ctr_offset: 0x4 of mm: 0x00000000571817d3
[  944.803401][ T6158] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  944.811856][ T6158] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  944.825049][ T6158] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  944.833486][ T6158] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  944.845746][ T6142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  944.854140][ T6142] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  944.866595][ T6142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  944.875002][ T6142] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:41 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
dup3(r0, r1, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
r3 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0xc599e910781b7f0a, 0x74)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:41 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x8800)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xa100, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9)
fadvise64(r0, 0x7, 0x0, 0x5)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200300, 0x0)

13:06:41 executing program 5:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000300)={0x3f, 0x8, 0x400, 0x7fffffff, 0x13, "9f564c3e0369430ce7765181bc8bf59446e18b"})
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x44400)
fadvise64(r0, 0x0, 0x0, 0x3)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="148eb2f68bfa70a9af786d53a5e7ae8827117ef12afdb8962d7e0f232f80ccd4e1e13795576f8263551ee4a31c0eb9db68acbe07cb9e588f1f804498972d7c96776a82e5f670cd5a7403a1fc7d1515217e640eed4fe6942d670ce65aae6389b367e993ab220ebdb2d1b48f2fa501f2553aac36070fd5a00170419720bf365c4a69ae9d3694dabe47c3001bdcc66b41bc836bcbd8a42cd8e6bbdb219658a59d6c96973b49c7f89a04b64b3887019d84f63dc3bd12986147f2affa776d8c", 0xbd}, {&(0x7f0000000100)="5a30bf2ce4c2aeb0f4651204b9b8bb3b199263d085159eb2ed228e84dc9d984b75633714e8fa20981da4df519a3c53356196326136463e5fb1ae1cdcc4f9cbb6a10cf2ec121c1ccbf98d95e0b6bfc12e8f533ac39fe7d273fc3384dafb523e5681f9392b73acc7f5c88028977bed30b54952de93bc4178235fb89da973aaad062c183b993bef2dc430516e3f358e59e41fcee3e3c8191ebe118b762123d9793139fa", 0xa2}, {&(0x7f00000001c0)="aafd62bab7f11f89775c2231adb577f3ed2b9da651773828afdb56a8d58039eacbc979a38dc32386ae0a695ecfc3a77925e024", 0x33}, {&(0x7f0000000200)="f94a1448f3c08a615e55cfec2c76473420d9ab007cef65f870f0e92148f2f25c09f9f2aaab3140ef1fed9968053068d8ab5dc73fe212288f3de3c0b3a330cd9cb854f7e3fae62abf928bf4d349d6e0acc568992336ea02acf2a5aca3f7bbd06d81f7cb6ff2498e3a6aeaaaf94ebd39d3b6d307b80b1e726bbe5d60b9a11305395c16814bcbee14ed4ed0624df9cd0e68bce1deff26218059ab9389b460646108e29c79c3f29f89c40e1b2439b826f3a8f885312c0d34", 0xb6}], 0x4)

