[  132.113646][T10019]  __should_failslab+0x81/0x90
[  132.118466][T10019]  should_failslab+0x5/0x20
[  132.123003][T10019]  kmem_cache_alloc+0x46/0x2f0
[  132.127881][T10019]  mempool_alloc_slab+0x16/0x20
[  132.132710][T10019]  ? mempool_free+0x130/0x130
[  132.137442][T10019]  mempool_alloc+0x8c/0x300
[  132.141923][T10019]  ? ext4_es_insert_extent+0x1825/0x19d0
[  132.147550][T10019]  ? iov_iter_npages+0x211/0xa00
[  132.152571][T10019]  bio_alloc_bioset+0xcc/0x480
[  132.157530][T10019]  iomap_dio_bio_actor+0x511/0xb50
[  132.162648][T10019]  iomap_dio_actor+0x26e/0x3b0
[  132.167474][T10019]  iomap_apply+0x1e2/0x400
[  132.172018][T10019]  __iomap_dio_rw+0x5af/0xad0
[  132.176690][T10019]  ? __iomap_dio_rw+0xad0/0xad0
[  132.181577][T10019]  iomap_dio_rw+0x30/0x70
[  132.185910][T10019]  ? ext4_file_write_iter+0x4e1/0x11d0
[  132.191440][T10019]  ext4_file_write_iter+0xa04/0x11d0
[  132.196718][T10019]  ? ext4_file_write_iter+0x4e1/0x11d0
[  132.202162][T10019]  ? rw_verify_area+0x136/0x250
[  132.206999][T10019]  vfs_write+0x69d/0x770
[  132.211218][T10019]  ksys_write+0xce/0x180
[  132.215518][T10019]  __x64_sys_write+0x3e/0x50
[  132.220088][T10019]  do_syscall_64+0x4a/0x90
[  132.224483][T10019]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  132.230385][T10019] RIP: 0033:0x4665d9
[  132.234269][T10019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  132.254048][T10019] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:15 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xc00, 0x806000)

01:57:15 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x13, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:15 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0xf5c, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000535000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0)

01:57:15 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000000280)=[{&(0x7f0000000140)="1ebfecf4a00b111df86f91ed6a675e8c4d05c520b71de63d935c5abf149bf387f48c0f6b2ce51fb51ead5c01595f8c7888becad00190c479c47ce41d52159b803c12baec8722a3", 0x47, 0x4}], 0x80c02, &(0x7f0000000380)=ANY=[@ANYBLOB="73686f72746e616d653d00006e39352c756e697f0000007465000000006e695f786c7174653d310000cc0100d52a189af8a8e666477a3ca4f3b0934db301577ad777553a6e5b718e5589f4b977443883a4114f0000"])
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @c}})
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  132.262521][T10019] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  132.270470][T10019] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  132.278438][T10019] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  132.286478][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.294430][T10019] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:15 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000440)=""/141, 0x8d}], 0x3, 0x9, 0x9)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:15 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "766eeb39b132241775b9d432c08eeed338c41ec8415f7622ae205264df17d5ac0148d7656ee58f66138fe6bf2ed7ff9fd726ecf3afc2abe56d66a26c08a1a5e1cdafcc2eb9cd8c5b8babb55e8745d4d2e8d111e2ab268d7514af4c1ba15c45400c6c52a76a7dbe892aec06e369b94f8223895e"}, 0x77)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x8, 'batadv_slave_1\x00', {'batadv_slave_0\x00'}, 0x7})
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$FIONCLEX(r2, 0x5450)

[  132.345282][T10028] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  132.353786][T10028] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:15 executing program 2 (fault-call:8 fault-nth:27):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:15 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1400, 0x806000)

01:57:15 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000041c0)=0x101, 0x4)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:15 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x280000, 0xa8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f0000001740)=""/243, 0xf3}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000440)=""/154, 0x9a}], 0x5, 0x53d6, 0xeb)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='net_prio.prioidx\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340), 0x4)
recvfrom$inet(0xffffffffffffffff, &(0x7f00000006c0)=""/99, 0x63, 0x10002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)

[  132.435968][T10039] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  132.444670][T10039] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  132.477246][T10042] FAULT_INJECTION: forcing a failure.
[  132.477246][T10042] name failslab, interval 1, probability 0, space 0, times 0
[  132.489924][T10042] CPU: 1 PID: 10042 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  132.498684][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  132.508731][T10042] Call Trace:
[  132.512005][T10042]  dump_stack+0x137/0x19d
[  132.516365][T10042]  should_fail+0x23c/0x250
[  132.521697][T10042]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  132.526979][T10042]  __should_failslab+0x81/0x90
[  132.531755][T10042]  should_failslab+0x5/0x20
[  132.536256][T10042]  kmem_cache_alloc+0x46/0x2f0
[  132.541077][T10042]  ext4_mb_new_blocks+0x2e7/0x1f90
[  132.546190][T10042]  ? bh_uptodate_or_lock+0x57/0xf0
[  132.551286][T10042]  ? ext4_get_branch+0x28e/0x2e0
[  132.556207][T10042]  ext4_ind_map_blocks+0xaab/0x1620
[  132.561431][T10042]  ? ext4_es_lookup_extent+0x206/0x490
[  132.566882][T10042]  ext4_map_blocks+0x6d2/0xef0
[  132.571743][T10042]  ? ext4_iomap_begin+0x3e2/0x620
[  132.576758][T10042]  ? __cond_resched+0x11/0x40
[  132.581415][T10042]  ext4_iomap_begin+0x4a3/0x620
[  132.586302][T10042]  iomap_apply+0x8d/0x400
[  132.590612][T10042]  __iomap_dio_rw+0x5af/0xad0
[  132.595288][T10042]  ? __iomap_dio_rw+0xad0/0xad0
[  132.600255][T10042]  iomap_dio_rw+0x30/0x70
[  132.604662][T10042]  ? ext4_file_write_iter+0x4e1/0x11d0
[  132.610141][T10042]  ext4_file_write_iter+0xa04/0x11d0
[  132.615495][T10042]  ? ext4_file_write_iter+0x4e1/0x11d0
[  132.620943][T10042]  ? rw_verify_area+0x136/0x250
[  132.625797][T10042]  vfs_write+0x69d/0x770
[  132.630031][T10042]  ksys_write+0xce/0x180
[  132.634310][T10042]  __x64_sys_write+0x3e/0x50
[  132.638894][T10042]  do_syscall_64+0x4a/0x90
[  132.643295][T10042]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  132.649268][T10042] RIP: 0033:0x4665d9
[  132.653156][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
01:57:15 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x25, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  132.672765][T10042] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.681166][T10042] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  132.689122][T10042] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  132.697092][T10042] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  132.705132][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.713116][T10042] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:15 executing program 2 (fault-call:8 fault-nth:28):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:15 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd00, 0x806000)

01:57:15 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x7253, 0x0, 0x20, 0x8}, {0x4, 0x7f, 0x2, 0x4}, {0x401, 0x5a, 0x5, 0x8000}, {0x200, 0xff, 0x0, 0x4}]}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:15 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  132.794712][T10056] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  132.803175][T10056] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  132.819289][T10056] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  132.827328][T10056] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000048de945b
[  132.848756][T10060] FAULT_INJECTION: forcing a failure.
[  132.848756][T10060] name failslab, interval 1, probability 0, space 0, times 0
[  132.861404][T10060] CPU: 1 PID: 10060 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  132.870168][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  132.880241][T10060] Call Trace:
[  132.883528][T10060]  dump_stack+0x137/0x19d
[  132.887857][T10060]  should_fail+0x23c/0x250
[  132.892270][T10060]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  132.897558][T10060]  __should_failslab+0x81/0x90
[  132.902380][T10060]  should_failslab+0x5/0x20
[  132.906949][T10060]  kmem_cache_alloc+0x46/0x2f0
[  132.911694][T10060]  ext4_mb_new_blocks+0x2e7/0x1f90
[  132.916833][T10060]  ? bh_uptodate_or_lock+0x57/0xf0
[  132.921930][T10060]  ? ext4_get_branch+0x28e/0x2e0
[  132.926849][T10060]  ext4_ind_map_blocks+0xaab/0x1620
[  132.932030][T10060]  ? ext4_es_lookup_extent+0x206/0x490
[  132.937588][T10060]  ext4_map_blocks+0x6d2/0xef0
[  132.942363][T10060]  ? ext4_iomap_begin+0x3e2/0x620
[  132.947397][T10060]  ? __cond_resched+0x11/0x40
[  132.952103][T10060]  ext4_iomap_begin+0x4a3/0x620
[  132.956958][T10060]  iomap_apply+0x8d/0x400
[  132.961273][T10060]  __iomap_dio_rw+0x5af/0xad0
[  132.965932][T10060]  ? __iomap_dio_rw+0xad0/0xad0
[  132.970770][T10060]  iomap_dio_rw+0x30/0x70
[  132.975195][T10060]  ? ext4_file_write_iter+0x4e1/0x11d0
[  132.980690][T10060]  ext4_file_write_iter+0xa04/0x11d0
[  132.986041][T10060]  ? ext4_file_write_iter+0x4e1/0x11d0
[  132.991489][T10060]  ? rw_verify_area+0x136/0x250
[  132.996366][T10060]  vfs_write+0x69d/0x770
[  133.000586][T10060]  ksys_write+0xce/0x180
[  133.004829][T10060]  __x64_sys_write+0x3e/0x50
[  133.009463][T10060]  do_syscall_64+0x4a/0x90
[  133.013881][T10060]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  133.019764][T10060] RIP: 0033:0x4665d9
[  133.023640][T10060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
01:57:16 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1500, 0x806000)

[  133.043327][T10060] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.051720][T10060] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  133.059718][T10060] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  133.067678][T10060] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  133.075643][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  133.083645][T10060] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:16 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
sendto$inet(r0, &(0x7f0000000080)="07be46208ebbc32c2863c16f4a715c8256af727d2fa767f921b8e57f85afe107babb710a02bace11a0e6df68fbde5a0396aa1089ba", 0x35, 0x10, &(0x7f00000000c0)={0x2, 0x4f21, @private=0xa010102}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:16 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
r3 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x800)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x810, 0x8, 0x0, 0x7ff, 0x1ba}, 0x14)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  133.122736][T10072] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  133.131132][T10072] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:16 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x27, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:16 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @multicast2}, {0x1}, 0x30, {0x2, 0x4e21, @rand_addr=0x64010102}, 'tunl0\x00'})
mmap(&(0x7f000009d000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x14fc7000)
preadv(r0, &(0x7f0000002900)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000002740)=""/223, 0xdf}, {&(0x7f0000002840)=""/173, 0xad}], 0x9, 0x4, 0x6a75)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:16 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = signalfd4(r1, &(0x7f0000000280)={[0x3f]}, 0x8, 0x800)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x7, 0x40)
mknodat(r3, &(0x7f0000000300)='./file0\x00', 0x100, 0x4)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept4(r4, &(0x7f0000000140)=@nfc, &(0x7f00000000c0)=0x80, 0x800)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, '+'}, {}], 0xa, "93439a8e79a867"}, 0x15)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  133.260465][T10081] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  133.268976][T10081] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:16 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xe00, 0x806000)

01:57:16 executing program 1:
socket$inet6(0x10, 0x80000, 0xffffffff)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3e54}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000540)={0x0, 0x6}, 0x8)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080), 0x4)
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/69, 0x45}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}], 0x6, 0xd9f, 0x0)

[  133.318138][T10081] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  133.326245][T10081] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
01:57:16 executing program 2 (fault-call:8 fault-nth:29):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:16 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)='lo\x00', 0x7, 0x3, 0x6})
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1800003, 0x20010, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:16 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1600, 0x806000)

[  133.365383][T10081] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  133.373410][T10081] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000c9386e61
[  133.510489][T10099] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  133.519023][T10099] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  133.527907][T10100] FAULT_INJECTION: forcing a failure.
[  133.527907][T10100] name failslab, interval 1, probability 0, space 0, times 0
[  133.543014][T10100] CPU: 1 PID: 10100 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  133.551794][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  133.561844][T10100] Call Trace:
[  133.565107][T10100]  dump_stack+0x137/0x19d
[  133.569747][T10100]  should_fail+0x23c/0x250
[  133.574152][T10100]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  133.579446][T10100]  __should_failslab+0x81/0x90
[  133.584413][T10100]  should_failslab+0x5/0x20
[  133.588933][T10100]  kmem_cache_alloc+0x46/0x2f0
[  133.593779][T10100]  ext4_mb_new_blocks+0x2e7/0x1f90
[  133.598873][T10100]  ? bh_uptodate_or_lock+0x57/0xf0
[  133.603996][T10100]  ? ext4_get_branch+0x28e/0x2e0
[  133.608942][T10100]  ext4_ind_map_blocks+0xaab/0x1620
[  133.614125][T10100]  ? ext4_es_lookup_extent+0x206/0x490
[  133.619638][T10100]  ext4_map_blocks+0x6d2/0xef0
[  133.624392][T10100]  ? ext4_iomap_begin+0x3e2/0x620
[  133.629450][T10100]  ? __cond_resched+0x11/0x40
[  133.634108][T10100]  ext4_iomap_begin+0x4a3/0x620
[  133.639058][T10100]  iomap_apply+0x8d/0x400
[  133.643371][T10100]  __iomap_dio_rw+0x5af/0xad0
[  133.648031][T10100]  ? __iomap_dio_rw+0xad0/0xad0
[  133.652905][T10100]  iomap_dio_rw+0x30/0x70
[  133.657344][T10100]  ? ext4_file_write_iter+0x4e1/0x11d0
[  133.662786][T10100]  ext4_file_write_iter+0xa04/0x11d0
[  133.668145][T10100]  ? ext4_file_write_iter+0x4e1/0x11d0
[  133.673585][T10100]  ? rw_verify_area+0x136/0x250
[  133.678616][T10100]  vfs_write+0x69d/0x770
[  133.682859][T10100]  ksys_write+0xce/0x180
[  133.687093][T10100]  __x64_sys_write+0x3e/0x50
[  133.691663][T10100]  do_syscall_64+0x4a/0x90
[  133.696144][T10100]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  133.702125][T10100] RIP: 0033:0x4665d9
[  133.706000][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  133.725617][T10100] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.734182][T10100] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  133.742220][T10100] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  133.750209][T10100] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
01:57:16 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', <r3=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private1, @in=@local, 0x4e20, 0x0, 0x8, 0x2, 0x2, 0xa0, 0xb0, 0xfd, r3, 0xffffffffffffffff}, {0x4, 0x200, 0x4, 0x35c, 0x2d, 0x4, 0x0, 0x9}, {0x3523, 0x5, 0x3, 0x8}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x33}, 0xa, @in6=@empty, 0x3503, 0x3, 0x0, 0x0, 0x9b, 0x0, 0x3}}, 0xe8)

01:57:16 executing program 2 (fault-call:8 fault-nth:30):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:16 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f0000002740)=""/162, 0xa2}, {&(0x7f0000002800)=""/228, 0xe4}], 0x7, 0x5, 0x1000)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000003c0))
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
recvfrom(r3, &(0x7f0000000280)=""/172, 0xac, 0x123, &(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x80)

01:57:16 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  133.758185][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  133.766313][T10100] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  133.850406][T10116] FAULT_INJECTION: forcing a failure.
[  133.850406][T10116] name failslab, interval 1, probability 0, space 0, times 0
[  133.863152][T10116] CPU: 0 PID: 10116 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  133.871941][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  133.882195][T10116] Call Trace:
[  133.885488][T10116]  dump_stack+0x137/0x19d
[  133.889888][T10116]  should_fail+0x23c/0x250
[  133.894305][T10116]  ? mempool_alloc_slab+0x16/0x20
[  133.899360][T10116]  __should_failslab+0x81/0x90
[  133.904118][T10116]  should_failslab+0x5/0x20
[  133.908705][T10116]  kmem_cache_alloc+0x46/0x2f0
[  133.913508][T10116]  mempool_alloc_slab+0x16/0x20
[  133.918358][T10116]  ? mempool_free+0x130/0x130
[  133.923035][T10116]  mempool_alloc+0x8c/0x300
[  133.927583][T10116]  ? iov_iter_npages+0x211/0xa00
[  133.932515][T10116]  bio_alloc_bioset+0xcc/0x480
[  133.937281][T10116]  iomap_dio_bio_actor+0x511/0xb50
[  133.942400][T10116]  iomap_dio_actor+0x26e/0x3b0
[  133.947164][T10116]  iomap_apply+0x1e2/0x400
[  133.951585][T10116]  __iomap_dio_rw+0x5af/0xad0
[  133.956256][T10116]  ? __iomap_dio_rw+0xad0/0xad0
[  133.961144][T10116]  iomap_dio_rw+0x30/0x70
[  133.965663][T10116]  ? ext4_file_write_iter+0x4e1/0x11d0
[  133.971175][T10116]  ext4_file_write_iter+0xa04/0x11d0
[  133.976486][T10116]  ? ext4_file_write_iter+0x4e1/0x11d0
[  133.981956][T10116]  ? rw_verify_area+0x136/0x250
[  133.986809][T10116]  vfs_write+0x69d/0x770
[  133.991051][T10116]  ksys_write+0xce/0x180
[  133.995350][T10116]  __x64_sys_write+0x3e/0x50
[  133.999943][T10116]  do_syscall_64+0x4a/0x90
[  134.004461][T10116]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  134.010432][T10116] RIP: 0033:0x4665d9
[  134.014406][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  134.034119][T10116] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.042530][T10116] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
01:57:17 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendto$inet(r0, &(0x7f0000000080)="5e9a0fcbc3a8da20dff7c49065d91d0564e3650d98b68cfebc8561690704a3d650e068073b86de822383dda93e7ff31ebc76452557aa052cc10a9387", 0x3c, 0x80, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  134.050499][T10116] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  134.058563][T10116] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  134.066529][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.074516][T10116] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  134.087245][T10119] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
01:57:17 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf00, 0x806000)

01:57:17 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf00, 0x806000)

01:57:17 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1700, 0x806000)

01:57:17 executing program 2 (fault-call:8 fault-nth:31):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  134.095719][T10119] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:17 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000000c0)=0x7fffffff, 0x4)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
pipe2(&(0x7f0000000140)={<r3=>0xffffffffffffffff}, 0x84800)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x27, 0x0, "dd76a0b620bf954ab223337e56b6abf62cdd54d232ce5820a7c934108165f0cd1e9705cca6c6455e3564a4cb37e47e965e2e9ff490b5bd8af41cc76966187f1a84a8069bf7f271b0900b72249de95507"}, 0xd8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002740)=""/4104, 0x1008}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000080))

[  134.194665][T10135] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  134.203053][T10135] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  134.233965][T10136] FAULT_INJECTION: forcing a failure.
[  134.233965][T10136] name failslab, interval 1, probability 0, space 0, times 0
[  134.246815][T10136] CPU: 1 PID: 10136 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  134.255633][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  134.265854][T10136] Call Trace:
[  134.269124][T10136]  dump_stack+0x137/0x19d
[  134.273513][T10136]  should_fail+0x23c/0x250
[  134.277923][T10136]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  134.283200][T10136]  __should_failslab+0x81/0x90
[  134.288013][T10136]  should_failslab+0x5/0x20
[  134.292541][T10136]  kmem_cache_alloc+0x46/0x2f0
[  134.297322][T10136]  ext4_mb_new_blocks+0x2e7/0x1f90
[  134.302495][T10136]  ? bh_uptodate_or_lock+0x57/0xf0
[  134.307639][T10136]  ? ext4_get_branch+0x28e/0x2e0
[  134.312706][T10136]  ext4_ind_map_blocks+0xaab/0x1620
[  134.317902][T10136]  ? kcsan_setup_watchpoint+0x26e/0x470
[  134.323523][T10136]  ? ext4_es_lookup_extent+0x206/0x490
[  134.329048][T10136]  ext4_map_blocks+0x6d2/0xef0
[  134.333796][T10136]  ? ext4_iomap_begin+0x3e2/0x620
[  134.338802][T10136]  ? __cond_resched+0x11/0x40
[  134.343461][T10136]  ext4_iomap_begin+0x4a3/0x620
[  134.348296][T10136]  iomap_apply+0x8d/0x400
[  134.352608][T10136]  __iomap_dio_rw+0x5af/0xad0
[  134.357265][T10136]  ? __iomap_dio_rw+0xad0/0xad0
[  134.362155][T10136]  iomap_dio_rw+0x30/0x70
[  134.366483][T10136]  ? ext4_file_write_iter+0x4e1/0x11d0
[  134.371986][T10136]  ext4_file_write_iter+0xa04/0x11d0
[  134.377264][T10136]  ? ext4_file_write_iter+0x4e1/0x11d0
[  134.382708][T10136]  ? rw_verify_area+0x136/0x250
[  134.387544][T10136]  vfs_write+0x69d/0x770
[  134.391838][T10136]  ksys_write+0xce/0x180
[  134.396061][T10136]  __x64_sys_write+0x3e/0x50
[  134.400723][T10136]  do_syscall_64+0x4a/0x90
[  134.405137][T10136]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  134.411126][T10136] RIP: 0033:0x4665d9
[  134.415004][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  134.434594][T10136] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:17 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @mcast1, 0x3}, 0x1c)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

01:57:17 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  134.442983][T10136] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  134.450947][T10136] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  134.458898][T10136] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  134.466849][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.474802][T10136] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:17 executing program 2 (fault-call:8 fault-nth:32):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:17 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf0, 0x806000)

[  134.556177][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  134.564808][T10147] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  134.597169][T10153] FAULT_INJECTION: forcing a failure.
[  134.597169][T10153] name failslab, interval 1, probability 0, space 0, times 0
[  134.609820][T10153] CPU: 1 PID: 10153 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  134.618703][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  134.628753][T10153] Call Trace:
[  134.632031][T10153]  dump_stack+0x137/0x19d
[  134.636415][T10153]  should_fail+0x23c/0x250
[  134.640820][T10153]  ? mempool_alloc_slab+0x16/0x20
01:57:17 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1100, 0x806000)

01:57:17 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1800, 0x806000)

[  134.645837][T10153]  __should_failslab+0x81/0x90
[  134.650609][T10153]  should_failslab+0x5/0x20
[  134.655119][T10153]  kmem_cache_alloc+0x46/0x2f0
[  134.659886][T10153]  mempool_alloc_slab+0x16/0x20
[  134.664736][T10153]  ? mempool_free+0x130/0x130
[  134.669417][T10153]  mempool_alloc+0x8c/0x300
[  134.673925][T10153]  ? ext4_es_insert_extent+0x1825/0x19d0
[  134.679572][T10153]  ? iov_iter_npages+0x211/0xa00
[  134.684508][T10153]  bio_alloc_bioset+0xcc/0x480
[  134.689497][T10153]  iomap_dio_bio_actor+0x511/0xb50
[  134.694691][T10153]  iomap_dio_actor+0x26e/0x3b0
[  134.699432][T10153]  iomap_apply+0x1e2/0x400
[  134.704033][T10153]  __iomap_dio_rw+0x5af/0xad0
[  134.708691][T10153]  ? __iomap_dio_rw+0xad0/0xad0
[  134.713522][T10153]  iomap_dio_rw+0x30/0x70
[  134.717912][T10153]  ? ext4_file_write_iter+0x4e1/0x11d0
[  134.723354][T10153]  ext4_file_write_iter+0xa04/0x11d0
[  134.728637][T10153]  ? ext4_file_write_iter+0x4e1/0x11d0
[  134.734196][T10153]  ? rw_verify_area+0x136/0x250
[  134.739158][T10153]  vfs_write+0x69d/0x770
[  134.743461][T10153]  ksys_write+0xce/0x180
[  134.747824][T10153]  __x64_sys_write+0x3e/0x50
[  134.752493][T10153]  do_syscall_64+0x4a/0x90
[  134.756924][T10153]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  134.763191][T10153] RIP: 0033:0x4665d9
[  134.767069][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  134.786671][T10153] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:17 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x2, 0x4)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x319, 0x20801)
getsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  134.795171][T10153] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  134.803248][T10153] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  134.811322][T10153] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  134.819288][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.827271][T10153] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:17 executing program 0 (fault-call:6 fault-nth:0):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  134.852844][T10167] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  134.861252][T10167] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:17 executing program 2 (fault-call:8 fault-nth:33):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:17 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x60, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:17 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
recvfrom(r2, &(0x7f0000000280)=""/185, 0xb9, 0x101, 0x0, 0x0)

[  134.962768][T10178] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  134.971147][T10178] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  134.988918][T10171] FAULT_INJECTION: forcing a failure.
[  134.988918][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.002063][T10171] CPU: 1 PID: 10171 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  135.010820][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  135.020961][T10171] Call Trace:
[  135.024237][T10171]  dump_stack+0x137/0x19d
[  135.028558][T10171]  should_fail+0x23c/0x250
[  135.032974][T10171]  should_fail_usercopy+0x16/0x20
[  135.037990][T10171]  _copy_from_user+0x1c/0xd0
[  135.042579][T10171]  io_submit_one+0x42/0x1350
[  135.047248][T10171]  ? asm_exc_page_fault+0x1e/0x30
[  135.052267][T10171]  ? __get_user_4+0x1c/0x30
[  135.056770][T10171]  __se_sys_io_submit+0xf5/0x260
[  135.061782][T10171]  __x64_sys_io_submit+0x3f/0x50
[  135.066712][T10171]  do_syscall_64+0x4a/0x90
[  135.071130][T10171]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  135.077022][T10171] RIP: 0033:0x4665d9
[  135.081078][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.100682][T10171] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
01:57:18 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4f20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x449, 0x1000, 0x80, 0x6, 0x101}, 0x14)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:18 executing program 0 (fault-call:6 fault-nth:1):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  135.109182][T10171] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  135.117170][T10171] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  135.125156][T10171] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  135.133124][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.141083][T10171] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  135.167446][T10179] FAULT_INJECTION: forcing a failure.
[  135.167446][T10179] name failslab, interval 1, probability 0, space 0, times 0
[  135.180086][T10179] CPU: 1 PID: 10179 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  135.188852][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  135.198962][T10179] Call Trace:
[  135.202313][T10179]  dump_stack+0x137/0x19d
[  135.206649][T10179]  should_fail+0x23c/0x250
[  135.211219][T10179]  ? mempool_alloc_slab+0x16/0x20
[  135.216693][T10179]  __should_failslab+0x81/0x90
[  135.221516][T10179]  should_failslab+0x5/0x20
[  135.226096][T10179]  kmem_cache_alloc+0x46/0x2f0
[  135.230858][T10179]  mempool_alloc_slab+0x16/0x20
[  135.235707][T10179]  ? mempool_free+0x130/0x130
[  135.240410][T10179]  mempool_alloc+0x8c/0x300
[  135.245056][T10179]  ? ext4_es_insert_extent+0x1825/0x19d0
[  135.250777][T10179]  ? iov_iter_npages+0x211/0xa00
[  135.255701][T10179]  bio_alloc_bioset+0xcc/0x480
[  135.260474][T10179]  iomap_dio_bio_actor+0x511/0xb50
[  135.265684][T10179]  iomap_dio_actor+0x26e/0x3b0
[  135.270435][T10179]  iomap_apply+0x1e2/0x400
[  135.275026][T10179]  __iomap_dio_rw+0x5af/0xad0
[  135.279889][T10179]  ? __iomap_dio_rw+0xad0/0xad0
[  135.284814][T10179]  iomap_dio_rw+0x30/0x70
[  135.289310][T10179]  ? ext4_file_write_iter+0x4e1/0x11d0
[  135.294834][T10179]  ext4_file_write_iter+0xa04/0x11d0
[  135.300310][T10179]  ? ext4_file_write_iter+0x4e1/0x11d0
[  135.306351][T10179]  ? rw_verify_area+0x136/0x250
[  135.311352][T10179]  vfs_write+0x69d/0x770
[  135.315578][T10179]  ksys_write+0xce/0x180
[  135.320009][T10179]  __x64_sys_write+0x3e/0x50
[  135.324638][T10179]  do_syscall_64+0x4a/0x90
[  135.329303][T10179]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  135.335345][T10179] RIP: 0033:0x4665d9
[  135.339237][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.358980][T10179] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.367469][T10179] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  135.375788][T10179] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  135.383882][T10179] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  135.392086][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.400170][T10179] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:18 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1200, 0x806000)

01:57:18 executing program 2 (fault-call:8 fault-nth:34):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:18 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1900, 0x806000)

[  135.507067][T10187] FAULT_INJECTION: forcing a failure.
[  135.507067][T10187] name failslab, interval 1, probability 0, space 0, times 0
[  135.519807][T10187] CPU: 0 PID: 10187 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  135.528747][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  135.537997][T10192] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  135.538891][T10187] Call Trace:
[  135.538904][T10187]  dump_stack+0x137/0x19d
[  135.547277][T10192] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  135.550522][T10187]  should_fail+0x23c/0x250
[  135.557210][T10195] FAULT_INJECTION: forcing a failure.
[  135.557210][T10195] name failslab, interval 1, probability 0, space 0, times 0
[  135.565841][T10187]  ? io_submit_one+0xb0/0x1350
[  135.587593][T10187]  __should_failslab+0x81/0x90
[  135.592373][T10187]  should_failslab+0x5/0x20
[  135.596904][T10187]  kmem_cache_alloc+0x46/0x2f0
[  135.601682][T10187]  io_submit_one+0xb0/0x1350
[  135.606261][T10187]  ? asm_exc_page_fault+0x1e/0x30
[  135.611271][T10187]  __se_sys_io_submit+0xf5/0x260
[  135.616228][T10187]  __x64_sys_io_submit+0x3f/0x50
[  135.621167][T10187]  do_syscall_64+0x4a/0x90
[  135.625611][T10187]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  135.631640][T10187] RIP: 0033:0x4665d9
[  135.635515][T10187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.655216][T10187] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  135.663645][T10187] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  135.671606][T10187] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  135.679599][T10187] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  135.687802][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.695799][T10187] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  135.703766][T10195] CPU: 1 PID: 10195 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  135.712539][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  135.722685][T10195] Call Trace:
[  135.725950][T10195]  dump_stack+0x137/0x19d
[  135.730299][T10195]  should_fail+0x23c/0x250
[  135.734713][T10195]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  135.740037][T10195]  __should_failslab+0x81/0x90
[  135.744833][T10195]  should_failslab+0x5/0x20
[  135.749451][T10195]  kmem_cache_alloc+0x46/0x2f0
[  135.754250][T10195]  ext4_mb_new_blocks+0x2e7/0x1f90
[  135.759381][T10195]  ? bh_uptodate_or_lock+0x57/0xf0
[  135.764528][T10195]  ? ext4_get_branch+0x28e/0x2e0
[  135.769485][T10195]  ext4_ind_map_blocks+0xaab/0x1620
[  135.774835][T10195]  ? ext4_es_lookup_extent+0x206/0x490
[  135.780365][T10195]  ext4_map_blocks+0x6d2/0xef0
[  135.785137][T10195]  ? ext4_iomap_begin+0x3e2/0x620
[  135.790852][T10195]  ? __cond_resched+0x11/0x40
[  135.795509][T10195]  ext4_iomap_begin+0x4a3/0x620
[  135.800371][T10195]  iomap_apply+0x8d/0x400
[  135.804689][T10195]  __iomap_dio_rw+0x5af/0xad0
[  135.809345][T10195]  ? __iomap_dio_rw+0xad0/0xad0
[  135.814291][T10195]  iomap_dio_rw+0x30/0x70
[  135.818697][T10195]  ? ext4_file_write_iter+0x4e1/0x11d0
[  135.824153][T10195]  ext4_file_write_iter+0xa04/0x11d0
[  135.829484][T10195]  ? ext4_file_write_iter+0x4e1/0x11d0
[  135.834971][T10195]  ? rw_verify_area+0x136/0x250
[  135.839807][T10195]  vfs_write+0x69d/0x770
[  135.844029][T10195]  ksys_write+0xce/0x180
[  135.848251][T10195]  __x64_sys_write+0x3e/0x50
[  135.852821][T10195]  do_syscall_64+0x4a/0x90
[  135.857285][T10195]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  135.863175][T10195] RIP: 0033:0x4665d9
[  135.867051][T10195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  135.886826][T10195] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.895250][T10195] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
01:57:18 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:19 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f00000001c0)=[{0xfc00, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendto$inet(r2, &(0x7f0000000280)="7567919b54af7151cfdc6b18458e791673757110184dc910ef14db5534be1d0b2da8dbf3d5bad0af31576a1ab2cb16e141531145a836671dd4d6a2151b64b6c7e181108f8a14f37763a89783a48c96e0291f901b8f5e430e725bd7bdfb50100dff659ad0ee14085fa84c4dfabe06e35a75d19e55a4ba43ea2ae4dd1db466cbf1edf423f7cceebb09807268de66e7a05fd213affdf59c3e3d1f28f07e863bb404cecfae166c1b37b95a409a61606e2d7389610750647b94b4bbdd4e30fc4c3db5c9aeb85af5c7403fa2e345a240f13ec17f0cc803572731f2a75fd7ea79cee12a2683051ab264cc3c4726a41f3e9358a3efcbb36fba5e330c", 0xf8, 0x40, 0x0, 0x0)
r4 = accept4(r2, &(0x7f0000000140)=@l2tp, &(0x7f0000000380)=0x80, 0x100800)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e23, 0x80000000, @mcast2, 0x5}, {0xa, 0x4e22, 0x1ff, @remote, 0x3}, 0x4, [0x9, 0x1, 0x2, 0x4, 0xff, 0xc17, 0x4, 0x3]}, 0x5c)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', <r5=>0x0, 0x20, 0x7, 0x200, 0x4, {{0x1b, 0x4, 0x3, 0x18, 0x6c, 0x64, 0x0, 0x73, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, {[@lsrr={0x83, 0x13, 0x1b, [@empty, @empty, @multicast2, @rand_addr=0x64010100]}, @cipso={0x86, 0x26, 0x2, [{0x0, 0x2}, {0x0, 0xd, "7686adb276d01c3580e186"}, {0x0, 0x11, "2776ecb7bd448db082477f864d6feb"}]}, @timestamp={0x44, 0x1c, 0xa1, 0x0, 0x2, [0x5, 0x9, 0xfffffffb, 0x98, 0x3, 0x7]}]}}}}})
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, r5}, 0xc)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:19 executing program 2 (fault-call:8 fault-nth:35):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  135.903205][T10195] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  135.911160][T10195] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  135.919112][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.927157][T10195] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:19 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000080)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000001740)=""/193, 0xc1}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000540)=""/1, 0x1}], 0x7, &(0x7f0000001840)=""/163, 0xa3}, 0x20292ad6}, {{&(0x7f0000001900)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000700)=[{&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000001a00)=""/143, 0x8f}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x6}, {{&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000002b40)=""/84, 0x54}, {&(0x7f0000002bc0)=""/221, 0xdd}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/183, 0xb7}, {&(0x7f0000004d80)=""/25, 0x19}], 0x6, &(0x7f0000004e40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e40)=@can, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005ec0)=""/249, 0xf9}, {&(0x7f0000005fc0)=""/250, 0xfa}], 0x2, &(0x7f0000006100)=""/26, 0x1a}, 0x800}, {{&(0x7f0000006140)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006340)=[{&(0x7f00000061c0)=""/3, 0x3}, {&(0x7f0000006200)=""/193, 0xc1}, {&(0x7f0000006300)=""/3, 0x3}], 0x3, &(0x7f0000006380)=""/38, 0x26}, 0x92}, {{&(0x7f00000063c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000006740)=[{&(0x7f0000006440)=""/119, 0x77}, {&(0x7f00000064c0)=""/195, 0xc3}, {&(0x7f00000065c0)=""/120, 0x78}, {&(0x7f0000006640)=""/210, 0xd2}], 0x4, &(0x7f0000006780)=""/203, 0xcb}, 0x81}], 0x6, 0x40010100, &(0x7f0000006a00)={0x77359400})

01:57:19 executing program 0 (fault-call:6 fault-nth:2):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  135.998296][T10204] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  136.006711][T10204] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  136.047018][T10209] FAULT_INJECTION: forcing a failure.
[  136.047018][T10209] name failslab, interval 1, probability 0, space 0, times 0
[  136.059973][T10209] CPU: 1 PID: 10209 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  136.068822][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  136.079131][T10209] Call Trace:
[  136.082411][T10209]  dump_stack+0x137/0x19d
[  136.086747][T10209]  should_fail+0x23c/0x250
[  136.091239][T10209]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  136.096612][T10209]  __should_failslab+0x81/0x90
[  136.101485][T10209]  should_failslab+0x5/0x20
[  136.106096][T10209]  kmem_cache_alloc+0x46/0x2f0
[  136.107935][T10204] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  136.111024][T10209]  ext4_mb_new_blocks+0x2e7/0x1f90
[  136.111049][T10209]  ? bh_uptodate_or_lock+0x57/0xf0
[  136.119117][T10204] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
[  136.124228][T10209]  ? ext4_get_branch+0x28e/0x2e0
[  136.124247][T10209]  ext4_ind_map_blocks+0xaab/0x1620
[  136.135640][T10204] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  136.140426][T10209]  ? ext4_es_lookup_extent+0x206/0x490
[  136.145372][T10204] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
[  136.150537][T10209]  ext4_map_blocks+0x6d2/0xef0
[  136.179658][T10209]  ? ext4_iomap_begin+0x3e2/0x620
[  136.184739][T10209]  ? __cond_resched+0x11/0x40
[  136.189400][T10209]  ext4_iomap_begin+0x4a3/0x620
[  136.194235][T10209]  iomap_apply+0x8d/0x400
[  136.198577][T10209]  __iomap_dio_rw+0x5af/0xad0
[  136.203236][T10209]  ? __iomap_dio_rw+0xad0/0xad0
[  136.208087][T10209]  iomap_dio_rw+0x30/0x70
[  136.212416][T10209]  ? ext4_file_write_iter+0x4e1/0x11d0
[  136.217857][T10209]  ext4_file_write_iter+0xa04/0x11d0
[  136.223126][T10209]  ? ext4_file_write_iter+0x4e1/0x11d0
[  136.228570][T10209]  ? rw_verify_area+0x136/0x250
[  136.233406][T10209]  vfs_write+0x69d/0x770
[  136.237635][T10209]  ksys_write+0xce/0x180
[  136.241878][T10209]  __x64_sys_write+0x3e/0x50
[  136.246533][T10209]  do_syscall_64+0x4a/0x90
[  136.251042][T10209]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  136.256941][T10209] RIP: 0033:0x4665d9
[  136.260834][T10209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  136.280448][T10209] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.288843][T10209] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  136.296902][T10209] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  136.304855][T10209] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  136.312809][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.320767][T10209] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  136.337970][T10215] FAULT_INJECTION: forcing a failure.
[  136.337970][T10215] name failslab, interval 1, probability 0, space 0, times 0
[  136.350625][T10215] CPU: 0 PID: 10215 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  136.359390][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  136.369465][T10215] Call Trace:
[  136.372735][T10215]  dump_stack+0x137/0x19d
[  136.377186][T10215]  should_fail+0x23c/0x250
[  136.381604][T10215]  __should_failslab+0x81/0x90
[  136.386715][T10215]  ? __iomap_dio_rw+0xf1/0xad0
[  136.391546][T10215]  should_failslab+0x5/0x20
[  136.396059][T10215]  kmem_cache_alloc_trace+0x49/0x310
[  136.401406][T10215]  ? ext4_xattr_security_get+0x2e/0x40
[  136.406857][T10215]  __iomap_dio_rw+0xf1/0xad0
[  136.411438][T10215]  ? __mark_inode_dirty+0x49c/0x6c0
[  136.416621][T10215]  ? __mnt_drop_write_file+0x5a/0x60
[  136.422237][T10215]  ? ext4_orphan_add+0x7a/0x5f0
[  136.427069][T10215]  ? file_update_time+0x3ae/0x3e0
[  136.432089][T10215]  iomap_dio_rw+0x30/0x70
[  136.436456][T10215]  ? ext4_file_write_iter+0x4e1/0x11d0
[  136.441966][T10215]  ext4_file_write_iter+0xa4f/0x11d0
[  136.447298][T10215]  ? ext4_file_write_iter+0x4e1/0x11d0
[  136.452764][T10215]  ? rw_verify_area+0x136/0x250
[  136.457596][T10215]  aio_write+0x287/0x360
[  136.461841][T10215]  ? kmem_cache_alloc+0x201/0x2f0
[  136.466891][T10215]  io_submit_one+0x82f/0x1350
[  136.471548][T10215]  __se_sys_io_submit+0xf5/0x260
[  136.476467][T10215]  __x64_sys_io_submit+0x3f/0x50
[  136.481386][T10215]  do_syscall_64+0x4a/0x90
[  136.485809][T10215]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  136.491762][T10215] RIP: 0033:0x4665d9
[  136.495647][T10215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  136.515234][T10215] RSP: 002b:00007f9648cb2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  136.523663][T10215] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  136.531764][T10215] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  136.539714][T10215] RBP: 00007f9648cb21d0 R08: 0000000000000000 R09: 0000000000000000
01:57:19 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1a00, 0x806000)

01:57:19 executing program 0 (fault-call:6 fault-nth:3):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:19 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1300, 0x806000)

01:57:19 executing program 2 (fault-call:8 fault-nth:36):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:19 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = memfd_create(&(0x7f0000000380)='*\'\x00', 0x3)
lseek(r2, 0x5000000000, 0x2)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000280)=""/161, 0xa1}], 0x2, &(0x7f0000001740)=""/4096, 0x1000}, 0x20)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  136.547664][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.555614][T10215] R13: 00007fff3c6d4f6f R14: 00007f9648cb2300 R15: 0000000000022000
[  136.570870][T10204] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  136.579247][T10204] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:19 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  136.728875][T10231] FAULT_INJECTION: forcing a failure.
[  136.728875][T10231] name failslab, interval 1, probability 0, space 0, times 0
[  136.730205][T10230] FAULT_INJECTION: forcing a failure.
[  136.730205][T10230] name failslab, interval 1, probability 0, space 0, times 0
[  136.741687][T10231] CPU: 0 PID: 10231 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  136.763187][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  136.773350][T10231] Call Trace:
[  136.776622][T10231]  dump_stack+0x137/0x19d
[  136.780956][T10231]  should_fail+0x23c/0x250
[  136.785411][T10231]  ? kcalloc+0x32/0x50
[  136.789461][T10231]  __should_failslab+0x81/0x90
[  136.794242][T10231]  should_failslab+0x5/0x20
[  136.798805][T10231]  __kmalloc+0x66/0x340
[  136.802976][T10231]  ? __crc32c_le_base+0x23a/0x330
[  136.807996][T10231]  kcalloc+0x32/0x50
[  136.811870][T10231]  ext4_find_extent+0x21c/0x7f0
[  136.816788][T10231]  ext4_ext_map_blocks+0xd9/0x1f00
[  136.821946][T10231]  ? __find_get_block+0x82c/0x900
[  136.826994][T10231]  ? __down_write_common+0x45/0x890
[  136.832178][T10231]  ? percpu_counter_add_batch+0x69/0xd0
[  136.837708][T10231]  ? ext4_es_lookup_extent+0x36b/0x490
[  136.843153][T10231]  ext4_map_blocks+0x70d/0xef0
[  136.847977][T10231]  ? ext4_iomap_begin+0x3e2/0x620
[  136.853118][T10231]  ? __cond_resched+0x11/0x40
[  136.857777][T10231]  ext4_iomap_begin+0x4a3/0x620
[  136.862609][T10231]  iomap_apply+0x8d/0x400
[  136.866917][T10231]  __iomap_dio_rw+0x5af/0xad0
[  136.871621][T10231]  ? __iomap_dio_rw+0xad0/0xad0
[  136.876464][T10231]  ? ext4_orphan_add+0x7a/0x5f0
[  136.881298][T10231]  ? file_update_time+0x3ae/0x3e0
[  136.886313][T10231]  iomap_dio_rw+0x30/0x70
[  136.890636][T10231]  ? ext4_file_write_iter+0x4e1/0x11d0
[  136.896080][T10231]  ext4_file_write_iter+0xa4f/0x11d0
[  136.901365][T10231]  ? ext4_file_write_iter+0x4e1/0x11d0
[  136.906809][T10231]  ? rw_verify_area+0x136/0x250
[  136.911645][T10231]  aio_write+0x287/0x360
[  136.915880][T10231]  ? kmem_cache_alloc+0x201/0x2f0
[  136.920899][T10231]  io_submit_one+0x82f/0x1350
[  136.925580][T10231]  __se_sys_io_submit+0xf5/0x260
[  136.930500][T10231]  __x64_sys_io_submit+0x3f/0x50
[  136.935416][T10231]  do_syscall_64+0x4a/0x90
[  136.939828][T10231]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  136.945727][T10231] RIP: 0033:0x4665d9
[  136.949603][T10231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  136.969374][T10231] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  136.977775][T10231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  136.985735][T10231] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  136.993699][T10231] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  137.001651][T10231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.009690][T10231] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  137.017683][T10230] CPU: 1 PID: 10230 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  137.026532][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  137.036578][T10230] Call Trace:
[  137.039912][T10230]  dump_stack+0x137/0x19d
[  137.044246][T10230]  should_fail+0x23c/0x250
[  137.046872][T10237] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  137.048762][T10230]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  137.057052][T10237] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  137.062314][T10230]  __should_failslab+0x81/0x90
01:57:20 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1b00, 0x806000)