[  944.910050][ T6153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  944.918497][ T6153] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  944.947114][ T6153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:41 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
io_setup(0x8000, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001480)='.pending_reads\x00', 0x94000, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000018c0))
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r5, r5, 0x0, 0x4)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r6, r6, 0x0, 0x4)
r7 = dup(0xffffffffffffffff)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x280, 0x0)
io_submit(r1, 0x9, &(0x7f0000001840)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xe9, r0, &(0x7f0000000080)="fc53385da1e283625f676683111a7fae9cf2fc8122010bec48e5576748fff48e9ad947c78898e2ba12a990b05f2317a20777a34caa622495b36665b20363be63db8f24f877056b0605b9ce254b73eb40b15943f4586f1e7cc2adb607a1d2cc329ca94935a760bfc1aa133cdd9e50800b11ad06260af215d2bc645d51e473636f143a1c5c92445979297489589442a6b322d10543b3a21eefaf2489d1eafb555a84ea6642cf6df250e8cd1926d63f800418595bb7e2ed0f2bc0dbc2ad966456afacc001bb59da6e4729e3997be360c52ae20aab0a61550dd00b9591e1fcff4e5f99b0395934683ef4e8b7", 0xea, 0x8, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f00000001c0)="926ec14735ab5b424db70b297c2a5ae08490151bfb0408aa4c434473b94ab0e742f1bad8a133cabe073e660beb0f46ec2470785457d949f8c74ddb5945f5766c8974f1c7105833ab8f51d6591850b06b83f51ec6953c5d0c88a34b9ffe5261c827f3eea5268e6b3538cc1121e10427fea3bc3bcb1b821034af427ba3de5eeaf9cca38e1ce36f6737", 0x88, 0x8000}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xb, r0, &(0x7f00000002c0)="422439f9a275ab5b063f85e433a03aa52c5e9514f96f5af6aeefb0fb67c7a3a97ace69773ab86d6d4a63f32776e97a8b466bb3ecfdcfd1c2aa1f55f018248718c0a3e252ba9a6b021ca189a3e8649bd42a8d71b891ec36195b371527a2b797043d11bfb911576f28d425ad6098989d6d2e81e54a1b80a61e87f95828e27b592c08cf3907002b3b2b465896247a7625a701268d663b128c6ff8522d0e6f21ca4eee353c8d5455ac33", 0xa8, 0xe752, 0x0, 0x3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000003c0)="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", 0x1000, 0x5, 0x0, 0x1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x8000, r0, &(0x7f0000001400)="d8590597a0b84340bdd40c61c246acd37e5d0e0da61b1f7ab45b714d9cda54bc758463a9142a35e74d91ce6811f649bfb7f3be69a1843d939ca00e88a017afd20a5d4b30f5a449d2478bfe", 0x4b, 0xfffffffffffffffc, 0x0, 0x1, r3}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x77, r4, &(0x7f0000001500)="fb222ff3299cf2981bb4f77597ca69e4bfaca4640c6330a097ff85458cbc8beaaf662ce5a69097", 0x27, 0x3, 0x0, 0x1, r5}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000001580)="1894855db3a4b07bdf4ab9186bbc5fb546e09fd02ac19ffc073e84a7f78b395c0e4282361d976d10c4e0c8ab6ea096c4b1579a29fa91", 0x36, 0x7, 0x0, 0x6, r6}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000001600)="d095e894e678fc83ee909c3fedc370725399de9451543f2a939e99fd7fdc160ba55931397b7fcc328230cfc2e084091398152c66005ad3fde631892def4a009c0024dddd4deb80a4e5", 0x49, 0x7fff, 0x0, 0x2}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f00000016c0)="0515bcf96b6b3bdb109e461b4ac1314a09e2e842094dc9d884e248829c11fddaeaacffdc2973c3a0d05735bf3ff7e1351f8a13b27f8eee9a9c12fc65028891dac87398aafd9a294b4ef609b56a6c04b941ddbe1ec5fa9ad8c15ba1d35d4bc5c5642567c5eb6428c789ec22c10a806710e816936bcc79c15c13a6e7cf393c7213e93adb2d9d4840a22f4b5776e06d4eec1f8efe4e56f76aca403a530ac62da39449e98303fe8addfa2cd11bb42ad05b116d92ee41bbfcc81d0e073f8ac3d4169e594b87a6982c8abc58e43d575a747efcf25d73694d2d6c30b19a158635fe89c3d1e91e0dee159183102fd75c3baf4c4ee939", 0xf2, 0x0, 0x0, 0x3, r8}])
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:41 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xfdfdffff, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:41 executing program 0:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/61, 0x3d}], 0x1, &(0x7f0000000140)=""/55, 0x37}, 0x8}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/183, 0xb7}], 0x1, &(0x7f0000000280)=""/249, 0xf9}, 0x6}, {{&(0x7f0000000380)=@un=@abs, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/217, 0xd9}, {&(0x7f0000000980)=""/127, 0x7f}, {&(0x7f0000000a00)=""/174, 0xae}], 0x9, &(0x7f0000000b80)=""/173, 0xad}, 0x4}, {{&(0x7f0000000c40)=@ieee802154, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/220, 0xdc}, {&(0x7f0000000dc0)=""/27, 0x1b}, {&(0x7f0000000e00)=""/78, 0x4e}, {&(0x7f0000000e80)=""/95, 0x5f}], 0x4, &(0x7f0000000f40)=""/4096, 0x1000}, 0x43}], 0x4, 0x0, &(0x7f0000002040)={0x77359400})
r1 = syz_open_procfs(0x0, &(0x7f0000002080)='fdinfo/4\x00')
bind(r1, &(0x7f00000020c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r2, 0x0, 0x0, 0x3)

[  944.955556][ T6153] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  944.976231][ T6163] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  944.984804][ T6163] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1267, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  945.027843][ T6163] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.036287][ T6163] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:41 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x9c69444285c5f197)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040))