[  137.078051][T10230]  should_failslab+0x5/0x20
[  137.082578][T10230]  kmem_cache_alloc+0x46/0x2f0
[  137.087400][T10230]  ext4_mb_new_blocks+0x2e7/0x1f90
[  137.092516][T10230]  ? bh_uptodate_or_lock+0x57/0xf0
[  137.097644][T10230]  ? ext4_get_branch+0x28e/0x2e0
[  137.102579][T10230]  ext4_ind_map_blocks+0xaab/0x1620
[  137.107756][T10230]  ? ext4_es_lookup_extent+0x206/0x490
[  137.113199][T10230]  ext4_map_blocks+0x6d2/0xef0
[  137.117941][T10230]  ? ext4_iomap_begin+0x3e2/0x620
[  137.122967][T10230]  ? __cond_resched+0x11/0x40
[  137.127688][T10230]  ext4_iomap_begin+0x4a3/0x620
[  137.132583][T10230]  iomap_apply+0x8d/0x400
[  137.136919][T10230]  __iomap_dio_rw+0x5af/0xad0
[  137.141701][T10230]  ? __iomap_dio_rw+0xad0/0xad0
[  137.146627][T10230]  iomap_dio_rw+0x30/0x70
[  137.151128][T10230]  ? ext4_file_write_iter+0x4e1/0x11d0
[  137.156601][T10230]  ext4_file_write_iter+0xa04/0x11d0
[  137.161976][T10230]  ? ext4_file_write_iter+0x4e1/0x11d0
[  137.167461][T10230]  ? rw_verify_area+0x136/0x250
[  137.172361][T10230]  vfs_write+0x69d/0x770
[  137.176581][T10230]  ksys_write+0xce/0x180
[  137.180799][T10230]  __x64_sys_write+0x3e/0x50
[  137.185390][T10230]  do_syscall_64+0x4a/0x90
[  137.189865][T10230]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  137.195751][T10230] RIP: 0033:0x4665d9
[  137.199620][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  137.219204][T10230] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:20 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ff}, 0x1c)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
r3 = fork()
ptrace$setregs(0xd, r3, 0xffff, &(0x7f0000000280)="8bec932cf47a675663600d4da243491c83263254003427c8a921791355d4ccca5135c375ec3b2d80b4ef3e82f1c8d75173f874f9f64e029a81f7d353bf30caaf186606676e8eedfa6042afb113a671fd06c1a739763831ad8d51df36b468521599d074e762893be87f7502ffecdf1bf05d364a1318bd7e99ab89d69a274b511e70592a9faf21f66cbdc08b5ef9ad0647128022474e8c56e4df08f80f17f99c345d85b30c6c6ac07b58774777dbc1c2c69bf9179ce44bfcb51ed9ca60dcd7e77e3b43610950045dd3aebe23c88c92cf76e856ca7ca63d4af1095951714e2bb936bc9691")
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:20 executing program 2 (fault-call:8 fault-nth:37):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  137.227738][T10230] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  137.236003][T10230] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  137.243969][T10230] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  137.251942][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.259916][T10230] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:20 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/177, 0xb1}], 0x1, 0xd9f, 0x0)

01:57:20 executing program 0 (fault-call:6 fault-nth:4):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  137.300441][T10243] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  137.308838][T10243] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  137.343970][T10249] FAULT_INJECTION: forcing a failure.
[  137.343970][T10249] name failslab, interval 1, probability 0, space 0, times 0
[  137.356601][T10249] CPU: 0 PID: 10249 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  137.365364][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  137.375436][T10249] Call Trace:
[  137.378765][T10249]  dump_stack+0x137/0x19d
[  137.383154][T10249]  should_fail+0x23c/0x250
[  137.384834][T10243] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  137.387656][T10249]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  137.395667][T10243] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
[  137.400930][T10249]  __should_failslab+0x81/0x90
[  137.400951][T10249]  should_failslab+0x5/0x20
[  137.421204][T10249]  kmem_cache_alloc+0x46/0x2f0
[  137.424403][T10243] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  137.426060][T10249]  ext4_mb_new_blocks+0x2e7/0x1f90
[  137.426084][T10249]  ? bh_uptodate_or_lock+0x57/0xf0
[  137.426103][T10249]  ? ext4_get_branch+0x28e/0x2e0
[  137.426120][T10249]  ext4_ind_map_blocks+0xaab/0x1620
[  137.426156][T10249]  ? ext4_es_lookup_extent+0x206/0x490
[  137.434141][T10243] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
[  137.439222][T10249]  ext4_map_blocks+0x6d2/0xef0
[  137.475668][T10249]  ? ext4_iomap_begin+0x3e2/0x620
[  137.480801][T10249]  ? __cond_resched+0x11/0x40
[  137.485506][T10249]  ext4_iomap_begin+0x4a3/0x620
[  137.490354][T10249]  iomap_apply+0x8d/0x400
[  137.494743][T10249]  __iomap_dio_rw+0x5af/0xad0
[  137.499492][T10249]  ? __iomap_dio_rw+0xad0/0xad0
[  137.504373][T10249]  iomap_dio_rw+0x30/0x70
[  137.508760][T10249]  ? ext4_file_write_iter+0x4e1/0x11d0
[  137.514256][T10249]  ext4_file_write_iter+0xa04/0x11d0
[  137.519523][T10249]  ? ext4_file_write_iter+0x4e1/0x11d0
[  137.524961][T10249]  ? rw_verify_area+0x136/0x250
[  137.529802][T10249]  vfs_write+0x69d/0x770
[  137.534030][T10249]  ksys_write+0xce/0x180
[  137.538287][T10249]  __x64_sys_write+0x3e/0x50
[  137.542867][T10249]  do_syscall_64+0x4a/0x90
[  137.547275][T10249]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  137.553161][T10249] RIP: 0033:0x4665d9
[  137.557040][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  137.576636][T10249] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  137.585025][T10249] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
01:57:20 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1400, 0x806000)

01:57:20 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  137.593001][T10249] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  137.600966][T10249] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  137.608987][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.617045][T10249] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  137.655291][T10255] FAULT_INJECTION: forcing a failure.
[  137.655291][T10255] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  137.668581][T10255] CPU: 0 PID: 10255 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  137.669475][T10262] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  137.677440][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  137.677452][T10255] Call Trace:
[  137.677459][T10255]  dump_stack+0x137/0x19d
[  137.685851][T10262] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  137.695873][T10255]  should_fail+0x23c/0x250
[  137.695894][T10255]  __alloc_pages+0x102/0x320
[  137.723642][T10255]  alloc_pages+0x21d/0x310
[  137.728067][T10255]  __page_cache_alloc+0x4d/0xf0
[  137.732933][T10255]  pagecache_get_page+0x5f4/0x900
[  137.738045][T10255]  grab_cache_page_write_begin+0x3f/0x70
[  137.743780][T10255]  ext4_da_write_begin+0x305/0x820
[  137.748899][T10255]  ? iov_iter_fault_in_readable+0x1b5/0x3a0
01:57:20 executing program 2 (fault-call:8 fault-nth:38):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:20 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1c00, 0x806000)

[  137.754791][T10255]  generic_perform_write+0x196/0x3a0
[  137.760078][T10255]  ? ext4_da_write_begin+0x820/0x820
[  137.765394][T10255]  ext4_buffered_write_iter+0x2f2/0x3f0
[  137.770947][T10255]  ext4_file_write_iter+0x2e7/0x11d0
[  137.776328][T10255]  ? fsnotify_perm+0x59/0x2e0
[  137.780993][T10255]  ? security_file_permission+0x87/0xa0
[  137.786698][T10255]  ? rw_verify_area+0x136/0x250
[  137.791677][T10255]  aio_write+0x287/0x360
[  137.796122][T10255]  ? kmem_cache_alloc+0x201/0x2f0
[  137.801157][T10255]  io_submit_one+0x82f/0x1350
[  137.805866][T10255]  __se_sys_io_submit+0xf5/0x260
[  137.810796][T10255]  __x64_sys_io_submit+0x3f/0x50
[  137.815714][T10255]  do_syscall_64+0x4a/0x90
[  137.820180][T10255]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  137.826089][T10255] RIP: 0033:0x4665d9
[  137.829978][T10255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
01:57:20 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000080)=0x9, 0x4)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000640)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/218, 0xda}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000800)=""/172, 0xac}, {&(0x7f00000008c0)=""/83, 0x53}], 0xa}, 0x40000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  137.849602][T10255] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  137.857995][T10255] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  137.866028][T10255] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648c92000
[  137.873995][T10255] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  137.882060][T10255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.890011][T10255] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
01:57:20 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=' ', 0x1}, {&(0x7f00000005c0)="ecdcfee0186f71ea51b8e7f25cd3417358f6f10ea6eebeb35d7ac759c3d606fabc61a81cdae1946b1a492199ea93201e59fab0eb8a7c1b6df5a7c564b16da23a7f1e28765cd056e69606f35fa1c97cc2c91afa11df06959aafb448824dc6c4e2ea7d9f05d7700eac995f087988d9a2535e620f28f6caae7abf28be61ae3943386739b4b1cc5c36af12e249aed007dc167a77118a20467e6b4a382f9f2a919737ed41943c1509db31d41c6cfa6b2673d4896788fd2c0e23a4f48caf34353afda3828ff58bacbe79d685359205f321359de38fec445a53b4843d1b0113ea6a1f25dc2b43a06ec7280c52574b53398f7081591e24c9e3", 0xf5}, {&(0x7f0000002740)="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", 0xfffffffffffffe1d}, {&(0x7f0000000080)="fb3c03babec40051949fe831e6ca0653bffa8a30ac76c588dcc2709ff1ae4746373368e9b1", 0x25}], 0x4}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
sendto(r2, &(0x7f0000001740)="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", 0x1000, 0x40, 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  137.920208][T10279] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  137.928656][T10279] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  137.961770][T10271] FAULT_INJECTION: forcing a failure.
[  137.961770][T10271] name failslab, interval 1, probability 0, space 0, times 0
[  137.974440][T10271] CPU: 1 PID: 10271 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  137.983205][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  137.993390][T10271] Call Trace:
[  137.996658][T10271]  dump_stack+0x137/0x19d
[  138.000994][T10271]  should_fail+0x23c/0x250
[  138.005450][T10271]  ? ext4_mb_new_blocks+0x2e7/0x1f90
01:57:21 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  138.010736][T10271]  __should_failslab+0x81/0x90
[  138.015582][T10271]  should_failslab+0x5/0x20
[  138.020228][T10271]  kmem_cache_alloc+0x46/0x2f0
[  138.025060][T10271]  ext4_mb_new_blocks+0x2e7/0x1f90
[  138.030284][T10271]  ? bh_uptodate_or_lock+0x57/0xf0
[  138.035398][T10271]  ? ext4_get_branch+0x28e/0x2e0
[  138.040329][T10271]  ext4_ind_map_blocks+0xaab/0x1620
[  138.045615][T10271]  ? ext4_es_lookup_extent+0x206/0x490
[  138.051077][T10271]  ext4_map_blocks+0x6d2/0xef0
[  138.055894][T10271]  ? ext4_iomap_begin+0x3e2/0x620
[  138.060907][T10271]  ? __cond_resched+0x11/0x40
[  138.065587][T10271]  ext4_iomap_begin+0x4a3/0x620
[  138.070435][T10271]  iomap_apply+0x8d/0x400
[  138.074748][T10271]  __iomap_dio_rw+0x5af/0xad0
[  138.079446][T10271]  ? __iomap_dio_rw+0xad0/0xad0
[  138.084276][T10271]  iomap_dio_rw+0x30/0x70
[  138.088613][T10271]  ? ext4_file_write_iter+0x4e1/0x11d0
[  138.094143][T10271]  ext4_file_write_iter+0xa04/0x11d0
[  138.099872][T10271]  ? ext4_file_write_iter+0x4e1/0x11d0
[  138.105333][T10271]  ? rw_verify_area+0x136/0x250
[  138.110219][T10271]  vfs_write+0x69d/0x770
[  138.114442][T10271]  ksys_write+0xce/0x180
[  138.118664][T10271]  __x64_sys_write+0x3e/0x50
[  138.123234][T10271]  do_syscall_64+0x4a/0x90
[  138.127677][T10271]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  138.133554][T10271] RIP: 0033:0x4665d9
[  138.137432][T10271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  138.157016][T10271] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.165405][T10271] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  138.173356][T10271] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  138.181307][T10271] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  138.189259][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.197272][T10271] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:21 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x80000)
sendmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="69d99ac3ec6f5d7026438b70", 0xc}, {&(0x7f00000002c0)="d6cb373529bdf4ed14323dcacfc7bc993efded361b5a4e8b1f8f6fb88838895d3b8366f23fd31e0d911c76723e8dfbf9b8e4ad7c8cc606f1baafaa53643f885ad32cd031a1ade37a48e0b6356a0361f60127395231d0445812b6f6a25ba85f6fad4a38d883bb77fc23fb8e4f25", 0x6d}, {&(0x7f00000005c0)="3a40ee51af7f588bb5fe0ccc15bd335b80ed12075bfc29ce9d3da7d32a78ca75c690a411d92013e1ee10ddd5bf68bbdae3255428504370217097d51c8a5217639f56bcfe20ae3ef9daf3f0ad64de3450aa77c6bb41385ba1d3fded1cbc9cc9cbddd7720d16cca040ddd2166750863c0eb432f0c6b666af478163cc68ffabd6858901427bd0c5c97d05f495a44020b3cdcbb6ecab3a67ec7cbf0c5b486f0455a09603dfb086d81a3ee1c17791e2668d7ca03892ccaa091f30769f7815558cc1b92288e050a595c8ec6022ce6531bb068166cddc05d27683a91b44", 0xda}, {&(0x7f0000000340)="631531331d4f140cb803fab10350eeef0670fd2beb07ca81760f4099afd801f6fbb36033dcf5a5a480c9d2355ddcfa06ca634bb374bed360c6e2e619c195dd7ec1aeaf7618c734956cda0704b458daa25169b0f2d452352f0934aafbe82d2d58688e0d82121466e0e6e6394cce34b5fcd8c8c5f9d6e61a3456853713dde7eb3432c4ebb733", 0x85}], 0x4, &(0x7f0000001740)=[{0xc8, 0x112, 0x7, "872300d0980953d05affa11367fbf06f6ef47f39153fb1f1e0f4f7285545c21b7577374888b3032eb32e5c1a1e1a57df1a2914d7b4801198eaa2372905f85b32a18ffa92db4373a20a8b69d9adf774e5f4ad4dbdbaba225571f536efdc2f8d10df88963a47eb2f3a3eb7d21f32103e1d13eb3f67a0f142d3f3cf5fd0b09f00d0ebfc6a5279d201a6172deece1fb6ac9faffa18212225d0022ed0096760397f59eee39acf3479c28d5beeacd01a8802c31c3061f04b"}, {0xd0, 0xc, 0x2, "eac2de03476ad72c27830573614761f18a89d5b8d73c58bbea982257e30934db1e5993d9b20205e828959a8de13a361faafda9688d45d9ca3a64b2a22bdae3c07a626b850a7b18c711aab91d35be6add77d2cfb6ca529349a78958b0d26178ca14b3a75c25bbcc33366936f1fd08a61f0a7ffd4ea78991f0cf19ecdbb26ce89053e5a1c22710780208a9a7e4b47fdda1d02934348299279d137320696ad7d4c19eee88061399e0cb120b0db5ac40334c776053c40ce8c9d7eba107"}, {0xb0, 0x0, 0x8001, "66efdc1bd951ec3f87d9a47fb186442840e78de4cb2c450078ce491ebcedfa397c77c4ea74ca42afee7dbd1101d68f8329e90c66c3c11c0fd4e1d585995d32384fa02b5a5621e573982639a9dac84f007255dff7a9fa14b4fbf639f2818589180b184e608e18ec29186711d62423f7256577c4bb885c7c73fbfccbfd28bf5817045da0ffd0d08ca9308f3c9b1cb4d435fc506afc40b3eec830a7980acf3b5ec4"}, {0x1010, 0x10d, 0x2, "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"}, {0x1010, 0x108, 0x8, "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"}, {0x20, 0x10a, 0xdc5, "a5900f1b26b3a623d686db"}, {0x80, 0x0, 0xe2a, "f718e544c1d881b0dc862608dbbc220dc5870726ae60a07f516ba6cee772d44224122658774cf64024d35336fb9df759e1b56246c46803531f3765b5f1f94ea9a179a2c1e7c759685bf4db19daca7d77423e624a00368efda54b099a6f4ffac4d813345675ec698d32babb4326"}, {0x40, 0xff, 0x8, "8680399218558900093d2d9846b785167a169d0ed39401a501c8192dadf1ae268e1c48fc4adbcab799c4"}, {0x108, 0x100, 0x2, "4afcf789e6779124d6f98fa9f53059ae1c71d38c68381c2c05dd214cb830a905e1b464ee8253f8b6371eb6fd8e4794e37a25590cd3a41cc8b0520e269af13edec1679823c0ddb104418641799d9034a5b2eec8a5c4ef2ab92cc47c5e36c116acfba1fc26eb570986beda9f9a4039179c8492b27dd45708bdda08c5d778385b8f9a98e21fc3a46cb3c5ffc9ac6db03a4928912ad509c2a8563422e9d365d58269be93ec2f685224a9e320f805add9a92585f7c65c8e06632373b6f5cf772ca9baf4bd8c557c2357ac6426d7d7137b0f598e55f6bde36a24f1eb3af9ea8f1b407f912e7ce15acf2422a1d8a1ddc73d90afeb50d34247cffe55"}, {0xe8, 0x119, 0xfffffff9, "e139e314ee7bfcd0126bc31b27e7ad89f3f19dd71d02713f9aee5e1978da0df7d30c273eaa5c57ec8c5cf01c2f2c31ef74aead3b3079291feb5b9d948ac920d4e1947e477afeb6cbdc9b5e1df8ef7495444e7ee65d9551d5d9260af41ef9006302cc853d20dfc423a12d587441da73d508c6c2002ea5a1372f2c9a3b7698785efaf5a0a648dea7c487f6fa671244769f98f427b613f7560a6f3d7dcc61fdcfb4015be5f78931b19013ee7fe267d6b5abd1732a2aa659c0a71e0d8996cb324a7ece833c6703a3c4229c9e5f9e7dfc18d0b2adf4704eed89"}], 0x2538}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="b26f0a5904a7", 0x6}], 0x1, &(0x7f0000003c80)=[{0xb8, 0x10e, 0x8, "1fa341977d8afdcc7df6a2070d262d8f358d48058d527a484a558d8677e34a030b38aed07d7baeb68c559249175c4c95f790170902a482aad2b244e81981173b8f1ac3ac552473f4fa5ff0f1c230f54b1d229f5b62bf96711c3637684c238d1b4674692178457ea1c7c1325768f5e7fe7cbbe0a3bd5624faca0a80b9108fcc8ccb3be8b242fd0011dcd1d75e56f53f61585cbe78384c5b9fc576c07eb59cf185319e1268579bec"}, {0x70, 0x88, 0x4, "76a62cf79a38d0a80071237e50c67578f0869e234dad0fc7d4042cde08d2db97287db0e981f95ae85825261a5ee5c753268bfa420b689c9bd4f9ee3916df3893561aa7354eb73667da49574298dc45141bacfe074a2eddd73521ead322156210"}, {0xa0, 0x108, 0x80000001, "05ed8a1e3cf06b79434849c076ff487a35709f802f905b35a35286c90765ebd86c53097862b409f43c9d6d3aeef3c47948fef9955f3fe54e2dc650bc37efa0dd13043893ec20f4305f00529053b355d93cfa6f542a88579d7416900d8add593e167fdaef1a93fea52e96bee82824f8931e87a098f379930e9ae98c6dccee078b88e5b40f0697eff2626b47fb"}, {0xa0, 0x108, 0xfffffffe, "670d67c969bd962ec99d0f21e9de5d03c1496f12f7b2f48f1c7fb3c841fe2ea67de7714e3d2049450751dedba25929ab558ab8298683949cbe93bddfbdf3cdd4d8eacfef92963c0c33afb5782dbb0d2e9f8c582673e4a7ab54114cdda1fa12362fb8db42cb561789c188cee7d63a9c6d443b46a11103ec6bf9d683bb0d5ba3f30e3e66e4e71f157c45930622"}, {0xe8, 0x110, 0x4, "216c9e4777ad0d2035dc4efeaefc0dbc0382eeacef1d9cd7f7bd6f4bfa43465f3efdc60ba339c5dbf2ad46aaa74ba81eda2b39233f06a803fb06d34b2ba2e6a0d4f4b58bac776b072395a228d968712d103d7aaa5a17ba5c9fcfb7818ee4eb5ebeb13880d302d6ae61f9ae89d3887e32cb586ed5f2b84883d25ed2e5af2e8b9b14ff23b09b8cddc9821a5ae5433a1d776c051fe80b7f032ab071a47ef94d20147e9f3b46b2363760d261f7b12a7ea047014939af18ef7ecf5c2470c5b82e68c86f64860f4a15efd3e705c8d85c0126e40726fb1a86c5ce"}, {0x98, 0x115, 0x7, "f5929364651053ea85ef3e962efa362907cade9ed7e19955e6fe76da01b9e10e4e9225cb9979681cd52d00f50558de2f63057a8d8cc8ba1f3d267ddb85312fa7d6a4030f008f63c2725cf24e749ae627cb02b495c175b5466cf18ff468c2a7665561a9c3c036385f30aa26d1f4aa4c8cac61089425d9201017d24096145664f18a8578"}, {0x110, 0x1, 0x36f, "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"}, {0x108, 0x103, 0x35d, "c219ab5ad8c4a668757e42e2a5e93c00fa8482b65ec1c9d46fed4bded7aebafe8b5c5e8e5daadec11af692ca066a5023591559747feaaa7ebf4300124d75419972f6c4d8c0538afb23d1709ec8ff4e97eb7857ad04011f1363cbb672c22ea9e20519bd00fd1ae89d220dfd7667318e917309cc2020940cb12ee6f2756d729417424d1a41ff51d1f9a7a667919bf5f23a260864b4d80c97b3763c2c27d3ddf388fccd35075a7451485d8dcc3c8d5f94bf874d4df125849efb1726551f12742cbda4d7785f3f4afcc3d8fb3925b1c04544d18e96a28e1c00405e513c72ffa7cb855a2dbd9525b7d0b401467a51ac45a9e44dfb44fb2fbea5"}, {0x1010, 0x10b, 0x2, "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"}, {0x108, 0x111, 0x689, "3124e3768b53f88a152e6961fb61e6440b94f316c4ead6ebf370671885e9cf889d370f0cb5f30b823adfecd0dee0316d2f5fc6eadb1847e560267245a7a39f92cdf3687d63ba8dca669a8c2d7492c51ddbbbe4bed29c28a7a25a2d789a7f46bf2b66f2637974dacf0f401f803b3782426f1a8959b3b9802f682ab73859c74c1b3df9636cf3dbe31407fa8810a1a05a2b60db18da761fdafc3d4a7763cf2121c64413bb06d85cfdcf5c4ea50c045d5cd6c4a0da31d97a51f6a20d58e4c43f0e4b28f71148947b860975b8bf8a679b2c46502ec068a4addcc600d5f235bc7f2c0e8c5e1edcd9636ff829c175e5ff7dd46f2d"}], 0x1718}}], 0x2, 0x40800)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  138.224156][T10288] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  138.232710][T10288] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  138.258364][T10289] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
01:57:21 executing program 0 (fault-call:6 fault-nth:5):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:21 executing program 2 (fault-call:8 fault-nth:39):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:21 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1500, 0x806000)

[  138.266835][T10289] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:21 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1d00, 0x806000)

01:57:21 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:21 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x61a1, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340), 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="40010000100013070000000000000000e00000020000000000000000000000002001000000000000000000000000000000000000000000030a00000000000000", @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r5, @ANYRESDEC], 0x140}}, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@empty, @multicast2, r5}, 0xc)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  138.357299][T10297] FAULT_INJECTION: forcing a failure.
[  138.357299][T10297] name failslab, interval 1, probability 0, space 0, times 0
[  138.369949][T10297] CPU: 1 PID: 10297 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  138.378720][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  138.379103][T10302] FAULT_INJECTION: forcing a failure.
[  138.379103][T10302] name failslab, interval 1, probability 0, space 0, times 0
[  138.388778][T10297] Call Trace:
[  138.388789][T10297]  dump_stack+0x137/0x19d
[  138.388812][T10297]  should_fail+0x23c/0x250
[  138.413506][T10297]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  138.418789][T10297]  __should_failslab+0x81/0x90
[  138.423617][T10297]  should_failslab+0x5/0x20
[  138.428132][T10297]  kmem_cache_alloc+0x46/0x2f0
[  138.432886][T10297]  ext4_mb_new_blocks+0x2e7/0x1f90
[  138.437979][T10297]  ? bh_uptodate_or_lock+0x57/0xf0
[  138.443127][T10297]  ? ext4_get_branch+0x28e/0x2e0
[  138.448047][T10297]  ext4_ind_map_blocks+0xaab/0x1620
[  138.453228][T10297]  ? ext4_es_lookup_extent+0x206/0x490
[  138.458672][T10297]  ext4_map_blocks+0x6d2/0xef0
[  138.463428][T10297]  ? ext4_iomap_begin+0x3e2/0x620
[  138.468447][T10297]  ? __cond_resched+0x11/0x40
[  138.473121][T10297]  ext4_iomap_begin+0x4a3/0x620
[  138.478001][T10297]  iomap_apply+0x8d/0x400
[  138.482334][T10297]  __iomap_dio_rw+0x5af/0xad0
[  138.486991][T10297]  ? __iomap_dio_rw+0xad0/0xad0
[  138.491825][T10297]  iomap_dio_rw+0x30/0x70
[  138.496217][T10297]  ? ext4_file_write_iter+0x4e1/0x11d0
[  138.501660][T10297]  ext4_file_write_iter+0xa04/0x11d0
[  138.506943][T10297]  ? ext4_file_write_iter+0x4e1/0x11d0
[  138.512396][T10297]  ? rw_verify_area+0x136/0x250
[  138.517240][T10297]  vfs_write+0x69d/0x770
[  138.521470][T10297]  ksys_write+0xce/0x180
[  138.525735][T10297]  __x64_sys_write+0x3e/0x50
[  138.530373][T10297]  do_syscall_64+0x4a/0x90
[  138.534790][T10297]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  138.540740][T10297] RIP: 0033:0x4665d9
[  138.544789][T10297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  138.564376][T10297] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.572767][T10297] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  138.580913][T10297] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  138.588921][T10297] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  138.596874][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.604842][T10297] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  138.612799][T10302] CPU: 0 PID: 10302 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  138.621568][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  138.631924][T10302] Call Trace:
[  138.635205][T10302]  dump_stack+0x137/0x19d
[  138.639630][T10302]  should_fail+0x23c/0x250
[  138.644144][T10302]  ? mempool_alloc_slab+0x16/0x20
[  138.649206][T10302]  __should_failslab+0x81/0x90
[  138.654019][T10302]  should_failslab+0x5/0x20
01:57:21 executing program 2 (fault-call:8 fault-nth:40):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  138.658624][T10302]  kmem_cache_alloc+0x46/0x2f0
[  138.663481][T10302]  mempool_alloc_slab+0x16/0x20
[  138.668331][T10302]  ? mempool_free+0x130/0x130
[  138.673109][T10302]  mempool_alloc+0x8c/0x300
[  138.677737][T10302]  ? ext4_es_insert_extent+0x1825/0x19d0
[  138.683545][T10302]  ? iov_iter_npages+0x218/0xa00
[  138.688652][T10302]  bio_alloc_bioset+0xcc/0x480
[  138.693413][T10302]  iomap_dio_bio_actor+0x511/0xb50
[  138.698601][T10302]  iomap_dio_actor+0x26e/0x3b0
[  138.703365][T10302]  iomap_apply+0x1e2/0x400
[  138.707798][T10302]  __iomap_dio_rw+0x5af/0xad0
[  138.712465][T10302]  ? __iomap_dio_rw+0xad0/0xad0
[  138.717321][T10302]  ? ext4_orphan_add+0x7a/0x5f0
[  138.722388][T10302]  ? file_update_time+0x3ae/0x3e0
[  138.727498][T10302]  iomap_dio_rw+0x30/0x70
[  138.737430][T10302]  ? ext4_file_write_iter+0x4e1/0x11d0
[  138.743011][T10302]  ext4_file_write_iter+0xa4f/0x11d0
[  138.748467][T10302]  ? ext4_file_write_iter+0x4e1/0x11d0
[  138.754046][T10302]  ? rw_verify_area+0x136/0x250
[  138.758884][T10302]  aio_write+0x287/0x360
[  138.763532][T10302]  ? kmem_cache_alloc+0x201/0x2f0
[  138.768836][T10302]  io_submit_one+0x82f/0x1350
[  138.773521][T10302]  __se_sys_io_submit+0xf5/0x260
[  138.778557][T10302]  __x64_sys_io_submit+0x3f/0x50
[  138.783582][T10302]  do_syscall_64+0x4a/0x90
[  138.788098][T10302]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  138.794167][T10302] RIP: 0033:0x4665d9
[  138.798161][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  138.818129][T10302] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  138.826650][T10302] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  138.834692][T10302] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  138.842827][T10302] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  138.850788][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
01:57:21 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1e00, 0x806000)

[  138.858828][T10302] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  138.868997][T10315] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
[  138.873463][T10306] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  138.886651][T10306] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  138.930205][T10306] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  138.938348][T10306] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
[  138.970240][T10317] FAULT_INJECTION: forcing a failure.
[  138.970240][T10317] name failslab, interval 1, probability 0, space 0, times 0
[  138.984085][T10317] CPU: 0 PID: 10317 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  138.992938][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  139.003257][T10317] Call Trace:
[  139.006536][T10317]  dump_stack+0x137/0x19d
[  139.010932][T10317]  should_fail+0x23c/0x250
[  139.015350][T10317]  ? ext4_mb_new_blocks+0x70f/0x1f90
[  139.020670][T10317]  __should_failslab+0x81/0x90
[  139.025536][T10317]  should_failslab+0x5/0x20
01:57:22 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x588a}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = accept4(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000140)=0x80, 0x80000)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @mcast2, 0xffffff09}, 0x1c)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r5}]}, 0x140}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200a28bd7000fddbdf25100000000800070093000000080007000400000008000900089e54002000018014000200766972745f776966693000000000000008000100d52462981ef182ee92fa02149bb6c8e27e2df135cd44bedfcad01258388ed1865da38cb344898bc42d63fd9f9c1368d050538904fed7cfd10fb27cb534753f35e19433bb6a87df822a8554de777c0aa6a03e22ca267eb992b1060e76e44e7f811f11ce0b7114263325904b14daa0f517a14bba08aa40f8b11daf49749a7198d88bc2615a071066eaa754b5b32661ab47243089fbe93e899b600453f0172f0f517af189f9cfb959bb93e8", @ANYRES32=r5, @ANYBLOB="08000800000000000800090001800000"], 0x5c}, 0x1, 0x0, 0x0, 0x30000040}, 0x844)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x0, 0x7, 0xd2, 0x0, 0x7, 0x22080, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000280), 0x8}, 0xa08, 0x8, 0x5, 0x4, 0x7, 0xc4e3, 0x1fe0, 0x0, 0x101, 0x0, 0x7ff}, 0x0, 0xa, 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:22 executing program 0 (fault-call:6 fault-nth:6):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  139.030122][T10317]  kmem_cache_alloc+0x46/0x2f0
[  139.034926][T10317]  ext4_mb_new_blocks+0x70f/0x1f90
[  139.040046][T10317]  ? bh_uptodate_or_lock+0x57/0xf0
[  139.045323][T10317]  ? ext4_get_branch+0x28e/0x2e0
[  139.050263][T10317]  ext4_ind_map_blocks+0xaab/0x1620
[  139.055625][T10317]  ? ext4_es_lookup_extent+0x206/0x490
[  139.061206][T10317]  ext4_map_blocks+0x6d2/0xef0
[  139.065962][T10317]  ? ext4_iomap_begin+0x3e2/0x620
[  139.070997][T10317]  ? __cond_resched+0x11/0x40
[  139.075750][T10317]  ext4_iomap_begin+0x4a3/0x620
01:57:22 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1600, 0x806000)

01:57:22 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1f00, 0x806000)

[  139.080605][T10317]  iomap_apply+0x8d/0x400
[  139.085131][T10317]  __iomap_dio_rw+0x5af/0xad0
[  139.090011][T10317]  ? __iomap_dio_rw+0xad0/0xad0
[  139.095054][T10317]  iomap_dio_rw+0x30/0x70
[  139.099486][T10317]  ? ext4_file_write_iter+0x4e1/0x11d0
[  139.105541][T10317]  ext4_file_write_iter+0xa04/0x11d0
[  139.110939][T10317]  ? ext4_file_write_iter+0x4e1/0x11d0
[  139.116878][T10317]  ? rw_verify_area+0x136/0x250
[  139.122253][T10317]  vfs_write+0x69d/0x770
[  139.126487][T10317]  ksys_write+0xce/0x180
[  139.130708][T10317]  __x64_sys_write+0x3e/0x50
[  139.135313][T10317]  do_syscall_64+0x4a/0x90
[  139.139724][T10317]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  139.145707][T10317] RIP: 0033:0x4665d9
[  139.149609][T10317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
01:57:22 executing program 2 (fault-call:8 fault-nth:41):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  139.170430][T10317] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.183899][T10317] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  139.191859][T10317] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  139.199871][T10317] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  139.207826][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  139.215869][T10317] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  139.333587][T10330] FAULT_INJECTION: forcing a failure.
[  139.333587][T10330] name failslab, interval 1, probability 0, space 0, times 0
[  139.346383][T10330] CPU: 0 PID: 10330 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  139.355238][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  139.365290][T10330] Call Trace:
[  139.368570][T10330]  dump_stack+0x137/0x19d
[  139.372917][T10330]  should_fail+0x23c/0x250
[  139.377333][T10330]  ? __es_insert_extent+0x51f/0xe70
[  139.380673][T10338] FAULT_INJECTION: forcing a failure.
[  139.380673][T10338] name failslab, interval 1, probability 0, space 0, times 0
[  139.383144][T10330]  __should_failslab+0x81/0x90
[  139.383171][T10330]  should_failslab+0x5/0x20
[  139.383268][T10330]  kmem_cache_alloc+0x46/0x2f0
[  139.409966][T10330]  __es_insert_extent+0x51f/0xe70
[  139.415023][T10330]  ext4_es_insert_extent+0x1bb/0x19d0
[  139.420396][T10330]  ext4_map_blocks+0xa4c/0xef0
[  139.425156][T10330]  ? ext4_iomap_begin+0x3e2/0x620
[  139.430188][T10330]  ? __cond_resched+0x11/0x40
[  139.434987][T10330]  ext4_iomap_begin+0x4a3/0x620
[  139.439898][T10330]  iomap_apply+0x8d/0x400
[  139.444275][T10330]  __iomap_dio_rw+0x5af/0xad0
[  139.448937][T10330]  ? __iomap_dio_rw+0xad0/0xad0
[  139.453888][T10330]  iomap_dio_rw+0x30/0x70
[  139.458260][T10330]  ? ext4_file_write_iter+0x4e1/0x11d0
[  139.463781][T10330]  ext4_file_write_iter+0xa04/0x11d0
[  139.469099][T10330]  ? ext4_file_write_iter+0x4e1/0x11d0
[  139.474633][T10330]  ? rw_verify_area+0x136/0x250
[  139.479473][T10330]  vfs_write+0x69d/0x770
[  139.483694][T10330]  ksys_write+0xce/0x180
[  139.487914][T10330]  __x64_sys_write+0x3e/0x50
[  139.492485][T10330]  do_syscall_64+0x4a/0x90
[  139.496886][T10330]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  139.502786][T10330] RIP: 0033:0x4665d9
[  139.506716][T10330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  139.526301][T10330] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.534692][T10330] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  139.542641][T10330] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  139.550593][T10330] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  139.558546][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  139.566495][T10330] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  139.574459][T10338] CPU: 1 PID: 10338 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  139.583244][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  139.593367][T10338] Call Trace:
[  139.596643][T10338]  dump_stack+0x137/0x19d
[  139.601017][T10338]  should_fail+0x23c/0x250
[  139.605520][T10338]  ? mempool_alloc_slab+0x16/0x20
[  139.610539][T10338]  __should_failslab+0x81/0x90
[  139.615298][T10338]  should_failslab+0x5/0x20
[  139.619806][T10338]  kmem_cache_alloc+0x46/0x2f0
[  139.624561][T10338]  ? mempool_alloc_slab+0x16/0x20
[  139.629627][T10338]  mempool_alloc_slab+0x16/0x20
[  139.634474][T10338]  ? mempool_free+0x130/0x130
[  139.639151][T10338]  mempool_alloc+0x8c/0x300
[  139.643648][T10338]  ? ext4_es_insert_extent+0x1825/0x19d0
[  139.649301][T10338]  ? iov_iter_npages+0x218/0xa00
[  139.654290][T10338]  bio_alloc_bioset+0x1af/0x480
[  139.659240][T10338]  iomap_dio_bio_actor+0x511/0xb50
[  139.664370][T10338]  iomap_dio_actor+0x26e/0x3b0
[  139.669143][T10338]  iomap_apply+0x1e2/0x400
[  139.673556][T10338]  __iomap_dio_rw+0x5af/0xad0
[  139.678221][T10338]  ? __iomap_dio_rw+0xad0/0xad0
[  139.683057][T10338]  ? ext4_orphan_add+0x7a/0x5f0
[  139.687938][T10338]  ? file_update_time+0x1bd/0x3e0
[  139.692944][T10338]  iomap_dio_rw+0x30/0x70
[  139.697256][T10338]  ? ext4_file_write_iter+0x4e1/0x11d0
[  139.702701][T10338]  ext4_file_write_iter+0xa4f/0x11d0
[  139.708017][T10338]  ? ext4_file_write_iter+0x4e1/0x11d0
[  139.713463][T10338]  ? rw_verify_area+0x136/0x250
[  139.718299][T10338]  aio_write+0x287/0x360
[  139.722522][T10338]  ? kmem_cache_alloc+0x201/0x2f0
[  139.727610][T10338]  io_submit_one+0x82f/0x1350
[  139.732269][T10338]  __se_sys_io_submit+0xf5/0x260
[  139.737187][T10338]  __x64_sys_io_submit+0x3f/0x50
[  139.742105][T10338]  do_syscall_64+0x4a/0x90
[  139.746555][T10338]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  139.752445][T10338] RIP: 0033:0x4665d9
[  139.756319][T10338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  139.775909][T10338] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
01:57:22 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:22 executing program 2 (fault-call:8 fault-nth:42):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  139.784323][T10338] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  139.792315][T10338] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  139.800277][T10338] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  139.808236][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.816190][T10338] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  139.864632][T10348] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  139.870279][T10351] FAULT_INJECTION: forcing a failure.
[  139.870279][T10351] name failslab, interval 1, probability 0, space 0, times 0
[  139.873038][T10348] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  139.897082][T10351] CPU: 1 PID: 10351 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  139.905962][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  139.916054][T10351] Call Trace:
[  139.919409][T10351]  dump_stack+0x137/0x19d
[  139.923751][T10351]  should_fail+0x23c/0x250
[  139.928200][T10351]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  139.933483][T10351]  __should_failslab+0x81/0x90
[  139.938249][T10351]  should_failslab+0x5/0x20
[  139.942909][T10351]  kmem_cache_alloc+0x46/0x2f0
[  139.947692][T10351]  ext4_mb_new_blocks+0x2e7/0x1f90
[  139.952896][T10351]  ? bh_uptodate_or_lock+0x57/0xf0
[  139.958100][T10351]  ? ext4_get_branch+0x28e/0x2e0
[  139.963042][T10351]  ext4_ind_map_blocks+0xaab/0x1620
[  139.968335][T10351]  ? ext4_es_lookup_extent+0x206/0x490
[  139.973801][T10351]  ext4_map_blocks+0x6d2/0xef0
[  139.978742][T10351]  ? ext4_iomap_begin+0x3e2/0x620
[  139.983760][T10351]  ? __cond_resched+0x11/0x40
[  139.988432][T10351]  ext4_iomap_begin+0x4a3/0x620
[  139.993307][T10351]  iomap_apply+0x8d/0x400
[  139.997699][T10351]  __iomap_dio_rw+0x5af/0xad0
[  140.002560][T10351]  ? __iomap_dio_rw+0xad0/0xad0
[  140.007402][T10351]  iomap_dio_rw+0x30/0x70
[  140.011833][T10351]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.017315][T10351]  ext4_file_write_iter+0xa04/0x11d0
[  140.022596][T10351]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.028140][T10351]  ? rw_verify_area+0x136/0x250
[  140.032979][T10351]  vfs_write+0x69d/0x770
[  140.037276][T10351]  ksys_write+0xce/0x180
[  140.041762][T10351]  __x64_sys_write+0x3e/0x50
[  140.046533][T10351]  do_syscall_64+0x4a/0x90
[  140.050954][T10351]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  140.056917][T10351] RIP: 0033:0x4665d9
[  140.060788][T10351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.080408][T10351] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.088883][T10351] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  140.096848][T10351] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  140.104813][T10351] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
01:57:23 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1}, 0x40000001)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  140.112776][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.120826][T10351] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  140.154213][T10353] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
01:57:23 executing program 2 (fault-call:8 fault-nth:43):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:23 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x5, &(0x7f0000000340), 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f00000000c0)="5dd55278f60c1a7513fffe8fe8a70e444940b52b366e5a9a5f7b7bde829acbbca6f3201ca5384082ba3d930a0b5c771b980772", 0x33}, {&(0x7f0000000280)="1d6b802832286a8d228853e61b6ecdaf85b490d481900b2106ce46b6039a26a0de07dce13ad1754028b13f370b8994004060c52c05ebe03eec977e90026874d0293d48d9c1a6ec7e08672b3516570e5b318c8c9875d926ab22d0ae1234de0411b448776408776c5f6ade8d61b3fb7c415042f9229afd6b298b99119ba4f70e9cb25be3ef6c752e86c9b532124b", 0x8d}, {&(0x7f00000005c0)="da68e490e1fa9f4daa4248b587458e56042c4537d5c225420db07d5376a7ca9b7c99b8394f6b2b3e8b0d056271a7c35c2d182fbe087c9471c5aab4db752774a3166d02aa8bff874161dbd026b2035e135e48c15bf76a9b2146b7d227a84b25464e91735cc66dc2dbfd9da9ccb9412af2cdf019e91222ee46de5cc8f79aebcb466df241f4125df7ecf278ccc68b6b9020777af2face614b05ff8b3a8d6696674c3c9c72be370bc4e2b6abed9c3017fe282ef4f7f60dcd07d08e55851a675a6830981c1169a4e710410aa3", 0xca}, {&(0x7f0000000340)="f9208a7ca089923f33f47945126379d2f7e63ff4fe00fc7704cc98d111bdf7cff7c06027478cb8ee3258952afceb5b03f084e6a12ceea778dd6f497b4d61bd2a07cc8616d6cfc4621dd561590d41437cc6e3a48d99827302b6bda9df1b06ce6a031857c5e58d8ffd7081110d1bc8c360988b58044e9f545d8adb3268d48e1c10e289b1bb83237339e966a844246b2d67b265b0cbc461e97a501784dec90ddf8387dd3ebf7b2494a574039d", 0xab}, {&(0x7f0000000140)="08eeb596b88679f916cc40cd2a58838ca9d6ef37a25e9201baf0f01465204f4e1f3f8178aa968b7af18ab7095a4948ccf0b89c05c2e69b18ed9db9a690", 0x3d}], 0x7, &(0x7f0000002740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4d74}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x6a, [@loopback, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @generic={0x86, 0x10, "1048c98163f800c0ec7491a4cf71"}, @cipso={0x86, 0x22, 0x0, [{0x1, 0x7, "4e645b78b0"}, {0x0, 0x3, "13"}, {0x0, 0x12, "320820752281d898ec04fd8aea6e1527"}]}, @noop, @end]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0xc8, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @broadcast]}]}}}], 0xb0}, 0x4008001)
socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:23 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1700, 0x806000)

[  140.162584][T10353] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  140.200650][T10353] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:23 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x800000, 0x180)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x3, 0x4)
mmap(&(0x7f00001f4000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x571bc000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="0bb228a2b426ec9f99693fa14e923e0591c36c16cf3f8fc442fa84213fdf96d052b63713520ed35a794406d86b04e01020ab10cee6f812f79d5246c2a2f48c2b57407286f42b9ec0ea762706b588571972f71707f91b5a31538b5459fd285e14143a7ac1091bd46c75ccf7733a120a712968057b04800fb4d76f", 0x7a, 0x40000, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x56d167720ce2d8f8)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:23 executing program 0 (fault-call:6 fault-nth:7):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  140.208705][T10353] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
[  140.245633][T10362] FAULT_INJECTION: forcing a failure.
[  140.245633][T10362] name failslab, interval 1, probability 0, space 0, times 0
[  140.258286][T10362] CPU: 1 PID: 10362 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  140.267148][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  140.277207][T10362] Call Trace:
[  140.280570][T10362]  dump_stack+0x137/0x19d
[  140.284900][T10362]  should_fail+0x23c/0x250
[  140.289326][T10362]  ? mempool_alloc_slab+0x16/0x20
01:57:23 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2000, 0x806000)

[  140.294354][T10362]  __should_failslab+0x81/0x90
[  140.299214][T10362]  should_failslab+0x5/0x20
[  140.303807][T10362]  kmem_cache_alloc+0x46/0x2f0
[  140.308576][T10362]  mempool_alloc_slab+0x16/0x20
[  140.313515][T10362]  ? mempool_free+0x130/0x130
[  140.318301][T10362]  mempool_alloc+0x8c/0x300
[  140.322835][T10362]  ? ext4_es_insert_extent+0x1825/0x19d0
[  140.328469][T10362]  ? iov_iter_npages+0x211/0xa00
[  140.333466][T10362]  bio_alloc_bioset+0xcc/0x480
[  140.338267][T10362]  iomap_dio_bio_actor+0x511/0xb50
[  140.343381][T10362]  iomap_dio_actor+0x26e/0x3b0
[  140.348159][T10362]  iomap_apply+0x1e2/0x400
[  140.352593][T10362]  __iomap_dio_rw+0x5af/0xad0
[  140.357260][T10362]  ? __iomap_dio_rw+0xad0/0xad0
[  140.362111][T10362]  iomap_dio_rw+0x30/0x70
[  140.366466][T10362]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.372007][T10362]  ext4_file_write_iter+0xa04/0x11d0
[  140.377274][T10362]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.382804][T10362]  ? rw_verify_area+0x136/0x250
[  140.387663][T10362]  vfs_write+0x69d/0x770
[  140.391905][T10362]  ksys_write+0xce/0x180
[  140.396132][T10362]  __x64_sys_write+0x3e/0x50
[  140.400700][T10362]  do_syscall_64+0x4a/0x90
[  140.405102][T10362]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  140.411016][T10362] RIP: 0033:0x4665d9
[  140.414919][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.434712][T10362] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:23 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  140.443146][T10362] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  140.451166][T10362] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  140.459204][T10362] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  140.467176][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.475153][T10362] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  140.502806][T10375] FAULT_INJECTION: forcing a failure.
[  140.502806][T10375] name failslab, interval 1, probability 0, space 0, times 0
[  140.515441][T10375] CPU: 0 PID: 10375 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  140.524204][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  140.534390][T10375] Call Trace:
[  140.537683][T10375]  dump_stack+0x137/0x19d
[  140.542050][T10375]  should_fail+0x23c/0x250
[  140.546511][T10375]  __should_failslab+0x81/0x90
[  140.551370][T10375]  should_failslab+0x5/0x20
[  140.555988][T10375]  kmem_cache_alloc_node+0x58/0x2b0
[  140.561181][T10375]  ? create_task_io_context+0x36/0x210
[  140.566644][T10375]  create_task_io_context+0x36/0x210
[  140.571944][T10375]  submit_bio_checks+0x778/0x800
[  140.576903][T10375]  ? __bio_add_page+0x1a3/0x210
[  140.581778][T10375]  submit_bio_noacct+0x33/0x7e0
[  140.586632][T10375]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  140.592204][T10375]  submit_bio+0x16d/0x2b0
[  140.596545][T10375]  iomap_dio_bio_actor+0x91d/0xb50
[  140.601661][T10375]  iomap_dio_actor+0x26e/0x3b0
[  140.605982][T10381] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  140.606426][T10375]  iomap_apply+0x1e2/0x400
[  140.614976][T10381] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  140.619386][T10375]  __iomap_dio_rw+0x5af/0xad0
[  140.635065][T10375]  ? __iomap_dio_rw+0xad0/0xad0
[  140.639965][T10375]  ? ext4_orphan_add+0x7a/0x5f0
[  140.644912][T10375]  ? file_update_time+0x3ae/0x3e0
[  140.649934][T10375]  iomap_dio_rw+0x30/0x70
[  140.654299][T10375]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.659796][T10375]  ext4_file_write_iter+0xa4f/0x11d0
[  140.665077][T10375]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.670618][T10375]  ? rw_verify_area+0x136/0x250
[  140.673226][T10381] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  140.675570][T10375]  aio_write+0x287/0x360
[  140.675591][T10375]  ? kmem_cache_alloc+0x201/0x2f0
[  140.683581][T10381] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
01:57:23 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1800, 0x806000)

01:57:23 executing program 2 (fault-call:8 fault-nth:44):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  140.687814][T10375]  io_submit_one+0x82f/0x1350
[  140.699025][T10381] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  140.703889][T10375]  __se_sys_io_submit+0xf5/0x260
[  140.703913][T10375]  __x64_sys_io_submit+0x3f/0x50
[  140.703932][T10375]  do_syscall_64+0x4a/0x90
[  140.708596][T10381] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
[  140.716631][T10375]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  140.716655][T10375] RIP: 0033:0x4665d9
01:57:23 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3f00, 0x806000)

[  140.751613][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.771272][T10375] RSP: 002b:00007f9648cb2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  140.779692][T10375] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  140.787664][T10375] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  140.795645][T10375] RBP: 00007f9648cb21d0 R08: 0000000000000000 R09: 0000000000000000
01:57:23 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast1=0xe0000300}}, {{0x2, 0x0, @private}}}, 0x108)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000000c0)=[{0x2, 0x4, 0x2, 0x77e1}, {0x3, 0x6, 0x1, 0x4}, {0xf464, 0x6, 0x1, 0x5}]}, 0x10)
socket$packet(0x11, 0x1, 0x300)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x5, &(0x7f0000000340), 0x4)

[  140.803613][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.811687][T10375] R13: 00007fff3c6d4f6f R14: 00007f9648cb2300 R15: 0000000000022000
[  140.841234][T10392] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  140.841913][T10388] FAULT_INJECTION: forcing a failure.
[  140.841913][T10388] name failslab, interval 1, probability 0, space 0, times 0
[  140.849623][T10392] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  140.862298][T10388] CPU: 1 PID: 10388 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  140.882036][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  140.892292][T10388] Call Trace:
[  140.895560][T10388]  dump_stack+0x137/0x19d
[  140.899884][T10388]  should_fail+0x23c/0x250
01:57:23 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x27fd, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  140.904317][T10388]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  140.909601][T10388]  __should_failslab+0x81/0x90
[  140.914421][T10388]  should_failslab+0x5/0x20
[  140.918993][T10388]  kmem_cache_alloc+0x46/0x2f0
[  140.923880][T10388]  ext4_mb_new_blocks+0x2e7/0x1f90
[  140.929258][T10388]  ? bh_uptodate_or_lock+0x57/0xf0
[  140.934405][T10388]  ? ext4_get_branch+0x28e/0x2e0
[  140.939521][T10388]  ext4_ind_map_blocks+0xaab/0x1620
[  140.944711][T10388]  ? ext4_es_lookup_extent+0x206/0x490
[  140.950196][T10388]  ext4_map_blocks+0x6d2/0xef0
[  140.954954][T10388]  ext4_iomap_begin+0x4a3/0x620
[  140.959970][T10388]  iomap_apply+0x8d/0x400
[  140.964387][T10388]  __iomap_dio_rw+0x5af/0xad0
[  140.969064][T10388]  ? __iomap_dio_rw+0xad0/0xad0
[  140.973953][T10388]  iomap_dio_rw+0x30/0x70
[  140.978275][T10388]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.983717][T10388]  ext4_file_write_iter+0xa04/0x11d0
[  140.989064][T10388]  ? ext4_file_write_iter+0x4e1/0x11d0
[  140.994508][T10388]  ? rw_verify_area+0x136/0x250
[  140.999682][T10388]  vfs_write+0x69d/0x770
[  141.003928][T10388]  ksys_write+0xce/0x180
[  141.008157][T10388]  __x64_sys_write+0x3e/0x50
[  141.012769][T10388]  do_syscall_64+0x4a/0x90
[  141.017210][T10388]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  141.023126][T10388] RIP: 0033:0x4665d9
[  141.027011][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  141.046595][T10388] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:24 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:24 executing program 2 (fault-call:8 fault-nth:45):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  141.054997][T10388] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  141.062988][T10388] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  141.070974][T10388] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  141.078936][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.086890][T10388] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:24 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1900, 0x806000)

[  141.138118][T10407] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  141.146510][T10407] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  141.171464][T10407] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  141.179534][T10407] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
[  141.196493][T10408] FAULT_INJECTION: forcing a failure.
[  141.196493][T10408] name failslab, interval 1, probability 0, space 0, times 0
[  141.209293][T10408] CPU: 0 PID: 10408 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  141.218080][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  141.228218][T10408] Call Trace:
[  141.231500][T10408]  dump_stack+0x137/0x19d
01:57:24 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  141.235910][T10408]  should_fail+0x23c/0x250
[  141.240317][T10408]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  141.245603][T10408]  __should_failslab+0x81/0x90
[  141.250383][T10408]  should_failslab+0x5/0x20
[  141.254898][T10408]  kmem_cache_alloc+0x46/0x2f0
[  141.259666][T10408]  ext4_mb_new_blocks+0x2e7/0x1f90
[  141.264783][T10408]  ? bh_uptodate_or_lock+0x57/0xf0
[  141.269893][T10408]  ? ext4_get_branch+0x28e/0x2e0
[  141.274826][T10408]  ext4_ind_map_blocks+0xaab/0x1620
[  141.280025][T10408]  ? ext4_es_lookup_extent+0x206/0x490
[  141.285495][T10408]  ext4_map_blocks+0x6d2/0xef0
[  141.290271][T10408]  ? ext4_iomap_begin+0x3e2/0x620
[  141.295286][T10408]  ? __cond_resched+0x11/0x40
[  141.299957][T10408]  ext4_iomap_begin+0x4a3/0x620
[  141.304798][T10408]  iomap_apply+0x8d/0x400
[  141.309115][T10408]  __iomap_dio_rw+0x5af/0xad0
[  141.313779][T10408]  ? __iomap_dio_rw+0xad0/0xad0
[  141.318673][T10408]  iomap_dio_rw+0x30/0x70
[  141.323054][T10408]  ? ext4_file_write_iter+0x4e1/0x11d0
[  141.328497][T10408]  ext4_file_write_iter+0xa04/0x11d0
[  141.333768][T10408]  ? ext4_file_write_iter+0x4e1/0x11d0
[  141.339213][T10408]  ? rw_verify_area+0x136/0x250
[  141.344052][T10408]  vfs_write+0x69d/0x770
[  141.348310][T10408]  ksys_write+0xce/0x180
[  141.352533][T10408]  __x64_sys_write+0x3e/0x50
[  141.357102][T10408]  do_syscall_64+0x4a/0x90
[  141.361505][T10408]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  141.367384][T10408] RIP: 0033:0x4665d9
01:57:24 executing program 0 (fault-call:6 fault-nth:8):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:24 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x4000, 0x806000)

[  141.371260][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  141.390849][T10408] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.399331][T10408] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  141.407284][T10408] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  141.415312][T10408] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  141.423272][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.431223][T10408] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:24 executing program 2 (fault-call:8 fault-nth:46):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:24 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:24 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1a00, 0x806000)

01:57:24 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  141.461252][T10419] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  141.469648][T10419] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  141.507194][T10425] FAULT_INJECTION: forcing a failure.
[  141.507194][T10425] name failslab, interval 1, probability 0, space 0, times 0
[  141.520032][T10425] CPU: 0 PID: 10425 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  141.528797][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  141.538854][T10425] Call Trace:
[  141.542136][T10425]  dump_stack+0x137/0x19d
[  141.546505][T10425]  should_fail+0x23c/0x250
[  141.550932][T10425]  ? mempool_alloc_slab+0x16/0x20
[  141.556052][T10425]  __should_failslab+0x81/0x90
[  141.560808][T10425]  should_failslab+0x5/0x20
[  141.565352][T10425]  kmem_cache_alloc+0x46/0x2f0
[  141.570119][T10425]  ? mempool_alloc_slab+0x16/0x20
[  141.575162][T10425]  mempool_alloc_slab+0x16/0x20
[  141.580057][T10425]  ? mempool_free+0x130/0x130
[  141.584765][T10425]  mempool_alloc+0x8c/0x300
[  141.589277][T10425]  ? sbitmap_get+0x387/0x410
[  141.593855][T10425]  bio_clone_fast+0xa1/0x2b0
[  141.598530][T10425]  bio_split+0x9b/0x320
[  141.602669][T10425]  ? __blk_mq_get_tag+0x106/0x2a0
[  141.607706][T10425]  __blk_queue_split+0xab2/0xc50
[  141.612631][T10425]  blk_mq_submit_bio+0xd3/0xe90
[  141.617487][T10425]  submit_bio_noacct+0x6f2/0x7e0
[  141.622417][T10425]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  141.627988][T10425]  submit_bio+0x16d/0x2b0
[  141.632367][T10425]  iomap_dio_bio_actor+0x91d/0xb50
[  141.637643][T10425]  iomap_dio_actor+0x26e/0x3b0
[  141.642393][T10425]  iomap_apply+0x1e2/0x400
[  141.646792][T10425]  __iomap_dio_rw+0x5af/0xad0
[  141.651453][T10425]  ? __iomap_dio_rw+0xad0/0xad0
[  141.656373][T10425]  ? ext4_orphan_add+0x7a/0x5f0
[  141.661289][T10425]  ? file_update_time+0x3ae/0x3e0
[  141.666297][T10425]  iomap_dio_rw+0x30/0x70
[  141.670609][T10425]  ? ext4_file_write_iter+0x4e1/0x11d0
[  141.676053][T10425]  ext4_file_write_iter+0xa4f/0x11d0
[  141.681321][T10425]  ? ext4_file_write_iter+0x4e1/0x11d0
[  141.686852][T10425]  ? rw_verify_area+0x136/0x250
[  141.691706][T10425]  aio_write+0x287/0x360
[  141.696003][T10425]  ? kmem_cache_alloc+0x201/0x2f0
[  141.701022][T10425]  io_submit_one+0x82f/0x1350
[  141.705706][T10425]  __se_sys_io_submit+0xf5/0x260
[  141.710628][T10425]  __x64_sys_io_submit+0x3f/0x50
[  141.715558][T10425]  do_syscall_64+0x4a/0x90
[  141.719980][T10425]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  141.726164][T10425] RIP: 0033:0x4665d9
[  141.730038][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  141.749650][T10425] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
01:57:24 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  141.758152][T10425] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  141.766102][T10425] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  141.774083][T10425] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  141.782125][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.790097][T10425] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  141.829982][T10429] FAULT_INJECTION: forcing a failure.
[  141.829982][T10429] name failslab, interval 1, probability 0, space 0, times 0
[  141.842665][T10429] CPU: 0 PID: 10429 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  141.851499][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  141.861634][T10429] Call Trace:
[  141.864912][T10429]  dump_stack+0x137/0x19d
[  141.869274][T10429]  should_fail+0x23c/0x250
[  141.873740][T10429]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  141.879026][T10429]  __should_failslab+0x81/0x90
[  141.883835][T10429]  should_failslab+0x5/0x20
[  141.888344][T10429]  kmem_cache_alloc+0x46/0x2f0
[  141.893109][T10429]  ext4_mb_new_blocks+0x2e7/0x1f90
[  141.898347][T10429]  ? bh_uptodate_or_lock+0x57/0xf0
[  141.903529][T10429]  ? ext4_get_branch+0x28e/0x2e0
[  141.908493][T10429]  ext4_ind_map_blocks+0xaab/0x1620
[  141.913712][T10429]  ? ext4_es_lookup_extent+0x206/0x490
[  141.919157][T10429]  ext4_map_blocks+0x6d2/0xef0
[  141.923957][T10429]  ? ext4_iomap_begin+0x3e2/0x620
[  141.928962][T10429]  ? __cond_resched+0x11/0x40
[  141.933619][T10429]  ext4_iomap_begin+0x4a3/0x620
[  141.938457][T10429]  iomap_apply+0x8d/0x400
[  141.942781][T10429]  __iomap_dio_rw+0x5af/0xad0
[  141.947512][T10429]  ? __iomap_dio_rw+0xad0/0xad0
[  141.952374][T10429]  iomap_dio_rw+0x30/0x70
[  141.956773][T10429]  ? ext4_file_write_iter+0x4e1/0x11d0
[  141.962242][T10429]  ext4_file_write_iter+0xa04/0x11d0
[  141.967610][T10429]  ? ext4_file_write_iter+0x4e1/0x11d0
[  141.973066][T10429]  ? rw_verify_area+0x136/0x250
[  141.977945][T10429]  vfs_write+0x69d/0x770
[  141.982171][T10429]  ksys_write+0xce/0x180
[  141.986485][T10429]  __x64_sys_write+0x3e/0x50
[  141.991069][T10429]  do_syscall_64+0x4a/0x90
[  141.995538][T10429]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  142.001434][T10429] RIP: 0033:0x4665d9
[  142.005311][T10429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  142.024904][T10429] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.033312][T10429] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  142.041341][T10429] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  142.049389][T10429] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  142.057387][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.065440][T10429] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:25 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8008, 0x806000)

01:57:25 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1b00, 0x806000)

01:57:25 executing program 2 (fault-call:8 fault-nth:47):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  142.075438][T10445] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  142.083840][T10445] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  142.106942][T10445] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  142.115436][T10445] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:25 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  142.170648][T10454] FAULT_INJECTION: forcing a failure.
[  142.170648][T10454] name failslab, interval 1, probability 0, space 0, times 0
[  142.183310][T10454] CPU: 0 PID: 10454 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  142.191182][T10459] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  142.192104][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  142.192117][T10454] Call Trace:
[  142.192123][T10454]  dump_stack+0x137/0x19d
[  142.200604][T10459] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  142.210638][T10454]  should_fail+0x23c/0x250
[  142.210662][T10454]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  142.210683][T10454]  __should_failslab+0x81/0x90
[  142.243711][T10454]  should_failslab+0x5/0x20
[  142.248228][T10454]  kmem_cache_alloc+0x46/0x2f0
[  142.253006][T10454]  ext4_mb_new_blocks+0x2e7/0x1f90
[  142.258295][T10454]  ? bh_uptodate_or_lock+0x57/0xf0
[  142.263414][T10454]  ? ext4_get_branch+0x28e/0x2e0
[  142.268354][T10454]  ext4_ind_map_blocks+0xaab/0x1620
[  142.273547][T10454]  ? ext4_es_lookup_extent+0x206/0x490
[  142.279055][T10454]  ext4_map_blocks+0x6d2/0xef0
[  142.283941][T10454]  ? ext4_iomap_begin+0x3e2/0x620
[  142.289120][T10454]  ? __cond_resched+0x11/0x40
[  142.293872][T10454]  ext4_iomap_begin+0x4a3/0x620
[  142.298727][T10454]  iomap_apply+0x8d/0x400
[  142.303063][T10454]  __iomap_dio_rw+0x5af/0xad0
[  142.307780][T10454]  ? __iomap_dio_rw+0xad0/0xad0
[  142.312717][T10454]  iomap_dio_rw+0x30/0x70
01:57:25 executing program 0 (fault-call:6 fault-nth:9):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  142.317113][T10454]  ? ext4_file_write_iter+0x4e1/0x11d0
[  142.322704][T10454]  ext4_file_write_iter+0xa04/0x11d0
[  142.328005][T10454]  ? ext4_file_write_iter+0x4e1/0x11d0
[  142.333478][T10454]  ? rw_verify_area+0x136/0x250
[  142.338339][T10454]  vfs_write+0x69d/0x770
[  142.342799][T10454]  ksys_write+0xce/0x180
[  142.347099][T10454]  __x64_sys_write+0x3e/0x50
[  142.351750][T10454]  do_syscall_64+0x4a/0x90
[  142.356220][T10454]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  142.362116][T10454] RIP: 0033:0x4665d9
01:57:25 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)="ca0bec085ca3a15335b60ebc1beeb1bb1bbef4a768b9f9777072a04c4de15431c70b256aa748cb45bfc5c1dc8ae1a788204f8fa444bf81b190dea8e3921424b16d3c9ea35503a4fa38b7ba14e4f21eb8232446d3ef087dc71ebe81263e67220f5b7dbd60db50dc44133e1620f7d71396378d0d890000b60547285be344df9668f2068fb1a8837fc61f9bcae47ab25822a0250bfb29832fd71940076c687e46c8140ad2fca43076c0db8ff59ab2020000003c1da1c9f20000000000000000000000000000006a425e5ee44da8d7010742f23f69b2da3ab7f1adb1b77bc57afe67", 0xe0, 0x0, 0x0, 0x1}])
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000004c000300", @ANYRES32=r1, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ff01df276900000008000300", @ANYRES32=r1, @ANYBLOB="0c009900070000005f000000060400000500d300040000000600d4000000e7000367d2000b00000006000100ff000000"], 0x50}, 0x1, 0x0, 0x0, 0x60000084}, 0x20000080)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x5, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x3654}, {0x6, 0x7, 0xb7, 0x1}, {0x4, 0x0, 0x9, 0x4}, {0x0, 0x2, 0x84, 0x1}, {0x1, 0x4, 0xff, 0x37}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000001740)={0xb4, r2, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40805}, 0x1)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  142.366028][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  142.385627][T10454] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.394041][T10454] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  142.402221][T10454] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  142.410193][T10454] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
01:57:25 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000080)="aef186fd529906cb77f1295872e2ca31ce148e3fdcd1e0709ac35b2367e090c7571acc120c4fb32b820911c81d036b55683956c81a31104e49f2f44414be8c95b46c648d920f2901af6b4c9e6f950773e6ea12e70ff0d874220dfdc740d5", 0x5e, 0x40080, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fstatfs(r0, &(0x7f0000000280)=""/132)

01:57:25 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8102, 0x806000)

01:57:25 executing program 2 (fault-call:8 fault-nth:48):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  142.418383][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.426358][T10454] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  142.444006][T10466] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  142.452371][T10466] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:25 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1c00, 0x806000)

[  142.475561][T10468] FAULT_INJECTION: forcing a failure.
[  142.475561][T10468] name failslab, interval 1, probability 0, space 0, times 0
[  142.488214][T10468] CPU: 0 PID: 10468 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  142.496975][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  142.507033][T10468] Call Trace:
[  142.510524][T10468]  dump_stack+0x137/0x19d
[  142.514985][T10468]  should_fail+0x23c/0x250
[  142.519407][T10468]  ? mempool_alloc_slab+0x16/0x20
[  142.524452][T10468]  __should_failslab+0x81/0x90
[  142.529252][T10468]  should_failslab+0x5/0x20
[  142.533814][T10468]  kmem_cache_alloc+0x46/0x2f0
[  142.538645][T10468]  mempool_alloc_slab+0x16/0x20
[  142.543494][T10468]  ? mempool_free+0x130/0x130
[  142.548231][T10468]  mempool_alloc+0x8c/0x300
[  142.552722][T10468]  sg_pool_alloc+0x74/0x90
[  142.557135][T10468]  __sg_alloc_table+0xce/0x290
[  142.561882][T10468]  sg_alloc_table_chained+0xaf/0x140
[  142.567145][T10468]  ? sg_alloc_table_chained+0x140/0x140
[  142.572757][T10468]  scsi_alloc_sgtables+0x180/0x500
[  142.577949][T10468]  sd_init_command+0x935/0x15f0
[  142.582788][T10468]  scsi_queue_rq+0x10e0/0x15a0
[  142.587603][T10468]  blk_mq_dispatch_rq_list+0x628/0x10b0
[  142.593135][T10468]  ? deadline_remove_request+0x158/0x180
[  142.598941][T10468]  ? dd_dispatch_request+0x2e1/0x3d0
[  142.604320][T10468]  blk_mq_do_dispatch_sched+0x3cb/0x660
[  142.609849][T10468]  __blk_mq_sched_dispatch_requests+0x21e/0x2c0
[  142.616097][T10468]  blk_mq_sched_dispatch_requests+0x9f/0x110
[  142.622085][T10468]  __blk_mq_run_hw_queue+0xbc/0x140
[  142.627352][T10468]  __blk_mq_delay_run_hw_queue+0x163/0x2f0
[  142.633150][T10468]  ? dd_insert_request+0x255/0x330
[  142.638244][T10468]  blk_mq_run_hw_queue+0x22c/0x250
[  142.643400][T10468]  ? dd_finish_request+0x10/0x10
[  142.648354][T10468]  blk_mq_sched_insert_requests+0x13f/0x200
[  142.654271][T10468]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  142.659640][T10468]  blk_flush_plug_list+0x235/0x260
[  142.664732][T10468]  ? __blk_mq_alloc_request+0x270/0x290
[  142.670260][T10468]  blk_mq_submit_bio+0x68a/0xe90
[  142.675181][T10468]  submit_bio_noacct+0x6f2/0x7e0
[  142.680153][T10468]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  142.685695][T10468]  submit_bio+0x16d/0x2b0
[  142.690061][T10468]  iomap_dio_bio_actor+0x91d/0xb50
[  142.695155][T10468]  iomap_dio_actor+0x26e/0x3b0
[  142.699900][T10468]  iomap_apply+0x1e2/0x400
[  142.704298][T10468]  __iomap_dio_rw+0x5af/0xad0
[  142.708998][T10468]  ? __iomap_dio_rw+0xad0/0xad0
[  142.713831][T10468]  ? ext4_orphan_add+0x7a/0x5f0
[  142.718674][T10468]  ? file_update_time+0x3ae/0x3e0
[  142.723687][T10468]  iomap_dio_rw+0x30/0x70
[  142.727998][T10468]  ? ext4_file_write_iter+0x4e1/0x11d0
[  142.733443][T10468]  ext4_file_write_iter+0xa4f/0x11d0
[  142.738836][T10468]  ? ext4_file_write_iter+0x4e1/0x11d0
[  142.744277][T10468]  ? rw_verify_area+0x136/0x250
[  142.749189][T10468]  aio_write+0x287/0x360
[  142.753415][T10468]  ? kmem_cache_alloc+0x201/0x2f0
[  142.758422][T10468]  io_submit_one+0x82f/0x1350
[  142.763125][T10468]  __se_sys_io_submit+0xf5/0x260
[  142.768126][T10468]  __x64_sys_io_submit+0x3f/0x50
[  142.773051][T10468]  do_syscall_64+0x4a/0x90
[  142.777528][T10468]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  142.783446][T10468] RIP: 0033:0x4665d9
[  142.787327][T10468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  142.807041][T10468] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  142.815443][T10468] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
01:57:25 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  142.823411][T10468] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  142.831380][T10468] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  142.839336][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.847290][T10468] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  142.895792][T10480] FAULT_INJECTION: forcing a failure.
[  142.895792][T10480] name failslab, interval 1, probability 0, space 0, times 0
[  142.908653][T10480] CPU: 1 PID: 10480 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  142.917407][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  142.927452][T10480] Call Trace:
[  142.930732][T10480]  dump_stack+0x137/0x19d
[  142.935067][T10480]  should_fail+0x23c/0x250
[  142.939601][T10480]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  142.944966][T10480]  __should_failslab+0x81/0x90
[  142.949728][T10480]  should_failslab+0x5/0x20
[  142.954234][T10480]  kmem_cache_alloc+0x46/0x2f0
[  142.959086][T10480]  ext4_mb_new_blocks+0x2e7/0x1f90
[  142.964240][T10480]  ? bh_uptodate_or_lock+0x57/0xf0
[  142.969401][T10480]  ? ext4_get_branch+0x28e/0x2e0
[  142.974323][T10480]  ext4_ind_map_blocks+0xaab/0x1620
[  142.979518][T10480]  ? ext4_es_lookup_extent+0x206/0x490
[  142.984975][T10480]  ext4_map_blocks+0x6d2/0xef0
[  142.989825][T10480]  ? ext4_iomap_begin+0x3e2/0x620
[  142.994863][T10480]  ? __cond_resched+0x11/0x40
[  142.999522][T10480]  ext4_iomap_begin+0x4a3/0x620
[  143.004361][T10480]  iomap_apply+0x8d/0x400
[  143.008821][T10480]  __iomap_dio_rw+0x5af/0xad0
[  143.013482][T10480]  ? __iomap_dio_rw+0xad0/0xad0
[  143.018499][T10480]  iomap_dio_rw+0x30/0x70
[  143.023006][T10480]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.028539][T10480]  ext4_file_write_iter+0xa04/0x11d0
[  143.033888][T10480]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.039422][T10480]  ? rw_verify_area+0x136/0x250
[  143.044401][T10480]  vfs_write+0x69d/0x770
[  143.048838][T10480]  ksys_write+0xce/0x180
[  143.053089][T10480]  __x64_sys_write+0x3e/0x50
[  143.057785][T10480]  do_syscall_64+0x4a/0x90
[  143.062185][T10480]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  143.068061][T10480] RIP: 0033:0x4665d9
[  143.072076][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.091750][T10480] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  143.100144][T10480] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  143.108115][T10480] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  143.116084][T10480] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  143.124049][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.132036][T10480] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:26 executing program 2 (fault-call:8 fault-nth:49):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:26 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x402301, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
fsetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=')##:$\x00', 0x6, 0x0)
recvfrom$inet6(r2, &(0x7f0000000280)=""/120, 0x78, 0x10000, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
ioctl$KDDISABIO(r2, 0x4b37)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendto$inet(r0, &(0x7f0000000300)="ac75aac0c6bc66ba82e0f29494d07144c0ed0193a9b7b8168529fdb1b4b9d891e5749db50df92ce40d937148577b3e456458e04b1f1c210ee1092c5d75415690674dd84a06a9b6b863a92fbf34d1505430f6eaabc172fb09e4faf6753fd3ec993242b36a4d1ad68b72d882480e20d27d472f8f3a1d12b4af652662408cbdb24d87884856d8ebd6b428102d8e970c5169a192d9c6287868b2de4c3b7fb3c6554d73f3a09ccf3306551900927a23ac9d5c513307", 0xb3, 0x20000000, 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  143.149684][T10468] syz-executor.0 (10468) used greatest stack depth: 9728 bytes left
[  143.170453][T10489] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  143.178854][T10489] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:26 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:26 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xb401, 0x806000)

01:57:26 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1d00, 0x806000)

[  143.196349][T10489] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  143.204498][T10489] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000ea6f69ae
[  143.227161][T10489] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  143.235220][T10489] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000015da8258
[  143.252172][T10496] FAULT_INJECTION: forcing a failure.
[  143.252172][T10496] name failslab, interval 1, probability 0, space 0, times 0
[  143.264842][T10496] CPU: 1 PID: 10496 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  143.273593][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  143.283645][T10496] Call Trace:
[  143.286911][T10496]  dump_stack+0x137/0x19d
[  143.291242][T10496]  should_fail+0x23c/0x250
[  143.295642][T10496]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  143.300918][T10496]  __should_failslab+0x81/0x90
[  143.305682][T10496]  should_failslab+0x5/0x20
[  143.310204][T10496]  kmem_cache_alloc+0x46/0x2f0
[  143.314959][T10496]  ext4_mb_new_blocks+0x2e7/0x1f90
[  143.320058][T10496]  ? bh_uptodate_or_lock+0x57/0xf0
[  143.325167][T10496]  ? ext4_get_branch+0x28e/0x2e0
[  143.330084][T10496]  ext4_ind_map_blocks+0xaab/0x1620
[  143.335261][T10496]  ? ext4_es_lookup_extent+0x206/0x490
[  143.340786][T10496]  ext4_map_blocks+0x6d2/0xef0
[  143.345529][T10496]  ? ext4_iomap_begin+0x3e2/0x620
[  143.350535][T10496]  ? __cond_resched+0x11/0x40
[  143.355193][T10496]  ext4_iomap_begin+0x4a3/0x620
[  143.360047][T10496]  iomap_apply+0x8d/0x400
[  143.364357][T10496]  __iomap_dio_rw+0x5af/0xad0
[  143.369112][T10496]  ? __iomap_dio_rw+0xad0/0xad0
[  143.373994][T10496]  iomap_dio_rw+0x30/0x70
[  143.378304][T10496]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.383748][T10496]  ext4_file_write_iter+0xa04/0x11d0
[  143.389129][T10496]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.394608][T10496]  ? rw_verify_area+0x136/0x250
[  143.399457][T10496]  vfs_write+0x69d/0x770
[  143.403682][T10496]  ksys_write+0xce/0x180
[  143.408180][T10496]  __x64_sys_write+0x3e/0x50
[  143.412762][T10496]  do_syscall_64+0x4a/0x90
[  143.417309][T10496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  143.423265][T10496] RIP: 0033:0x4665d9
[  143.427141][T10496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
01:57:26 executing program 0 (fault-call:6 fault-nth:10):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:26 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x10, 0x34, @random="e43c9cf39f8cf11fa85d0ef0"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x804)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "51a274ab418368a670d851ce4fc3216af81b43f7a33009def9ca3f09a0f541bcc3df66e8ca9b298b5f1b81e6c9018ed05495dab6ebc62d9fbdf8f5ecac1f74aeedb8d57af8600cc19b9d"}, 0x4e)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
preadv(r3, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/242, 0xf2}], 0x1, 0xd9f, 0xffffffff)

[  143.446725][T10496] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  143.455126][T10496] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  143.463110][T10496] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  143.471074][T10496] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  143.479044][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.486999][T10496] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:26 executing program 2 (fault-call:8 fault-nth:50):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  143.533645][T10506] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  143.542200][T10506] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  143.574168][T10507] FAULT_INJECTION: forcing a failure.
[  143.574168][T10507] name failslab, interval 1, probability 0, space 0, times 0
[  143.586822][T10507] CPU: 0 PID: 10507 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  143.595698][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  143.605849][T10507] Call Trace:
[  143.609131][T10507]  dump_stack+0x137/0x19d
[  143.613471][T10507]  should_fail+0x23c/0x250
[  143.617887][T10513] FAULT_INJECTION: forcing a failure.
[  143.617887][T10513] name failslab, interval 1, probability 0, space 0, times 0
[  143.617893][T10507]  ? mempool_alloc_slab+0x16/0x20
[  143.635494][T10507]  __should_failslab+0x81/0x90
[  143.640426][T10507]  should_failslab+0x5/0x20
[  143.644948][T10507]  kmem_cache_alloc+0x46/0x2f0
[  143.649701][T10507]  mempool_alloc_slab+0x16/0x20
[  143.654542][T10507]  ? mempool_free+0x130/0x130
[  143.659291][T10507]  mempool_alloc+0x8c/0x300
[  143.663830][T10507]  ? blk_mq_sched_dispatch_requests+0xe6/0x110
[  143.669979][T10507]  ? __blk_mq_run_hw_queue+0xea/0x140
[  143.675329][T10507]  bio_clone_fast+0xa1/0x2b0
[  143.679901][T10507]  bio_split+0x9b/0x320
[  143.684039][T10507]  __blk_queue_split+0xab2/0xc50
[  143.688961][T10507]  blk_mq_submit_bio+0xd3/0xe90
[  143.693799][T10507]  submit_bio_noacct+0x6f2/0x7e0
[  143.698788][T10507]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  143.704315][T10507]  submit_bio+0x16d/0x2b0
[  143.708700][T10507]  iomap_dio_bio_actor+0x91d/0xb50
[  143.713845][T10507]  iomap_dio_actor+0x26e/0x3b0
[  143.718594][T10507]  iomap_apply+0x1e2/0x400
[  143.722990][T10507]  __iomap_dio_rw+0x5af/0xad0
[  143.727658][T10507]  ? __iomap_dio_rw+0xad0/0xad0
[  143.732555][T10507]  ? ext4_orphan_add+0x7a/0x5f0
[  143.737389][T10507]  ? file_update_time+0x3ae/0x3e0
[  143.742452][T10507]  iomap_dio_rw+0x30/0x70
[  143.746765][T10507]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.752219][T10507]  ext4_file_write_iter+0xa4f/0x11d0
[  143.757593][T10507]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.763083][T10507]  ? rw_verify_area+0x136/0x250
[  143.767957][T10507]  aio_write+0x287/0x360
[  143.772187][T10507]  ? kmem_cache_alloc+0x201/0x2f0
[  143.777212][T10507]  io_submit_one+0x82f/0x1350
[  143.781882][T10507]  __se_sys_io_submit+0xf5/0x260
[  143.786801][T10507]  __x64_sys_io_submit+0x3f/0x50
[  143.791742][T10507]  do_syscall_64+0x4a/0x90
[  143.796175][T10507]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  143.802051][T10507] RIP: 0033:0x4665d9
[  143.805922][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.825601][T10507] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  143.834000][T10507] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  143.841968][T10507] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  143.849922][T10507] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  143.857899][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.865851][T10507] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  143.873861][T10513] CPU: 1 PID: 10513 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  143.882737][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  143.892786][T10513] Call Trace:
[  143.896168][T10513]  dump_stack+0x137/0x19d
[  143.900504][T10513]  should_fail+0x23c/0x250
[  143.905003][T10513]  ? mempool_alloc_slab+0x16/0x20
[  143.910028][T10513]  __should_failslab+0x81/0x90
[  143.915228][T10513]  should_failslab+0x5/0x20
[  143.919727][T10513]  kmem_cache_alloc+0x46/0x2f0
[  143.924498][T10513]  mempool_alloc_slab+0x16/0x20
[  143.929404][T10513]  ? mempool_free+0x130/0x130
[  143.934073][T10513]  mempool_alloc+0x8c/0x300
[  143.938573][T10513]  ? ext4_es_insert_extent+0x1825/0x19d0
[  143.944323][T10513]  ? iov_iter_npages+0x211/0xa00
[  143.949328][T10513]  bio_alloc_bioset+0xcc/0x480
[  143.954096][T10513]  iomap_dio_bio_actor+0x511/0xb50
[  143.959821][T10513]  iomap_dio_actor+0x26e/0x3b0
[  143.964723][T10513]  iomap_apply+0x1e2/0x400
[  143.969181][T10513]  __iomap_dio_rw+0x5af/0xad0
[  143.973851][T10513]  ? __iomap_dio_rw+0xad0/0xad0
[  143.978785][T10513]  iomap_dio_rw+0x30/0x70
[  143.983106][T10513]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.988625][T10513]  ext4_file_write_iter+0xa04/0x11d0
[  143.993903][T10513]  ? ext4_file_write_iter+0x4e1/0x11d0
[  143.999343][T10513]  ? rw_verify_area+0x136/0x250
[  144.004201][T10513]  vfs_write+0x69d/0x770
[  144.008461][T10513]  ksys_write+0xce/0x180
[  144.012687][T10513]  __x64_sys_write+0x3e/0x50
[  144.017298][T10513]  do_syscall_64+0x4a/0x90
[  144.021786][T10513]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  144.027673][T10513] RIP: 0033:0x4665d9
[  144.031668][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  144.051523][T10513] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  144.060016][T10513] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  144.068019][T10513] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
01:57:27 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  144.076027][T10513] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  144.084056][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.092038][T10513] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:27 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x22)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x2, 0x3651}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
sendto$inet(r1, &(0x7f0000000080)="a303931c0b2a9549d6bbfe22b1e43eae5f975dc0d036827285218c00ed778e144e2723172597012353165cf20e31a1c70064cb07e06401b18733f4e22b9e7bc129acd5faeaab", 0x46, 0x2008010, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0xa0f, 0x4)
syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3)