[  945.086854][ T6175] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.095290][ T6175] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:41 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:41 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x28800)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x1110, r3, 0x1d92000)
write$binfmt_elf32(r2, 0x0, 0x2f8)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r0}, "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"})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x40000, 0x88, 0x6}, 0x18)
openat(r4, &(0x7f0000001100)='./file0\x00', 0x200, 0x1c9)

[  945.127804][ T6175] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.136252][ T6175] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.178670][ T6190] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.187115][ T6190] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:41 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x3, 0x6, @dev}, 0x10)
r3 = accept$packet(r1, 0x0, &(0x7f0000000380))
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}}, 0x8000)
accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x800)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6, @multicast}, 0x10)
open(&(0x7f0000000340)='./file0\x00', 0x200400, 0x8)
set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0xe6, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r5, 0x0, 0x0, 0x3)

13:06:41 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1263, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  945.226866][ T6190] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.235309][ T6190] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.253402][ T6201] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.261897][ T6201] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:41 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796c89c0f9117ad4d8"})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x200)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
fchownat(r3, &(0x7f0000000100)='./file0\x00', 0xee00, 0xee01, 0x1000)

13:06:42 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xfffffdfd, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  945.280041][ T6201] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.288543][ T6201] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.325389][ T6222] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
13:06:42 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1268, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:42 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/76, 0x4c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:42 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffe, 0x880c3)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x30, r0, 0xffaa2000)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:42 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x1, 0x0, 0x3f, 0x0, 0x8000}, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x2d1ee37)
write(r3, &(0x7f0000000100), 0x2c9f9de1)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000300), 0x3, 0x100082)
r6 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/244, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0)
tkill(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000102000007)

[  945.397795][ T6217] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.406329][ T6217] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.466751][ T6217] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.475204][ T6217] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.503430][ T6229] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:42 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80840)
fadvise64(r0, 0x0, 0x0, 0x4)
poll(&(0x7f0000000040)=[{r0, 0x10}, {r0, 0x9090}], 0x2, 0x3)
r1 = dup2(r0, r0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

[  945.511916][ T6229] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.530243][ T6229] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.538690][ T6229] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.554849][ T6240] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:42 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1264, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:42 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x183)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x5, 0x9, "245d64360a8cdf5ccb6ab4076bdea4165b4ab887c1208f1561f3585094ea8087b6df36a33e72b8a3813d0fe52097521086d95bb4557adf757ec1c7a91fdd0485", "e87ae766d0c724ccd5bb85642a32c628cee6fc1214b1e29b11b6615760338328f690cb62324f728062e7c3e9082f0acb128d420d4ced6a70955f01e73025ff43", "00e1959495f0110bb087d8365a71d2cff2d609e4a9dbda34cff12a972bf2f28e", [0x80]})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
fadvise64(r1, 0x1, 0xfffffffffffffffd, 0x4)

[  945.563322][ T6240] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.580603][ T6240] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.589148][ T6240] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x4]})

[  945.637035][ T6243] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.645516][ T6243] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.670978][ T6243] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:42 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)=""/226, 0xe2}], 0x5, 0xdcc5, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  945.679439][ T6243] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1269, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  945.712201][ T6256] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.720692][ T6256] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 5:
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/215, 0xd7)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  945.754396][ T6256] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.762842][ T6256] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1265, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:42 executing program 3:
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0xb8, 0x8, 0x8, 0x0, 0x7b94, 0x10000, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x10220, 0x6197, 0x0, 0x3, 0x9, 0x3, 0x3ff, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00000f8000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x4801, 0x0)
r3 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc00)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)

[  945.812358][ T6265] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.820807][ T6265] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.873931][ T6265] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.882433][ T6265] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.895650][ T6272] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.904081][ T6272] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x1000000]})