01:57:27 executing program 2 (fault-call:8 fault-nth:51):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:27 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
close_range(r0, r3, 0x2)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="206fc3ba8e35b23a332f6bb6f10010048f08c7544602d3af5b", 0x19}, {&(0x7f0000001940)="fa0e9fef031736fa336813ac7d6e3f1a401c3c", 0x13}], 0x2}, 0x20000800)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000004c0))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000001740)=""/203, 0xcb}, {&(0x7f0000001980)=""/70, 0x46}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000000040)=""/34, 0x22}], 0x4, 0x2, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001a00)={'syz0', "5500e4aca1246f2ed43f59ee46b20346821daf183d0e351e468a0ec2607173c99b57b4fb221864bc1f7a386698786be5ac866c44ef513fd5bfb832c175d022bb6ee69e914c12e087bd89ac19e976984b0b7e6ac5c58111b4709ebda6acd8fe9425e0c883285ef74cebd5d4a11da5a5c89877eb07f3b5a95a2512f62534ca17448fe4f85ce08be9b1b1d260808caae121f0e2b3aad2a25e82101a8487aab98db4863c444e7016b13bb55b8c1b82f96a4971f7501b806642166a9c6ffb9dd3bd6f8798b242315f91b96ae47bbae0a40c5e30a7b4e3efa6153ba8f810cf5aa82fd85b6d64dae8111e55dd9d741ea700"/247}, 0x13e)
sendto$inet(r1, &(0x7f0000000440)="a5f1587fdddd16c8d74dd86c7e56228a3cac7099f233683c359f6d59a2b08ae20d648747901a3605b3e5f8b1c6619354475cc9b298f3cab682dbb42f9f1f3fe096d9cd4a5f58cb13c8f93d7b04fbdc41542d2954b55d7914372c3489f5", 0x5d, 0x1, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x214800, 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
recvmsg(r4, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000280)=""/113, 0x71}], 0x2, &(0x7f00000005c0)=""/234, 0xea}, 0x43)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:27 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1e00, 0x806000)

01:57:27 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xefff, 0x806000)

[  144.183698][T10523] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  144.192128][T10523] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:27 executing program 0 (fault-call:6 fault-nth:11):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  144.236056][T10534] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  144.244554][T10534] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  144.269507][T10536] FAULT_INJECTION: forcing a failure.
[  144.269507][T10536] name failslab, interval 1, probability 0, space 0, times 0
[  144.282179][T10536] CPU: 0 PID: 10536 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  144.290981][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  144.301128][T10536] Call Trace:
[  144.304401][T10536]  dump_stack+0x137/0x19d
[  144.308820][T10536]  should_fail+0x23c/0x250
[  144.313300][T10536]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  144.318585][T10536]  __should_failslab+0x81/0x90
[  144.323356][T10536]  should_failslab+0x5/0x20
[  144.327927][T10536]  kmem_cache_alloc+0x46/0x2f0
[  144.332696][T10536]  ext4_mb_new_blocks+0x2e7/0x1f90
[  144.337893][T10536]  ? bh_uptodate_or_lock+0x57/0xf0
[  144.343091][T10536]  ? ext4_get_branch+0x28e/0x2e0
[  144.348025][T10536]  ext4_ind_map_blocks+0xaab/0x1620
[  144.353218][T10536]  ? ext4_es_lookup_extent+0x206/0x490
[  144.358717][T10536]  ext4_map_blocks+0x6d2/0xef0
[  144.363546][T10536]  ? ext4_iomap_begin+0x3e2/0x620
[  144.368639][T10536]  ? __cond_resched+0x11/0x40
[  144.373380][T10536]  ext4_iomap_begin+0x4a3/0x620
[  144.377276][T10540] FAULT_INJECTION: forcing a failure.
[  144.377276][T10540] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  144.378237][T10536]  iomap_apply+0x8d/0x400
[  144.395726][T10536]  __iomap_dio_rw+0x5af/0xad0
[  144.400428][T10536]  ? __iomap_dio_rw+0xad0/0xad0
[  144.405266][T10536]  iomap_dio_rw+0x30/0x70
[  144.409581][T10536]  ? ext4_file_write_iter+0x4e1/0x11d0
[  144.415171][T10536]  ext4_file_write_iter+0xa04/0x11d0
[  144.420496][T10536]  ? ext4_file_write_iter+0x4e1/0x11d0
[  144.425956][T10536]  ? rw_verify_area+0x136/0x250
[  144.430918][T10536]  vfs_write+0x69d/0x770
[  144.435143][T10536]  ksys_write+0xce/0x180
[  144.439387][T10536]  __x64_sys_write+0x3e/0x50
[  144.443956][T10536]  do_syscall_64+0x4a/0x90
[  144.448368][T10536]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  144.454333][T10536] RIP: 0033:0x4665d9
[  144.458206][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  144.477794][T10536] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:27 executing program 1:
r0 = socket$inet6(0x10, 0x80000, 0x1)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0xfffffffe, @private2, 0x2}, {0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xcd8}, 0x81, [0xffff75bd, 0x9, 0x8, 0x3b, 0x6, 0x3f, 0x7ff, 0x7]}, 0x5c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  144.486277][T10536] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  144.494229][T10536] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  144.502179][T10536] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  144.510184][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.518156][T10536] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  144.526111][T10540] CPU: 1 PID: 10540 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  144.534940][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  144.545158][T10540] Call Trace:
[  144.548423][T10540]  dump_stack+0x137/0x19d
[  144.552740][T10540]  should_fail+0x23c/0x250
[  144.557142][T10540]  __alloc_pages+0x102/0x320
[  144.561769][T10540]  alloc_pages+0x21d/0x310
[  144.566186][T10540]  __page_cache_alloc+0x4d/0xf0
[  144.571087][T10540]  pagecache_get_page+0x5f4/0x900
[  144.576090][T10540]  grab_cache_page_write_begin+0x3f/0x70
[  144.581800][T10540]  ext4_da_write_begin+0x305/0x820
[  144.586989][T10540]  ? iov_iter_fault_in_readable+0x1b5/0x3a0
[  144.592863][T10540]  generic_perform_write+0x196/0x3a0
[  144.598147][T10540]  ? ext4_da_write_begin+0x820/0x820
[  144.603503][T10540]  ext4_buffered_write_iter+0x2f2/0x3f0
[  144.609274][T10540]  ext4_file_write_iter+0x2e7/0x11d0
[  144.614576][T10540]  ? fsnotify_perm+0x59/0x2e0
[  144.619232][T10540]  ? security_file_permission+0x87/0xa0
[  144.624759][T10540]  ? rw_verify_area+0x136/0x250
[  144.629604][T10540]  aio_write+0x287/0x360
[  144.633888][T10540]  ? kmem_cache_alloc+0x201/0x2f0
[  144.638894][T10540]  io_submit_one+0x82f/0x1350
[  144.643554][T10540]  __se_sys_io_submit+0xf5/0x260
[  144.648478][T10540]  __x64_sys_io_submit+0x3f/0x50
[  144.653399][T10540]  do_syscall_64+0x4a/0x90
[  144.657799][T10540]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  144.663685][T10540] RIP: 0033:0x4665d9
[  144.667561][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
01:57:27 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  144.687233][T10540] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  144.695726][T10540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  144.703679][T10540] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648c92000
[  144.711753][T10540] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  144.719719][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.727781][T10540] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
01:57:27 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1f00, 0x806000)

01:57:27 executing program 2 (fault-call:8 fault-nth:52):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:27 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf000, 0x806000)

01:57:27 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x6, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080)=0x8, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = signalfd(r1, &(0x7f00000000c0), 0x8)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0xd44, 0xff, 0xffffffff, 0x3, 0x200, 0x200, 0x6}, 0x1c)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_hsr\x00', 0x2}, 0x18)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
close(r0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  144.768062][T10554] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  144.776474][T10554] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:27 executing program 0 (fault-call:6 fault-nth:12):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  144.824468][T10565] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  144.832820][T10565] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  144.845677][T10564] FAULT_INJECTION: forcing a failure.
[  144.845677][T10564] name failslab, interval 1, probability 0, space 0, times 0
[  144.858410][T10564] CPU: 1 PID: 10564 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  144.867175][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  144.877402][T10564] Call Trace:
[  144.880679][T10564]  dump_stack+0x137/0x19d
[  144.885067][T10564]  should_fail+0x23c/0x250
[  144.889465][T10564]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  144.894811][T10564]  __should_failslab+0x81/0x90
[  144.899565][T10564]  should_failslab+0x5/0x20
[  144.904179][T10564]  kmem_cache_alloc+0x46/0x2f0
[  144.909305][T10564]  ext4_mb_new_blocks+0x2e7/0x1f90
[  144.914418][T10564]  ? bh_uptodate_or_lock+0x57/0xf0
[  144.919515][T10564]  ? ext4_get_branch+0x28e/0x2e0
[  144.924483][T10564]  ext4_ind_map_blocks+0xaab/0x1620
[  144.929751][T10564]  ? ext4_es_lookup_extent+0x206/0x490
[  144.935276][T10564]  ext4_map_blocks+0x6d2/0xef0
[  144.940037][T10564]  ? ext4_iomap_begin+0x3e2/0x620
[  144.945041][T10564]  ? __cond_resched+0x11/0x40
[  144.949695][T10564]  ext4_iomap_begin+0x4a3/0x620
[  144.954534][T10564]  iomap_apply+0x8d/0x400
[  144.958859][T10564]  __iomap_dio_rw+0x5af/0xad0
[  144.963780][T10564]  ? __iomap_dio_rw+0xad0/0xad0
[  144.968669][T10564]  iomap_dio_rw+0x30/0x70
[  144.973003][T10564]  ? ext4_file_write_iter+0x4e1/0x11d0
[  144.978466][T10564]  ext4_file_write_iter+0xa04/0x11d0
[  144.983815][T10564]  ? ext4_file_write_iter+0x4e1/0x11d0
[  144.989273][T10564]  ? rw_verify_area+0x136/0x250
[  144.994184][T10564]  vfs_write+0x69d/0x770
[  144.998405][T10564]  ksys_write+0xce/0x180
[  145.002626][T10564]  __x64_sys_write+0x3e/0x50
[  145.007204][T10564]  do_syscall_64+0x4a/0x90
[  145.011639][T10564]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  145.017529][T10564] RIP: 0033:0x4665d9
[  145.021490][T10564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  145.041110][T10564] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.049515][T10564] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  145.057494][T10564] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  145.065449][T10564] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
01:57:28 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  145.073414][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.081480][T10564] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:28 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x9)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x243a746c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  145.134425][T10574] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  145.143091][T10574] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  145.160547][T10575] FAULT_INJECTION: forcing a failure.
[  145.160547][T10575] name failslab, interval 1, probability 0, space 0, times 0
[  145.173379][T10575] CPU: 0 PID: 10575 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
01:57:28 executing program 2 (fault-call:8 fault-nth:53):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  145.182150][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  145.192219][T10575] Call Trace:
[  145.195495][T10575]  dump_stack+0x137/0x19d
[  145.199824][T10575]  should_fail+0x23c/0x250
[  145.204361][T10575]  ? mempool_alloc_slab+0x16/0x20
[  145.209387][T10575]  __should_failslab+0x81/0x90
[  145.214156][T10575]  should_failslab+0x5/0x20
[  145.218657][T10575]  kmem_cache_alloc+0x46/0x2f0
[  145.223424][T10575]  mempool_alloc_slab+0x16/0x20
[  145.228284][T10575]  ? mempool_free+0x130/0x130
[  145.232998][T10575]  mempool_alloc+0x8c/0x300
[  145.237499][T10575]  sg_pool_alloc+0x74/0x90
[  145.241908][T10575]  __sg_alloc_table+0xce/0x290
[  145.246680][T10575]  sg_alloc_table_chained+0xaf/0x140
[  145.252029][T10575]  ? sg_alloc_table_chained+0x140/0x140
[  145.257562][T10575]  scsi_alloc_sgtables+0x180/0x500
[  145.262665][T10575]  sd_init_command+0x935/0x15f0
[  145.267674][T10575]  scsi_queue_rq+0x10e0/0x15a0
[  145.272663][T10575]  blk_mq_dispatch_rq_list+0x628/0x10b0
[  145.278214][T10575]  ? deadline_remove_request+0x158/0x180
[  145.283828][T10575]  ? dd_dispatch_request+0x2e1/0x3d0
[  145.289118][T10575]  blk_mq_do_dispatch_sched+0x3cb/0x660
[  145.294654][T10575]  __blk_mq_sched_dispatch_requests+0x21e/0x2c0
[  145.300996][T10575]  blk_mq_sched_dispatch_requests+0x9f/0x110
[  145.307336][T10575]  __blk_mq_run_hw_queue+0xbc/0x140
[  145.312531][T10575]  __blk_mq_delay_run_hw_queue+0x163/0x2f0
[  145.318323][T10575]  ? dd_insert_request+0x255/0x330
[  145.323418][T10575]  blk_mq_run_hw_queue+0x22c/0x250
[  145.328883][T10575]  ? dd_finish_request+0x10/0x10
[  145.333804][T10575]  blk_mq_sched_insert_requests+0x13f/0x200
[  145.339711][T10575]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  145.345127][T10575]  blk_flush_plug_list+0x235/0x260
[  145.350243][T10575]  ? __blk_mq_alloc_request+0x270/0x290
[  145.355849][T10575]  blk_mq_submit_bio+0x68a/0xe90
[  145.360773][T10575]  submit_bio_noacct+0x6f2/0x7e0
[  145.365698][T10575]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  145.371241][T10575]  submit_bio+0x16d/0x2b0
[  145.375560][T10575]  iomap_dio_bio_actor+0x91d/0xb50
[  145.380655][T10575]  iomap_dio_actor+0x26e/0x3b0
[  145.385402][T10575]  iomap_apply+0x1e2/0x400
[  145.389806][T10575]  __iomap_dio_rw+0x5af/0xad0
[  145.394466][T10575]  ? __iomap_dio_rw+0xad0/0xad0
[  145.399301][T10575]  ? ext4_orphan_add+0x7a/0x5f0
[  145.404261][T10575]  ? file_update_time+0x3ae/0x3e0
[  145.409269][T10575]  iomap_dio_rw+0x30/0x70
[  145.413598][T10575]  ? ext4_file_write_iter+0x4e1/0x11d0
[  145.419073][T10575]  ext4_file_write_iter+0xa4f/0x11d0
[  145.424355][T10575]  ? ext4_file_write_iter+0x4e1/0x11d0
[  145.429798][T10575]  ? rw_verify_area+0x136/0x250
[  145.434696][T10575]  aio_write+0x287/0x360
[  145.438997][T10575]  ? kmem_cache_alloc+0x201/0x2f0
[  145.444007][T10575]  io_submit_one+0x82f/0x1350
[  145.448742][T10575]  __se_sys_io_submit+0xf5/0x260
[  145.453663][T10575]  __x64_sys_io_submit+0x3f/0x50
[  145.458587][T10575]  do_syscall_64+0x4a/0x90
[  145.462989][T10575]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  145.468866][T10575] RIP: 0033:0x4665d9
[  145.472740][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  145.492458][T10575] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  145.500863][T10575] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  145.508816][T10575] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  145.516808][T10575] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  145.524785][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.532751][T10575] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  145.561878][T10582] FAULT_INJECTION: forcing a failure.
[  145.561878][T10582] name failslab, interval 1, probability 0, space 0, times 0
[  145.574302][T10587] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  145.574505][T10582] CPU: 0 PID: 10582 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  145.582789][T10587] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:28 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2000, 0x806000)

01:57:28 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xff01, 0x806000)

[  145.591531][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  145.591543][T10582] Call Trace:
[  145.591550][T10582]  dump_stack+0x137/0x19d
[  145.620255][T10582]  should_fail+0x23c/0x250
[  145.624679][T10582]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  145.629977][T10582]  __should_failslab+0x81/0x90
[  145.634804][T10582]  should_failslab+0x5/0x20
[  145.639312][T10582]  kmem_cache_alloc+0x46/0x2f0
[  145.644081][T10582]  ext4_mb_new_blocks+0x2e7/0x1f90
[  145.649305][T10582]  ? bh_uptodate_or_lock+0x57/0xf0
[  145.654418][T10582]  ? ext4_get_branch+0x28e/0x2e0
[  145.659380][T10582]  ext4_ind_map_blocks+0xaab/0x1620
[  145.664577][T10582]  ? ext4_es_lookup_extent+0x206/0x490
[  145.670050][T10582]  ext4_map_blocks+0x6d2/0xef0
[  145.674818][T10582]  ? ext4_iomap_begin+0x3e2/0x620
[  145.680195][T10582]  ? __cond_resched+0x11/0x40
[  145.684905][T10582]  ext4_iomap_begin+0x4a3/0x620
[  145.689767][T10582]  iomap_apply+0x8d/0x400
[  145.694097][T10582]  __iomap_dio_rw+0x5af/0xad0
[  145.698774][T10582]  ? __iomap_dio_rw+0xad0/0xad0
[  145.703631][T10582]  iomap_dio_rw+0x30/0x70
[  145.707963][T10582]  ? ext4_file_write_iter+0x4e1/0x11d0
[  145.713470][T10582]  ext4_file_write_iter+0xa04/0x11d0
[  145.718867][T10582]  ? ext4_file_write_iter+0x4e1/0x11d0
[  145.724398][T10582]  ? rw_verify_area+0x136/0x250
[  145.729298][T10582]  vfs_write+0x69d/0x770
[  145.733613][T10582]  ksys_write+0xce/0x180
[  145.737860][T10582]  __x64_sys_write+0x3e/0x50
[  145.742454][T10582]  do_syscall_64+0x4a/0x90
[  145.747006][T10582]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  145.752904][T10582] RIP: 0033:0x4665d9
[  145.756799][T10582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  145.776412][T10582] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.784832][T10582] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  145.792829][T10582] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  145.800809][T10582] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
01:57:28 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3f00, 0x806000)

01:57:28 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:28 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xff0f, 0x806000)

01:57:28 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x208200, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r5])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={<r6=>0x0}, &(0x7f0000000700)=0xc)
r7 = geteuid()
r8 = fork()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}], 0xc8, 0x4004000}], 0x1, 0x4004080)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  145.808789][T10582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.816766][T10582] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:28 executing program 2 (fault-call:8 fault-nth:54):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  145.878096][T10604] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  145.886510][T10604] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  145.916562][T10604] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:28 executing program 0 (fault-call:6 fault-nth:13):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  145.924632][T10604] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
[  145.950556][T10612] FAULT_INJECTION: forcing a failure.
[  145.950556][T10612] name failslab, interval 1, probability 0, space 0, times 0
[  145.950877][T10604] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  145.963206][T10612] CPU: 1 PID: 10612 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  145.971176][T10604] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006a937108
[  145.980003][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  145.980015][T10612] Call Trace:
[  145.980023][T10612]  dump_stack+0x137/0x19d
[  145.980047][T10612]  should_fail+0x23c/0x250
[  146.007458][T10604] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  146.008670][T10612]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  146.013099][T10604] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
[  146.021049][T10612]  __should_failslab+0x81/0x90
[  146.026672][T10604] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  146.037363][T10612]  should_failslab+0x5/0x20
[  146.037388][T10612]  kmem_cache_alloc+0x46/0x2f0
[  146.042166][T10604] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006a937108
[  146.050109][T10612]  ext4_mb_new_blocks+0x2e7/0x1f90
[  146.050130][T10612]  ? bh_uptodate_or_lock+0x57/0xf0
[  146.080802][T10612]  ? ext4_get_branch+0x28e/0x2e0
[  146.085791][T10612]  ext4_ind_map_blocks+0xaab/0x1620
[  146.090974][T10612]  ? ext4_es_lookup_extent+0x206/0x490
[  146.096469][T10612]  ext4_map_blocks+0x6d2/0xef0
[  146.101214][T10612]  ? ext4_iomap_begin+0x3e2/0x620
[  146.106220][T10612]  ? __cond_resched+0x11/0x40
[  146.110879][T10612]  ext4_iomap_begin+0x4a3/0x620
[  146.115745][T10612]  iomap_apply+0x8d/0x400
[  146.120105][T10612]  __iomap_dio_rw+0x5af/0xad0
[  146.124784][T10612]  ? __iomap_dio_rw+0xad0/0xad0
[  146.129625][T10612]  iomap_dio_rw+0x30/0x70
[  146.133937][T10612]  ? ext4_file_write_iter+0x4e1/0x11d0
[  146.139443][T10612]  ext4_file_write_iter+0xa04/0x11d0
[  146.144714][T10612]  ? ext4_file_write_iter+0x4e1/0x11d0
[  146.150210][T10612]  ? rw_verify_area+0x136/0x250
[  146.155048][T10612]  vfs_write+0x69d/0x770
[  146.159314][T10612]  ksys_write+0xce/0x180
[  146.163556][T10612]  __x64_sys_write+0x3e/0x50
[  146.168180][T10612]  do_syscall_64+0x4a/0x90
[  146.172599][T10612]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  146.178478][T10612] RIP: 0033:0x4665d9
[  146.182387][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  146.202094][T10612] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.210518][T10612] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  146.218473][T10612] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  146.226513][T10612] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  146.234465][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.242417][T10612] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:29 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fork()
syz_open_procfs(r3, &(0x7f0000000080)='syscall\x00')
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r4 = epoll_create1(0x80000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001d40)={{r4}, r5, 0x4, @unused=[0x2, 0x7, 0x7fff, 0x200], @devid=r6})
socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  146.283092][T10619] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  146.291558][T10619] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  146.314128][T10620] FAULT_INJECTION: forcing a failure.
[  146.314128][T10620] name failslab, interval 1, probability 0, space 0, times 0
[  146.324379][T10619] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  146.326849][T10620] CPU: 1 PID: 10620 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  146.334792][T10619] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
[  146.343508][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  146.343521][T10620] Call Trace:
[  146.343528][T10620]  dump_stack+0x137/0x19d
[  146.364053][T10619] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  146.364616][T10620]  should_fail+0x23c/0x250
[  146.367901][T10619] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006a937108
[  146.372206][T10620]  ? mempool_alloc_slab+0x16/0x20
[  146.381636][T10619] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  146.384642][T10620]  __should_failslab+0x81/0x90
[  146.384669][T10620]  should_failslab+0x5/0x20
[  146.395670][T10619] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
[  146.400659][T10620]  kmem_cache_alloc+0x46/0x2f0
[  146.409022][T10619] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  146.413371][T10620]  mempool_alloc_slab+0x16/0x20
[  146.413394][T10620]  ? mempool_free+0x130/0x130
[  146.417881][T10619] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006a937108
[  146.428872][T10620]  mempool_alloc+0x8c/0x300
[  146.428893][T10620]  bio_alloc_bioset+0xcc/0x480
[  146.428910][T10620]  iomap_dio_bio_actor+0x511/0xb50
[  146.476490][T10620]  iomap_dio_actor+0x26e/0x3b0
[  146.481293][T10620]  iomap_apply+0x1e2/0x400
[  146.485698][T10620]  __iomap_dio_rw+0x5af/0xad0
[  146.490361][T10620]  ? __iomap_dio_rw+0xad0/0xad0
[  146.495253][T10620]  ? ext4_orphan_add+0x7a/0x5f0
[  146.500177][T10620]  ? file_update_time+0x1bd/0x3e0
[  146.505187][T10620]  iomap_dio_rw+0x30/0x70
[  146.509507][T10620]  ? ext4_file_write_iter+0x4e1/0x11d0
[  146.514997][T10620]  ext4_file_write_iter+0xa4f/0x11d0
[  146.520265][T10620]  ? ext4_file_write_iter+0x4e1/0x11d0
[  146.525772][T10620]  ? rw_verify_area+0x136/0x250
[  146.530618][T10620]  aio_write+0x287/0x360
[  146.534843][T10620]  ? kmem_cache_alloc+0x201/0x2f0
[  146.539848][T10620]  io_submit_one+0x82f/0x1350
[  146.544538][T10620]  __se_sys_io_submit+0xf5/0x260
[  146.549460][T10620]  __x64_sys_io_submit+0x3f/0x50
[  146.554405][T10620]  do_syscall_64+0x4a/0x90
[  146.558810][T10620]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  146.564776][T10620] RIP: 0033:0x4665d9
[  146.568761][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  146.588351][T10620] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  146.596761][T10620] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  146.604713][T10620] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  146.612751][T10620] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  146.620717][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
01:57:29 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:29 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x4000, 0x806000)

01:57:29 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xffef, 0x806000)

01:57:29 executing program 2 (fault-call:8 fault-nth:55):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  146.628670][T10620] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  146.700082][T10635] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  146.708509][T10635] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  146.737937][T10638] FAULT_INJECTION: forcing a failure.
[  146.737937][T10638] name failslab, interval 1, probability 0, space 0, times 0
[  146.750631][T10638] CPU: 0 PID: 10638 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  146.759390][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  146.769574][T10638] Call Trace:
[  146.772844][T10638]  dump_stack+0x137/0x19d
[  146.777267][T10638]  should_fail+0x23c/0x250
[  146.781665][T10638]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  146.786970][T10638]  __should_failslab+0x81/0x90
[  146.791795][T10638]  should_failslab+0x5/0x20
[  146.796313][T10638]  kmem_cache_alloc+0x46/0x2f0
[  146.801059][T10638]  ext4_mb_new_blocks+0x2e7/0x1f90
[  146.806165][T10638]  ? bh_uptodate_or_lock+0x57/0xf0
[  146.811400][T10638]  ? ext4_get_branch+0x28e/0x2e0
[  146.816314][T10638]  ext4_ind_map_blocks+0xaab/0x1620
[  146.821504][T10638]  ? ext4_es_lookup_extent+0x206/0x490
[  146.826957][T10638]  ext4_map_blocks+0x6d2/0xef0
[  146.831715][T10638]  ? ext4_iomap_begin+0x3e2/0x620
[  146.836891][T10638]  ? __cond_resched+0x11/0x40
[  146.841557][T10638]  ext4_iomap_begin+0x4a3/0x620
[  146.846418][T10638]  iomap_apply+0x8d/0x400
[  146.850732][T10638]  __iomap_dio_rw+0x5af/0xad0
[  146.855412][T10638]  ? __iomap_dio_rw+0xad0/0xad0
[  146.860244][T10638]  iomap_dio_rw+0x30/0x70
[  146.864635][T10638]  ? ext4_file_write_iter+0x4e1/0x11d0
[  146.870079][T10638]  ext4_file_write_iter+0xa04/0x11d0
[  146.875359][T10638]  ? ext4_file_write_iter+0x4e1/0x11d0
[  146.880872][T10638]  ? rw_verify_area+0x136/0x250
[  146.885787][T10638]  vfs_write+0x69d/0x770
[  146.890009][T10638]  ksys_write+0xce/0x180
[  146.894243][T10638]  __x64_sys_write+0x3e/0x50
[  146.898819][T10638]  do_syscall_64+0x4a/0x90
[  146.903219][T10638]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  146.909144][T10638] RIP: 0033:0x4665d9
[  146.913019][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  146.932679][T10638] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.941072][T10638] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  146.949024][T10638] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  146.956996][T10638] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  146.964956][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.973038][T10638] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:30 executing program 2 (fault-call:8 fault-nth:56):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:30 executing program 0 (fault-call:6 fault-nth:14):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  147.006617][T10644] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  147.015111][T10644] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:30 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x20000, 0x806000)

01:57:30 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8008, 0x806000)

01:57:30 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  147.186585][T10660] FAULT_INJECTION: forcing a failure.
[  147.186585][T10660] name failslab, interval 1, probability 0, space 0, times 0
[  147.199452][T10660] CPU: 0 PID: 10660 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  147.199491][T10655] FAULT_INJECTION: forcing a failure.
[  147.199491][T10655] name failslab, interval 1, probability 0, space 0, times 0
[  147.208210][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  147.208222][T10660] Call Trace:
[  147.208230][T10660]  dump_stack+0x137/0x19d
[  147.208255][T10660]  should_fail+0x23c/0x250
[  147.243449][T10660]  ? mempool_alloc_slab+0x16/0x20
[  147.248511][T10660]  __should_failslab+0x81/0x90
[  147.253258][T10660]  should_failslab+0x5/0x20
[  147.257764][T10660]  kmem_cache_alloc+0x46/0x2f0
[  147.262513][T10660]  mempool_alloc_slab+0x16/0x20
[  147.267383][T10660]  ? mempool_free+0x130/0x130
[  147.272039][T10660]  mempool_alloc+0x8c/0x300
[  147.276595][T10660]  sg_pool_alloc+0x74/0x90
[  147.280993][T10660]  __sg_alloc_table+0xce/0x290
[  147.285749][T10660]  sg_alloc_table_chained+0xaf/0x140
[  147.291039][T10660]  ? sg_alloc_table_chained+0x140/0x140
[  147.296656][T10660]  scsi_alloc_sgtables+0x180/0x500
[  147.301858][T10660]  sd_init_command+0x935/0x15f0
[  147.306752][T10660]  scsi_queue_rq+0x10e0/0x15a0
[  147.311500][T10660]  blk_mq_dispatch_rq_list+0x628/0x10b0
[  147.317030][T10660]  ? deadline_remove_request+0x158/0x180
[  147.322640][T10660]  ? dd_dispatch_request+0x2e1/0x3d0
[  147.327907][T10660]  blk_mq_do_dispatch_sched+0x3cb/0x660
[  147.333435][T10660]  __blk_mq_sched_dispatch_requests+0x21e/0x2c0
[  147.339905][T10660]  blk_mq_sched_dispatch_requests+0x9f/0x110
[  147.345869][T10660]  __blk_mq_run_hw_queue+0xbc/0x140
[  147.351090][T10660]  __blk_mq_delay_run_hw_queue+0x163/0x2f0
[  147.356931][T10660]  ? dd_insert_request+0x255/0x330
[  147.362066][T10660]  blk_mq_run_hw_queue+0x22c/0x250
[  147.367160][T10660]  ? dd_finish_request+0x10/0x10
[  147.372077][T10660]  blk_mq_sched_insert_requests+0x13f/0x200
[  147.377961][T10660]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  147.383329][T10660]  blk_flush_plug_list+0x235/0x260
[  147.388421][T10660]  ? __blk_mq_alloc_request+0x270/0x290
[  147.393952][T10660]  blk_mq_submit_bio+0x68a/0xe90
[  147.398911][T10660]  submit_bio_noacct+0x6f2/0x7e0
[  147.403906][T10660]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  147.409518][T10660]  submit_bio+0x16d/0x2b0
[  147.413831][T10660]  iomap_dio_bio_actor+0x91d/0xb50
[  147.418969][T10660]  iomap_dio_actor+0x26e/0x3b0
[  147.423858][T10660]  iomap_apply+0x1e2/0x400
[  147.428258][T10660]  __iomap_dio_rw+0x5af/0xad0
[  147.432930][T10660]  ? __iomap_dio_rw+0xad0/0xad0
[  147.437763][T10660]  ? ext4_orphan_add+0x7a/0x5f0
[  147.442663][T10660]  ? file_update_time+0x3ae/0x3e0
[  147.447736][T10660]  iomap_dio_rw+0x30/0x70
[  147.452049][T10660]  ? ext4_file_write_iter+0x4e1/0x11d0
[  147.457635][T10660]  ext4_file_write_iter+0xa4f/0x11d0
[  147.462902][T10660]  ? ext4_file_write_iter+0x4e1/0x11d0
[  147.468384][T10660]  ? rw_verify_area+0x136/0x250
[  147.473279][T10660]  aio_write+0x287/0x360
[  147.477507][T10660]  ? kmem_cache_alloc+0x201/0x2f0
[  147.482514][T10660]  io_submit_one+0x82f/0x1350
[  147.487249][T10660]  __se_sys_io_submit+0xf5/0x260
[  147.492214][T10660]  __x64_sys_io_submit+0x3f/0x50
[  147.497161][T10660]  do_syscall_64+0x4a/0x90
[  147.501605][T10660]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  147.507480][T10660] RIP: 0033:0x4665d9
[  147.511441][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  147.531040][T10660] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  147.539430][T10660] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  147.547412][T10660] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  147.555424][T10660] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  147.563376][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  147.571335][T10660] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  147.579291][T10655] CPU: 1 PID: 10655 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  147.588186][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  147.598759][T10655] Call Trace:
[  147.602125][T10655]  dump_stack+0x137/0x19d
[  147.606458][T10655]  should_fail+0x23c/0x250
[  147.612152][T10655]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  147.617546][T10655]  __should_failslab+0x81/0x90
[  147.622593][T10655]  should_failslab+0x5/0x20
[  147.627114][T10655]  kmem_cache_alloc+0x46/0x2f0
[  147.631949][T10655]  ext4_mb_new_blocks+0x2e7/0x1f90
[  147.637063][T10655]  ? bh_uptodate_or_lock+0x57/0xf0
[  147.642177][T10655]  ? ext4_get_branch+0x28e/0x2e0
[  147.647254][T10655]  ext4_ind_map_blocks+0xaab/0x1620
[  147.652466][T10655]  ? ext4_es_lookup_extent+0x206/0x490
[  147.657926][T10655]  ext4_map_blocks+0x6d2/0xef0
[  147.662679][T10655]  ? ext4_iomap_begin+0x3e2/0x620
[  147.667700][T10655]  ? __cond_resched+0x11/0x40
[  147.672372][T10655]  ext4_iomap_begin+0x4a3/0x620
[  147.677253][T10655]  iomap_apply+0x8d/0x400
[  147.681573][T10655]  __iomap_dio_rw+0x5af/0xad0
[  147.686271][T10655]  ? __iomap_dio_rw+0xad0/0xad0
[  147.691211][T10655]  iomap_dio_rw+0x30/0x70
[  147.691517][T10665] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  147.695533][T10655]  ? ext4_file_write_iter+0x4e1/0x11d0
[  147.695557][T10655]  ext4_file_write_iter+0xa04/0x11d0
[  147.703883][T10665] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  147.709302][T10655]  ? ext4_file_write_iter+0x4e1/0x11d0
[  147.724078][T10665] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  147.725602][T10655]  ? rw_verify_area+0x136/0x250
[  147.731182][T10665] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000015da8258
[  147.739141][T10655]  vfs_write+0x69d/0x770
[  147.739162][T10655]  ksys_write+0xce/0x180
[  147.739175][T10655]  __x64_sys_write+0x3e/0x50
[  147.739188][T10655]  do_syscall_64+0x4a/0x90
[  147.746805][T10665] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  147.755029][T10655]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  147.759278][T10665] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
[  147.763496][T10655] RIP: 0033:0x4665d9
[  147.763511][T10655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  147.770692][T10665] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  147.772590][T10655] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
01:57:30 executing program 0 (fault-call:6 fault-nth:15):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:30 executing program 2 (fault-call:8 fault-nth:57):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  147.772611][T10655] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  147.780599][T10665] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000015da8258
[  147.786728][T10655] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  147.786744][T10655] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  147.786756][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  147.799537][T10665] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  147.801633][T10655] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  147.821394][T10665] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:57:31 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2121d, 0x806000)

01:57:31 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8102, 0x806000)

01:57:31 executing program 1:
socket$inet6(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
dup3(r2, r3, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  148.015919][T10665] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  148.024294][T10665] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  148.033314][T10679] FAULT_INJECTION: forcing a failure.
[  148.033314][T10679] name failslab, interval 1, probability 0, space 0, times 0
[  148.048074][T10679] CPU: 1 PID: 10679 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  148.056951][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  148.066996][T10679] Call Trace:
[  148.070264][T10679]  dump_stack+0x137/0x19d
[  148.074592][T10679]  should_fail+0x23c/0x250
[  148.079038][T10679]  ? kcalloc+0x32/0x50
[  148.083112][T10679]  __should_failslab+0x81/0x90
[  148.087878][T10679]  should_failslab+0x5/0x20
[  148.092414][T10679]  __kmalloc+0x66/0x340
[  148.096609][T10679]  kcalloc+0x32/0x50
[  148.100485][T10679]  ext4_find_extent+0x21c/0x7f0
[  148.105392][T10679]  ? blk_mq_submit_bio+0x916/0xe90
[  148.110490][T10679]  ext4_ext_map_blocks+0xd9/0x1f00
[  148.115596][T10679]  ? __down_write_common+0x45/0x890
[  148.120798][T10679]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  148.126417][T10679]  ? percpu_counter_add_batch+0x69/0xd0
[  148.131962][T10679]  ? ext4_es_lookup_extent+0x36b/0x490
[  148.137404][T10679]  ext4_map_blocks+0x70d/0xef0
[  148.142221][T10679]  ? ext4_iomap_begin+0x3e2/0x620
[  148.147228][T10679]  ? __cond_resched+0x11/0x40
[  148.151939][T10679]  ext4_iomap_begin+0x4a3/0x620
[  148.156771][T10679]  iomap_apply+0x8d/0x400
[  148.161242][T10679]  __iomap_dio_rw+0x5af/0xad0
[  148.165901][T10679]  ? __iomap_dio_rw+0xad0/0xad0
[  148.170790][T10679]  ? ext4_orphan_add+0x7a/0x5f0
[  148.175661][T10679]  ? file_update_time+0x1bd/0x3e0
[  148.180671][T10679]  iomap_dio_rw+0x30/0x70
[  148.185034][T10679]  ? ext4_file_write_iter+0x4e1/0x11d0
[  148.190545][T10679]  ext4_file_write_iter+0xa4f/0x11d0
[  148.195818][T10679]  ? ext4_file_write_iter+0x4e1/0x11d0
[  148.201562][T10679]  ? rw_verify_area+0x136/0x250
[  148.206398][T10679]  aio_write+0x287/0x360
[  148.210633][T10679]  ? kmem_cache_alloc+0x201/0x2f0
[  148.215647][T10679]  io_submit_one+0x82f/0x1350
[  148.220329][T10679]  __se_sys_io_submit+0xf5/0x260
[  148.225269][T10679]  __x64_sys_io_submit+0x3f/0x50
[  148.230451][T10679]  do_syscall_64+0x4a/0x90
[  148.234901][T10679]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  148.240784][T10679] RIP: 0033:0x4665d9
[  148.244663][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  148.264284][T10679] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  148.272702][T10679] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  148.280659][T10679] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  148.288615][T10679] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  148.296575][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  148.304531][T10679] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  148.330741][T10674] FAULT_INJECTION: forcing a failure.
[  148.330741][T10674] name failslab, interval 1, probability 0, space 0, times 0
[  148.343456][T10674] CPU: 1 PID: 10674 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  148.352251][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  148.362404][T10674] Call Trace:
[  148.365859][T10674]  dump_stack+0x137/0x19d
[  148.370224][T10674]  should_fail+0x23c/0x250
[  148.374790][T10674]  ? ext4_mb_new_blocks+0x2e7/0x1f90
01:57:31 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  148.380080][T10674]  __should_failslab+0x81/0x90
[  148.384916][T10674]  should_failslab+0x5/0x20
[  148.389436][T10674]  kmem_cache_alloc+0x46/0x2f0
[  148.394266][T10674]  ext4_mb_new_blocks+0x2e7/0x1f90
[  148.395938][T10689] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  148.399384][T10674]  ? bh_uptodate_or_lock+0x57/0xf0
[  148.407743][T10689] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  148.412836][T10674]  ? ext4_get_branch+0x28e/0x2e0
[  148.428761][T10674]  ext4_ind_map_blocks+0xaab/0x1620
[  148.433955][T10674]  ? ext4_es_lookup_extent+0x206/0x490
[  148.439484][T10674]  ext4_map_blocks+0x6d2/0xef0
[  148.444252][T10674]  ? ext4_iomap_begin+0x3e2/0x620
[  148.449398][T10674]  ? __cond_resched+0x11/0x40
[  148.454056][T10674]  ext4_iomap_begin+0x4a3/0x620
[  148.459116][T10674]  iomap_apply+0x8d/0x400
[  148.463576][T10674]  __iomap_dio_rw+0x5af/0xad0
[  148.468257][T10674]  ? __iomap_dio_rw+0xad0/0xad0
[  148.473210][T10674]  iomap_dio_rw+0x30/0x70
[  148.477534][T10674]  ? ext4_file_write_iter+0x4e1/0x11d0
[  148.483080][T10674]  ext4_file_write_iter+0xa04/0x11d0
[  148.488406][T10674]  ? ext4_file_write_iter+0x4e1/0x11d0
[  148.494039][T10674]  ? rw_verify_area+0x136/0x250
[  148.498984][T10674]  vfs_write+0x69d/0x770
[  148.503326][T10674]  ksys_write+0xce/0x180
[  148.507562][T10674]  __x64_sys_write+0x3e/0x50
[  148.512130][T10674]  do_syscall_64+0x4a/0x90
[  148.516615][T10674]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  148.522505][T10674] RIP: 0033:0x4665d9
[  148.526380][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  148.545998][T10674] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  148.554397][T10674] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  148.562349][T10674] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  148.570301][T10674] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
01:57:31 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)="db8658a373cb4be3e37e4cb181f304fb90e7dcfebeb11fd04f5572e58c33c022f288ad4e1a13855195e0ade504df0fd476b6a6ae5d9e0a3c9891cf2a801d55e748619ecf99e44ba3eeddbbdfa0e65a7ab9cd2bd60d327140e9c71975ddb2837d56b197da25d18486eb1adbfb85116bc2567d5c0b680bcde63da4d196aa2fc1b372c297e42ed5b0d79cfce5723ffe43b6ade7865d0e99d2a79a01aed73a7cd36435eb8a8bccec7f8e4c50811b8adee70d5ed7be71f59b217e5262cac92a77df918a53c9899b5b6af35bbd9ec716f5f22836", 0xd1}, {&(0x7f0000000140)="81c1cbeed0839163fc7ab9118c012403291a7dc9ed13f1c218eb6c47902dba75d27fdc4f2416d935a50048e763b430cc93527771195d7a7d51460db1106e392a", 0x40}, {&(0x7f0000000440)="91a27cf24f136586bac294bd66ffea3cb56a4af7a9ef8f1d549e19ee8ab61d5970bb67e954a0ddcb98ee2197396ae1df8da3b450d0d3e7b213cc3738b038258a8ecd542590f9f584eaf15d075acdf92b1cf5741a09f21a3c11ac41284d7d88e94a270be5578ce19efe7063ea4ab220218f114648d1f8ee8e9b723ba9228e3780f700d1252f64eced686da875effefc5c85a4a4ecb094fa03c598bb20735b595fda967a992418eb5291ec7412", 0xac}, {&(0x7f0000000380)="a857f392690c09205e42f58a12f4f7ff23a9492278a086fc0c299f33d2124680c74766411092d4e27bfe44b2136f1afa9ca3749c76b05c44059660fc91230650e3490155ecf23074886a3bc34818299c69c9bc5091a6357e76ff90a1bd431801addf9d826180a3be007e0183fbea", 0x6e}, {&(0x7f00000005c0)="1f133df567088877a89558d7d0752e072561682360f9339449d97402e2e0b280d2f2632ef4f075b98d9a25dbac7c84086d0d1a05a784fef015d1ce5cc60bedc97a72685aa63cb23c2f9a5a8f", 0x4c}], 0x5, &(0x7f0000001740)=[{0x28, 0x88, 0x8, "b5171248e8bc5dba21e171c8ef4ed6d7fd100a43"}, {0xd0, 0x10a, 0x5, "67a736987e83216f3c454dbe1ac96218785a762f954645e0df4bf471761e3683ada90f487f7a310955e5fcc428143ccad4d0058c6e40c9a8d6bfa52e95b89ec9b2b9112591e0ab1927624814184a0ea847b0e9ce3ddf5c9988e8f4f5b7008f4451646e1e6d86bf27cf36accc1f16690f0513bd054de3739390c5875b17a89c27a6ac8527e13f05e3f07d632ee55efa5cd08c80268624044e313a3304000d5275cf08d650ceaa50527d2c3c3a9dc960421af7fe0a409534572399306ce07f"}], 0xf8}}, {{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000180)="0ab8b2a98f355bb047a234c56a", 0xd}, {&(0x7f0000000540)="5907db4988e5465fba7395e6142991c70233a4364d507c29c74a006e72b244afa162a20f36c143689268a7c3fa4caaba99a958053df2", 0x36}], 0x2}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001880)="c70ce49f29249b9f7c13cf2f2a0756dac80200d4811e0df992319a5299672c44952102cb66460baeaffc774a9fd691cb5df9a48c32206187158fdd089ecc0635c4ad45126ddf6c0a429939bc731e628e1ad0ebe2d63dd88044aaf5677fc2c815d92937c852fa9d", 0x67}], 0x1, &(0x7f0000001940)=[{0xb8, 0x108, 0x6, "5146e0583a27bfcd2b56bf73c1ba41765a153e9395a01ea1f2a5d7a9b55c51580b2f046873d4fb339b7f82282dcd3de9ac56ba46226a329e21e0eac11316fdb0fdb66bba1768e9c608b32d4c7f0cd70d89ba35a47906c2fd67b571bbd11ad1ad029c3420595b7467dfd5fd0a7422c45b4c0c18382f302ea99a3d649c66a2b9692ffcc7ebe23dc8710075c1c8a2d0a9abaf7b266103fe3a46c7fe99140e03bf21cec37f2be1dd16a8"}, {0x48, 0x117, 0x2, "351f417aeef70cbb489d0c8470d9a3635716f2b7d652b97492419072b80b3368b8e00b36fe194dec8a21fe27c5bd6ce40f025088791907"}, {0x20, 0x1a, 0x7fff, "10c3ecb956e2077cb89a6756"}, {0xd0, 0x10d, 0xf5e, "d063882744e47c73f239a789e69b8eaa44a1a3bc7a4d72ee33fcca6a474ba13f97dd42fc6a5c072996fdc263a93c0169af3ea45d82de4cfa1d4cd9436be213ab7a69a89909e1bcc97e54f4379aba71c8248fa1b6d9ec02cba9adf2941b0f9ad3d565df534a1759cd64885242cbaa451ba19fdf332bd016d3fa66df1ceb742ae1afda615e580a5cbdb446dd7a8c68ab5d445dc6fc174c657141978a3e956a06d98b01d15c1f84869b6b4239f87a2dfae1bc26d27bb299185a5a493efa7c"}], 0x1f0}}, {{&(0x7f0000001b40)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'bond0\x00'}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000001bc0)="08838c151fb8a4215e4258daad25d5b799df188a95c74eb17abf1d122de15a51a3063709880d8b90e7ad64755d269976c4e9810116eedfb336a92f8503e2d168934e2615adaeadc5ec75b65f952777e095fb911de49b7b8d325d24cb765f303d9939554c0c2d399c4aa937a00d588feb3edb1974baea773003dea3cdecf0c4bdd89d775de71f469a0e446fce1a7c9bd0ba4160d7c6dd497116443d6810bf11360d9039c30002aa332c8cbd5c19529c969ee6e77fbcc06f934937f437b9bc641c94fd84627fb1ad92ec473ac62ff25f633138a5c0e6a9775f3ba0df299de74ede7457", 0xe2}, {&(0x7f0000001cc0)="14dd765d17949c9b2555cf429e7b5623cb49b3bb4511b095f6bbdc8b9aa8a967ce4b89e41b6255ec0495b2613365692cc867fafda6075778650e0cedb92093788dd409f917cba1830684bda9baf8eedfdac70023293ed72e695a012fa4f4b8002f3ccb3d57a8564bc04eb678959eaf8ec6b61555c42206b22eb35d66edf607d12ee9f61523873abf81f787c4a54a1838c5831ba3c762d20764bbf257b014ffb5a11aeb9adb9c7431751808a1551169978fa92c359deeb470be39151e2d3094d3914791bdb883d44653bb", 0xca}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="a4614f1b6b208741a0320b4260a9a40533aeabe658c3bb49108bc399a2696b7c545e14f852680dbac9557fcc15639b8ab289e99cee3bc06fc838e2674a46befdd81ac9e03977b8042834cab138949953c12959ea1f49e9b1", 0x58}, {&(0x7f0000002e40)="fab3bb45cb92481e8c7f3eb7a34e141c53e48898d7930e68c5851b16aafc7e19ee1873561fabda80a384009c39201311004c6a328b1076a35bc0c82b80a1d52fd0490f086cc8ba0bccfd5e81e12d2e3e3e620327e3065ba34e92b86de5cedc0dc58e4db00358f09d8c85b744f0c1fb8a0e5948ad430e6de69511067a1ab1", 0x7e}, {&(0x7f0000002ec0)="dc88938bb515b01bf91292ffeac098b39a245a3952620b50868c12d5d99a75658d1ba68ca923b07e0f69cffc06200971be9ef239681fd8d73fd1e7914493755f89730f899362e08e9301fc50bd7c06249af7e3af79bd5a779b9a648e8a78ed44ea", 0x61}, {&(0x7f0000002f40)="4b0e812da6ee45a652965daa719e224b4ca39097b6b65b7c6f8e480547fd016ab1af5041a71906d7e9f43c2a5af13625fb89f62d51f5715f5999eefd43c20e686be2c0cd4d92043a649845cd91694a87a62e5827c9f67bad1a3a367ca1ce2061771d64e4314e5fb07fc49f18960c2693759b8cdf7bde81ed06bde2609c17f74c2eb6052e64f835e51c8f3d4e0fd667ef7b8b895a2f281b93a4dbc5a3709a753267a5746cca5b432301e0b4c7c95423", 0xaf}, {&(0x7f0000003000)="8ebed8c279688a4098aace35762a15c1e8ff70aed25df322db9defb012c1eefca93fe4f7958747b9ebc1d843b7094bd3bccf1916466a5c0995a2bfded72fbfe23fb808acef0156a225b86acabee211133c089e50766aafb97f22e710e59ed49799ee1eb5717c4a299c59001ff7c6ad9bbffbb83df7fcae7ad0a9aeeb0335195d96a80563621763ac8edf93c56e8a840f8149965faf3bb4d8650361df4cc1f2557faf090d01cd72", 0xa7}, {&(0x7f00000030c0)="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", 0x1000}], 0x9, &(0x7f0000004180)=[{0x28, 0x112, 0x6, "2b206982038123180db47b35569390686011333083f9e9"}], 0x28}}], 0x4, 0x40)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
r3 = accept$inet(0xffffffffffffffff, &(0x7f00000042c0)={0x2, 0x0, @broadcast}, &(0x7f0000004300)=0x10)
tee(r0, r3, 0xfffffffffffffff8, 0xa)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