[  945.918387][ T6272] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.926829][ T6272] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  945.945438][ T6282] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.953968][ T6282] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1274, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  945.984083][ T6282] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  945.992537][ T6282] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.010284][ T6282] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.018741][ T6282] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.032629][ T6282] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.041096][ T6282] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.057932][ T6290] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.066370][ T6290] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.080107][ T6290] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.088553][ T6290] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.115741][ T6290] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.124195][ T6290] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.136444][ T6290] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.144871][ T6290] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.156962][ T6293] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.165398][ T6293] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.177638][ T6293] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.186140][ T6293] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.199996][ T6293] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.208441][ T6293] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.221243][ T6293] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.229691][ T6293] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:42 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:43 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1267, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:43 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
splice(r1, &(0x7f0000000240)=0x6, r2, &(0x7f0000000280)=0x4, 0x7bb8, 0x1)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/97, 0x61}], 0x2, 0x63e, 0x81)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES64, @ANYRES64=r3, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0xc090)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @usage=0x1, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, 0x0, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x6, @usage=0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @struct={0x6, 0x7}, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1]}, {0x0, 0x9adb, 0x5f2}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x9, 0xd, {0x6fe3, @usage=0x8, 0x0, 0x5, 0x55e, 0xffff, 0x3, 0x9, 0x84, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffb, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x4, 0xff, 0x4100000000]}, {0x9, @usage=0x7e47cf27, 0x0, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={0x0, 0x4, 0x8})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000001c0)={{}, 0x0, 0x10, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0xfffffffffffffbff, 0x5cd, {0x12, 0x4, 0xffffffff, 0x8, 0x8}, [0x0, 0x80, 0xf38, 0x8000, 0x8, 0x9]}}, @devid})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={0x0, 0xf750, 0x9})
openat(r3, &(0x7f0000000140)='./file0\x00', 0x80000, 0x108)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, r4, 0x0, 0x4)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000002c0)={{0x3c, @multicast1, 0x4e22, 0x3, 'dh\x00', 0x15, 0x8, 0x1d}, {@broadcast, 0x4e21, 0x1, 0x10000, 0x40, 0xffff}}, 0x44)

13:06:43 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x4000000]})

13:06:43 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1275, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:43 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000785000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r2, 0xa05f8000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, 0x0, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @usage=0x7e47cf27, 0x0, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={0x0, 0x4, 0x8})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000001c0)={{}, 0x0, 0x10, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0xfffffffffffffbff, 0x5cd, {0x12, 0x4, 0xffffffff, 0x8, 0x8}, [0x0, 0x80, 0xf38, 0x8000, 0x8, 0x9]}}, @devid})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x6, 0x6, {0x10, @usage=0x9, 0x0, 0x2, 0x8, 0x200, 0x9, 0x2, 0x10, @struct={0xffffffff, 0x7}, 0x20, 0x2, [0x80, 0x2b, 0x8, 0x1, 0x6b8, 0x8]}, {0x20, @struct={0x1, 0xfffffff9}, 0x0, 0x5, 0x2, 0x9, 0x8, 0x40, 0x20, @struct={0x6, 0x9}, 0x2, 0x6, [0xbea, 0xfffffffffffeffff, 0x7, 0x4, 0xfb, 0x4]}, {0x7, @usage=0x30e, 0x0, 0x6, 0x0, 0x7b1, 0x6, 0x1, 0x4, @struct={0xfffffffa, 0x2}, 0x6f9, 0x5, [0x2, 0x5, 0xfff, 0xffffffffffff0001, 0x5, 0x10000]}, {0x6, 0x9, 0xffff}})
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  946.347070][ T6297] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.355524][ T6297] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.384390][ T6297] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.392878][ T6297] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.433467][ T6299] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.441963][ T6299] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x6d0a83)
r1 = dup3(r0, r0, 0x80000)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
r4 = socket$inet6(0xa, 0x4, 0xffff8000)
fadvise64(r4, 0xfff, 0x2100000000, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x300)
pwritev2(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="5abb2d3c0800ae4e279868de6d5b13ca3f265b42e65277bd8800703c62d4e3fd3cf820d397f2c64c1254fc0b23d041b1b8cf658d88acd1629aa0b05610a22278da11edc32daa66fdc315f0df27a8e40602008900ffffffabb47e130e4ae2c445bc72ce82dc269267e2ee0f87b6594174b45b684ceca92e680105479b5b780ccad8a4649e09003c385b00000000", 0x8d}, {&(0x7f0000000180)="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", 0xfd}, {&(0x7f0000000280)="927200cbae51aa70a79cf491", 0xc}, {&(0x7f00000002c0)="64b7e23df5fb03e307487da3d8fc6961", 0x10}, {&(0x7f0000000300)="30b52a993865cfcb2eb86e33cc06f564305b1487fddd4ce7eaac51e934811fdca285954572283b1f1aa7d6c5638975d2ee6f287358f40692c943edb72489a01d8cf63494434f170bac09e19d99fefd416406451475831f6196cd67bcc28740dcc7e5", 0x62}, {&(0x7f0000000380)="9948d08b741378c4160f7f3d13190b3a18427a6b3ff92845405127126454458150540abe6092f2", 0x27}], 0x6, 0x9, 0x0, 0x0)
preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/175, 0xaf}], 0x3, 0x6, 0x4)
close(r2)