01:57:31 executing program 2 (fault-call:8 fault-nth:58):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:31 executing program 1:
setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', ']-\xec\'%*/\x00'}, 0x0, 0x0)

[  148.578256][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  148.586212][T10674] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  148.607979][T10690] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  148.616384][T10690] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:31 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:31 executing program 0 (fault-call:6 fault-nth:16):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  148.691951][T10703] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  148.700344][T10703] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  148.704091][T10698] FAULT_INJECTION: forcing a failure.
[  148.704091][T10698] name failslab, interval 1, probability 0, space 0, times 0
[  148.723998][T10698] CPU: 1 PID: 10698 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
01:57:31 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@init_itable}]})
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x92, 0x4, 0x8, "7c41e805909e242ce2c66ecee408439b", "e19adc0ef339c49e80cfa388a91027827b3e6d75b12d9d7b5baffb12b47ea5db4009621236823abaaa902600bd2f5a75fd4d9f952acf49cf4be639e0a9b0c8a3e15bb0684107360bf52bd95b799dea928e6d9e6ee11303897deebe94d91765c391cc609323e75fabb6c6cb1d2a54325e17fd56b36edd1461fe007f5f19"}, 0x92, 0x2)

01:57:31 executing program 1:
unshare(0x42010000)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
unshare(0x18010480)
socket$inet_tcp(0x2, 0x1, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0xc7]}, 0xfcd3, 0x0)
socket$packet(0x11, 0x1, 0x300)

[  148.732757][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  148.742883][T10698] Call Trace:
[  148.746335][T10698]  dump_stack+0x137/0x19d
[  148.750661][T10698]  should_fail+0x23c/0x250
[  148.755304][T10698]  ? mempool_alloc_slab+0x16/0x20
[  148.760321][T10698]  __should_failslab+0x81/0x90
[  148.765105][T10698]  should_failslab+0x5/0x20
[  148.769704][T10698]  kmem_cache_alloc+0x46/0x2f0
[  148.774510][T10698]  mempool_alloc_slab+0x16/0x20
[  148.779404][T10698]  ? mempool_free+0x130/0x130
[  148.784284][T10698]  mempool_alloc+0x8c/0x300
[  148.788792][T10698]  ? ext4_es_insert_extent+0x1825/0x19d0
[  148.794483][T10698]  ? iov_iter_npages+0x211/0xa00
[  148.799467][T10698]  bio_alloc_bioset+0xcc/0x480
[  148.804242][T10698]  iomap_dio_bio_actor+0x511/0xb50
[  148.804484][T10708] FAULT_INJECTION: forcing a failure.
[  148.804484][T10708] name failslab, interval 1, probability 0, space 0, times 0
[  148.809356][T10698]  iomap_dio_actor+0x26e/0x3b0
[  148.809380][T10698]  iomap_apply+0x1e2/0x400
[  148.809398][T10698]  __iomap_dio_rw+0x5af/0xad0
[  148.809412][T10698]  ? __iomap_dio_rw+0xad0/0xad0
[  148.841420][T10698]  iomap_dio_rw+0x30/0x70
[  148.845741][T10698]  ? ext4_file_write_iter+0x4e1/0x11d0
[  148.851190][T10698]  ext4_file_write_iter+0xa04/0x11d0
[  148.856581][T10698]  ? ext4_file_write_iter+0x4e1/0x11d0
[  148.862035][T10698]  ? rw_verify_area+0x136/0x250
[  148.866884][T10698]  vfs_write+0x69d/0x770
[  148.871111][T10698]  ksys_write+0xce/0x180
[  148.875351][T10698]  __x64_sys_write+0x3e/0x50
[  148.879983][T10698]  do_syscall_64+0x4a/0x90
[  148.884546][T10698]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  148.890426][T10698] RIP: 0033:0x4665d9
[  148.894316][T10698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  148.914080][T10698] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  148.922474][T10698] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  148.930428][T10698] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  148.938391][T10698] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  148.946425][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  148.954585][T10698] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
[  148.962547][T10708] CPU: 0 PID: 10708 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  148.971724][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  148.982091][T10708] Call Trace:
[  148.985371][T10708]  dump_stack+0x137/0x19d
[  148.989894][T10708]  should_fail+0x23c/0x250
[  148.994329][T10708]  ? kcalloc+0x32/0x50
[  148.998743][T10708]  __should_failslab+0x81/0x90
[  149.003611][T10708]  should_failslab+0x5/0x20
[  149.008116][T10708]  __kmalloc+0x66/0x340
[  149.012267][T10708]  kcalloc+0x32/0x50
[  149.016159][T10708]  ext4_find_extent+0x21c/0x7f0
[  149.021811][T10708]  ? blk_mq_submit_bio+0x916/0xe90
[  149.027003][T10708]  ext4_ext_map_blocks+0xd9/0x1f00
[  149.032143][T10708]  ? __down_write_common+0x45/0x890
[  149.037347][T10708]  ? bio_iov_iter_get_pages+0xaf7/0xb50
[  149.042928][T10708]  ? percpu_counter_add_batch+0x69/0xd0
[  149.048481][T10708]  ? ext4_es_lookup_extent+0x36b/0x490
[  149.054004][T10708]  ext4_map_blocks+0x70d/0xef0
[  149.058815][T10708]  ? ext4_iomap_begin+0x3e2/0x620
[  149.063849][T10708]  ? __cond_resched+0x11/0x40
[  149.068553][T10708]  ext4_iomap_begin+0x4a3/0x620
[  149.073409][T10708]  iomap_apply+0x8d/0x400
[  149.077997][T10708]  __iomap_dio_rw+0x5af/0xad0
[  149.082681][T10708]  ? __iomap_dio_rw+0xad0/0xad0
[  149.087542][T10708]  ? ext4_orphan_add+0x7a/0x5f0
01:57:32 executing program 1:
unshare(0x40000000)
r0 = socket$inet6(0x10, 0x2, 0xfffffffb)
r1 = socket$inet6(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x80)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f00000000c0)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xb8;\xf3U\xf7c\x8e\x14\xb6\x1a]\xe48\xdd\xd4\b\xc0\x06\xb0\x0f\x89\xa7Mlhb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\xbe\x91\xed\x05\x00\x00\x00C\xcb\x85\x9a\x82j\xf1\b\x1d\r38\x00\x00\x00')
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = fcntl$dupfd(r6, 0x0, r7)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000140)='lo\x00\x00T{\xdcD\x9d\xcd\x00\x01\x00\x00\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xc6\x00\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xd5\xa6\xd8\x9b\x91#\xd7\x86\xfaAT\x199\x98\x1a\v\f\x10\xb4\xed\xc8\xc3n\xbbR7<d\x1a\xcc\x1b\xc1\xcf\xe7\xdce\x16\xab\xda\xa3m\a\x9dl\'?G\x19\xd0,un\x1b\xf1\x13\xd4\x88\x8aZdU=\n;\xab@\x9c\x9a\x99\xba\x19`B\xe1by\x1e\xf2\x9cJ\x82P\xa1\x05_\xe2\xe1\x1dNB\xdc\xc0\xde\x85\x83:\x84)H\xf1\xd7\xd9\xe7\xce\xf6_\xdb\'tw\x86Z\xdcK\x87\x84\xf4*\xdebH{_\r\xb8\xfc\x14\xdeY\x8a\xd7\xd6\xe4~\xaf%\xdae\xd6\xbae\xf90\xb7\xbd|\xf3=;\xd5\xe0\xa1?\x9a\xab\x99-\xd6\xb1\x8a\xaf\x88\x11m1\x13\x80\x83,\xfd\xef\xc1xFA4\x19\xc5B\xd5j\xa5\xa6\x8fW\'\xe8P\x06\x8a\xd7\xa8\x93\xbf\xe3i\xb4\xa5J\xdb\xd6&\x86i\x89O\xa6\xb1\xbd\xd7,\xb5S\xabN1\xd88?\x85\xb8\vtto\x8dpO\xc3\xec\xcb\xf8Qi\xab\xff\xb4U-\xbf\x8d\x0f\xe88\x95\xcb$\rQ\x94\xa3\xbd\x9e\x9f\xd0\x8d\xb1\xa1w\xf4\xb1\xf4\xc3@\xcb\xa0Z\x0f\x1e\x80\xcfhJ1\x18Q\xb7j\xe2 \x10W\xa9f-\x99')

01:57:32 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2122b, 0x806000)

01:57:32 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xb401, 0x806000)

01:57:32 executing program 2 (fault-call:8 fault-nth:59):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

[  149.092400][T10708]  ? file_update_time+0x1bd/0x3e0
[  149.097435][T10708]  iomap_dio_rw+0x30/0x70
[  149.101981][T10708]  ? ext4_file_write_iter+0x4e1/0x11d0
[  149.107449][T10708]  ext4_file_write_iter+0xa4f/0x11d0
[  149.112867][T10708]  ? ext4_file_write_iter+0x4e1/0x11d0
[  149.118343][T10708]  ? rw_verify_area+0x136/0x250
[  149.123271][T10708]  aio_write+0x287/0x360
[  149.127599][T10708]  ? kmem_cache_alloc+0x201/0x2f0
[  149.132644][T10708]  io_submit_one+0x82f/0x1350
[  149.137340][T10708]  __se_sys_io_submit+0xf5/0x260
01:57:32 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
clock_nanosleep(0x1, 0x1, &(0x7f0000000040)={r0, r1+60000000}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000300)})

[  149.142353][T10708]  __x64_sys_io_submit+0x3f/0x50
[  149.147306][T10708]  do_syscall_64+0x4a/0x90
[  149.148653][T10725] device lo entered promiscuous mode
[  149.151737][T10708]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  149.151771][T10708] RIP: 0033:0x4665d9
[  149.168352][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  149.187959][T10708] RSP: 002b:00007f9648cb2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  149.196499][T10708] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  149.204456][T10708] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  149.212457][T10708] RBP: 00007f9648cb21d0 R08: 0000000000000000 R09: 0000000000000000
[  149.220476][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  149.229214][T10708] R13: 00007fff3c6d4f6f R14: 00007f9648cb2300 R15: 0000000000022000
[  149.242944][T10742] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  149.251402][T10742] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  149.255819][T10721] FAULT_INJECTION: forcing a failure.
[  149.255819][T10721] name failslab, interval 1, probability 0, space 0, times 0
[  149.275024][T10721] CPU: 1 PID: 10721 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  149.283911][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  149.293991][T10721] Call Trace:
[  149.297357][T10721]  dump_stack+0x137/0x19d
[  149.301697][T10721]  should_fail+0x23c/0x250
[  149.306286][T10721]  ? mempool_alloc_slab+0x16/0x20
[  149.311292][T10721]  __should_failslab+0x81/0x90
[  149.316419][T10721]  should_failslab+0x5/0x20
[  149.320955][T10721]  kmem_cache_alloc+0x46/0x2f0
[  149.325702][T10721]  mempool_alloc_slab+0x16/0x20
[  149.330643][T10721]  ? mempool_free+0x130/0x130
[  149.335297][T10721]  mempool_alloc+0x8c/0x300
[  149.339803][T10721]  ? ext4_es_insert_extent+0x1825/0x19d0
[  149.345422][T10721]  ? iov_iter_npages+0x211/0xa00
[  149.350339][T10721]  bio_alloc_bioset+0xcc/0x480
[  149.355138][T10721]  iomap_dio_bio_actor+0x511/0xb50
[  149.360271][T10721]  iomap_dio_actor+0x26e/0x3b0
[  149.365100][T10721]  iomap_apply+0x1e2/0x400
[  149.369495][T10721]  __iomap_dio_rw+0x5af/0xad0
[  149.374153][T10721]  ? __iomap_dio_rw+0xad0/0xad0
[  149.379053][T10721]  iomap_dio_rw+0x30/0x70
[  149.383413][T10721]  ? ext4_file_write_iter+0x4e1/0x11d0
[  149.388859][T10721]  ext4_file_write_iter+0xa04/0x11d0
[  149.394203][T10721]  ? ext4_file_write_iter+0x4e1/0x11d0
[  149.399650][T10721]  ? rw_verify_area+0x136/0x250
[  149.404497][T10721]  vfs_write+0x69d/0x770
[  149.408714][T10721]  ksys_write+0xce/0x180
[  149.412934][T10721]  __x64_sys_write+0x3e/0x50
[  149.417500][T10721]  do_syscall_64+0x4a/0x90
[  149.421964][T10721]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  149.427841][T10721] RIP: 0033:0x4665d9
[  149.431719][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  149.451568][T10721] RSP: 002b:00007fd4a9c1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  149.459958][T10721] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  149.467911][T10721] RDX: 0000000000806000 RSI: 0000000020000200 RDI: 0000000000000005
[  149.475895][T10721] RBP: 00007fd4a9c1c1d0 R08: 0000000000000000 R09: 0000000000000000
[  149.483882][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
01:57:32 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  149.491834][T10721] R13: 00007fff3dc038cf R14: 00007fd4a9c1c300 R15: 0000000000022000
01:57:32 executing program 0 (fault-call:6 fault-nth:17):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  149.546643][T10748] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  149.555035][T10748] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:32 executing program 2 (fault-call:8 fault-nth:60):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:32 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x214d3, 0x806000)

[  149.588016][T10750] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  149.596413][T10750] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  149.627447][T10751] FAULT_INJECTION: forcing a failure.
[  149.627447][T10751] name failslab, interval 1, probability 0, space 0, times 0
[  149.640286][T10751] CPU: 1 PID: 10751 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  149.649030][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  149.659515][T10751] Call Trace:
[  149.662789][T10751]  dump_stack+0x137/0x19d
[  149.667115][T10751]  should_fail+0x23c/0x250
[  149.671557][T10751]  ? ext4_mb_new_blocks+0x70f/0x1f90
[  149.676828][T10751]  __should_failslab+0x81/0x90
[  149.681726][T10751]  should_failslab+0x5/0x20
[  149.686310][T10751]  kmem_cache_alloc+0x46/0x2f0
[  149.691070][T10751]  ext4_mb_new_blocks+0x70f/0x1f90
[  149.696190][T10751]  ? ext4_find_extent+0x7b2/0x7f0
[  149.701230][T10751]  ? ext4_ext_search_right+0x246/0x540
[  149.706695][T10751]  ext4_ext_map_blocks+0x1569/0x1f00
[  149.712072][T10751]  ? ext4_es_lookup_extent+0x36b/0x490
[  149.717571][T10751]  ext4_map_blocks+0x70d/0xef0
[  149.722335][T10751]  ? ext4_iomap_begin+0x3e2/0x620
[  149.727336][T10751]  ? __cond_resched+0x11/0x40
[  149.732004][T10751]  ext4_iomap_begin+0x4a3/0x620
[  149.736829][T10751]  iomap_apply+0x8d/0x400
[  149.741253][T10751]  __iomap_dio_rw+0x5af/0xad0
[  149.745926][T10751]  ? __iomap_dio_rw+0xad0/0xad0
[  149.750832][T10751]  ? ext4_orphan_add+0x7a/0x5f0
[  149.755662][T10751]  ? file_update_time+0x3ae/0x3e0
[  149.760678][T10751]  iomap_dio_rw+0x30/0x70
[  149.764984][T10751]  ? ext4_file_write_iter+0x4e1/0x11d0
[  149.770463][T10751]  ext4_file_write_iter+0xa4f/0x11d0
[  149.775754][T10751]  ? ext4_file_write_iter+0x4e1/0x11d0
[  149.781201][T10751]  ? rw_verify_area+0x136/0x250
[  149.786067][T10751]  aio_write+0x287/0x360
[  149.790311][T10751]  ? kmem_cache_alloc+0x201/0x2f0
[  149.795345][T10751]  io_submit_one+0x82f/0x1350
[  149.800052][T10751]  __se_sys_io_submit+0xf5/0x260
[  149.805031][T10751]  __x64_sys_io_submit+0x3f/0x50
[  149.809950][T10751]  do_syscall_64+0x4a/0x90
[  149.814375][T10751]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  149.820253][T10751] RIP: 0033:0x4665d9
[  149.824126][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  149.843712][T10751] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  149.852107][T10751] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  149.860071][T10751] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  149.868036][T10751] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  149.876029][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
01:57:32 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:32 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd200, 0x806000)

[  149.883992][T10751] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
01:57:32 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)

01:57:33 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30010, 0x806000)

01:57:33 executing program 0 (fault-call:6 fault-nth:18):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  149.956753][T10775] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  149.965629][T10775] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:33 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  150.007106][T10779] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  150.015506][T10779] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  150.067281][T10783] FAULT_INJECTION: forcing a failure.
[  150.067281][T10783] name failslab, interval 1, probability 0, space 0, times 0
[  150.080109][T10783] CPU: 1 PID: 10783 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  150.089036][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  150.099092][T10783] Call Trace:
[  150.102365][T10783]  dump_stack+0x137/0x19d
[  150.106697][T10783]  should_fail+0x23c/0x250
[  150.111105][T10783]  ? __es_insert_extent+0x51f/0xe70
01:57:33 executing program 1:
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)={{}, {@void, @max}})
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x6210, 0x0)
r0 = socket(0x11, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0xee00)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2008, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@version_u}, {@privport}], [{@smackfsdef={'smackfsdef', 0x3d, 'max'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '*/#.%'}}, {@smackfsdef={'smackfsdef', 0x3d, 'max'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@dont_appraise}, {@audit}]}})
chown(&(0x7f0000000140)='./file0/bus\x00', r1, 0x0)
open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40f40, 0x0)

[  150.116301][T10783]  __should_failslab+0x81/0x90
[  150.121106][T10783]  should_failslab+0x5/0x20
[  150.125618][T10783]  kmem_cache_alloc+0x46/0x2f0
[  150.130383][T10783]  __es_insert_extent+0x51f/0xe70
[  150.135411][T10783]  ext4_es_insert_extent+0x1bb/0x19d0
[  150.140841][T10783]  ? ext4_es_lookup_extent+0x36b/0x490
[  150.146302][T10783]  ext4_map_blocks+0xa4c/0xef0
[  150.151064][T10783]  ? ext4_iomap_begin+0x3e2/0x620
[  150.156155][T10783]  ? __cond_resched+0x11/0x40
[  150.161015][T10783]  ext4_iomap_begin+0x4a3/0x620
[  150.165854][T10783]  iomap_apply+0x8d/0x400
[  150.170223][T10783]  __iomap_dio_rw+0x5af/0xad0
[  150.175091][T10783]  ? __iomap_dio_rw+0xad0/0xad0
[  150.179924][T10783]  ? ext4_orphan_add+0x7a/0x5f0
[  150.184758][T10783]  ? file_update_time+0x3ae/0x3e0
[  150.189763][T10783]  iomap_dio_rw+0x30/0x70
[  150.194085][T10783]  ? ext4_file_write_iter+0x4e1/0x11d0
[  150.199543][T10783]  ext4_file_write_iter+0xa4f/0x11d0
[  150.204912][T10783]  ? ext4_file_write_iter+0x4e1/0x11d0
[  150.210383][T10783]  ? rw_verify_area+0x136/0x250
[  150.215225][T10783]  aio_write+0x287/0x360
[  150.219518][T10783]  ? kmem_cache_alloc+0x201/0x2f0
[  150.224546][T10783]  io_submit_one+0x82f/0x1350
[  150.229208][T10783]  __se_sys_io_submit+0xf5/0x260
[  150.234140][T10783]  __x64_sys_io_submit+0x3f/0x50
[  150.239093][T10783]  do_syscall_64+0x4a/0x90
[  150.243648][T10783]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  150.249541][T10783] RIP: 0033:0x4665d9
[  150.253428][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  150.273021][T10783] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  150.281414][T10783] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  150.289393][T10783] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  150.297344][T10783] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  150.305296][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
01:57:33 executing program 1:
io_setup(0x1ff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0x7, 0x0)
r1 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x8000}, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4)
io_submit(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x810, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:57:33 executing program 0 (fault-call:6 fault-nth:19):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2, 0x806000)

[  150.313247][T10783] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  150.321949][T10787] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  150.330398][T10787] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:33 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd300, 0x806000)

01:57:33 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30011, 0x806000)

[  150.518093][T10808] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  150.518158][T10804] FAULT_INJECTION: forcing a failure.
[  150.518158][T10804] name failslab, interval 1, probability 0, space 0, times 0
[  150.518175][T10804] CPU: 1 PID: 10804 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  150.526542][T10808] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  150.539082][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  150.539096][T10804] Call Trace:
[  150.539104][T10804]  dump_stack+0x137/0x19d
[  150.539179][T10804]  should_fail+0x23c/0x250
[  150.539193][T10804]  ? mempool_alloc_slab+0x16/0x20
[  150.586245][T10804]  __should_failslab+0x81/0x90
[  150.591046][T10804]  should_failslab+0x5/0x20
[  150.595562][T10804]  kmem_cache_alloc+0x46/0x2f0
[  150.600307][T10804]  mempool_alloc_slab+0x16/0x20
[  150.605187][T10804]  ? mempool_free+0x130/0x130
[  150.609856][T10804]  mempool_alloc+0x8c/0x300
[  150.614344][T10804]  ? ext4_es_insert_extent+0x1825/0x19d0
[  150.619961][T10804]  ? iov_iter_npages+0x218/0xa00
[  150.624896][T10804]  bio_alloc_bioset+0xcc/0x480
[  150.629772][T10804]  iomap_dio_bio_actor+0x511/0xb50
[  150.635052][T10804]  iomap_dio_actor+0x26e/0x3b0
[  150.639799][T10804]  iomap_apply+0x1e2/0x400
[  150.644293][T10804]  __iomap_dio_rw+0x5af/0xad0
[  150.649034][T10804]  ? __iomap_dio_rw+0xad0/0xad0
[  150.653864][T10804]  ? ext4_orphan_add+0x7a/0x5f0
[  150.658778][T10804]  ? file_update_time+0x3ae/0x3e0
[  150.663887][T10804]  iomap_dio_rw+0x30/0x70
[  150.668244][T10804]  ? ext4_file_write_iter+0x4e1/0x11d0
[  150.673890][T10804]  ext4_file_write_iter+0xa4f/0x11d0
[  150.679343][T10804]  ? ext4_file_write_iter+0x4e1/0x11d0
[  150.684871][T10804]  ? rw_verify_area+0x136/0x250
[  150.689751][T10804]  aio_write+0x287/0x360
[  150.693988][T10804]  ? kmem_cache_alloc+0x201/0x2f0
[  150.698995][T10804]  io_submit_one+0x82f/0x1350
[  150.703927][T10804]  __se_sys_io_submit+0xf5/0x260
[  150.708927][T10804]  __x64_sys_io_submit+0x3f/0x50
[  150.713849][T10804]  do_syscall_64+0x4a/0x90
[  150.718266][T10804]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  150.724212][T10804] RIP: 0033:0x4665d9
[  150.728083][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  150.748158][T10804] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  150.756855][T10804] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  150.765069][T10804] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  150.773333][T10804] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  150.781709][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  150.789852][T10804] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
01:57:33 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001380)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000001480)=0xe8)
syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x4, &(0x7f0000001300)=[{&(0x7f0000000100)="9d3c14308761fb5093b474fde9d588b244d9e36cfdca0a408731a44c27efb153a11bd7c4de3eaa6ea5ecb9baa2804d9f46e34037bcea365b91fb5a3eeed8231c5ec62078f183610765bf7c6c5402058774f44478db84dcf2e0e7b814bbb60ccdbe5ff227f5edc5c210ad61d48b8f264c500b7981045e", 0x76, 0x5}, {&(0x7f0000000180)="32c89ec3cc6a53e94fc5f3df509ce8c1c9a0f41f78281555199e10d5933df3429331a2efecaf3827d8f59286dec30bcbcb827f4b11563d979760f1a98a72c480774f18c35d3133255bff219267cfb05700338a7bbeb1e2a89d5d760d4e884c6db21149e42538e243a45d95f9c6b7744e1e06d2579a3d698ee47c7f22d06ea7f7e81c527c988aa359eb8c1a457fdf95f95986e7c2ffe084a8395ec16af858e2cd1bfe5c14a7bb2aa163b18872cd825c", 0xaf, 0x101}, {&(0x7f0000000240)="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", 0x1000, 0x80000000}, {&(0x7f0000001240)="3f6cdf887eaf4dbe525ed2cd025a1864ddee8f85250a54779ef1ed98056240d63b288291ea0bfa50d032b48a7bb5cde361e2beaef661a830f16bb93bd216b94be2e0fea12b21aedf1afe23dce8b730df85efeca9bafe0d471d28a512e27490796ebb1ff3f57ff0e977b1c5db50ca2de95ee21beeb809f4252570203cfbcb2c6a6e3a30847081b44c1a1cb2", 0x8b, 0x4}], 0x2410c8, &(0x7f00000014c0)={[{'(*+\xb5-/!'}, {'/\b%/*{'}, {'\\'}, {'$)\\O:\x86'}], [{@euid_lt={'euid<', 0xee00}}, {@euid_lt={'euid<', r1}}]})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x1, 0x1f, 0x7b4, 0x1, 0x0, "a85413e567930833131dce4454e3318b590d54", 0xfff, 0x5})
ioctl$GIO_SCRNMAP(r2, 0x4b46, &(0x7f0000000000))

01:57:33 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  150.902436][T10826] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  150.910937][T10826] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:34 executing program 0 (fault-call:6 fault-nth:20):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  150.980143][T10827] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  150.988569][T10827] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  151.014400][T10829] FAULT_INJECTION: forcing a failure.
[  151.014400][T10829] name failslab, interval 1, probability 0, space 0, times 0
[  151.027288][T10829] CPU: 1 PID: 10829 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  151.036233][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  151.046382][T10829] Call Trace:
[  151.049865][T10829]  dump_stack+0x137/0x19d
[  151.054283][T10829]  should_fail+0x23c/0x250
[  151.058801][T10829]  ? mempool_alloc_slab+0x16/0x20
[  151.063975][T10829]  __should_failslab+0x81/0x90
[  151.068762][T10829]  should_failslab+0x5/0x20
[  151.073277][T10829]  kmem_cache_alloc+0x46/0x2f0
[  151.078117][T10829]  ? mempool_alloc_slab+0x16/0x20
[  151.083257][T10829]  mempool_alloc_slab+0x16/0x20
[  151.088117][T10829]  ? mempool_free+0x130/0x130
[  151.092890][T10829]  mempool_alloc+0x8c/0x300
[  151.097489][T10829]  ? ext4_es_insert_extent+0x1825/0x19d0
[  151.103154][T10829]  ? iov_iter_npages+0x218/0xa00
[  151.108301][T10829]  bio_alloc_bioset+0x1af/0x480
[  151.113190][T10829]  iomap_dio_bio_actor+0x511/0xb50
[  151.118442][T10829]  iomap_dio_actor+0x26e/0x3b0
[  151.123304][T10829]  iomap_apply+0x1e2/0x400
[  151.127794][T10829]  __iomap_dio_rw+0x5af/0xad0
[  151.132574][T10829]  ? __iomap_dio_rw+0xad0/0xad0
[  151.137605][T10829]  ? ext4_orphan_add+0x7a/0x5f0
[  151.142538][T10829]  ? file_update_time+0x1bd/0x3e0
[  151.147573][T10829]  iomap_dio_rw+0x30/0x70
[  151.151916][T10829]  ? ext4_file_write_iter+0x4e1/0x11d0
[  151.157393][T10829]  ext4_file_write_iter+0xa4f/0x11d0
[  151.162789][T10829]  ? ext4_file_write_iter+0x4e1/0x11d0
[  151.168263][T10829]  ? rw_verify_area+0x136/0x250
[  151.173237][T10829]  aio_write+0x287/0x360
[  151.177710][T10829]  ? kmem_cache_alloc+0x201/0x2f0
[  151.182755][T10829]  io_submit_one+0x82f/0x1350
[  151.187530][T10829]  __se_sys_io_submit+0xf5/0x260
[  151.192567][T10829]  __x64_sys_io_submit+0x3f/0x50
[  151.197576][T10829]  do_syscall_64+0x4a/0x90
[  151.202171][T10829]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  151.208204][T10829] RIP: 0033:0x4665d9
[  151.212101][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  151.231728][T10829] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  151.240323][T10829] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  151.248307][T10829] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  151.257342][T10829] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  151.265596][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  151.273749][T10829] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
01:57:34 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30012, 0x806000)

01:57:34 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd400, 0x806000)

01:57:34 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x13, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:34 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3, 0x806000)

[  151.403841][T10842] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  151.412306][T10842] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  151.468770][T10842] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  151.476886][T10842] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
[  151.515984][T10842] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  151.525762][T10842] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
[  151.539420][T10842] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  151.547500][T10842] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
[  151.576391][T10842] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  151.584531][T10842] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
01:57:34 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xefff, 0x806000)

01:57:34 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30013, 0x806000)

01:57:34 executing program 0 (fault-call:6 fault-nth:21):
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:34 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x4, 0x806000)

[  151.619003][T10853] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  151.627659][T10853] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  151.770113][T10860] FAULT_INJECTION: forcing a failure.
[  151.770113][T10860] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  151.783447][T10860] CPU: 1 PID: 10860 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0
[  151.792212][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  151.802261][T10860] Call Trace:
[  151.805542][T10860]  dump_stack+0x137/0x19d
[  151.809962][T10860]  should_fail+0x23c/0x250
[  151.814388][T10860]  __alloc_pages+0x102/0x320
[  151.819203][T10860]  alloc_pages+0x21d/0x310
[  151.823628][T10860]  pte_alloc_one+0x29/0xb0
[  151.828114][T10860]  __pte_alloc+0x2f/0x210
[  151.832452][T10860]  do_anonymous_page+0x79b/0x8b0
[  151.837409][T10860]  handle_mm_fault+0x96f/0x1a70
[  151.842358][T10860]  ? pud_huge+0x9/0x20
[  151.846438][T10860]  ? follow_page_mask+0x3f2/0x1040
[  151.851560][T10860]  __get_user_pages+0x947/0xee0
[  151.856858][T10860]  get_user_pages_unlocked+0x135/0x5f0
[  151.862366][T10860]  __gup_longterm_unlocked+0x47/0x110
[  151.867893][T10860]  internal_get_user_pages_fast+0xfab/0x1130
[  151.873883][T10860]  get_user_pages_fast+0x5d/0x80
[  151.878832][T10860]  iov_iter_get_pages+0x1e9/0xcc0
[  151.883957][T10860]  ? kmem_cache_alloc+0x201/0x2f0
[  151.888994][T10860]  ? mempool_alloc_slab+0x16/0x20
[  151.894033][T10860]  bio_iov_iter_get_pages+0x4cf/0xb50
[  151.899421][T10860]  ? mempool_alloc+0x99/0x300
[  151.904254][T10860]  ? iov_iter_npages+0x218/0xa00
[  151.909200][T10860]  iomap_dio_bio_actor+0x673/0xb50
[  151.914410][T10860]  iomap_dio_actor+0x26e/0x3b0
[  151.919239][T10860]  iomap_apply+0x1e2/0x400
[  151.923727][T10860]  __iomap_dio_rw+0x5af/0xad0
[  151.928464][T10860]  ? __iomap_dio_rw+0xad0/0xad0
[  151.933532][T10860]  ? ext4_orphan_add+0x7a/0x5f0
[  151.938460][T10860]  ? file_update_time+0x3ae/0x3e0
[  151.943494][T10860]  iomap_dio_rw+0x30/0x70
[  151.947844][T10860]  ? ext4_file_write_iter+0x4e1/0x11d0
[  151.953314][T10860]  ext4_file_write_iter+0xa4f/0x11d0
[  151.958610][T10860]  ? ext4_file_write_iter+0x4e1/0x11d0
[  151.964204][T10860]  ? rw_verify_area+0x136/0x250
[  151.969068][T10860]  aio_write+0x287/0x360
[  151.973328][T10860]  ? kmem_cache_alloc+0x201/0x2f0
[  151.978383][T10860]  io_submit_one+0x82f/0x1350
[  151.983069][T10860]  __se_sys_io_submit+0xf5/0x260
[  151.988117][T10860]  __x64_sys_io_submit+0x3f/0x50
[  151.993070][T10860]  do_syscall_64+0x4a/0x90
[  151.997601][T10860]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  152.003777][T10860] RIP: 0033:0x4665d9
[  152.007688][T10860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  152.027385][T10860] RSP: 002b:00007f9648cd4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  152.035805][T10860] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  152.043784][T10860] RDX: 0000000020000540 RSI: 0000000000000045 RDI: 00007f9648cb3000
[  152.051843][T10860] RBP: 00007f9648cd41d0 R08: 0000000000000000 R09: 0000000000000000
[  152.059826][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
01:57:34 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x25, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  152.067802][T10860] R13: 00007fff3c6d4f6f R14: 00007f9648cd4300 R15: 0000000000022000
[  152.128619][T10872] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  152.137057][T10872] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  152.191288][T10872] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.199352][T10872] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006653744c
01:57:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0x806000)

[  152.254403][T10872] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.262677][T10872] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
01:57:35 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf000, 0x806000)

01:57:35 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30014, 0x806000)

[  152.342153][T10880] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  152.350550][T10880] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:35 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x27, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  152.451523][T10890] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  152.459912][T10890] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  152.494771][T10890] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.502807][T10890] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
[  152.517186][T10890] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.525228][T10890] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
01:57:35 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  152.557710][T10892] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  152.566201][T10892] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:35 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xff01, 0x806000)

01:57:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x6, 0x806000)

01:57:35 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30015, 0x806000)

01:57:35 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x48, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:35 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  152.761957][T10913] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  152.770433][T10913] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  152.790082][T10913] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.798126][T10913] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000061a3e5f
[  152.825200][T10913] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.833473][T10913] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000c6f44b82
01:57:35 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x9, 0x806000)

01:57:36 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xff0f, 0x806000)

01:57:36 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30016, 0x806000)

[  152.978413][T10913] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  152.986504][T10913] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000061a3e5f
01:57:36 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0xffffffffffffffff, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  153.058087][T10931] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  153.066467][T10931] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xc, 0x806000)

01:57:36 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:36 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xffef, 0x806000)

01:57:36 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30017, 0x806000)

01:57:36 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  153.309287][T10951] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  153.317867][T10951] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  153.366277][T10951] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  153.374560][T10951] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
[  153.415890][T10951] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  153.423931][T10951] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
01:57:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd, 0x806000)

01:57:36 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  153.469308][T10961] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  153.477730][T10961] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  153.499972][T10961] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  153.508152][T10961] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
01:57:36 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x20000, 0x806000)

01:57:36 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30018, 0x806000)

01:57:36 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x60, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  153.704359][T10979] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  153.713031][T10979] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:36 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  153.803350][T10979] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  153.811504][T10979] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
01:57:36 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xe, 0x806000)

01:57:37 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2125a, 0x806000)

01:57:37 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30019, 0x806000)

[  153.990371][T10994] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  153.998798][T10994] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:37 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x68, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:37 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  154.100463][T11007] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  154.108993][T11007] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:37 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001a, 0x806000)

01:57:37 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x21268, 0x806000)

01:57:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x806000)

[  154.302999][T11026] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  154.311559][T11026] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:37 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6c, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:37 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  154.408784][T11031] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  154.417180][T11031] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  154.442531][T11031] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  154.450585][T11031] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
01:57:37 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001b, 0x806000)

01:57:37 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x21269, 0x806000)

01:57:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x10, 0x806000)

01:57:37 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x74, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  154.605798][T11046] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  154.614242][T11046] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:37 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  154.699364][T11056] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  154.707894][T11056] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:37 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001c, 0x806000)

01:57:37 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x11, 0x806000)

[  154.867412][T11056] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  154.875700][T11056] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000c0b32cb
01:57:37 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f0, 0x806000)

01:57:38 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  154.985947][T11074] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  154.994649][T11074] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:38 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001d, 0x806000)

01:57:38 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7a, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x12, 0x806000)

01:57:38 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f1, 0x806000)

[  155.263781][T11092] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  155.272398][T11092] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:38 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:38 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001e, 0x806000)

[  155.439669][T11092] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  155.447792][T11092] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
01:57:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x13, 0x806000)

[  155.510163][T11092] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  155.518351][T11092] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000074d0764f
01:57:38 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f2, 0x806000)

[  155.606806][T11118] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  155.615193][T11118] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:38 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:38 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001f, 0x806000)

01:57:38 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:38 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x14, 0x806000)

[  155.752189][T11135] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  155.760715][T11135] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:38 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:38 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f3, 0x806000)

01:57:38 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30020, 0x806000)

[  155.960955][T11148] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  155.969497][T11148] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:39 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xff, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  156.062386][T11159] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.070988][T11159] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  156.113407][T11161] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.122678][T11161] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:39 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:39 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:39 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30021, 0x806000)

01:57:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x15, 0x806000)

01:57:39 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f4, 0x806000)

[  156.219463][T11174] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.227858][T11174] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:39 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x96, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  156.279508][T11179] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.287978][T11179] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:39 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30022, 0x806000)

01:57:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x16, 0x806000)

01:57:39 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:39 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f5, 0x806000)

[  156.526450][T11204] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.535021][T11204] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:39 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x97, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  156.608502][T11204] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  156.616558][T11204] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000061a3e5f
01:57:39 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30023, 0x806000)

01:57:39 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x17, 0x806000)

[  156.745128][T11213] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.753784][T11213] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:39 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:39 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f6, 0x806000)

[  156.891822][T11229] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  156.900251][T11229] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:40 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x98, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  156.956539][T11229] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  156.964627][T11229] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000004f36266a
01:57:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x18, 0x806000)

[  157.025970][T11229] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  157.034090][T11229] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000c0b32cb
[  157.114582][T11229] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  157.122598][T11229] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000004f36266a
01:57:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30024, 0x806000)

01:57:40 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x99, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  157.196299][T11245] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  157.204684][T11245] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:40 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f7, 0x806000)