[  946.489193][ T6299] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.497737][ T6299] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, r4, 0x0, 0x4)
io_submit(0x0, 0x4, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0xd, 0x100, r0, &(0x7f0000000040)="b3e15ffb3b97c379ed849d06534b121a2cb2cbd6a864d74ab2ea1534391190992530f3beb314dcb0847a0559fb839f8536a91d8db5ca98d788a6f5b96c7be26ab61eab375b86db9989e166173dd340d03fe15f053565b7dab4db4d8f1bde6eb2b35324c4095920e2f3786dc2b765ff831ca4a07bd259ed16a29db7119edd23ac9e19e59077221c12bc9660dfc578b349116672aa77de446b", 0x98, 0x100, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1448499b510b7fd2, 0x4, r1, &(0x7f0000000140)="c38471eddb5b04ed0500c2a198d9ee8c012fb123f66fc98d71c77233690e4e7c237979e26929e6c8283c7b25e4bb8b360e0228a12a023d7ac08dd951fe4136118c2cc389a8ea768df9147962f219fa4edb9e8267fc66a59f09fbd3807af64c016ed17ef89a42127df593bf4ceef56718", 0x70, 0x1f, 0x0, 0x2, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x8001, r3, &(0x7f0000000200)="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", 0x1000, 0x0, 0x0, 0x1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000001240)="761f18cbfcc0a450687cd97e943f54f7ad069230261137c597fb12de360c1edd84e3e148b69dd6b452b7fbdedfd61b0c70f8867e819e7568226f79e3ae4de60b7315849c5e2e78a591cbaa144798ee2325d60dee5a4a2b869bd2ca5924b8f9886267f88152ecac6669f11927c246084a8512e1f39a119414da5de88baded72a2c15af87f3478e512d79780565cb623a2a7a8794f670084dad69ca1cd7a21858d3adc9917048f18335a86ed9112feb89e4a41563d7b725b9e12001cba62f82f4c8438ca0729710ebf35dc0a7e9d65381fec2df391284bc4ae", 0xd8, 0x1, 0x0, 0x0, r4}])
fadvise64(r0, 0x0, 0x0, 0x0)

[  946.535024][ T6306] device lo entered promiscuous mode
[  946.541163][ T6300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.549645][ T6300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.585738][ T6310] Y­4��`Ò˜: renamed from lo
13:06:43 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1800, &(0x7f0000000100)={0x100000, 0x84, 0x20000, {r2}}, 0x20)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10000, 0x161, 0x1}, 0x18)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
fadvise64(r0, 0x0, 0x0, 0x3)

[  946.607413][ T6300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.615920][ T6300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x101, 0x833400)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4000)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
fadvise64(r0, 0x0, 0x0, 0x3)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x110, 0xffffffffffffffff, 0x10000000)
r4 = dup2(r1, r1)
r5 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r4, 0x0, &(0x7f0000000180)="eafc67ae1b124347b16d737debcda021a8e0cc2f9fce7ca2d3e539bbc31328340c2e46c38bd4cf88c4fdbd52702084326688b94bc132d79a11d8b16626a00fa6143a96e8904a3d55ba367f5cd05a41315c891a02e2d163d357c5da738d5fe727ee3537cf716cf56f2dbec0e533d958e4d278b14afc3f232addf2a550ec86181ed1583c203a94965310b1c453911b349872d4506346e564ae1b27ec39f9f3d509ea5602d88cbcd5122041defbefca609085eb", 0xb2, 0x8000, 0x1, {0x0, r8}}, 0x1000)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x8, 0x3, 0x17, 0x0, "d41f506628ff67a3341dfb1f19798d8b8184093ef87e2e4c1c87542cc2deeb9a5701278d98b2a6fa7cae1ebdebd54fb0fa99198f7ea0f2a9bb413173f282787a", "7df68b360f868a8d4aaea35bfb407336d2ab4385dddd78de4efeffdc6cb21662", [0x3]})

[  946.682860][ T6297] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.691346][ T6297] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.723937][ T6297] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.732402][ T6297] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfdfdffff]})