01:57:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x19, 0x806000)

01:57:40 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:40 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xef, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  157.431550][T11263] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  157.440044][T11263] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1a, 0x806000)

01:57:40 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f8, 0x806000)

01:57:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30025, 0x806000)

01:57:40 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  157.635455][T11278] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  157.644036][T11278] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:40 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  157.726063][T11289] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  157.734660][T11289] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30026, 0x806000)

01:57:40 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f9, 0x806000)

01:57:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1b, 0x806000)

[  157.894206][T11289] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  157.902234][T11289] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b4c9c610
[  157.941896][T11306] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  157.950348][T11306] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:41 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:41 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14c, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:41 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30027, 0x806000)

[  158.029145][T11314] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  158.037744][T11314] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:41 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1c, 0x806000)

01:57:41 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300fa, 0x806000)

[  158.154238][T11324] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  158.162716][T11324] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:41 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:41 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x281, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  158.328301][T11340] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  158.336684][T11340] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:41 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30028, 0x806000)

[  158.414861][T11340] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  158.422893][T11340] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000004f36266a
[  158.470807][T11340] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  158.478861][T11340] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000004f36266a
01:57:41 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1d, 0x806000)

01:57:41 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:41 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300fb, 0x806000)

[  158.672633][T11361] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  158.681016][T11361] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:41 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30029, 0x806000)

01:57:41 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  158.826995][T11374] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  158.835676][T11374] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:41 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300fc, 0x806000)

01:57:41 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x408, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  158.912761][T11374] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  158.921518][T11374] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b4c9c610
[  158.948827][T11374] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1e, 0x806000)

[  158.956980][T11374] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000004f36266a
01:57:42 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3002a, 0x806000)

[  159.060438][T11391] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.069076][T11391] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:42 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  159.160954][T11399] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.169540][T11399] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  159.193129][T11400] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
01:57:42 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x500, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:42 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3002b, 0x806000)

[  159.201497][T11400] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  159.216769][T11400] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  159.225460][T11400] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b4c9c610
01:57:42 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xa, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xef, 0x806000)

[  159.332116][T11416] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.340526][T11416] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:42 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300fd, 0x806000)

01:57:42 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  159.391671][T11416] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  159.399845][T11416] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b4c9c610
01:57:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf0, 0x806000)

01:57:42 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3002c, 0x806000)

[  159.525474][T11428] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.533851][T11428] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:42 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  159.660099][T11443] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.668505][T11443] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  159.725130][T11443] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  159.733175][T11443] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
01:57:42 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300fe, 0x806000)

01:57:42 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x700, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:42 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1b4, 0x806000)

[  159.776165][T11443] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  159.784213][T11443] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
01:57:42 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3002d, 0x806000)

[  159.870384][T11455] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.878950][T11455] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:42 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xc, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:43 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  159.978247][T11465] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  159.986698][T11465] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x281, 0x806000)

01:57:43 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300ff, 0x806000)

[  160.164542][T11465] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  160.172696][T11465] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
01:57:43 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3002e, 0x806000)

[  160.238823][T11479] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.247213][T11479] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:43 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  160.365828][T11490] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.374254][T11490] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:43 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  160.431588][T11490] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  160.439753][T11490] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000afc1a7a
01:57:43 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3002f, 0x806000)

01:57:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300, 0x806000)

01:57:43 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e0, 0x806000)

[  160.503864][T11490] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  160.511913][T11490] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000002f3bf6d6
[  160.596815][T11506] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.605606][T11506] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x2, @perf_config_ext, 0x4020, 0x0, 0x0, 0x9, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063e00)={0x0, [{0x0, <r0=>0x0}, {}, {0x0, <r1=>0x0}, {0x0, <r2=>0x0}, {<r3=>0x0}, {<r4=>0x0}, {}, {<r5=>0x0}, {}, {<r6=>0x0}, {<r7=>0x0}, {<r8=>0x0}, {0x0, <r9=>0x0}, {}, {}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}, {}, {<r12=>0x0}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}, {0x0, <r14=>0x0}, {<r15=>0x0}, {<r16=>0x0}, {<r17=>0x0, <r18=>0x0}, {0x0, <r19=>0x0}, {}, {}, {<r20=>0x0, <r21=>0x0}, {0x0, <r22=>0x0}, {<r23=>0x0, <r24=>0x0}, {0x0, <r25=>0x0}, {}, {}, {}, {}, {}, {}, {}, {<r26=>0x0}, {}, {0x0, <r27=>0x0}, {}, {}, {}, {<r28=>0x0}, {}, {}, {}, {0x0, <r29=>0x0}, {<r30=>0x0, <r31=>0x0}, {}, {}, {0x0, <r32=>0x0}, {0x0, <r33=>0x0}, {}, {0x0, <r34=>0x0}, {}, {}, {<r35=>0x0}, {}, {}, {0x0, <r36=>0x0}, {0x0, <r37=>0x0}, {<r38=>0x0}, {<r39=>0x0, <r40=>0x0}, {}, {}, {}, {0x0, <r41=>0x0}, {<r42=>0x0}, {}, {}, {0x0, <r43=>0x0}, {<r44=>0x0}, {}, {<r45=>0x0}, {0x0, <r46=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r47=>0x0}, {}, {0x0, <r48=>0x0}, {}, {}, {}, {0x0, <r49=>0x0}, {}, {}, {<r50=>0x0}, {}, {}, {}, {}, {0x0, <r51=>0x0}, {0x0, <r52=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r53=>0x0}, {}, {0x0, <r54=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r55=>0x0}, {<r56=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r57=>0x0}, {}, {}, {}, {<r58=>0x0}, {}, {}, {}, {}, {}, {0x0, <r59=>0x0}, {}, {}, {}, {}, {0x0, <r60=>0x0}, {}, {}, {}, {<r61=>0x0}, {}, {0x0, <r62=>0x0}, {}, {<r63=>0x0, <r64=>0x0}, {}, {}, {0x0, <r65=>0x0}, {<r66=>0x0, <r67=>0x0}, {}, {0x0, <r68=>0x0}, {}, {}, {}, {0x0, <r69=>0x0}, {}, {<r70=>0x0, <r71=>0x0}, {}, {}, {0x0, <r72=>0x0}, {}, {}, {}, {}, {}, {<r73=>0x0}, {}, {}, {}, {0x0, <r74=>0x0}, {}, {<r75=>0x0, <r76=>0x0}, {}, {0x0, <r77=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r78=>0x0}, {<r79=>0x0}, {}, {0x0, <r80=>0x0}, {<r81=>0x0}, {}, {}, {0x0, <r82=>0x0}, {}, {}, {}, {}, {}, {}, {}, {<r83=>0x0, <r84=>0x0}, {}, {<r85=>0x0}, {}, {}, {0x0, <r86=>0x0}, {<r87=>0x0}, {<r88=>0x0}, {<r89=>0x0}, {}, {}, {}, {0x0, <r90=>0x0}, {0x0, <r91=>0x0}, {0x0, <r92=>0x0}, {0x0, <r93=>0x0}, {<r94=>0x0}, {}, {}, {}, {}, {}, {<r95=>0x0}, {}, {}, {}, {}, {<r96=>0x0, <r97=>0x0}, {}, {0x0, <r98=>0x0}, {}, {0x0, <r99=>0x0}, {<r100=>0x0}, {}, {}, {<r101=>0x0}, {}, {<r102=>0x0}], 0xc6, "9aa739b77bd19d"})
r103 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a040)={0x0, [{<r104=>0x0}, {0x0, <r105=>0x0}, {<r106=>0x0, <r107=>0x0}, {<r108=>0x0}, {}, {0x0, <r109=>0x0}, {}, {0x0, <r110=>0x0}, {}, {<r111=>0x0, <r112=>0x0}, {<r113=>0x0}, {0x0, <r114=>0x0}, {}, {}, {}, {}, {<r115=>0x0, <r116=>0x0}, {}, {0x0, <r117=>0x0}, {}, {0x0, <r118=>0x0}, {}, {}, {}, {<r119=>0x0, <r120=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r121=>0x0}, {}, {}, {0x0, <r122=>0x0}, {0x0, <r123=>0x0}, {}, {}, {}, {}, {<r124=>0x0, <r125=>0x0}, {}, {}, {<r126=>0x0}, {}, {}, {}, {}, {}, {<r127=>0x0}, {}, {0x0, <r128=>0x0}, {<r129=>0x0}, {}, {}, {<r130=>0x0, <r131=>0x0}, {}, {0x0, <r132=>0x0}, {0x0, <r133=>0x0}, {0x0, <r134=>0x0}, {}, {0x0, <r135=>0x0}, {}, {<r136=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r137=>0x0}, {}, {}, {0x0, <r138=>0x0}, {<r139=>0x0}, {<r140=>0x0}, {0x0, <r141=>0x0}, {}, {}, {}, {<r142=>0x0}, {0x0, <r143=>0x0}, {<r144=>0x0, <r145=>0x0}, {}, {}, {0x0, <r146=>0x0}, {}, {}, {}, {}, {0x0, <r147=>0x0}, {0x0, <r148=>0x0}, {}, {}, {}, {}, {}, {0x0, <r149=>0x0}, {<r150=>0x0}, {<r151=>0x0}, {}, {0x0, <r152=>0x0}, {}, {}, {<r153=>0x0}, {<r154=>0x0}, {}, {}, {}, {}, {}, {}, {<r155=>0x0}, {0x0, <r156=>0x0}, {0x0, <r157=>0x0}, {}, {}, {}, {<r158=>0x0}, {}, {}, {}, {}, {}, {<r159=>0x0, <r160=>0x0}, {0x0, <r161=>0x0}, {}, {}, {0x0, <r162=>0x0}, {<r163=>0x0}, {<r164=>0x0}, {}, {}, {}, {}, {}, {0x0, <r165=>0x0}, {}, {}, {0x0, <r166=>0x0}, {<r167=>0x0}, {}, {}, {<r168=>0x0, <r169=>0x0}, {}, {<r170=>0x0}, {<r171=>0x0}, {<r172=>0x0}, {0x0, <r173=>0x0}, {}, {<r174=>0x0}, {}, {}, {0x0, <r175=>0x0}, {}, {}, {0x0, <r176=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r177=>0x0}, {}, {0x0, <r178=>0x0}, {}, {}, {}, {}, {0x0, <r179=>0x0}, {0x0, <r180=>0x0}, {<r181=>0x0, <r182=>0x0}, {}, {}, {}, {<r183=>0x0}, {}, {}, {<r184=>0x0}, {<r185=>0x0}, {}, {}, {}, {<r186=>0x0, <r187=>0x0}, {<r188=>0x0}, {}, {}, {}, {<r189=>0x0}, {}, {0x0, <r190=>0x0}, {}, {}, {}, {0x0, <r191=>0x0}, {}, {0x0, <r192=>0x0}, {}, {}, {<r193=>0x0}, {}, {<r194=>0x0}, {}, {<r195=>0x0, <r196=>0x0}, {}, {0x0, <r197=>0x0}, {}, {0x0, <r198=>0x0}, {}, {<r199=>0x0}, {}, {}, {}, {}, {}, {}, {}, {<r200=>0x0}, {}, {}, {0x0, <r201=>0x0}, {}, {}, {<r202=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r203=>0x0}, {}, {<r204=>0x0}, {}, {}, {}, {<r205=>0x0}, {}, {<r206=>0x0}], 0xe0, "cf146a61f70946"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062c00)={<r207=>0x0, ""/256, <r208=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r103, 0xd000943e, &(0x7f00000013c0)={0x0, <r209=>r159, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x1000, [], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000004c1c0)={{<r210=>0x0, 0x1000, 0x100000001, 0x0, 0x10001, 0x4, 0x9, 0x4, 0xa8, 0xffffff00, 0x9, 0x6, 0x9459, 0x2, 0x5}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d1c0)={0xd80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r210}], 0x2, "2a09d1df911b12"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r103, 0xd000943e, &(0x7f00000543c0)={<r211=>0x0, r16, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000553c0)={0x8, [{}, {0x0, r97}, {r95, r138}, {}, {}, {0x0, r176}, {r150}, {r35, r131}, {r181}, {r75}, {}, {}, {}, {0x0, r192}, {0x0, r179}, {0x0, r135}, {}, {0x0, r179}, {r200, r121}, {}, {0x0, r19}, {}, {0x0, r46}, {}, {r100, r40}, {}, {}, {}, {}, {0x0, r107}, {r3}, {}, {0x0, r60}, {r20}, {0x0, r145}, {}, {0x0, r67}, {r28}, {}, {r127}, {}, {r56}, {r188}, {}, {}, {r144, r110}, {}, {r4, r92}, {r183, r125}, {r129}, {}, {0x0, r93}, {r167}, {}, {r8, r29}, {}, {0x0, r31}, {}, {r102}, {0x0, r187}, {r44, r80}, {r58}, {0x0, r27}, {0x0, r147}, {r95}, {0x0, r33}, {0x0, r13}, {r164, r169}, {r183}, {r208}, {}, {r199}, {0x0, r180}, {0x0, r14}, {r126, r132}, {}, {r154}, {0x0, r47}, {0x0, r118}, {}, {r140}, {r204}, {0x0, r123}, {r81}, {0x0, r122}, {r104}, {0x0, r43}, {0x0, r55}, {0x0, r120}, {}, {}, {}, {0x0, r141}, {r151}, {r171}, {0x0, r196}, {0x0, r9}, {0x0, r64}, {0x0, r43}, {0x0, r112}, {r79}, {}, {r4}, {r124}, {}, {r17}, {}, {0x0, r21}, {r87, r62}, {0x0, r82}, {r153}, {r15}, {}, {r38, r114}, {}, {0x0, r72}, {r83}, {}, {0x0, r86}, {0x0, r201}, {}, {r7, r36}, {r204}, {r66, r71}, {}, {}, {}, {0x0, r2}, {r70, r178}, {0x0, r24}, {}, {}, {0x0, r48}, {0x0, r32}, {r73, r76}, {r207}, {r89, r25}, {}, {}, {}, {}, {0x0, r137}, {}, {0x0, r1}, {r23, r10}, {r50}, {0x0, r47}, {0x0, r149}, {r39}, {}, {r4, r160}, {0x0, r203}, {r159, r134}, {r186, r18}, {r96}, {r170}, {}, {0x0, r191}, {}, {r139}, {}, {}, {}, {r101}, {}, {0x0, r152}, {r12, r99}, {r202, r182}, {r26, r156}, {}, {r85}, {r5, r105}, {r106, r162}, {0x0, r69}, {0x0, r51}, {}, {r194, r128}, {}, {r63}, {r189}, {r205, r36}, {}, {0x0, r0}, {}, {}, {}, {}, {}, {r184, r84}, {0x0, r53}, {r136, r77}, {r42}, {r163, r22}, {r142}, {0x0, r97}, {r113}, {r11}, {0x0, r148}, {0x0, r116}, {}, {r119, r109}, {0x0, r53}, {0x0, r49}, {r206, r117}, {r108}, {0x0, r98}, {}, {r75}, {r184}, {0x0, r177}, {r111, r54}, {r158, r55}, {r88}, {}, {0x0, r146}, {}, {r61}, {0x0, r90}, {r45, r173}, {}, {0x0, r78}, {}, {0x0, r74}, {}, {}, {0x0, r37}, {r130, r118}, {}, {0x0, r34}, {0x0, r57}, {r195}, {0x0, r52}, {0x0, r29}, {}, {r168, r68}, {r12, r59}, {}, {r94, r203}, {r155}, {0x0, r65}, {}, {0x0, r198}, {r185}, {r193, r177}, {}, {}, {r174, r190}, {}, {0x0, r161}, {}, {0x0, r197}, {r159, r175}, {}, {r172}, {0x0, r211}], 0x0, "35f4c1d929545f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r103, 0xd000943d, &(0x7f0000062e00)={0x5e, [{}, {}, {}, {0x0, r157}, {}, {r115}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r212=>0x0}, {}, {}, {}, {}, {}, {}, {<r213=>0x0}, {0x0, r165}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r214=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r215=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r216=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r133}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r209}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r143}, {0x0, r41}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r166}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r166}], 0x1f, "d8f0159bfc9e3b"})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r217=>0x0, <r218=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r214}, {}, {}, {0x0, r218}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r213}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r218}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r217}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r217}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r216}, {r217}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r72}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r219=>0x0}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r91}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r212}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r103, 0xd000943d, &(0x7f0000063e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r30}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r219}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r207}, {r215, r218}], 0xc6, "9aa739b77bd19d"})
r220 = open(&(0x7f0000000040)='./bus\x00', 0x4e141, 0x0)
r221 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r220, r221, 0x0, 0x401ffc000)

01:57:43 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  160.714470][T11516] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.722881][T11516] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:43 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  160.761092][T11518] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.769637][T11518] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:43 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:43 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:43 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30030, 0x806000)

01:57:43 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e1, 0x806000)

01:57:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x500, 0x806000)

[  160.846275][T11530] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.854705][T11530] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  160.912739][T11537] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.921122][T11537] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:44 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x300f5, 0x806000)

[  160.965452][T11540] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  160.973841][T11540] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:44 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x11, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:44 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e2, 0x806000)

01:57:44 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30031, 0x806000)

[  161.059359][T11555] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  161.067727][T11555] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  161.095391][T11555] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:44 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  161.103418][T11555] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000f90d3b40
01:57:44 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x600, 0x806000)

[  161.164747][T11564] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  161.173145][T11564] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:44 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  161.271795][T11576] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  161.280309][T11576] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:44 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:44 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf00, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  161.331000][T11579] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  161.339378][T11579] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:44 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e3, 0x806000)

01:57:44 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30032, 0x806000)

01:57:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x900, 0x806000)

01:57:44 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x13, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  161.616752][T11601] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  161.625204][T11601] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  161.650267][T11601] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:44 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3001e, 0x806000)

[  161.659239][T11601] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000c0b32cb
01:57:44 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  161.713432][T11601] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  161.721588][T11601] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000cc4ebbf0
01:57:44 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e4, 0x806000)

01:57:44 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xc00, 0x806000)

01:57:44 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30033, 0x806000)

[  161.952039][T11622] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  161.960436][T11622] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x25, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:45 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  162.051028][T11631] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.059414][T11631] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:45 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30034, 0x806000)

01:57:45 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd00, 0x806000)

01:57:45 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e5, 0x806000)

01:57:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x27, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  162.248973][T11650] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.257572][T11650] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4c01, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:45 executing program 1:
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000002240)=""/4096, 0x1000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
getdents64(r1, &(0x7f0000000080)=""/101, 0x65)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000140)=""/66, 0x42)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getdents(r0, &(0x7f00000009c0)=""/4096, 0x1000)

[  162.342038][T11658] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.350580][T11658] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e6, 0x806000)

01:57:45 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30035, 0x806000)

01:57:45 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xe00, 0x806000)

[  162.486974][T11668] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.495403][T11668] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1])
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f00000004c0)=""/194, &(0x7f00000005c0)=0xc2)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x10010, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x1}}, {@gid={'gid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x3f}}], [{@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0))
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="2000000040000000030000002d0000000f000000000000840002000000020000ffff8010597d1fa80e15210a001d0000008000f900002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001c55bafbefd04598c7ad9bf8e4de2d8b18bcc39543c98b905e051b2152a94f415", 0x84, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f000000000000040008", 0x1d, 0x22100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
creat(&(0x7f0000000040)='./file0\x00', 0x1)
dup3(r2, 0xffffffffffffffff, 0x80000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x5, &(0x7f0000000340), 0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x5, &(0x7f0000000340), 0x4)
dup2(r3, r5)

01:57:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x48, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:45 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8008, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  162.599632][T11689] tmpfs: Unknown parameter 'obj_user'
[  162.613314][T11688] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.621709][T11688] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e7, 0x806000)

01:57:45 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf00, 0x806000)

01:57:45 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30036, 0x806000)

01:57:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200010000002000018008000300010000e0"], 0x3c}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fff, 0x46}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0171c47932aba4f15ef710a791"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendfile(r3, r2, 0x0, 0x100007817)
write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '+'}, {0x20, '&#z'}, {}], 0xa, "e4d67a4f4493"}, 0x18)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  162.825585][T11708] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.833970][T11708] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4c, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  162.918443][T11715] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.926866][T11715] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  162.953359][T11717] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  162.961820][T11717] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:46 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8102, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:46 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e8, 0x806000)

01:57:46 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x60, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1100, 0x806000)

01:57:46 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30037, 0x806000)

[  163.076960][T11735] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  163.085520][T11735] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:46 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  163.132916][T11735] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.140944][T11735] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
[  163.175056][T11735] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.183082][T11735] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000afc1a7a
01:57:46 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301e9, 0x806000)

01:57:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1200, 0x806000)

01:57:46 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30038, 0x806000)

01:57:46 executing program 1:
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:lirc_device_t:s0\x00', 0x23, 0x4703f212cf266032)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xb9}, {0x0, 0x60, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x8000000000001f4)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x53, 0x8a002)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
sendmmsg(r2, &(0x7f0000002600)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0xfffe, @random="c3f29c38d1c1", 'team_slave_0\x00'}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)="fcb39456fe906afbe87b1120d4bc7959aed27f0646d03976092aea3863a5397507ac235d04db4929bfd49022446d66b32c46a42a6875ab999f8ebad7fdf68871bf40a8246c2f5e794678d1262c28ccebb8ebd1b6db42d06337f0fc0c71b4d354ee3c25561225717199d5068a296c87cc06dde5973d03b77f8c1e83c2f8da60e541", 0x81}, {&(0x7f0000000340)="84f237f71a62fc4afad8efb175ebd3a5a9fe1d292696a69b6a7f26713a2a4388c61776575b2c37f890f28dab0133e6e03e96a5ebdc05", 0x36}, {&(0x7f00000004c0)="7d5f73dd3109f2eb01864fd3b98231dbb6d351cc72439cc63fb856ccfeb9201e395829ba73e8b26e6670d34e58079f16a471b93af10ab61f05ddfbeab8cf1135d6738ccb2030c3da044fe1984406d54c0257d95007893ef310703bb759d39871f29bb226e54f6a3bb12d8d7ca8c32cfc8f461b6c854694178c5adddc859dc64545f3df2efc8de66ed06bc7983d809babf8f462ebc0b21dfc5106a23e85d8fe7d1e30b4cdb6fedbc2f962df0060e6fc9454d3e283b87a115efaa6d43d0e319c", 0xbf}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="0b00d89602edb2ab1e7cb1924fb04fe4b5e2a2e8919423e365651f879a4a54f9925f94d23b8bf9b202e1b05e8895a979b915e35d7ce09067acebfe96bdc6ee9884a67d80860120c40151c10f5e5b05dd9028b64e5576d108ee925aa6149d0e4effa3e71967e15a19fbf511707f82361a5f61d1cdbc9c05073d1d5bcdc94e29a5598cba08877cc5bce9f353abee45861be549f1d65c6d893f69bc86e200b3c11b1b3a86fea27c8459028728b17fd14e570cab0045ba3d95e6770d", 0xba}, {&(0x7f0000001640)="fd297a655620c49adf9858ec7bb9800f88c76bab96f4af172b330129fe2c0eb566add75cd4a580143888b1f54f985e882b21d379eb81c2277c1a6bbb47e0feaba95f9a0f6a529c6b1e9ba0c92c4ad5f97214a1542c65ad1809dcb8de392d0acc2d6697eb7d7e429d81b9b9e266a37144f9fdbec5a5a63c940cbd2f5b5dd736e58385cda67d9d5a63ecbff649817b291f54aa1ae82f011ca1e0e119260bce7187fa9a2a291db467ef51888d7efb00", 0xae}], 0x6, &(0x7f0000001780)=[{0x48, 0x113, 0x3, "395560ce0bded9af9a65bf65febd790f0ed2feac068c583139af2597df4d911af69388f79c43cb7a243b55280995499b71"}, {0x58, 0x113, 0x3f, "159b1652d45781c3e2c79035c84a03a5acf9a074a5e31f35ed538dad9d2f50eaf2c65dd0e70061f367616e6666be56bf9086231fef3990c5673d704d208dcbcff0a12ac2b6"}, {0x108, 0x116, 0x2, "d1106adf9e7ed9c045e17eaae8dd9627aeb77d293f6beb1294d53eebceb227b71fc8894d72123aeefb6036a40ff2f6c9adbf4bb519fdbf43857e330eb61bc1c50409538c0096d79e1d22d7de500ccb0645fc1234edf39d829b0f7786bcc00530d42758c5ee42da9727e7e419115e0a2838418322d795cf0788c2e5ac9f50f9ec303359196220ccee370ba0434f8db50ccf86dfdaec3e60326ccf47fe253bc666f8fb50ac83ecadb44afc5a55b589da63053877dbd869505f57267bff37af001d229318904175178db6d5bbe32f4c9783560dfde44cdcbbd054406eb94b8b70f068d9544103e81c19e140b5bdca02bfd54061b5d6b19ece17"}, {0x20, 0x10d, 0x7, "5a0e93a63697b8699dc1"}, {0xf8, 0x88, 0x7fffffff, "76ab8f5506bd82173be6402f1f8f03499bbff71264ba34eadf9be3f408baf23899a5bfd0b379459234cc5aec7e4648953cf793d563e3806edd0de60c6b39c4e16a4b886ecace8b0ea4c6b6cc1753960fc6940d354b626642c5e0e587214c1a117cab6cb1c08efc648b2501796b5910f927dc6c0095ce52168e1115733f6dee3e7531a5cb6c6d411dfc200e6d59e73e2556f8f9a96f83d463c50ce7b2d6bc8bffefeb53a47d7f453b55c06321ac49334c566b42257ca459315778f3e79c1f4ec7281c9520e2ecc5a791280caaebd834ed0904660598981c8ae7fb624cdd46b4963d1c95ddc7604b"}, {0x80, 0x10f, 0x4, "464c9adf08bc06071161dcd2756dc6cc80b3a067ae4e71a7b5df63a0f7f1389413dbdf3ff883dfe723e7a12386f072b0017e4dd2f540580acfd573ba6ff76385b9328b9fa41b7054ea72866895ee286b924e51b3e6dc517f48ed858b44fa09c3e9f5714b60f539c521"}, {0x98, 0x110, 0x9bcd, "0b4e2d57995b3a1672b24f7ba4b657aa24d6da1a772b9c95775beb231b56945620e29d150a170b0c604c10f5d8387387190e55fc60f76ada34cd7fb66a74b4a88a1dd1d5f5b153b3e6d305640387a87d7dd9e23ab67b51bc0e3c18e17675918a65b1915607690e85d2c85fe5ae97f9952d7103f9e84b0ba1bc51028b415eff158637a8e639"}], 0x3d8}}, {{&(0x7f0000001b80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c00)="93bef0d4691ba283cee4468449df26df9a20a2a251ea02239c8864e2edfe31a57fa5992c405cc7457902cd266ab0e9ecb93c64ea8a3fa0d1b265bf484f92ca80b9bfa686128986e3d2fd5325ac8f59577a", 0x51}, {&(0x7f0000000380)="2c9f2ca692", 0x5}, {&(0x7f0000001c80)="a78419ec4ec2b3f723352b70b5523ffc2ece78312005500f843b4c01ebdc17e4951c5ef921ee4335118c93d4bb318203f5e9498c767fc35960bfc0d88d0b304f069bc4716406ee084fcef97657e8badac3", 0x51}, {&(0x7f0000000440)}, {&(0x7f0000001d00)="6c50f706306e4102ca18d1b7798970a5f3210fc2d05e5385c5f300ec33a37e524d93c77478997b3cadb0c98b1f9b7b25d1c3f6a883b77893cb52f0b4f5b63cde5de02771619ab6fa710e15c1c4216de97fa2c489eaeae63deecaacdd1911f7e09c1d9d68f9ee100ac228a3117d588e073fc29fb12a3f31a846cfb3a6c3ce8b4f8404744ad149df0865bf873ad0e81c8841313ed6ddee484386a89bed1195b5bf71c93f30f02a1e97332e69956069db8bcc7a9a66f82645aaba00f5f6c0a12e2654ee146ec08491327ff4b2ae5f5407a7739675adfd03692ae9d9", 0xda}, {&(0x7f0000001e00)="c9f762fda509f0198eeebd22a710599e77e9052bee4ee82b6adc5de335e2ed43ba518b794c49d8bc5f4d5a063bb99e0c393ec5126fb622ec36ed1dea3e3357c2c8b6c73f4e5c253483aece297c4baa110a7d98ca782f5decd3859f5803441fac0138902fe9cf0208", 0xb8}, {&(0x7f0000001e80)="6b04c677ce040b383e544b01a62e196c65e6c2bd4ce2f342de30f67870beef4b4076722a5af2f33196186f59773506f28138b92d772feae40fa8d02584f29f1657dec948d334d18437d00f1606224c6a49c3be9cc1089102c1cb2c3d6a765f92aa286bec81d0858a298d6bc2fed4", 0x6e}], 0x7, &(0x7f00000026c0)=[{0x98, 0x10e, 0xcea, "8b2897b9319b75663b5a66b0b55ae7c351b79d2fde9f679bb9f231b336476063c2b27a7ba3562e276f7d74862cecc216e21469b10068d34d70ee32cb1af57a35be2d04684fce3b066d48aeaf78b98d0f9e4989d4b3ebbe128a4d4a4dbcb80ec94dd2b2069c2c79b10becd9cbe230e16606b1c312c6d72090cdd6f9893908ebf804"}, {0x60, 0x29, 0x1687, "ddc49edf7888355a7b6fe731e485369e3c46bc87e664eef3c6d6c344b53f4063a6cdd94540c45e8de7f2f372b4a24ac4d8c8f254bba7065054dcfc866a694793befe10122e655f4270b0"}, {0xb8, 0x112, 0x8000, "8655172751b34e5d570685fd78b022a8c6f565b10edf33cb8325d2a1be894a417c67a7fe3429d2f84a5ff56901b5c05edbfb86a4c6ccb677246aaf878424fa236f8a1436a8a6485a1569b5ebe3e7e146b4b61c16e1ad1542d34761d1afd93c69cc31131cc0df792dfa5f1070692dc236c31d383e1e411d3e3b821240c6b9fde4c0fab9bb77f337ab887b04f670130891e2bcfbbecf232858d46c644e0996f9c548716573"}, {0x50, 0x10d, 0xd, "6a8e29d59fa5a74b91ddeb6e57170264f1e83e5847b25d051b22b88d6104fd84c635c114274985926e328aea74b04b710fb9f4bb7abb7792cab7e76a70da"}, {0x108, 0x10b, 0x8001, "2fbe62c20a485082b060e89fc92a82a43c1cd265b071d0419afec5d6179cf4c5cf816077f0aa473a171f6d9bb800606b84b19c018ba298f311a2eb9a9d4b81b0c19333293a85ec916ef101a9f031167235c02bb71886e5c650acf48b963b5171c602eb86706e106fb276b5f1878465de6008b579d62b98a32903c403c0765a747f0be83a69f0d630f109a7e51f5c13cac77d8c4f199903965ff5610ac5a039a1273f6b59b8bf67d3de79127f227e24962c0932c14d68dc56323e7bc29121a45ee7542e4a2f6a076f24e70abaa34764d071042fe462a853c03c413c2da52024d594dc76f8b9d6bdae96866bc1ce11fc1cfedcc09b"}, {0x108, 0x117, 0x7, "e68b3494a7e977335f95d576abc49473ec1d05fb8fd6de4c1cdbeaaef9b8ebb11a085a1c7d296db24fdea92c66ed888fbdcf7e11a1e38dd9593c40b2bff8c8c5df3dec9a31f55a5159571d13de1ded1a07e263ae44f0d46690d72c6aa150af3ea4f66610ff2fb822bfe507120fe95e9217f1f58e4f365681f8610b047e226b99f2fca772bf4c38bf7f9eee23cb43638087bd634aaf469cc2b90d8300a282d086dd2cd0d0d0adafb94278638fec96d5be3561d5891accdc3428764f39bc316fa6c8fe12600e6ca3ab305d7a8f5647499f43657fe82108b4c8448091433b69ea4cd3dfa2bfc7aeaa7500b87d59a9292b6b1b67d4"}], 0x410}}, {{&(0x7f0000002340)=@llc={0x1a, 0x338, 0x1f, 0x0, 0x9, 0x3f, @random="8969be79e2c2"}, 0x80, &(0x7f0000002540)=[{&(0x7f00000023c0)="6c23706e73c2ccc8464e02b7cc626ed3f3dc5a3c2f3e03c3c684831c05ca8c1448333c46dae560bfb62660", 0x2b}, {&(0x7f0000002400)="ef8bfb6295f6f359ac7aaa2354", 0xd}, {&(0x7f0000002440)="8740a154b0383f2082f0612e10e8a317f3249f346f395eb2de0336db409dc4dc7726187b414e12b0c5b1778f2aed5db0159a77e7b30b586f6fc8a856c1a08b0fc36135d28c5626630b964123883011248565936b0fde25de2ed5ecd06847a47c6014b3cc96d25daa5a1b88ff661f9d269aabcceb636142ba8af3d9248a15a0387c12d9ecc1a89d8a23531377e486a6439c8c8cec9aadbb7f6be94a53e791d21d2eca7a6bc66ae13eebe232aa682ad8c3f00e7ecd2df7d2b3e1c43026d4c3eb6c49d7051a81d546", 0xc7}], 0x3, &(0x7f0000002580)=[{0x78, 0x101, 0x800, "701db3fddec083c3e2837bf5b8ba2c0730bad43e14374b86078b3bfa25b7e6b3fbcb6ce44ee0be7c989ee91e41ee49202b880196f1dd83ea86e1734bd51441ce3d3bb059ceae4bebd35210ac0f504f78947b2f0771e92a1f46f04264aea83910cd"}], 0x78}}], 0x3, 0x800)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x6, 0x0, 0xfffffffc, 0x3}, 0x10)

[  163.323945][T11750] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  163.332591][T11750] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:46 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000dd1a00000007002100616100"], 0x1c}}, 0x0)
sendfile(r3, r2, 0x0, 0x100007094)

[  163.446575][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  163.454958][T11768] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  163.502099][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.510134][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
01:57:46 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301ea, 0x806000)

01:57:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000940)={0x0, 0x4e, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x101}, 0x14}}, 0x0)
r5 = signalfd4(r0, &(0x7f0000000100)={[0x8]}, 0x8, 0x80800)
r6 = gettid()
ptrace(0x10, r6)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="00082bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r6, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB="a316f40f4ba095d954698a926d0e622ef4ae3d1f07b85e29b5ac2fd348ec0d12ea13a3d8c06b3ec84bdf8f297cbc43ce01d31748676297c8f0180aca54484690c8bb4798c1fbf1fd61a77a7c63df44b87debf814c8a1a6bf22a9f005c48622ea9ec0c5ea57b5ee39c8f092cdae39b288000000000000000000"], 0xf0}}, 0x20000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0xf000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x484080, 0xe0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0)
preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)

01:57:46 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9700, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1300, 0x806000)

[  163.543785][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.551918][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000afc1a7a
01:57:46 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30039, 0x806000)

[  163.620364][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.628416][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
[  163.677054][T11790] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  163.685552][T11790] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:46 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6c, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  163.786621][T11801] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  163.795014][T11801] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:46 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1400, 0x806000)

01:57:46 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9800, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:46 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301eb, 0x806000)

01:57:46 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3003a, 0x806000)

[  163.850484][T11801] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.858751][T11801] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
[  163.875462][T11801] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  163.883534][T11801] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000b6cceb39
01:57:47 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x74, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  163.942509][T11816] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  163.950880][T11816] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:47 executing program 1:
r0 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
r1 = socket(0x15, 0x2, 0xfffffffc)
ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000007c0)={{r0}, "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"})
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x4, 0x0, 0x0, 0x7fffffff}, {0x16}]})
creat(&(0x7f0000000040)='./bus\x00', 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x101, 0x3, 0xc4, 0x8}, {0x5, 0x0, 0x4, 0x3}, {0x5, 0xa8, 0x32, 0x8}, {0x83, 0x80, 0x3, 0x9dc}, {0x8, 0x3, 0x9, 0xb011}, {0x0, 0x7f, 0x43, 0x6}, {0x4, 0xb7, 0x6}, {0x1000, 0x72, 0xf7, 0x5}]})
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x0, 0x5})
socket$netlink(0x10, 0x3, 0x0)

01:57:47 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9900, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  164.028563][T11826] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  164.037008][T11826] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1500, 0x806000)

01:57:47 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301ec, 0x806000)

01:57:47 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3003b, 0x806000)

[  164.212678][T11842] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  164.221306][T11842] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:47 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:47 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000080)=""/239, 0x2})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100ea1105000000", 0x29}], 0x1)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001ac0)=<r1=>0x0)
r2 = fspick(0xffffffffffffffff, &(0x7f0000001b00)='./file0\x00', 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003300)={0x0, <r4=>0x0}, &(0x7f0000003340)=0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r6])
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003380)={0x0, <r7=>0x0})
fstat(r0, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(r0, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r11, 0xee00)
statx(0xffffffffffffff9c, &(0x7f00000034c0)='./file0\x00', 0x400, 0x80, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x5, &(0x7f0000000340), 0x4)
sendmsg$netlink(r0, &(0x7f0000003680)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc, &(0x7f0000003280)=[{&(0x7f0000000200)={0x88, 0x11, 0x4, 0x70bd2d, 0x25dfdbfc, "", [@generic="5a51f48002b7ffd07bbaec259eefb7087fb58d8c1d172dddb631b17eaed9d3f3de8939bfb1e1c2c3709599a873c4fdab0f03582a3c3688270f9871708f820855d4630f42829b55061d5031f138", @generic="40a53abb1c52b7732145a0f885011610f60dd93024b4dc04b533a5ada2edfcfa49d2fe", @typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}]}, 0x88}, {&(0x7f00000002c0)={0x254, 0x26, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0x8, 0x56, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x2b, 0x0, 0x0, @uid}, @generic="c28064ae1ddd98606956ee246b14b39503a9afe478f688f7f0403d76bbe4cee995f5498638b81dae3705226e2992b42f2d7335df5ee359aed6afc552027e6ecd8b02d8b94ace8e0ea4dc32cd173efa8160f9757175101f343625add890e96fec275e5e994a141ff290668c992cdd0181861652a8d650e9b4b01e847a19f690ebd99ef86ca72f38e707e7dbaec01b35c8199dd7d40431555f59", @typed={0x4, 0x3d}, @generic="fed8d933fd55b5f02a2bd361497c6e349f0981dedc6e92f5dbd23393145b6cdfb2f2502cfd3c99fd2d319baeb82f3b12366b4fed3a0348a40e6b5f76cccc9be23f7b44bd0070f17b3bd461c567fa2a49019266e9ad909e1156c2f11b8130bfc32c910c8b7e65751fd602b942716e94329837f84f820794a3c721e7695cc5a53ca0ba2d30fe78e256a484052a9e2d8fe94b1c"]}, 0x254}, {&(0x7f00000005c0)={0x108c, 0x34, 0x1, 0x70bd25, 0x25dfdbfd, "", [@nested={0x107a, 0x55, 0x0, 0x1, [@typed={0x4, 0x20}, @typed={0x8, 0x80, 0x0, 0x0, @uid}, @typed={0x8, 0x5c, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x3ff}, @typed={0x4, 0x88}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@empty}, @generic="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", @generic="5901cfd00896f3f8b4727d7d034f9d9ceedfff20493142370a6edac4d600e8476b7e1a5952c63245963fb1e4f3ce48bba0b5978e40ed6be9bc62d6d51ff0a6872249", @typed={0x5, 0x2d, 0x0, 0x0, @str='\x00'}]}]}, 0x108c}, {&(0x7f00000017c0)={0x2e4, 0x12, 0x400, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0xb, 0x0, 0x0, @uid=0xee00}, @nested={0x142, 0x5a, 0x0, 0x1, [@generic="d12febe463f53c16f15554092c46f7acc6fbf1e57960c6bc3a68ec0657c78fd1770d5eed8c77baf6a8245dc5561525e8ea20f112e76fd40b2183b1460647d17f7af25ae726c7f2a0c452e93805463cb7b09efa5b44aa07a18b51d478dff73ff289135a9c0b380a7a7e67046e8d", @generic="02428c591519c5be4346e95b6bf2e9273e78ec97a95d0fa87ab9a7ef6df01ee1784ef512958355a93b1760160ce6225d3344a427cc8969321e0b74871699d1bf0ae2bfa4999c26a426b21364bb6010eedd59be4c068bea050f907fae35d4fa3e3068ff226a30fd3bf19c11389dc18c410b6cc6df36017414a9300aa9e0e40b68403d8e3936540d926626234c42b52bf8949a4af4fa9cf480ff02201af8cb1f2b691a0c19e37f151d461b3de903e2257622a98c21727f274e57a599a725", @typed={0x4, 0x4a}, @typed={0x5, 0x37, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}]}, @nested={0x185, 0x32, 0x0, 0x1, [@generic="dc599da9e9b2a064622d2b3bb87932419a2897b3e9de2dd08007172b65c8079d479ab989f8e5158a585e7e48d79c3320cc94279e0f15ae6d8add2d9cb272c2f79f1c63819aad260a69339cf4f2452a48a5bccefd0a2bdb0efa4be6c083eda3d236400e9b1377b601f48f5f8cb9d6172773a6e94778bb34b79cbf5810fc5c3bcd5370a7306605e16dae26a2808e6efbf73def7623bc4d330cd7f5d70aa521a6138f36ff1702cdb48bf17b1ce5e7d2445648c46b8fe727f8a2a1", @typed={0x4, 0x6}, @generic="04aef1edc47187347a3fc201b9c2fe0baf5a0fcbf2e573565f40d5725dd40c5edde0422eedeb55fbb1b2f5983ec0af4168cc65ccb9d15d28bb2043ab4e4022c1c6b02206afd310a4e86f20f7118ef0dae821e3dcd7f897af4e7f9d09cf3fb7ef", @typed={0x8, 0x1a, 0x0, 0x0, @uid}, @typed={0x59, 0x71, 0x0, 0x0, @binary="0aae07c316a23e1772594a99d57db58cff4db834231411a404cad6fe3d282a36d98b634eab519e0807737e069463c5cac0c6b1474d1f14024c14bc51d93a930463aaaa08393890d49f9ae2820dd6c0362d9f0dd7a5"}]}]}, 0x2e4}, {&(0x7f0000001b40)={0x15b8, 0x3f, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x38, 0x8, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @u32=0x1}, @typed={0x2c, 0x68, 0x0, 0x0, @binary="8257d570bd52cfa9525ddf454e07e4201bdc1c10a558a32e568512800aa3d4404d3243ed376fb2a2"}]}, @nested={0x11f5, 0x7d, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @pid}, @generic="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", @typed={0xc, 0x78, 0x0, 0x0, @u64=0x3}, @generic="fbfd30fe0b025c333f62849e64d821c200a8c13ad13e4c84ec6ffab09307bc39b342fa035a71cc4991f826ce0e6e65d98237271fc3e6eca4694fb586e6550afd29d7a528e8e119e95db4d77b7befd4e66f6a01419bb706227b8826c0d90f8beb57b45ca0537ff614a5faabaf672594aa6653dc2b0d98da0b0c28f315962e6269dd76ef5ccc9292db1d09c44715b1ba75f72dc284690cf3514185f8894135e170b2afa837d87a677cdb486cb19594cb20c4ea194b9cf6289dbf48b522adfa48975a6dd6d0a4fe6b63960dcb4e65db0a7544c8934daf33502ad2c6aaa0b8d5bbf401c1fdf752cddc252432", @typed={0x8, 0x95, 0x0, 0x0, @u32=0x6}, @generic="4ab652208628299538a5cd371bd13e8d285317edb9b29bfba3836f18b8bb0c47a74bb4f968019db47d7f72de44a8d80cdae4a4f26992450021f48ddc585fb34d5bab6dd168b6431b24f98adb86dcaec93050bb95f428fdb631ad779128d23dae14e1cd6fa02354300925684dd4dfa7652f48", @generic="e9fc4009b25974b67451c463a3667006b779d7e7123b0d82487af4b3f3169bd24d968ac464b6d9c82077c6942a7f8b2d3f193f6a6ed298b312184141668fbc662b87aa", @generic="35d1b8163027c7ae3968019d3c87a24b3a9f18a8ab5a96809b27b00f764399fa6968c4b45e60eda3e27cb4ec9a135d1a7368a4289131"]}, @generic="ee9971c6af6c695fc49bc24be0f599769dd4832e0abf8e96112e8448ac66936b86d9d027ce81f01c4f0cdd52ff27e7f62411b958335c84ccec8682df72a5117f1bf08bc7e4885b459016652514a4070a360776002bd4662e062bf98b1496f3cb3692f6dd85e95e2398c52d81baa0f7", @generic="943216f500f4ffafbda30841df6fd81d792018e1dc9be01971430b58b5b645d102d8288324d92a479aca8534eca31d4037c7c1f3d753771e8a993f83b3667fe8783c3154b8f55e36ff2bc027e4463bbaf2949271c39d0499f6c33010e6219c4feca8e69cf64cc0977aa3da4601dba948b09660d1cd7a1289d186dc68ba43ea934c5e427e197f29558eaf274b88a83edc9856a3b59e869844e0f8fbe08ffbeccae2de78440134808885db977cebc1145d1d3951b7b9d72e6c9c5a195164fece1ce79b75345cfb9294d4709fae5b3820f6d764f9eb313fc1ed4780d6c473eda540230b5cb703add851683d2697e094d80a94e60fdd6cd9", @nested={0xc, 0x7f, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @fd}]}, @typed={0x8, 0xb, 0x0, 0x0, @pid=r1}, @nested={0x1fa, 0x84, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @uid=0xee00}, @typed={0x5, 0x8c, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="e9f483bbbcdfebc1a2277b395a181d6abb4ba4cf41872a4856da55093b687722e49c20e9bc91ea160977814b22c17a2100a142acd5e42eec05ea1663ed3b0c81ab3363d8e3523c6be3f485b9d536545cd933db6ab2f2ae23a8a4b19b82248e460005b7925473e234f37d16503dbe96ac43efffcd613ad4129278b664d67909016fb69934d14f2c1d869ba2d7c5a730d0495986f5dab439", @typed={0x8, 0x82, 0x0, 0x0, @fd=r2}, @generic="a97f8f131587ac1afe19b72cfa1812c5eba875b8ce8c50291d4dcc0b7818d2080a17c0cbeefd3c8ad7c300f5a9fd2716d209ad17f124e9d9360ce4cd31357d705224cfa5e9d87e8cdd3c2b6bdd0994ab0136e77ce63102de82f33207a13da456a7770a64", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@empty}, @generic="231c16d291e67972cd001b7c9bfaf80e349cd468bbbed42f98ac1b06de2c27181d14004411f43c88706dcce7bd03deccbc6c42dcfcf03f053664e82c755a0ce7cd64ad42692dade5f574a055f141da662f7f9293fd056834a8273a8b518b7f6b8854ccba838cdc9c35c8616d4de3321904bae1e8728e6c9fe749162918a96e48a346ce83da8536f660f4ba57ba6ccd745a120af3c19d81e933a28b8909bbc2488266bd16198912e3e8b7b184223da6c2bd3b0a0228bb37aa22bc4ace3578c922e5ce1738ce139c0ee87953", @typed={0x8, 0x90, 0x0, 0x0, @u32=0x32}]}]}, 0x15b8}, {&(0x7f00000031c0)={0x18, 0x33, 0x200, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x39, 0x0, 0x0, @uid=r3}]}, 0x18}, {&(0x7f0000003200)={0x80, 0x11, 0x800, 0x70bd27, 0x25dfdbfb, "", [@generic="0e393d38e4d9d7fd28a1bf808d60ac3e06ca644850458792de89176977e08aa9cd738cfd28aaa093343fb23e19d714407567ee6ca794d677ede664bfef72334461d39d074f5917bb1b4ef81f92956dbececa45f06d318cce8892178b6a4328aed5d1bd0b33f1be4de2c06ae22307b5"]}, 0x80}], 0x7, &(0x7f0000003600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x78, 0xc000}, 0x80)

[  164.328349][T11858] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  164.337906][T11860] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  164.346318][T11860] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  164.361735][T11860] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
clone3(&(0x7f0000001680)={0x42320500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400))

01:57:47 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xefff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  164.369776][T11860] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000cb80c5c7
01:57:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1600, 0x806000)

[  164.428751][T11860] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  164.436794][T11860] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000cb80c5c7
01:57:47 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301ed, 0x806000)

[  164.476365][T11870] autofs4:pid:11870:autofs_fill_super: called with bogus options
[  164.503269][T11883] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  164.511693][T11883] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:47 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff01, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:47 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3003c, 0x806000)

01:57:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x5, &(0x7f0000000340), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @window={0x3, 0x0, 0x4}, @timestamp, @timestamp, @mss={0x2, 0x9}], 0x5)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1402c, &(0x7f0000000240)=ANY=[@ANYRES32=r1])
r3 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
r4 = openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x1c9000, 0x48)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000100)=""/4, 0x4}], 0x2, 0x338b, 0x8001)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x8)
readv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1)

[  164.514573][T11878] autofs4:pid:11878:autofs_fill_super: called with bogus options
01:57:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1700, 0x806000)

01:57:47 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301ee, 0x806000)

01:57:47 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:47 executing program 1:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x1, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x18f6, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
timer_create(0x6, &(0x7f0000000080)={0x0, 0x2d, 0x2}, &(0x7f00000000c0)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r5=>0x0, <r6=>0x0})
timer_create(0x6, &(0x7f00000004c0)={0x0, 0x34, 0x4}, &(0x7f0000000500))
timer_settime(r4, 0x1, &(0x7f00000002c0)={{}, {r5, r6+60000000}}, &(0x7f0000000380))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2000, @fd=r7, 0x101, 0x0, 0x0, 0x11, 0x1, {0x3}}, 0x0)
io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r8=>0x0)
timer_create(0x7, &(0x7f00000003c0)={0x0, 0x3f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000400)=<r9=>0x0)
timer_gettime(r9, &(0x7f0000000480))
io_pgetevents(r8, 0x5, 0x5, &(0x7f00000027c0)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}, 0x0)
mount(&(0x7f0000000540)=@filename='./file0/file0\x00', &(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)='cpuset\x00', 0x800000, &(0x7f0000000600)='\\**!)\x00')

[  164.726453][T11913] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  164.734851][T11913] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:47 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff0f, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  164.774280][T11913] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  164.782297][T11913] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
[  164.803883][T11913] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  164.811908][T11913] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000000c0b32cb
01:57:47 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301ef, 0x806000)

01:57:47 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3003d, 0x806000)

01:57:47 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1800, 0x806000)

[  164.934165][T11928] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  164.942644][T11928] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xff, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000003000100000000000000000047c27195e6782248f48490fe8000000000000000997f0000000000001f36ff00006a6ee14141cb6f06ffff01000000e131ffffffffffffffa5f6337d7828cbfdb37093ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000000006c000000fe8000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000017bee8f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ffe6efe42a9b66073b800e9"], 0xf8}}, 0x0)

[  165.027747][T11944] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  165.036178][T11944] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:48 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffef, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:48 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3003e, 0x806000)

01:57:48 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f0, 0x806000)

01:57:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1900, 0x806000)

01:57:48 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x9, 0x2, 0x1, 0x1, 0x3, 0x4}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x8)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @private1}, 0x1c)

[  165.203246][T11957] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=11957 comm=syz-executor.1
[  165.230488][T11962] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  165.238889][T11962] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:48 executing program 1:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x121)
r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x1, &(0x7f0000000080)=<r2=>0x0)
ftruncate(r1, 0x81fd)
fallocate(r1, 0x0, 0x0, 0x7)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])
readlinkat(r1, &(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180)=""/218, 0xda)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
unlink(&(0x7f0000000100)='./file0/file1\x00')
mount$bind(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x2002, 0x0)

[  165.335875][T11976] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x2
[  165.377270][T11979] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x2
01:57:48 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x20000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:48 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3003f, 0x806000)

01:57:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1a00, 0x806000)

01:57:48 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f1, 0x806000)

01:57:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  165.563813][T12008] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x4
[  165.599262][T12009] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x4
01:57:48 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x20660, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:48 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30060, 0x806000)

01:57:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1b00, 0x806000)

[  165.739138][T12027] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x6
[  165.817926][T12037] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x6
01:57:49 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1b00, 0x806000)

01:57:49 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f2, 0x806000)

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x21200, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:49 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30061, 0x806000)

01:57:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1c00, 0x806000)

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f3, 0x806000)

[  166.282302][T12071] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0xa
[  166.295895][T12073] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0xa
01:57:49 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc03, 0x100)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000f, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
rmdir(&(0x7f0000000040)='./file0/file0\x00')
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

01:57:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1d00, 0x806000)

01:57:49 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x21301, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30062, 0x806000)

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1f)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x5, 0x4e22, 0x9, 0xa, 0x20, 0x20, 0x70, 0x0, r2}, {0x1, 0xeda3, 0xb7ca, 0x81, 0x2, 0x2, 0xc88, 0x5df}, {0x5, 0x0, 0x3, 0x3}, 0x1, 0x6e6bbf, 0x1, 0x0, 0x1, 0x2}, {{@in=@private=0xa010101, 0x4d5, 0x32}, 0xa, @in=@multicast2, 0x3504, 0x1, 0x3, 0x3f, 0xaa1d, 0x939, 0x1}}, 0xe8)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)

[  166.401373][T12089] new mount options do not match the existing superblock, will be ignored
[  166.422770][T12089] new mount options do not match the existing superblock, will be ignored
01:57:49 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r1, 0x6deb, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0xca9a3b, &(0x7f00000000c0)={0x77359400}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/83, 0x53}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f00000013c0)=""/185, 0xb9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x5, 0x81, 0x1)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1d4b9d847c2cc87dd438128d010687f92a18a9"})

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  166.496986][T12105] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0xc
[  166.522860][T12108] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0xc
01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x100000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:49 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f4, 0x806000)

[  166.610960][T12123] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0xe
01:57:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1e00, 0x806000)

01:57:49 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30063, 0x806000)

[  166.651156][T12129] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0xe
01:57:49 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
close(r2)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f00000001000130700000000fcdbdf25fe88000000000000000000000000000100000000000000000000000000010001ce0b0000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffffac1e0001000000f3ffffffffffffff0000000000ae7b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000229c14ace7854d7bfcdcb8c95e8433517b8eed9efd022b604532c1e4afd51d3bbb2c88c67b5c66458057c4ce7df272b3f8d06552cb21e3224bd8c01ee71a0e82bff0a75947e6c1b8391db97f4089f15ca81ee01ad"], 0xf0}, 0x1, 0x1400000000000000}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1000f4, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f5, 0x806000)

[  166.816536][T12154] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x10
[  166.846920][T12156] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x10
01:57:49 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:49 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30064, 0x806000)

01:57:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1f00, 0x806000)

[  166.963375][T12174] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x12
01:57:50 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  167.006316][T12183] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x12
01:57:50 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x120200, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:50 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f6, 0x806000)

[  167.058339][T12189] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x22
[  167.088418][T12191] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x22
01:57:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @random]}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x134}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d5)
syz_read_part_table(0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100)="8199ee7e19ff010000008107008d2300000000a440f03562e3493c00005536b560000001040000000000604d6c7d00000000545c4d8810a49792055f000855aa", 0x40, 0x1c0}, {&(0x7f0000000000)="6bea5ed8d837dfaebbe56514f0f4d2a428d30caa601485bb573dcd7ffb3c5152ae1dafeaa9b6dc6e8a15fdaf052f4986daf5f3101065935b703d74fc3ebfb72d8d55c632e4ef1fce5e3bcbb7cbf8f1d25d3cda87b0e9d5de4dfeeb96d07b95654fcb835f05777d6ce590d612b03e99c0c0258439a389895a8bb4c33884f6cedbc72489b45fe594a8c3f78ee8c2431963ca31010073c28fd0e5b480404db854cefb50047c27ec5fbaf0bd7a75ba3d", 0xae, 0x111}, {&(0x7f00000002c0)="f7aecd5d469ef2e32255dacf1e7cf0f8", 0x10, 0x6}])

01:57:50 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x23}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:50 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30065, 0x806000)

01:57:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2000, 0x806000)

01:57:50 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:50 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f7, 0x806000)

01:57:50 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x28}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:50 executing program 1:
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3)
clone(0x40000000, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
ptrace$setopts(0x4200, r0, 0x3, 0x8)

[  167.632009][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  167.649623][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  167.695114][T12226] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x28
01:57:50 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6, @multicast2}, 0x10)

01:57:50 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x29}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  167.754396][T12243] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x28
01:57:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3f00, 0x806000)

01:57:50 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1010000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:50 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:50 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30066, 0x806000)

01:57:50 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f8, 0x806000)

[  167.934397][T12265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x1fe
[  167.985547][T12274] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x1fe
01:57:51 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:51 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1130200, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:51 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:51 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30067, 0x806000)

01:57:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x4000, 0x806000)

[  168.152989][T12291] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x100000
01:57:51 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301f9, 0x806000)

[  168.194622][T12299] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x8 ref_ctr_offset(new): 0x100000
01:57:51 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  168.284659][T12307] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  168.293045][T12307] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:51 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  168.336606][T12309] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  168.345128][T12309] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  168.368244][T12309] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:57:51 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30068, 0x806000)

01:57:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8008, 0x806000)

[  168.376375][T12309] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000019254821
01:57:51 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:51 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301fa, 0x806000)

01:57:51 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  168.487258][T12329] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  168.495881][T12329] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:51 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30069, 0x806000)

01:57:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8102, 0x806000)

[  168.732038][T12345] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  168.740621][T12345] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:51 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  168.855085][T12351] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  168.863498][T12351] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:51 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:52 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301fb, 0x806000)

[  168.945187][T12351] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  168.953256][T12351] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000c6f44b82
01:57:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xb401, 0x806000)

01:57:52 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006a, 0x806000)

[  168.997949][T12351] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  169.006271][T12351] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000cb80c5c7
01:57:52 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  169.230772][T12370] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  169.239169][T12370] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:52 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  169.350439][T12378] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  169.358865][T12378] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:52 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:52 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006b, 0x806000)

[  169.415144][T12385] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  169.423543][T12385] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xefff, 0x806000)

01:57:52 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:52 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301fc, 0x806000)

[  169.536183][T12397] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  169.544828][T12397] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:52 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x7000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  169.613384][T12397] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  169.621403][T12397] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000c6f44b82
[  169.643749][T12397] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  169.651847][T12397] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000efa2eb21
01:57:52 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf000, 0x806000)

01:57:52 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006c, 0x806000)

01:57:52 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301fd, 0x806000)

[  169.789746][T12414] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  169.798361][T12414] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:52 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:52 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  169.889392][T12425] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  169.897809][T12425] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:52 executing program 1:
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6c}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800)
clone3(&(0x7f0000000500)={0x52100000, 0x0, 0x0, 0x0, {0x800003a}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58)

01:57:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006d, 0x806000)

01:57:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xff01, 0x806000)

01:57:53 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301fe, 0x806000)

01:57:53 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006c, 0x806000)

[  170.070292][T12444] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  170.078781][T12444] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:53 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:53 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8800000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:53 executing program 1:
clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f00000003c0)={0x10020000, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3}, 0x58)

[  170.221760][T12454] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  170.230187][T12454] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:53 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006e, 0x806000)

01:57:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xff0f, 0x806000)

01:57:53 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x301ff, 0x806000)

01:57:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0)
getrlimit(0x8, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18}, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, &(0x7f0000000100))
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000001140)='mountinfo\x00')
sendfile(r3, r4, 0x0, 0x800000080004103)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0xaf8, 0x8, 0x100, 0x3}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x97f, 0x2, 0x1, 0x8, 0x5, 0x800}, 0x20)
socket$packet(0x11, 0x0, 0x300)
gettid()

[  170.443463][T12480] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  170.451943][T12480] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:53 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  170.518545][T12486] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  170.526925][T12486] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  170.578217][T12491] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  170.586692][T12491] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:53 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:53 executing program 1:
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/226)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0xc81]}, 0x8)
clone3(&(0x7f00000001c0)={0x5000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

01:57:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3006f, 0x806000)

01:57:53 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:53 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xffef, 0x806000)

01:57:53 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a0, 0x806000)

[  170.775211][T12500] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  170.783711][T12500] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  170.854883][T12500] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  170.863043][T12500] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000303c5fe3
01:57:53 executing program 1:
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x1)
clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x9, 0x10000}, {0x7f, 0x374bd65f}]}, 0x14, 0x2)
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0xee00)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@huge_advise}, {@uid={'uid', 0x3d, r1}}]})
gettid()

01:57:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30070, 0x806000)

[  170.902672][T12500] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  170.910685][T12500] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000063f678d
01:57:54 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1eea4, 0x806000)

01:57:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10000}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf2d}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="b800000000011905000000000000002c0001001400030016f8bcd383af9b157748180a2ed6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe8800000000002521cbceae68043ffbcac7ca8e3619000000000001b0d9424b4f6e6c4b0000000000000000000000010800070000000000240006001400048aa9289517b142e722dfb5adf648ba39d351ca64bb764d"], 0xb8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS_MASK={0x10, 0x17, [0x23dee001, 0x400, 0x8]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xd1c}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xdc}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000)

[  171.086510][T12500] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.094659][T12500] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000063f678d
01:57:54 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a1, 0x806000)

[  171.219015][T12541] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  171.220824][T12544] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'.
[  171.227413][T12541] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  171.278937][T12545] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'.
01:57:54 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:54 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:54 executing program 1:
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040))
r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000240)={0x0, 0x0})
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000400)={0x0, 0x0, 0x9})
r1 = getpid()
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0xfffffffffffffffd)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/85, 0x55})
timer_settime(0x0, 0x1, &(0x7f0000000140), 0x0)
fork()
tkill(r1, 0x800000015)

01:57:54 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30071, 0x806000)

01:57:54 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a2, 0x806000)

01:57:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1eeb2, 0x806000)

[  171.496357][T12566] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  171.504852][T12566] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  171.520001][T12566] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.528145][T12566] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000015da8258
01:57:54 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  171.550444][T12566] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.558592][T12566] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000015da8258
[  171.580710][T12571] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  171.589100][T12571] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1eeb4, 0x806000)

01:57:54 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30072, 0x806000)

01:57:54 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a3, 0x806000)

01:57:54 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  171.772315][T12597] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  171.781031][T12597] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  171.795178][T12597] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.803250][T12597] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:57:54 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x20000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  171.816486][T12597] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.824514][T12597] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000009d8a3ba8
[  171.844236][T12597] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.852498][T12597] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:57:54 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x20000, 0x806000)

[  171.882352][T12597] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  171.890637][T12597] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000009d8a3ba8
01:57:54 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a4, 0x806000)

[  172.017156][T12611] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  172.025691][T12611] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:57 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30072, 0x806000)

01:57:57 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30073, 0x806000)

01:57:57 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d0, 0x806000)

01:57:57 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a5, 0x806000)

01:57:57 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x40000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  174.506554][T12634] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  174.515191][T12634] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:57 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4c010000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  174.562160][T12638] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  174.570518][T12638] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:57 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:57 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:57 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a6, 0x806000)

01:57:57 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30074, 0x806000)

01:57:57 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d1, 0x806000)

[  174.797207][T12654] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  174.805753][T12654] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:57 executing program 1:
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendfile(r0, r1, 0x0, 0x3)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10)
close(r0)

[  174.842227][T12654] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  174.850344][T12654] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000009d8a3ba8
01:57:57 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x60060200, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:58 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30075, 0x806000)

01:57:58 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a7, 0x806000)

01:57:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d2, 0x806000)

01:57:58 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a6, 0x806000)

[  175.081157][T12680] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.089577][T12680] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:58 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x81020000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  175.210152][T12691] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.218587][T12691] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 1:
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001a000000080001003fb945ab70394e000000"], 0x1c}}, 0x40)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f00000005c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008700000004002a007206030303c90000000000000003030300000000"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x81e)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffff78)
r3 = syz_open_pts(r0, 0x0)
readv(r3, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4076, 0xfec}], 0x1)

01:57:58 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a8, 0x806000)

01:57:58 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x30076, 0x806000)

01:57:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d3, 0x806000)

[  175.393335][T12708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  175.415371][T12710] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.423790][T12710] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:58 executing program 1:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x20000000ffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x0, 0xd9f, 0x400000)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007", 0x11)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffd88)
r4 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x14001, 0x85, 0x18}, 0x18)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000140)="cf3c7d35aa87c24ac51e5ec6f6c8e4c535b945cccf58377aad98c724ad92c7c1c13b3a4691bd3b3dec4857afb362dda42c", 0x31}, {&(0x7f0000000180)="e5aefb193df8c34335d915c946b104b07a025726920ea73780ef3a0a8c7d7f6351b7666d1ca8948a79ec05dc592fff07b0ef2bf141a8ae32c8423c1f4fb30c5462b068750347b9b588a1da469d082ccfcc6a1312bcea45cfd8dfafc52ffdb107342b7fe3aca43e5713b92838cf47839ea8dafadb16e3be5c59bbb002334264c88eeb40c3aa8b413a30b9a519fbb4543a3d51f097e7b0", 0x96}, {&(0x7f0000000240)="1264c3a53e3ef7c06576bf1d039fdd9f3edf82be1cefd067e81472304a02cc502e8459568be2e0166665b9fd69bc8bccb25559a54bc0663fab4e563bfe270ea4474f83f832022ccdd75e7bd71336879a49", 0x51}, {&(0x7f00000002c0)="fdda02ca2ec850fbdb3bbdfedb403f9b70fa43eac59015fdf64a31d8cdcea27fe93bf2db5084bb32b1ebe0afd4a60d2c0413a20c1daabc5ad2eb2b8fda4c46aaec357e2ce10ff99fa7211f53e549acb53db3a747ccf151d98d19e0bd5a05cbf5cb1a225786c1c0355534d56811f67c648ba8d67c96c4040190d717719a8769738a2c223cdfa300c4dcd185db677bad66ef361d668e580076ea1e70b736c95587c54390e1826e91c237b3f8fe438e78fd8aafe68592fa88", 0xb7}, {&(0x7f0000000380)="75843a7c36453e3ecfc78b38a965ff3e5c127776c334bbc60afee1d909dc70034877c068ce930600d0a4064eee18ad8adb642868890437cd9bb40ad2c4f8ec5543931f33392af5482a56e13474eb664e2ed19c76d3e50d84", 0x58}], 0x5)

[  175.447392][T12708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  175.523144][T12720] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.531623][T12720] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  175.557843][T12723] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.566366][T12723] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:58 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x96000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  175.600536][T12721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49283 sclass=netlink_route_socket pid=12721 comm=syz-executor.1
01:57:58 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305a9, 0x806000)

01:57:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d4, 0x806000)

01:57:58 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x40000, 0x806000)

[  175.650282][T12721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17607 sclass=netlink_route_socket pid=12721 comm=syz-executor.1
[  175.677825][T12732] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.686257][T12732] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  175.738108][T12746] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.746502][T12746] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x97000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  175.818323][T12752] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  175.826768][T12752] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d5, 0x806000)

01:57:58 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305aa, 0x806000)

01:57:58 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x100000, 0x806000)

[  175.944723][T12752] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  175.952816][T12752] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031ee3e39
[  176.008707][T12769] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  176.017145][T12769] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:59 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x98000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:57:59 executing program 1:
ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x5, 0x400, 0xfffffffffffffffc, 0x100000001, 0x5})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa40000ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x193, 0x0})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
r1 = gettid()
tkill(r1, 0x37)

01:57:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d6, 0x806000)

01:57:59 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x800000, 0x806000)

01:57:59 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305ab, 0x806000)

01:57:59 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x21}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {{0x5}, {@val={0x3}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)

01:57:59 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x99000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  176.391305][T12794] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  176.399698][T12794] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  176.426326][T12794] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  176.434575][T12794] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000093f820a0
[  176.460800][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  176.462316][T12794] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  176.478063][T12794] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:57:59 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x20000, &(0x7f0000013a00))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000013c0)={0x0, 0xfb, 0xe15, 0x0, 0x0, "138c9648ef3a87ce7870f697b1d68413", "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"}, 0xe15, 0x0)

[  176.494143][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
01:57:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020185ffffff0a000000ff45ac0080ffffff0500e931190000000000000680ffffffa90000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}])
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
fsmount(r1, 0x0, 0x6)

01:57:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d7, 0x806000)

[  176.549563][T12794] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  176.557715][T12794] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000093f820a0
01:57:59 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf00000, 0x806000)

01:57:59 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305ac, 0x806000)

[  176.603653][T12794] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  176.612180][T12794] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:57:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6000)
io_setup(0x1, &(0x7f0000000080)=<r3=>0x0)
ftruncate(r2, 0x81fd)
fallocate(r2, 0x0, 0x0, 0x7)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x16000}])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r6}]}, 0x140}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@private1, r6}, 0x14)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f00000002c0)='./file0\x00')
sendmsg$inet6(r1, &(0x7f0000000780)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@dstopts={{0x18}}], 0x18}, 0x0)

01:57:59 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xefffffff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  176.677869][T12824] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  176.686260][T12824] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:57:59 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305ad, 0x806000)

01:57:59 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1000000, 0x806000)

01:57:59 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:57:59 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d8, 0x806000)

01:57:59 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r2}]}, 0x140}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', <r3=>0x0, 0x2f, 0x1, 0x46, 0x5, 0x8, @loopback, @local, 0x7, 0x41e5a50f1955bf16, 0x6, 0x5362533}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008001)
syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0201a5ffffffe70100000000000000ffffff85000800000000000000024000ffffffbf000000e10000008877007200300700a5ffffff00000000008000da55aa", 0x40, 0x1c0}])

[  176.921581][T12853] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  176.929992][T12853] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:00 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf4001000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:00 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300110468fe0700000000000700ff3f020000003b0a00010000000019001a000a00030014a4ee91e4894b011ee438d2fd09007603", 0x39}, {&(0x7f0000000080)="da79bacae0022cd3722a22f72d6fa49e962ce0f2392f409f00bd27d5fb807e8d73f75a20336a77fec7068218895359a90b4b8f4bc7583acb386fddf0db4e026af05ec5760b66212beb47071bae858cf7fe4556a247c285fe6aa70c6170fece3f2ba7d833480cca793bd99291bd29781c038e1e4af79100263a", 0x79}], 0x2)

[  177.005572][T12853] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  177.013698][T12853] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000bda424c5
[  177.026757][T12853] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  177.034891][T12853] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:58:00 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305ae, 0x806000)

01:58:00 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2000000, 0x806000)

01:58:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206d9, 0x806000)

01:58:00 executing program 1:
clone3(&(0x7f0000000500)={0x42100100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(0x0, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x1f, 0x5, 0x5}, 0x0)
clone3(0x0, 0x0)

[  177.156990][T12870] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  177.165385][T12870] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:00 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:00 executing program 1:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x6e)
ioctl$sock_ifreq(r0, 0x8926, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_ivalue})
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x1, &(0x7f0000000080)=<r2=>0x0)
ftruncate(r1, 0x81fd)
fallocate(r1, 0x0, 0x0, 0x7)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
preadv(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/21, 0x15}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/27, 0x1b}], 0xa, 0x8, 0x3bc)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}])
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@getpolicy={0x124, 0x15, 0x400, 0x70bd29, 0x25dfdbfd, {{@in=@multicast1, @in6=@remote, 0x4e24, 0x7, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x11, 0x0, 0xffffffffffffffff}, 0x6e6bbd, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@local, @in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x33, 0x2, 0x0, 0x3507, 0x2, 0xa}]}, @algo_aead={0x84, 0x12, {{'rfc4106(gcm-aes-ce)\x00'}, 0x1c0, 0x0, "aee0b4d817a8bc478b787155890fd99a2559e2789ee325f94e3856214a4bacc90125d34a7b374ce8e650e60b719d37b850ae268f1a58a0bd"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x12e73b23bd2d0b81)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800002, 0x20010, r3, 0x44ad0000)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
bind$packet(r4, &(0x7f00000005c0)={0x11, 0x17, 0x0, 0x1, 0x9, 0x6, @local}, 0x14)

[  177.287783][T12887] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  177.296264][T12887] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  177.342472][T12887] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  177.350683][T12887] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000bda424c5
[  177.381463][T12887] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:58:00 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf4ffffff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:00 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305af, 0x806000)

[  177.389736][T12887] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000c6f44b82
01:58:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206da, 0x806000)

01:58:00 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3000000, 0x806000)

[  177.444055][T12887] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  177.452120][T12887] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000bda424c5
01:58:00 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf5ffffff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  177.537414][T12918] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  177.545795][T12918] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:00 executing program 1:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0035198495fb319fec0001000000000301"], 0x1}}, 0x0)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0xac, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xac}}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r2 = syz_io_uring_complete(0x0)
dup2(r1, r2)
sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

01:58:00 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:00 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b0, 0x806000)

01:58:00 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x105, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x28}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000090)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xbb}, {&(0x7f0000000300)=""/170, 0xd4}, {&(0x7f0000000e00)=""/96, 0x12c}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x2, 0x0)

01:58:00 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x4000000, 0x806000)

01:58:00 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206db, 0x806000)

[  177.775256][T12940] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  177.783642][T12940] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  177.795504][T12944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=12944 comm=syz-executor.1
[  177.810394][T12949] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
01:58:00 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfbffffff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:00 executing program 1:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000008", 0x5a, 0x400}], 0x0, &(0x7f0000000380))

[  177.818776][T12949] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  177.838424][T12944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=12944 comm=syz-executor.1
01:58:00 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b1, 0x806000)

01:58:01 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:01 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x5000000, 0x806000)

01:58:01 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b0, 0x806000)

01:58:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206dc, 0x806000)

01:58:01 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfeffffff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  178.050361][T12972] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  178.058837][T12972] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:01 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b2, 0x806000)

01:58:01 executing program 1:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
clone(0xc0a33000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x3)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
r2 = openat(r1, &(0x7f00000006c0)='./file0\x00', 0x2, 0xa0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000001010d0e0000000000000000020000cc05080003400000ff0100000d7308000100e00000fcecff154000be000406000a40000400"], 0x38}, 0x1, 0x0, 0x0, 0x22000044}, 0x40048c0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r3, 0x51c99000)
clone(0xc8a00, &(0x7f0000000000)="6658e385120636ff99dd9e4e9894d3be0c46720922892c7177c3162a55095eecd5eae4ff62e728365304eeca3a7dcb9be4c2030217e91cde162c6870228cc249ad68b8fe2ab9402e74a96e0914721a8af4c4078e444d9a7f2f628f9d757a459d969ec8653c30062363d0cbd1d220a210c77682c473154184226f044422a6bc4565b36a4cbca18d7b74f3c54778e3c49304e8fb037a0c", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="de54ea12b1dcdc788008b627073ba8e12bd0a8bf6bd584d81e96e0642cdf1a4110ae7b8448908e94fb46a91c23f799a57a0c15730934a34e402b3ab73e116b3c5e20448f5310fe7f5e")
ioctl$sock_netdev_private(r0, 0x8931, &(0x7f0000000040))

[  178.184703][T12972] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  178.192767][T12972] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000048de945b
01:58:01 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x6000000, 0x806000)

01:58:01 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff010000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  178.255385][T12989] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  178.263760][T12989] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:01 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x23)
r3 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xaf8, 0x3ed, 0x0, 0x0, 0x0, "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"}, 0xaf8}}, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0xe1, 0x80, 0x4, 0x0, 0x6, 0x10010, 0xff5f700a333eb77a, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x4020, 0x7, 0x1ff, 0x0, 0x4, 0x1, 0x5, 0x0, 0x2, 0x0, 0x7ff}, r4, 0x4, r5, 0x8)
close(r3)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x84042, 0x0)
sendfile(r3, r6, 0x0, 0x200004)

01:58:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206dd, 0x806000)

01:58:01 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:01 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b3, 0x806000)

01:58:01 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8000000, 0x806000)

01:58:01 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x23)
r3 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xaf8, 0x3ed, 0x0, 0x0, 0x0, "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"}, 0xaf8}}, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0xe1, 0x80, 0x4, 0x0, 0x6, 0x10010, 0xff5f700a333eb77a, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x4020, 0x7, 0x1ff, 0x0, 0x4, 0x1, 0x5, 0x0, 0x2, 0x0, 0x7ff}, r4, 0x4, r5, 0x8)
close(r3)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x84042, 0x0)
sendfile(r3, r6, 0x0, 0x200004)

[  178.519364][T13019] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  178.527779][T13019] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:01 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff0f0000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  178.575802][T13019] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  178.583843][T13019] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006653744c
01:58:01 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206de, 0x806000)

01:58:01 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8800000, 0x806000)

01:58:01 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b4, 0x806000)

[  178.717317][T13019] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  178.725379][T13019] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000006653744c
[  178.797588][T13050] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  178.806096][T13050] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:01 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:01 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x23)
r3 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xaf8, 0x3ed, 0x0, 0x0, 0x0, "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"}, 0xaf8}}, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0xe1, 0x80, 0x4, 0x0, 0x6, 0x10010, 0xff5f700a333eb77a, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x4020, 0x7, 0x1ff, 0x0, 0x4, 0x1, 0x5, 0x0, 0x2, 0x0, 0x7ff}, r4, 0x4, r5, 0x8)
close(r3)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x84042, 0x0)
sendfile(r3, r6, 0x0, 0x200004)

[  178.892486][T13057] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  178.900966][T13057] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:01 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffefffff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
r3 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r3)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0xe7, 0x2, 0xcc, 0x0, 0xcb4, 0x20, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x26a8, 0x4, @perf_config_ext={0x2, 0x10000}, 0x44015, 0x3, 0x2, 0x5, 0x2, 0x3, 0x5, 0x0, 0x3f, 0x0, 0x8}, r3, 0xf, r4, 0xb)
io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000000)='hostfs\x00', 0x0)

01:58:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206df, 0x806000)

01:58:02 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x9000000, 0x806000)

01:58:02 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b5, 0x806000)

[  179.028487][T13069] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  179.037019][T13069] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:02 executing program 1:
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="b67f48d106358ccd4c37ee"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000180)={0x4, 0x80, 0x40, 0x6, 0xffffffff, 0x7})
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = fork()
wait4(r1, &(0x7f0000000140), 0x8, &(0x7f0000000240))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

01:58:02 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:02 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffefff, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  179.173873][T13094] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  179.182358][T13094] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e0, 0x806000)

[  179.224966][T13094] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  179.233034][T13094] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000013251aca
01:58:02 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffffef, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  179.277555][T13094] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  179.285773][T13094] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000184ab854
01:58:02 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x305b6, 0x806000)

01:58:02 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xc000000, 0x806000)

[  179.406403][T13113] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  179.415126][T13113] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:02 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  179.501463][T13123] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  179.509925][T13123] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:02 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e1, 0x806000)

01:58:02 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfffffff4, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:02 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd000000, 0x806000)

[  179.559269][T13123] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  179.567303][T13123] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000013251aca
[  179.587233][T13123] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  179.595336][T13123] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000013251aca
01:58:02 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x40000, 0x806000)

[  179.653876][T13136] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  179.662335][T13136] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:05 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfffffff5, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:05 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e2, 0x806000)

01:58:05 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xe000000, 0x806000)

01:58:05 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x803, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}, 0xe8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c)
accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0xee00)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in=@loopback, 0x4e24, 0x0, 0xfff7, 0x7, 0x2, 0x180, 0x80, 0x1d, r4, r6}, {0x7f, 0x97a, 0x101000, 0x2, 0x7b8e, 0x400, 0x9, 0xef5}, {0x1, 0x7, 0x40, 0x80000001}, 0x8000, 0x6e6bb2, 0x1, 0x1, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x4, 0x0, 0xff, 0x4, 0xffffffff, 0x4}}, 0xe8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wg0\x00'})

01:58:05 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x100000, 0x806000)

01:58:05 executing program 1:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa0000, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000007000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0008000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x3, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  182.143798][T13162] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  182.152172][T13162] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:05 executing program 1:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x1, &(0x7f0000000080)=<r1=>0x0)
ftruncate(r0, 0x81fd)
fallocate(r0, 0x0, 0x0, 0x7)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6000)
io_setup(0x1, &(0x7f0000000080)=<r3=>0x0)
ftruncate(r2, 0x81fd)
fallocate(r2, 0x0, 0x0, 0x7)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x16000}])
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x65ef4b9a39eed37a, 0x121, 0x4}, 0x18)
io_submit(r3, 0x5, &(0x7f0000001680)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000100)="4d7962a4157319d67c4ef97ff139b546d0b91a69155c1bec3aa3fee984b6b0f40bcbbada551a285cccca9b8226ce6f24e28987a790adc6fb61b4538eff49f284e6e1d0d2bf13fa5b1a0dc5cac6812fcd3d7f4f4049627f49cccf146c80722012be89bc41aa2d229db2c54bbf8558f59ba67dc6b8855bf3a4abdd7abb02be7677bf23f6f6b12f178721d2df3389d45e34e1c168ca7fd79aa213b29e73901e1472acb24e2660496a291720da894ba54264891ffb7dcb1a0ae35b299e2d622e2cd92fc5ac978c537732fa", 0xc9, 0x7, 0x0, 0x4, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000240)="29d4bc352fe54fe504a7a54e155b5f4e742757d4c7ce437b0d5cd6aaebd6227b8db2f2cb02e418a8468b615ec43ead046fbd976372f963e56fbdd9cda996dc01b50c0acab9a47fc0d24305a72e635a415395ca839a7db4494f", 0x59, 0x7, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f0000000440)="5eb146a9b041abb52dc92362bcec6d83c777183bfcd95b29b65e2e151251fec86005505d643a9e8ee3965b139d3ab5bdb4a409a15d242b1c0ffa3b8f41cb38e2ba7cb86e0586249dd716eeb08239b3ca80f531fd79905849ab87f240564ed38757370cef4005e42a10ac591d", 0x6c, 0x80, 0x0, 0x2, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000580)="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", 0x1000, 0x15, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000001580)="850b2de7e6c31a69717dbf0242ee6d7da3211b60996d6c5c1a1fd9c2db0372eb6b03e9ac79dff7a081e00f21d82acffc4b2fda182a88ac465694848a409bdb1d18ad748e4727d6c22199af4cf575704d5bc611b2d29789aebffc8fb35f24142e25e7fccbae0353dddf0e9326d4f0e85f6b5286858039c70186f3dc82e3416afc529d8fd444139e763a1a71524e", 0x8d, 0x9, 0x0, 0x3, r0}])
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)

[  182.187866][T13170] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  182.196345][T13170] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:05 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:05 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f00000001c0))
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
getdents64(r0, &(0x7f0000000080)=""/33, 0x21)
write$P9_RLERRORu(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="04ed3a7cb4f6e2524ac246c64588ce4d0d20cb22549f665c1b39733d32e7a3d4d67e2547df3384746aa51d060ce8113814a83ae69c3b5b89fd97d96eed438591461630ebe0e9ca779f0eb6d60acc80eb81e700000000000000", @ANYRES16=r1, @ANYRESOCT], 0x52)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="4dbdab8395b285d5f3899b617d9165714421aaa34a9aa2f42e822d49efe38f52a0144ffed1e5872890d5c0f6eaf2a815b55140482896bbbadca5bd718b25b185db52b1f7ee60eb5bd2a06004bfda331b8ee5c49b1b0b6dce2816b16e41e7dedbbd5104da780e7c3a86aac20004731c75ff44a98f3e04acfc81dd7b8e426f53c19ed36cddf7b01bcea468bace", @ANYRESHEX=r4, @ANYBLOB=',noextend,\x00'])

01:58:05 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfffffffb, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  182.284094][T13179] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  182.292496][T13179] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:05 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf000000, 0x806000)

01:58:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e3, 0x806000)

01:58:05 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf00000, 0x806000)

01:58:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1, 0x1, 0x9)
write(r1, &(0x7f00000004c0)="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", 0x171)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000100)={@loopback, @local}, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x5, &(0x7f0000000340), 0x4)
sendto$inet(r3, &(0x7f0000000140)="543618aad845f1e1a07e9292984b3b0ae9dfad3930e736af05aabe20049186747cd98da1b744cae04e221dd382156112d7104aa2f7ba6b4291d9b34ad92c3c6c69dadad88b21614191dd8309aaa1bd3dc0096911f3388e2ac7f450b9e07ea109dfe7be4c1b307316c81e3774b813c1fe3ce138ed761816e0bb3bf518f1fcb4b454eb0438cf2d6c8886bda8142c55ba80fdda36ee31ade1a0d9fd1daff31773aa14", 0xa1, 0x4844, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)

01:58:05 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfffffffe, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  182.506070][T13197] 9pnet: Insufficient options for proto=fd
[  182.523665][T13201] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  182.528669][T13202] 9pnet: Insufficient options for proto=fd
[  182.532291][T13201] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:05 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:05 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1000000, 0x806000)

01:58:05 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x10000000, 0x806000)

01:58:05 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e4, 0x806000)

01:58:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f000054f000/0x2000)=nil, &(0x7f00003ba000/0x1000)=nil, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff})
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000120007031dfffd946f610500070003047d5b000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1)

[  182.749118][T13222] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  182.757726][T13222] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  182.788335][T13222] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:58:05 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  182.796475][T13222] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000427a8055
[  182.824833][T13222] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  182.832904][T13222] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000008a37449f
01:58:05 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x10000300, 0x806000)

01:58:05 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x2000000, 0x806000)

01:58:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e5, 0x806000)

01:58:06 executing program 1:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400986713bc083ebdc0008f062fbb220ee3a192071ae3054dc21c01e6ccef50167e6294738ce10c883243303f0e68258431c0b2ca2378066ff195cd7721909f3b68d81793f51cfcb4a733823d24e75ae55474ed04d655648184994e4f7b2cf3b36f208a70f68c593bb20d98c55fb3fde45ead0d4ece6d2ce422e8fb673824a80dcb6b0744e4d7caf1604912259d44ed7a8cec0f7456cf656a4d8f99db93d389b8c2f0465dece07e4e534e"], 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3e6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000003)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  182.991121][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  182.993694][T13250] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  183.008795][T13250] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  183.012687][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
01:58:06 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1c4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  183.142384][T13262] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  183.150895][T13262] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:06 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffffff000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:06 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x3000000, 0x806000)

[  183.189497][T13264] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  183.197976][T13264] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  183.217507][T13264] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  183.225547][T13264] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
01:58:06 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x11000000, 0x806000)

01:58:06 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e6, 0x806000)