13:06:43 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1268, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  946.764941][ T6331] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=14)
[  946.765821][ T6302] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.786456][ T6302] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x32800)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:43 executing program 0:
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x6, @private1, 0x5}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)="fdd7f956d472d7360680fa7aa90b1cefbe16515e5ea00e66ce6ca899f88237aa03393434714ac25b32245e65ea27331480cbca1d5324e4227bb689db914a76a2f17ad442630c98d21f6b88f01fe0702ddc6696dde7ec0cc0f3477f0a58707f539db85a0d9dbea9ec851dd12a2ab84cd28709958a6423e80120884461d07832f4d2b8c5726861e7a6f055fb2fdac185a8bf95f24f2738f3d3443f97fb0b7e8fd1b806b4b798d6de0b6880fedfe0619e27685a67ab87b340e1e87aae355ce6d5dadfcefedf21874ee8505636", 0xcb}, {&(0x7f0000000540)="5fd580772583d452641c2c64e5ff0e8543675b77454f82dffc01ef540e1a9fecf762614771197d03e707e0f8408a3d679d937383470fae2194ac0186ec5168cb7b158ce6c4602b92bb6a684f355eb3a7efc388e1dcf85186", 0x58}, {&(0x7f00000005c0)="4e5bcc", 0x3}, {&(0x7f0000000600)="06f45fcf6f13bd2059c7273ab58eb122cf8c08c9a9cee15b4e9e72931d96235cd0e17a5ecd2e2e3bbb1621ca0f6064079c827f54a242dbe07f6f541376e08587133fefe74380aae51ce0a759e445325673532b19db10d9b1ce1953629e02a324", 0x60}, {&(0x7f0000000680)="3aefa8543c836245281851f6ff5e957a7bd797b832b2f8fc1cf300ecc25ed1a0bb16f8a5525cd80c9f9fa94edb1db315ae7e310158c9c49c86e1efbb903dd88effcd57bf6a41171a4e861b3e761337e2c2929d70621a24d59e41377c4ca971c8ab0753e2cc3b74c2a0a1225b6d9cce", 0x6f}, {&(0x7f0000000700)="42085d74a1edb12c382a067e1329313531751ce0c9aceab7ea3c7d4e036d28855e48941b83d2a806150a72c2c19d4e4e68e0da80f07aac9e73e3f4d2611a40671f8a5b2651760ea1037e5af24ac29873873fc6ebb437cb336a2fee59a7dad0323f0664423b109c731b7d53c6b2d3ddb2435142afeb18ed0cf9182f8b4c7424598d430517403f0c440b7947d63f1d486c00f4fc2d85a32ff3e97946162797b19efb40275ceeeb3547f8c224dcc52c5763c3a47826f978077563803f60162bad58d5a291d87aaa37ca58f521622749a012a21a02795208fe565a22af63f59d00672f3e655b9712492947a1e635a92a31e9ca9043a7", 0xf4}, {&(0x7f0000000800)="aabfc74e04b0267f44dd31ed35bb72a28103c082d6f635903da882e945ef4f230e130e04e54c120953bd805e6d3600fbcf0f4a11fdc628f0fdd7c365c07f68d1b68c5972cd3a06edd02d65e1cad5ff944b8b6b46561ad234be6b06923b1e91014c09a112cd7692d146951cebc872a18933fee6447b406c3afcc4fa70cd92706f4f1b0a40dca78ecc2e3952fa45fd47e5a87a591e24ea1ce33716ae9ccd3e7af49bf62d48d3de08c7174e5c429b9f18c1c517454928908564e0cc37fb3e7db8fb96abff5ea65b1ace9a3fa423e87a0deee8", 0xd1}], 0x7, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}], 0x78}}], 0x1, 0x4048894)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x74a4, 0x0, 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x7ff, 0x3, 0x2, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409b087c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6cf85505, 0x12, 0x1c, 0x4, "ccf7d62c1793ec512ee9730c2672f3213b121a079d2780a4104685758ee61833d95aa1d3ac7acf9c822a35ecda9bbc54d21d221c3ed9edbbe5e44890f9bf25b8", "e043ceffe7b461410c7c7dcda41fa1c96e797e8cac53178679a589e3b40b33b9", [0x7fff, 0x7d5d]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0))
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0xf, &(0x7f0000000040)={@rand_addr=0x64010100, @loopback, @multicast1}, 0xc)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
open$dir(&(0x7f0000000a40)='./file0\x00', 0x200000, 0x48)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

[  946.826738][ T6302] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.835203][ T6302] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)

13:06:43 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1276, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:43 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x550, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200))
r5 = syz_open_pts(r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x9, 0x6, 0x0, 0x4}, 0xffffffff)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200))
r7 = syz_open_pts(r6, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0)
r8 = pidfd_getfd(r0, r1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r8, 0x0, &(0x7f0000000240)='./file0\x00', 0x8, 0x103001, 0x12345}, 0x80000000)

[  946.891170][ T6338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.899632][ T6338] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.940695][ T6338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  946.944947][ T6349] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=13)
[  946.949164][ T6338] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  946.993550][ T6336] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.002065][ T6336] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.014878][ T6336] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.023340][ T6336] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.034836][ T6349] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=4)
[  947.050424][ T6354] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.058854][ T6354] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.071361][ T6354] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.079876][ T6354] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:43 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfffffdfd]})

[  947.092075][ T6338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.100509][ T6338] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.116627][ T6338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.125060][ T6338] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.174918][ T6349] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
13:06:43 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1269, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  947.261536][ T6364] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.269978][ T6364] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.291109][ T6364] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.299547][ T6364] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1277, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:44 executing program 5:
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  947.316150][ T6353] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.324550][ T6353] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.336351][ T6353] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  947.344331][ T6353] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x000000000b156d9c
13:06:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040))

13:06:44 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x103800)
fadvise64(r0, 0x0, 0x0, 0x3)

[  947.380736][ T6353] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.389194][ T6353] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.401460][ T6353] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  947.409497][ T6353] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x000000000b156d9c
13:06:44 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x3)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:44 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x100000000000000]})

13:06:44 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fff)
fadvise64(r0, 0x0, 0x0, 0x3)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
fcntl$setsig(r0, 0xa, 0x1f)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000200)={0x7, 0x3, 0x6})
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

[  947.431479][ T6370] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.440078][ T6370] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.489830][ T6370] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.498300][ T6370] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.514022][ T6377] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.522498][ T6377] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1274, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  947.534678][ T6377] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.543112][ T6377] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
flistxattr(r1, &(0x7f0000000040)=""/144, 0x90)

[  947.604149][ T6387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.612620][ T6387] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.625740][ T6387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.634207][ T6387] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.656328][ T6396] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.664804][ T6396] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.680268][ T6396] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.688712][ T6396] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x400000000000000]})

[  947.700933][ T6386] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.709394][ T6386] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.714992][ T6389] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=1)
[  947.722323][ T6386] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.742033][ T6386] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1275, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  947.767856][ T6377] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.776418][ T6377] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.802110][ T6377] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.810547][ T6377] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.834881][ T6407] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
[  947.866593][ T6386] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.875060][ T6386] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.887561][ T6386] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.895989][ T6386] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1278, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:44 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x8)

13:06:44 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200))
r5 = syz_open_pts(r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0)
syz_io_uring_setup(0x3f9b, &(0x7f0000000200)={0x0, 0x48e6, 0x1, 0x1, 0x1b9}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=<r6=>0x0)
r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x80800)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r8, r8, 0x0, 0x4)
syz_io_uring_submit(r2, r6, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r7, 0x80, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x0, 0x3, 0x3, 0x2, {0xa, 0x4e20, 0x1, @private2, 0x9}}}}, 0xffffff7f)
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

[  947.904871][ T6389] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=1)
[  947.922670][ T6413] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.931112][ T6413] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  947.990124][ T6413] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  947.998670][ T6413] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.011198][ T6415] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.019679][ T6415] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.032164][ T6415] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.040643][ T6415] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  948.084848][ T6403] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
[  948.099934][ T6427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.108449][ T6427] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1279, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  948.129827][ T6427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.138271][ T6427] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.150656][ T6413] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.159084][ T6413] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.191353][ T6413] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.199905][ T6413] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.216150][ T6426] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.224585][ T6426] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:44 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1276, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  948.237452][ T6426] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.245902][ T6426] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfdfdffff00000000]})

13:06:45 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/48, 0x30}], 0x5, 0xfffff386, 0x5)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8000, 0x1, 0x7f, 0x3f, 0xfffffffd})
mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x2000003, 0x10, r0, 0xf86be000)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x15a)

[  948.336320][ T6440] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.344834][ T6440] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r0=>0x0})
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r1, 0x0, 0x0, 0x3)