[  183.349835][T13284] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  183.358269][T13284] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:06 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x800800000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  183.415222][T13286] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  183.423629][T13286] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  183.455215][T13283] ==================================================================
[  183.463346][T13283] BUG: KCSAN: data-race in dd_insert_request / ll_back_merge_fn
[  183.470983][T13283] 
[  183.473305][T13283] write to 0xffff88810225d880 of 8 bytes by task 13263 on cpu 0:
[  183.481105][T13283]  dd_insert_request+0x327/0x330
[  183.486046][T13283]  dd_insert_requests+0xfe/0x170
[  183.490972][T13283]  blk_mq_sched_insert_requests+0xbe/0x200
[  183.496778][T13283]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  183.502154][T13283]  blk_flush_plug_list+0x235/0x260
[  183.507262][T13283]  blk_finish_plug+0x44/0x60
[  183.511978][T13283]  __iomap_dio_rw+0x780/0xad0
[  183.516644][T13283]  iomap_dio_rw+0x30/0x70
[  183.520970][T13283]  ext4_file_read_iter+0x21a/0x290
[  183.526088][T13283]  generic_file_splice_read+0x22a/0x310
[  183.531639][T13283]  splice_direct_to_actor+0x2aa/0x650
[  183.537029][T13283]  do_splice_direct+0xf5/0x170
[  183.541799][T13283]  do_sendfile+0x773/0xda0
[  183.546210][T13283]  __x64_sys_sendfile64+0xf2/0x130
[  183.551300][T13283]  do_syscall_64+0x4a/0x90
[  183.555819][T13283]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  183.561837][T13283] 
[  183.564162][T13283] read to 0xffff88810225d880 of 8 bytes by task 13283 on cpu 1:
[  183.571794][T13283]  ll_back_merge_fn+0x2b3/0x460
[  183.576633][T13283]  bio_attempt_back_merge+0x35/0x3f0
[  183.581939][T13283]  blk_attempt_bio_merge+0x229/0x270
[  183.587204][T13283]  blk_attempt_plug_merge+0xd1/0x130
[  183.592493][T13283]  blk_mq_submit_bio+0x13a/0xe90
[  183.597413][T13283]  submit_bio_noacct+0x6f2/0x7e0
[  183.602349][T13283]  submit_bio+0x16d/0x2b0
[  183.606684][T13283]  iomap_dio_bio_actor+0x91d/0xb50
[  183.611777][T13283]  iomap_dio_actor+0x26e/0x3b0
[  183.616520][T13283]  iomap_apply+0x1e2/0x400
[  183.621053][T13283]  __iomap_dio_rw+0x5af/0xad0
[  183.625731][T13283]  iomap_dio_rw+0x30/0x70
[  183.630150][T13283]  ext4_file_write_iter+0xa04/0x11d0
[  183.635435][T13283]  vfs_write+0x69d/0x770
[  183.639667][T13283]  ksys_write+0xce/0x180
[  183.643887][T13283]  __x64_sys_write+0x3e/0x50
[  183.648578][T13283]  do_syscall_64+0x4a/0x90
[  183.652977][T13283]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  183.658869][T13283] 
01:58:06 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x214}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:06 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x4000000, 0x806000)

01:58:06 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x11000300, 0x806000)

[  183.661176][T13283] Reported by Kernel Concurrency Sanitizer on:
[  183.667297][T13283] CPU: 1 PID: 13283 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0
[  183.676041][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  183.686302][T13283] ==================================================================
01:58:06 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  183.751465][T13299] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  183.759909][T13299] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  183.905782][T13299] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  183.913887][T13299] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000427a8055
01:58:06 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000def361b116dd4bb681391964ccf077da010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd2f4655fd2f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000013b00))

01:58:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e7, 0x806000)

01:58:06 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x5000000, 0x806000)

01:58:06 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x12000000, 0x806000)

[  183.946796][T13299] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  183.954847][T13299] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000c6f44b82
01:58:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
chmod(&(0x7f0000000080)='./bus\x00', 0x100)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0)
ftruncate(r2, 0x10099b8)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}])

[  184.006619][T13324] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.015044][T13324] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:07 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:07 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x23a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  184.130019][T13339] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.138652][T13339] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  184.155995][T13339] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  184.164505][T13339] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
01:58:07 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x6000000, 0x806000)

01:58:07 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000673000/0x4000)=nil, 0x4000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000616263646d666768696a6b6c6d6e6f70"], 0x18, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000001c0)={@id={0x2, 0x0, @c}, 0x21, r1, '\x00', @c})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6000)
io_setup(0x1, &(0x7f0000000080)=<r4=>0x0)
ftruncate(r3, 0x81fd)
fallocate(r3, 0x0, 0x0, 0x7)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299})
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x16000}])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x10, 0x40, 0x4, 0xc0000000, {{0x6, 0x4, 0x0, 0x39, 0x18, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}})

[  184.178413][T13339] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  184.186756][T13339] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000001d7a9a99
01:58:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2e2f66796c6530fed7d7f1d9944b603074c6"], &(0x7f0000000180)='.', 0x0, 0x33088, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81001)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x5110, 0x0)
mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, &(0x7f0000000240)='-%%#-@/\x00')
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

01:58:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e8, 0x806000)

01:58:07 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x12000300, 0x806000)

[  184.242699][T13346] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.251432][T13346] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:07 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:07 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x280}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  184.348434][T13365] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.356822][T13365] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  184.383090][T13365] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:58:07 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r1, 0x0, 0x17, 0x0, 0x0)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000140)="a63e062b3397afde7ddded8a959fe071022e5b9d5eed47d81fb4b0d1bed57ce789063decbfd400cfe5a069699a57d1a8c8b205f252aac46a1a3f77b139ff31374028b9e43e2dde0189879bea9af664754bee5875237e7fb29d719044c23e46f68329715154105f46", 0x68}, {&(0x7f0000002500)="afd67c58f41000d332ad7b33606db35148d4f3e60ef16140118e4ec77c95f3f435cf1c020412d1d63736eaeb3f604a2a35288e0f75a67fd685b86c487bcb47110c6150e320eb011e9044772efae1ac154cb51c5478d0bfbc2b542d87a1ec2d87e3f10b9d839a01d918d04c6a3cb7edc5a7947da714ecf86f042f49ec58fa62c61a027bd75c3f4491edc4a80f555f143d2e70077eee83e89c086baf962e4e6ecd1094411c5e1148b8215fbb984a211bf4a5982b", 0xb3}, {&(0x7f0000000340)="fde6ff987ed0733a9fb966069d8967a7e083b57a4ad2b7fb8b2b82811d6089efe73334e41a87964ebb7e923a3271a7c86f1dd2ce234f9cf0db2c5f2043a9426511521b1bba61107c49059d71c2d4a04988429185053e381389eebdcb5a95a4cd55c2df29a20bf37fc1d9770de806dd3846cf22d39c27d793a0a7080889adbccfa32c6e23a92f2fc95bd16b12a9c192cb50fdda454a8adc782265d90be87b358604b3b27037d6bb39c9c7fdbe3d20616822c541399d70df2c3aaa43bd20ba8e75d055406637d6e613fb33a10ddbcabadd9fa43030f2d5b88f12846bfb833c09b88abbdbde2cb1639b129f1c26b886afcf8468f43bdebdba9c4f022100815e5f174e1c20aee6f1f0c4a904984b599ca854d0287163328447f4eb7d3cba33023a46eb44ea051163adbd1e684ea16a0327b80aae757bfaa2954f51d8556aa9cc5de4551b1f3e5ea6b20d21591e577aea44d315a4f59982895f8e4fef6f4c47b266ef7eace3bb2d7c64c7a4fee5d32b89ba746b0d82a32c784fbb9636bc99aa2c25dea193cc4fb8967d8079a3d8db6ef85cdcedbd4af86bcb9a05b71d8b569596f33ebea918e0760d6399e7cdb4cedac4f85dcb7e226da3d1f8af81c2efb792763a0862f90ad01bce72c3d4733078ff2bde377ebf9ae0316579bb5bfd56a0a5a4626e4842c8b530c713b2f8b9c37126b6d4b8960799c968c150440c15ce77c31673f7a8a41da40c9d933684d8095eec403360e734bc89188148c16d71b69d3dab466dbfeb67e9146b84792c2ba5f69e712f194774cb86f0ab5a12326957a7168d81a66ba81f05c0bce1db45d402c6bbfddcbc2a54f028ee34220b01325af23549ed42ba153d736af5c3fe48b5f50cd5ae5a477234272e8ee477f0f3267f0334b578a2a79ff29d2ac3c70a3a2970ef0a51f595fb7461ef9f548658acd9c41c84b15d6d2e09d904597c48e40a548f4d2b36df7b804f2f1d1fae21ec88a4990f647e914e20aaa7c5799751b989f9d0d7be6faf80d884cca7f8f262126bdc7cb925bbfb8163ede2430f602fd58dc70f0062376fb26b2387123f0d3f3518d2c5acec5b3dd96c4977d19f24fa1a0c0ad30b97247f96bceaddbb14ecc9cde1c79629197bb603b5289af460ff9443f50e7e9168f789e512ef1b5abfcdfb97fd97272933a82ab9d52353f73753476cb24e8f0f2dc65d060f5fe3fec27a5931de67d583251b152bd84b03d719def9cb0f9a7db48fde9ebd6a2c786ff8b2eaaf7b846f280e10f5458b5d3938923ca1955841c7ea075b6e83501d1bec40c01218e38f941abb67364ab11ab3c0955162a8b2cb313f07c985731223a35b8db80a97d379a1d70092255e28640b5d9a8375c5eb6e78c5991ef2fd5ba34ed43dc952e7f046927a04e34d5013a4d4843e7673dbb644b7eab28198e93eaee54e0faa65e6f2191ea59655762e5c8304fd20a3a62603cda09f70e5b908578eb61ba397d47cdcfbc26582d22de190c7bbf88987b09d4111409555f7b335c25008cc59dabbf0404baf2336ca65d227daa44c21d27ff350c1084ddf0761c0c16fecbcb98897538181c65326a1be05aa2c04f09c56b1dd09e8c6c2c4587bfd5f95d51b5961a0663dc638bb60d54c5da8d2158ddb7d2b17da217b0e9a3e293cba57e329e4ec4ed3ffafe8de778802d92b7022dca9229b57ede55650189824619fa143a1f5b85c63db0dbd6789f40b3f8850970e5151b7524dc88676865ad997924f939941117368eb6b72ac7b11c19a9d4e40789804d48d1161359dccf97949c5759373d8c5ce1fb57a613c9c10efc6f218b33fca578e703b826749db76d1f67e8ca123ab418f2fcb9ddc041d0233d9b3ff5430b2f4505d75acd380d5315206665c6fb3ebeb991b7abdcb665151791722a493182c89af48b7504c115ba67dd0f5afece459610897c6156df4a91ce1cd0939408be1b4a2a35e558c5d78a5387aef88e719dd652492a59f12df3d7b5b3125fa8a351aeea59575bc58a1b3eabb5e4dc42cd45bd61429ae014aaeb7c4f8ff5f0d4f1b7c2b5901228fbf16a5d48f11390f6ee55602537abfc2687b6c2dc3fdaca2795c80ee846bfe59c14c4627b2766b01c090c03b0032d7bdf095877ba065f4cc8726d5e3a7ccaab3557907e99512b7b83a8138aa1db71ca67bf10502442a64783529c43a6e81eae7ba6805228402ea967341f8d4ef61eadc5a68dc00d4f95b89e93ba721067b9d4362752310008f7c01d491f905dc41a40727d764238266aa3ae1ad295fc7505f31a87de8e93ab8c508f2a3c2926fa262d6f5e266d1d4da54faac0c8700870c6466b4deda6225385cc054e323b5307f9f20bb0f30a687c841aa8071a08d0365a3e53567d7f0b01d812dc6e410d5dee6e124e08e6c18bce338f2114da7daca65eab74f2ab51885b96e4bca08a3147edb82e8e2e5b764da393e3e000a3b07df5d6385852dd3e82a239381bed2be2054c1323714222292855b48818f9b0dec52db5452cb8bd3b1b75abdd8f56b1324b7a67b9392cc0209c3c082d994e3a3d4020b9c72f6938a2964e3cca71a2ae1219e498ea84e435d11620d5282a4c492af273c2a7053e1c2b5986748ef222b4d1b89f2e60ff0dd87e4aa9dddbd7a6c96cd92eda2daa4f4d1dd6c47dc3eaeba73f87e7dcbc16e458ed8b02dd07848bdfa5103ab25c920d15837c75266f51d574e173053a9416ad2e00d3cd938b0f007d87413a52c72a1904182aced24b05e6c5d3aa97d226f4c87b95007d3c21546f36dc01e96362d363b34e9e9b29225d76aaeb072907b58acf84797e68ff3afd7abbd46b7dd300f465b8bf0decac12658dd705f9a84fd7565c2a82e1a4f1e1db7d9c064b6c97e8ad8c70cddf0d21f7456ea71221601dc9f00834fcbb017680df372966c25da353ba938a1911bfdd0f1beebe5f64fc1cd04ed63c14e26108545049a19668d9da350f5946a0f87cd0e1312650093e2fef91b05da5c621b8d33cf15f80ef4e734a53b88f7c71cf76256183eb216b485ae931dcba9f71507d0c0126873f5e27969648529736713da9bc343ba4091e9b3ee888031fcd22d3023db4f30c4785492cd970cb78ee3e09db9db0c42ea0cb4b5b7ac544a06b4c3e95728065e88cb258b09afcbed3470f308cddcb5b80886dd63816c2c109d0c08c33dac3e315e6b36bcd7f62f36865b6dcf434f4893fa60edc557feeb1e760113b820744297f86b73c43d6a32dd3db3594c9c7de501c7af9f4a97ee5e1844e0c9c029c431c2fec53b8701b82ccab69cd5851f63321697871548a7c21821619c7bca593bd0fcfaf3c554b2475232c14ceb71b9914318c3bb6d27bfd4b7721727ef6acf4f9eae2052536e3650c5a6d98c14bdd865293a281cc69a63c738088b018add793bebfbe18719bf21218ab155d35bf8d378db3d4994942c0711b3c88685c9202d1d68084cefb826dd5edb61f4b26b957813fe7a7ddf024679dd87ea3e728d7e7a765579d9b79fa1579151481be3210bc596d6c0d2804aa256ca1d107b0d2121d9462472b3598988884a8dfe68d5d45b2933c99680769b8a661961021793974708f3404f6b6e7492f2caa07c60f9ae01ddd1d3aff53314f1e7acb7b9968eba2d0fb1c3d86e88cd3680c5249a4d2eca7b534e9b9c71ae38cb02596424124d826478ce3addd3dd3ef379b60973ac517a468b7f93ae6d598d4a5128ac15daf0663a90d7491dd9277237a649ac7f7ff517c28a44a589204268544bd65048f6a43c2c25e6589cd19541a1d09e7170a91c1c87ad6bfad6e1d8d6da8d260fee72a3fa6b7e197c7656af2231cf58064833960c972f4030ce08e0d2b61ff864b6be57cef8c94828f68972c737ecb4667fb15a6af0d492b508908d3d4d35755dfb3f31ebf1ccd8fe4ab6b4fab307dbf391778ee8bce51c0064049d0c7710087c89d09605f83779648e0fd409692172d0efe5f831512214362a5c1f232b3f4614a63023e20529e3305c7b1abe1da0b299ec2a8a978809c46acb5f4beb4ea3add5c1a655f208289180fa07a86b10c2328feb80801dc5b3c061343ec0a396f165d57f74c0099bbace178c19e11ecbb48305e9c8343c02b875d810cc787109260562f16048b64186bb07a34f5bc9690d77a106e5cb2a5c8f58fcf023e6dde963e8c0d20c25e675c37e67f4caa72c8921e058d03a5e15b4fdc2314031c4d7e10687ca1e6f2300dce6cdef50205c4e0907e59f3e42d214a75df3835012500d2afe24bcf1803c38e32cc08e968fa94c5e6fc027b3ce9b29bf6aa71547de4ae002c5bba47a1640ae15da4d254d54bdc3ead6ec6a713c3b2b7e0b35f3e26e121b8246a85c0e627376abc7788e0fe2fbc17bbd908f3089512fa89b00a402dcc5bd15e7bec315f94bab70ce2d371e25e9d4739930ab3e967bb11c3bf2270071a332d1292335a77f18c725b9f310cca2b252966091e1357923c1e76c8e7d0cc02ed205786b3d9c7783614bb47b4e47999aaef2ce4b9faf1f2ac4098f225778528727ccc2729cb353672fa22ac935cfcd62d9569f6d5b6d24876b72f5562cd54e57f17db1cef533c0a099a68b46df0a67a3fb7e2bb3064a1387e58b218c570f9288b199df572d95e37fff3a8db68f54e654f1ddc96f95660d9dc4e54f2697706f6684da847eaf9957c806a7d8e71d6bf7007caf5acb03d71023d8de560a1b2e2d2674e2e33ba228c80a34f5c7332c7d5435490836ac280e69cc634b3e7c801e9d1f49f7f01b8bce627543fb80994a5ab6d779c5f1db503aa4e108918cce923bbb3261e47c16b97cd49c73e8959f8036d47a0c5343f9131a9fb069e93af01d6cebc6de91dc753712595b28ebca9ceaf8267f4c73b8125768260e0b6a101f47ad9284e951a0a40c46051132ec9b0f1d5f20bd97eaff525d1c33712de2638bfd748f71f8cbbc75edd02d2e2226400ce346b66c23a501b7b8be67fda3511b6357ab83d9ad22838da46793c9c86c47282fa66b5cf2bf11805e12600ddb8e9389a6b33bc33d55c68942a28cf4138764b71b61179cefa6badd4fe9f86c7c04690a274f2fcfe2823625e973fb11ffbeab455a3c8a7b2f7bc7827ae5fbddb191e84a843ecd6160482cf39ea94aa1b08f0bcd1310c7ea7db8b717ce5a698b34aea296e129a597d93e809555667b53f7e2deb21be7f97f1c37d0e687f5b8001b7e1e8981ef48f0fd53fca008758e155c3062c8ff0067ad419c226ba6c1648804c4eb6f9ec7bde49434327b2751b4d27fda98473d6c9666f883824ce2a3c1b62d6ddec20f8e02538ec00e34f9dc34fb96e7d67357a026e207585c9eab66f3ee158fb5bd19a37588729b113f533042c94957cc69aaf14532cc7c6d223cc49157d3578f9fa1822e9329b431ad34b27a90af0657c8587415151addc222f66629f76608de918c6ab9081aa174b0100f8a9112074b49148ff32b4e0d363d6ffdfbe09c204a0254edc43c150fd3f5175d65fa183e48779f6a93be3f2ab8c259ac460f87ffb6a23e83774bc4023667b1252270330d95c001d92a21473309846d668953314dedfae0480e6d61ff73730e5000ecf5e3b24a06d62592f8340025ae7141f1609aade3e69c1fb0a432b7ad3a0837a884855e36ca559e36a9850f82b6cb32bc630ca82b83f99ef74b74993bc9b640349fc30d5ff9e3080fa6d2ba214f988c9de5d0d7f4df43670473e4ce94b004c21cd9e02b9fb64022c1fc2bad69a77a3f4e34597713163d752e846c207a6841d6c3436e67acfec13fc67d28078eca6823a8731291553de7e60ee0d652aff223954c1ea715", 0x1000}, {&(0x7f00000025c0)="d6dcae1c582d6f780d2de22e6ba3f49868a14dd19bdaa402c6c44de4487aa9c04ab6fb26903108786a4188abc7ee2a042ed01305b3fafa75bbcc21eb0a9365a05a97ebb6d203551f66", 0x49}, {&(0x7f00000013c0)="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", 0x1000}], 0x5, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x240}, 0x4008000)
mknod(&(0x7f0000002440)='./file0\x00', 0x2, 0x3)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={<r5=>0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000e8290000003700000006000000000000000502fff704010200"], 0x20}}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000024c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x44, r5})
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={<r6=>0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14)
sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}], 0x28}}], 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002480)={@multicast2, @rand_addr=0x64010101, r6}, 0xc)

[  184.391215][T13365] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000e2a3097c
01:58:07 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x12020000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:07 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8000000, 0x806000)

[  184.446982][T13365] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  184.455132][T13365] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000e2a3097c
01:58:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206e9, 0x806000)

01:58:07 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x13000000, 0x806000)

[  184.519697][T13376] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it!
[  184.579971][T13385] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.588604][T13385] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:07 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:07 executing program 1:
r0 = creat(&(0x7f0000000900)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x4000000000005, 0x0, 0x0, 0x4})
r2 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
recvmsg(r3, &(0x7f0000000480)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f0000000040)}], 0x5, &(0x7f0000000440)=""/27, 0x1b}, 0x2002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
r4 = dup(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040), 0x0)

[  184.702153][T13395] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.710797][T13395] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:07 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0ffffff0f0000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206ea, 0x806000)

01:58:07 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x8800000, 0x806000)

01:58:07 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x13000300, 0x806000)

[  184.793705][T13395] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  184.801855][T13395] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000013251aca
01:58:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10)
r1 = dup(r0)
recvmmsg(r1, &(0x7f00000068c0)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/236, 0xec}], 0x2, &(0x7f0000000380)=""/219, 0xdb}, 0x7fff}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/156, 0x9c}, {&(0x7f00000015c0)=""/165, 0xa5}, {&(0x7f0000001680)=""/230, 0xe6}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/45, 0x2d}, {&(0x7f00000027c0)=""/215, 0xd7}], 0x7}, 0x5}, {{&(0x7f0000002940)=@rc, 0x80, &(0x7f0000002a40)=[{&(0x7f00000029c0)}, {&(0x7f0000002a00)=""/46, 0x2e}], 0x2, &(0x7f0000002a80)=""/130, 0x82}, 0x1ff}, {{&(0x7f0000002b40)=@nfc_llcp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/166, 0xa6}, {&(0x7f0000002c80)=""/233, 0xe9}], 0x2, &(0x7f0000002dc0)=""/156, 0x9c}, 0x200}, {{0x0, 0x0, &(0x7f0000003040), 0x0, &(0x7f0000003080)=""/212, 0xd4}, 0x6}, {{&(0x7f0000003180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006480)=[{&(0x7f0000003200)=""/58, 0x3a}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/67, 0x43}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/155, 0x9b}, {&(0x7f0000005380)=""/207, 0xcf}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x7}, 0x9}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000006500)=""/210, 0xd2}], 0x1, &(0x7f0000006640)=""/183, 0xb7}, 0x7}, {{&(0x7f0000006700)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006780)=""/112, 0x70}], 0x1, &(0x7f0000006840)=""/89, 0x59}, 0x7fff}], 0x8, 0x0, 0x0)
shutdown(r1, 0x0)
r2 = dup(r0)
listen(r2, 0x7fffffff)

[  184.869322][T13414] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.877917][T13414] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  184.987566][T13424] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  184.996404][T13424] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
[  185.025054][T13427] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
01:58:08 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x100000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  185.033439][T13427] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x14000000, 0x806000)

01:58:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206eb, 0x806000)

01:58:08 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0ffffff0f0000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x360}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:08 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x9000000, 0x806000)

01:58:08 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  185.171866][T13449] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.180320][T13449] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206ec, 0x806000)

01:58:08 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x14000300, 0x806000)

01:58:08 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xc000000, 0x806000)

01:58:08 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x113020000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  185.299493][T13449] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  185.307652][T13449] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000e2a3097c
[  185.325126][T13449] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  185.333618][T13449] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000092873f7
01:58:08 executing program 1:
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x5, &(0x7f0000000340), 0x4)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3020000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc4645f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0])
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x5, &(0x7f0000000340), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x5, &(0x7f0000000340), 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000001c0)={0x7, 'gre0\x00', {0xfffffff9}, 0x3f})
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, '{'}, {0x20, 'ext4\x00'}, {0x20, 'ext4\x00'}, {0x20, ']-\xb7--\x91'}], 0xa, "5cc74760bf46fae03109b5552ae9c5d9f89512488f889c2f87b1f3ef32ae391446900c0e674370f652ce5516c4e9b6444666c425128b568045d469bdbba91364fc00c7f529ef54cdfdf044b3dea32cdbad06d89e197b69f36741f2ea7b1c3b308c7dd1a8b10210"}, 0x87)

01:58:08 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052", 0x61, 0x2}], 0x40000, &(0x7f00000000c0)={[{@user_xattr}, {@bsdgroups}, {@minixdf}, {@journal_path={'journal_path', 0x3d, './file0'}}]})

01:58:08 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @private1, 0x9}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0x10}], 0x10}}], 0x1, 0x0)

[  185.502759][T13474] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.511214][T13474] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:08 executing program 1:
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @mcast2, 0x38}, 0x1c)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, r0, 0x3eec8000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=<r1=>0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0x1, 0x80, 0x0, 0x0, 0x1, 0xb0200, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0x401}, 0x100, 0x8585, 0x8, 0x3, 0xa41, 0x0, 0xc40, 0x0, 0x80, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3f80233532ca218a}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x44)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300)="3da37bf10a85cf4a4c9e9fe341fa2d0a9cbfa209bb7402f93b191c94a6b673b9d915aca28a37e8f68c8715043c3604752e5aef128354dce6d6dbd6c3d4c84ea0b7b41efd29ce4f9e0d37d0f0313f2cce4eb05a813d1fb071aa50921e0d7cf7a950bacb3e3f41abde5b374b425a59650233f0cff765da938fac84f2dfbc1ae4bfdcddb007b2a1d5546cc57b90fef1ba806e10d37c7aafc49361a59013cf56fb8afac9", 0xa2, 0x880, &(0x7f00000003c0)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff80}, 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x40)
r5 = accept$inet6(r4, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000440)=0x1c)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, &(0x7f00000004c0)=0x1c)
recvfrom(r0, &(0x7f0000000500)=""/113, 0x71, 0x120, &(0x7f0000000580)=@sco={0x1f, @none}, 0x80)
r6 = dup3(r0, r5, 0x80000)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6gre0\x00', r7, 0x2f, 0x9, 0xff, 0x70, 0x40, @empty, @remote, 0x7, 0x1, 0x80000001, 0x8}})
vmsplice(r2, &(0x7f0000000b00)=[{&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000900)="7fb1e1d8478c931b16f410c46da82d011d8893beb11e159905745d24ae4d5f554a4f32326de6c73bf44da6233a74ef6d3f9a4338a1bb7433edffee446018e40f00e7d670fa8835", 0x47}, {&(0x7f0000000980)="ab1501c79dd8f102239991bdc3e521e8cb35c5d9ee0a51be5e412da5f966cde8dbaea82afbb5ebc6f6d0e5dfba8ba156622b7cfad2e00a2ec50252398749656d0cc1d9c47305f2762c2413333ba88e0da3ecd8ae0b2cadbc52240bf226", 0x5d}, {&(0x7f0000000a00)="a85ddc5af8e1c989a0f69faa184942395a41aa0a2ee393321c163386002ac9f4874765cd075bbc14ebd44c09bd0b6ad25455c2dd9afcb6e3649910bf2cc2955ffd9c12d79debb8d5b2e0a538650065a8ebb9d1af04aee077ed60e760d9a115104da3b981ef23c962fa349e187077a30100277431f5043f69209cad699c7b10e24ea3e0a15d7f5fbd73a7f099a3af5036b90817e225c7cb4f0313b3878edaa3f6112aa6d74e4952394b2209e8948d5831c198cd00ebeb52921f9bf8b6095e2e9af48e5c322db1b46e", 0xc8}], 0x4, 0xc)
r8 = openat$cgroup_ro(r3, &(0x7f0000000b40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
sendmsg$inet6(r8, &(0x7f00000010c0)={&(0x7f0000000b80)={0xa, 0x4e22, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="52a78fc396468c92cebdaea272b6c0f0e41a", 0x12}, {&(0x7f0000000c00)="c16a0025b651d10ba62c1de251144fb9f90dd1e5c72134481409213263a0cb10ec3c8efb74042f864705947c0f7c6643a46954fa7964717716d59d3af8a5b2ea98c36fe2d3b3df9e73c11346fe2ded73bc7c102143f5b234e3f39b803355581b10f18a8a8540733cb7f564f3c8f0912c1834b6c9cdaafbccd7de6fe42e1b39dac604037eb57a156f8f1fcefb341192ae9c04aa8269f52f40fb010873e550d0b90d500fd28cbfa2dcbb8878", 0xab}, {&(0x7f0000000cc0)="94ef9a9f196658254a4138a6c35a60864598f1fe1902b40b196a244d5c93561b33a42e368af4ef36f05eddda34cefc927a9a2fe6cdbb852d59178741732cb3e4d543bd738ac43aaa21977ab3a2d8487874a351d22ee930e82b9c4597ca1ea91d4691330ad06e31772b967fab1f930e762783f4a29bde88b3f9e25341b7de8588acbe36605957a4d2e0897f29cf1d1c051b115bedac8d54ba0e7ba5fa69cf560e", 0xa0}, {&(0x7f0000000d80)="c38d636a1a19ada6cf7e2831d279f731c7e7e27599b78fcedfa97fe4cc661847d387ea8821534bdaa3ad39a6a895c99218995fb4867caad186bee6d28f039ab3671914cb5834965fb3e830f568b0ab1f14a8ab82906960360040729481fe3a558960f1202f9f443a3be836748f912e9349ef5020603c2d660072125e743acd27cca10f14deb2f1b96ea095de79251b38bb8ebbb68704f049c92cc7ee978b31a48d1467b0138a8c4438f6e253bcb73969d5258bd407f35a1b3ad1ef7c25f53fcf5498f4a2822868f9f1177557c516740cc94ef05cc7b72dd94b83187debe2282ec85c9373c64c3004c196", 0xea}], 0x4, &(0x7f0000000ec0)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x1d, 0x2, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x7fff}, @pad1]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3a, 0x8, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x20}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x88, 0x29, 0x36, {0x59, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x20}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x1, [0xad5, 0xdd08, 0x1000]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x5, 0x200, [0x3, 0xffffffffffffffe1, 0x401]}}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x10, {0x1, 0x2, 0x74, 0x14, [0x1186]}}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim, @ra={0x5, 0x2, 0xfe0}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1]}}}], 0x1d0}, 0x400c881)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044800)

[  185.601421][T13488] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.609829][T13488] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7}, 0x7)
r3 = dup(r2)
socket(0x11, 0x4, 0x34440000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

[  185.651306][T13490] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.659707][T13490] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:08 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x15000000, 0x806000)

[  185.748626][T13503] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.757005][T13503] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206ed, 0x806000)

01:58:08 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xd000000, 0x806000)

01:58:08 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000, 0x2, &(0x7f0000000400)=[{&(0x7f0000000140)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000010001000001010000010008080018000000000000181400000021000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000240)="88001c0000000000001c000800000000088a3055160c3faeb1c2a900781c09140b2a3a0870c76e90847f86721902ab4101500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809144b2a3a0843451c0120000000002b98e715d7ae0000200000000000000000ed", 0x95, 0xe000}], 0x0, &(0x7f0000000040)=ANY=[])
getdents64(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x10707e, 0x0)
mmap(&(0x7f00003f1000/0x2000)=nil, 0x2000, 0x7ffffe, 0x4002011, r1, 0x0)
getdents64(r1, &(0x7f0000000080)=""/79, 0x4f)
open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0)
pipe(&(0x7f0000000200))

01:58:08 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x200000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  185.789481][T13509] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.797989][T13509] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:08 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x5, &(0x7f0000000340), 0x4)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x10001})

01:58:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:08 executing program 1:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = socket$packet(0x11, 0xa, 0x300)
r1 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)={0x12d, {{0xa, 0x4e23, 0x0, @loopback, 0x3e7}}, 0x1, 0x3, [{{0xa, 0x4e23, 0xad, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}, {{0xa, 0x4e24, 0x2, @mcast2, 0xc27}}, {{0xa, 0x4e24, 0x1049, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}]}, 0x210)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xcb, 0x1}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = mq_open(&(0x7f0000000500)='\x00', 0x800, 0x8, &(0x7f0000000540)={0x7, 0x1ff, 0x2, 0x8})
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000580)={0x496, 0xaa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x400, @mcast1, 0x9}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x5ce, @mcast1, 0x1f}}, {{0xa, 0x4e24, 0x9, @loopback, 0x1}}, {{0xa, 0x4e24, 0xffffeef1, @local, 0xb95}}]}, 0x210)
sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0)

[  185.920945][T13527] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  185.929400][T13527] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:09 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xe000000, 0x806000)

01:58:09 executing program 1:
lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2)
r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80000013})

[  185.994575][T13527] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  186.002752][T13527] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000092873f7
01:58:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x15000300, 0x806000)

01:58:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206ee, 0x806000)

[  186.150618][T13549] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  186.159159][T13549] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:09 executing program 1:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x4e4, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xfffffff8, 0x2c}}}}, [@NL80211_ATTR_TX_RATES={0x49c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x33, 0x24, 0xc, 0x48, 0x36, 0xb, 0x2, 0x4, 0x48, 0x48, 0x3, 0x18, 0x30, 0xc, 0x9, 0x3, 0x60, 0xc, 0x4, 0x30, 0x36, 0x6, 0x12, 0x6f, 0x6c, 0x1b, 0x1b, 0x48, 0x60, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x4}, {0x4, 0x2}, {0x7, 0x2}, {0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0xa}, {0x7, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x4, 0x5, 0x30, 0x16, 0x16, 0x12, 0x1, 0x60, 0x30, 0x18, 0x6, 0x3, 0x35, 0x4, 0x5, 0x48, 0x5, 0x9, 0x6, 0x30, 0x4, 0x16, 0x24, 0x4, 0x12, 0x12, 0x1b, 0x12, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x5, 0x48, 0xc, 0x48, 0x9]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x12, 0x60, 0x6c, 0x6, 0x30, 0x14, 0x2, 0x30]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x2}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x4}, {0x3, 0x9}, {0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0xa}, {0x3}, {0x4, 0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x4}, {0x6, 0xa}, {0x0, 0x5}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x2, 0x36, 0x3, 0x24, 0x1, 0x1, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3f, 0x7f, 0x7, 0x0, 0x4, 0x1f, 0xf4d6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x6, 0x8, 0x0, 0xdadb, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x400, 0x8, 0x2, 0x5, 0x0, 0x1ff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x24, 0x4, 0x30, 0x30, 0x5, 0x5, 0x36, 0xc, 0x16, 0xc, 0x4, 0x0, 0x6c, 0x18, 0x12, 0x18, 0x18, 0x0, 0x6, 0x30, 0x4, 0x1b, 0x12, 0x12, 0xb, 0x6c, 0x36, 0x48, 0xc, 0x9]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x48, 0x5, 0x30, 0x18, 0x9, 0x60, 0x1, 0xb, 0x3, 0xc, 0x12, 0x18, 0x12, 0xb, 0x12, 0x48, 0x2, 0xb, 0x48, 0x9, 0x60, 0x60]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x9, 0x30, 0x16, 0x16, 0x2, 0x2, 0x4, 0x6c, 0x3, 0xf, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xfaa, 0x200, 0x81, 0x81ea, 0x82, 0x400, 0xff01]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x6c, 0x18, 0x12, 0x9, 0x30, 0xc, 0x2, 0x0, 0x48]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {}, {0x7, 0xa}, {0x7, 0x6}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x7}, {0x6, 0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x2, 0x1, 0x60, 0x24, 0x2, 0xb, 0x3, 0x60, 0x7c, 0xb, 0x24, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x83fb, 0x4, 0x81, 0x7f, 0x101, 0x8, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0x8001, 0x1000, 0x6, 0x2, 0x6, 0xa9]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x2, 0x2}, {0x6}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x4}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0x4, 0x9644, 0x4, 0x6, 0x840, 0x2]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x9}, {0x4, 0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x3}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x7, 0x8}, {}, {0x6, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x3, 0x3, 0x6, 0x5, 0xffa, 0x6]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8, 0x400, 0x5, 0x788, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x6, 0x30, 0x5, 0xf, 0x36, 0x1b, 0x4, 0x3, 0x6c, 0x60, 0x1, 0x60, 0x9, 0x41, 0x5, 0x9, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x1}, {}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x36, 0x24, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7c, 0x1, 0x80, 0x5, 0x5, 0x62f, 0xc1, 0xcc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa274, 0x6, 0x4, 0x1, 0x8001, 0x401, 0xa649]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0x400, 0x4, 0x0, 0x800, 0x80, 0x400]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5}, {0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0xc}, {0x2, 0x3}, {0x4, 0x1}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x7}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x2}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x1}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x1}, {0x0, 0x5}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x24, 0x2, 0x16, 0x30, 0x9, 0x16, 0x4f, 0x18, 0x48, 0x78, 0x3, 0x0, 0x5, 0x3, 0x4, 0x16, 0xc, 0x12, 0x12, 0x16, 0x5, 0x48, 0x48, 0x1b, 0x18, 0x16, 0x12, 0x12, 0x16, 0x48, 0x30]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0xb, 0x5, 0x1, 0x60, 0xb, 0x2, 0x60, 0xb, 0xc, 0x1b, 0x36, 0x48, 0x6c, 0x5, 0x3, 0xc, 0x1b, 0xa, 0x1, 0x48, 0x24, 0xc, 0x0, 0x30, 0x1, 0x12, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e3, 0x0, 0x5, 0x2, 0x6, 0x6, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x1, 0x7f, 0x9, 0x8, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x3, 0xc, 0x7f4fdeff32e2c3af, 0x9, 0x2, 0x30, 0x12, 0x1b, 0xb, 0x60, 0xc, 0x12, 0x25, 0x48, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x2, 0x12, 0xc, 0x16, 0x18, 0x1, 0x6, 0x12, 0x60, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf74e}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
capset(0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048095)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/rt_cache\x00')
syz_read_part_table(0x0, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r5, 0x308, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x434, 0x6f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x24008040)

01:58:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206ef, 0x806000)

01:58:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x16000000, 0x806000)

01:58:09 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xf000000, 0x806000)

01:58:09 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x500000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

[  186.466760][T13579] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  186.475174][T13579] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x16000300, 0x806000)

01:58:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206f0, 0x806000)

01:58:09 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x10000000, 0x806000)

[  186.671884][T13599] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  186.680273][T13599] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:09 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x600000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  186.774648][T13606] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  186.783358][T13606] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x17000000, 0x806000)

01:58:09 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x16000300, 0x806000)

01:58:09 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206f1, 0x806000)

01:58:09 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x11000000, 0x806000)

[  186.917693][T13606] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  186.925787][T13606] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x000000005368432c
01:58:10 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x700000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  186.989714][T13629] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  186.998263][T13629] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:10 executing program 1:
syz_io_uring_setup(0x1de5, &(0x7f0000000380), &(0x7f00005fc000/0x1000)=nil, &(0x7f000074b000/0x3000)=nil, &(0x7f0000000400), 0x0)
syz_io_uring_setup(0x150f, &(0x7f0000000080), &(0x7f0000c69000/0x3000)=nil, &(0x7f00008be000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x5994, &(0x7f0000000200), &(0x7f00009a5000/0x2000)=nil, &(0x7f00008b7000/0x400000)=nil, &(0x7f00000001c0), 0x0)
syz_io_uring_setup(0x361f, &(0x7f0000000280), &(0x7f000094d000/0x3000)=nil, &(0x7f000091f000/0x3000)=nil, &(0x7f0000000300), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340), &(0x7f0000000480)=@md5={0x1, "ea7538bcb23b1d6dc963a50519f9a69f"}, 0x11, 0x3)
syz_io_uring_setup(0x72de, &(0x7f0000000100), &(0x7f0000b12000/0x1000)=nil, &(0x7f0000bbf000/0x5000)=nil, &(0x7f0000000180), &(0x7f0000000440))

01:58:10 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206f2, 0x806000)

01:58:10 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x17000300, 0x806000)

01:58:10 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x12000000, 0x806000)

01:58:10 executing program 1:
r0 = inotify_init1(0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x4f247c, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x20)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2c)
open(&(0x7f0000000100)='./file0\x00', 0x2, 0x11)
write$binfmt_elf64(r2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000e53f000000000000004000000000000000000000000000380001"], 0x40)
close(r2)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051)
close(0xffffffffffffffff)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x42840, 0x100)

01:58:10 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  187.211696][T13643] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  187.220236][T13643] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206f3, 0x806000)

01:58:10 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x13000000, 0x806000)

01:58:10 executing program 1:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/54, 0x36)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000000040)="01000000000005002e80", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22080}], 0x0, &(0x7f0000014900))

[  187.375634][T13643] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  187.383747][T13643] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000bda424c5
[  187.415618][T13643] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
01:58:10 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x18000000, 0x806000)

[  187.423688][T13643] ref_ctr decrement failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x00000000583efb24
01:58:10 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  187.484416][T13679] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  187.492797][T13679] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:10 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount$9p_xen(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1091ed, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, <r5=>0x0, <r6=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{}, r6, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r7]}, @devid})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x121401, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r9=>0x0}})
socketpair(0x1, 0x20000000000001, 0x10, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r5, @ANYRES32, @ANYRES64, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000002c0)={r9, 0xfffffffffffff8e1, 0x0, [0x4ced6ad6, 0x55e, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x80], [0x8, 0x9, 0x7, 0x1000, 0x1720cb33, 0x80000000, 0x7fffffff, 0x1d, 0x7fffffff, 0x2000020000, 0x2411, 0x8001, 0x9, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x3, 0x401, 0x401, 0x3, 0x7, 0x5, 0x1, 0x10000, 0x4a3470f6, 0x2, 0xb52, 0x400, 0x8, 0x3f, 0x3, 0x5, 0x5, 0x5, 0x100000000, 0x6, 0x100000000, 0x6, 0x401, 0x8000, 0x6f, 0x3, 0x7, 0x1, 0x80, 0x10001, 0x50, 0xfffffffffffffffb, 0x3, 0x1, 0xfffffffffffffff7, 0x0, 0x2, 0xd4, 0x8128, 0x3, 0xffff0, 0x8, 0x8, 0x4, 0x5, 0x4, 0x8, 0x6, 0x80000001, 0x3, 0x5, 0x6, 0x96, 0xa100000000000000, 0x100000000, 0x1ff, 0x7, 0x4, 0x5, 0x0, 0x0, 0x1, 0x2, 0x3f, 0x4, 0x1, 0x3, 0x6, 0x7, 0x7, 0xfffffffffffffffd, 0x4, 0x8000, 0x4, 0xe8, 0x5a, 0x5, 0x7fff, 0x0, 0x7f, 0x100000001, 0x1, 0x7, 0xbc27, 0x8, 0x3, 0x36, 0xfffffffffffffff7, 0x40, 0x1, 0x3f, 0xffffffff, 0x4, 0xc4, 0x0, 0x2f, 0x2, 0xd3f0, 0x38e, 0x1, 0x400, 0x7, 0x7653aab0]})
sendfile(r1, r2, 0x0, 0x800040080004107)

01:58:10 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:10 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x18000300, 0x806000)

01:58:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206f4, 0x806000)

01:58:10 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x14000000, 0x806000)

01:58:10 executing program 1:
socket(0x11, 0x800000003, 0x0)
r0 = socket(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x1})
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000000))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0x25}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0)

[  187.719253][T13698] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  187.727725][T13698] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:10 executing program 0:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x1, &(0x7f0000000180)=<r1=>0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
fdatasync(r0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00000000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:58:10 executing program 1:
unshare(0x40000400)
pipe(&(0x7f00000000c0))
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
r2 = dup3(r0, r1, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
splice(r2, &(0x7f0000000000)=0x1, r2, &(0x7f0000000040)=0x2, 0x100000001, 0x9)

[  187.782521][T13709] ref_ctr going negative. vaddr: 0x20000008, curr val: -26363, delta: 1
[  187.790909][T13709] ref_ctr increment failed for inode: 0x361d offset: 0x0 ref_ctr_offset: 0x8 of mm: 0x0000000031422fa3
01:58:10 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x206f5, 0x806000)

01:58:10 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x15000000, 0x806000)

01:58:10 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x19000000, 0x806000)

01:58:11 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

01:58:11 executing program 1:
seccomp$SECCOMP_SET_MODE_FILT