13:06:45 executing program 3:
setuid(0xee00)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f0000000200)}, {&(0x7f0000001340)=""/206, 0xce}], 0x4, 0x9, 0x0)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x10}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  948.387442][ T6440] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.395921][ T6440] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.415420][ T6447] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.423851][ T6447] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  948.442526][ T6447] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.450991][ T6447] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x9})
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:45 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x100)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
r2 = signalfd(r0, &(0x7f00000003c0)={[0x3]}, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x615, 0xa, 0x2, 0x9, "1df0a71c219297f6cb645e180edbf105a17a4753edb41dd2f327f520949e78759b70c9c85c91a3487b98ba906ebac5d7266d060a23784af2f46dbbc8c4f38cac", "982a3c35a5b2251d475ad12473a7e20527d931072653c8d9d9df22b3d2e45bee", [0x8, 0x7]})
r3 = syz_io_uring_setup(0x4299, &(0x7f0000000200)={0x0, 0xae22, 0x8, 0x1, 0x2ef}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))
fstatfs(r3, &(0x7f0000000300)=""/172)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
fadvise64(r0, 0x5, 0x0, 0x1)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))

13:06:45 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127a, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:45 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1277, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  948.536724][ T6455] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.545191][ T6455] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.564983][ T6455] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.573592][ T6455] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xffffffff00000000]})

[  948.635364][ T6472] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.643818][ T6472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.667810][ T6472] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.674910][ T6483] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
[  948.676247][ T6472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.701406][ T6479] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.709847][ T6479] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.726323][ T6479] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.734834][ T6479] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.744835][ T6476] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
[  948.764174][ T6477] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.772605][ T6477] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.785400][ T6477] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.793812][ T6477] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.805517][ T6483] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=161)
[  948.826195][ T6486] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:45 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200, 0x181, 0x1b}, 0x18)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x80003, 0xd0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0))
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x80, 0x1, 0x1f, 0x0, "c08204722b33c24c9de984af944862771d24b68630c208fd20eaaf773576f396202dc4235bcfe01b720817cc4a13d4b493a0b13b6efe4d0b219de66a552506c1", "375394e06b991307f1cd36b0498c2531ae7de5cb9f9d2db6cc21ae146c20c4f3", [0x2, 0x7ff]})
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000280), 0x9, 0x80001)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x2, 0x7, 0x8, 0x0, 0x5, 0x8000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000140), 0x4}, 0x40, 0x2, 0x6, 0x1, 0x3fff80000000, 0x1, 0x6, 0x0, 0x40, 0x0, 0x120}, 0x0, 0xc, r2, 0x0)
r3 = gettid()
tkill(r3, 0x3a)
fcntl$lock(r0, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x6964, 0x4, r3})
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000300)={{r4}, {@void, @actul_num={@val=0x2b, 0x0, 0x6b}}})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:45 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xbeb01)
fadvise64(r0, 0x0, 0x0, 0x3)

[  948.834638][ T6486] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.861225][ T6486] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.869683][ T6486] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127b, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
close_range(r0, r2, 0x2)

[  948.885004][ T6479] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.893430][ T6479] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  948.908646][ T6479] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.917086][ T6479] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x4]})

13:06:45 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1278, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  948.944889][ T6503] loop_set_status: loop0 (Õì
º¨ý{�œµUc<ìþWHæ[S²´�_�¡±Û­ð'1'
&‹ÁJt‚pÄû#V‡þ�éØ=ÁîŽ�) has still dirty pages (nrpages=512)
[  948.947814][ T6510] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  948.966444][ T6510] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.018810][ T6510] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.027301][ T6510] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.039066][ T6503] loop0: detected capacity change from 4096 to 4095
[  949.055594][ T6504] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:45 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
io_uring_enter(0xffffffffffffffff, 0x3ca8, 0xde27, 0x1, &(0x7f0000000040)={[0x9]}, 0x8)

13:06:45 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x88001)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone3(&(0x7f0000000400)={0x4000000, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x29}, &(0x7f0000000300)=""/192, 0xc0, &(0x7f0000000280)=""/8, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58)
mmap(&(0x7f0000101000/0x1000)=nil, 0x1000, 0x2000001, 0x11b831, r2, 0xd00b8000)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  949.064006][ T6504] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.110631][ T6504] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.119158][ T6504] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.172824][ T6516] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.181313][ T6516] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.203583][ T6516] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:45 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x234002)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  949.212116][ T6516] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:45 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x1000000]})

[  949.249225][ T6515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.257689][ T6515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  949.324801][ T6515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.333270][ T6515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x7fff, 0x3)

13:06:46 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  949.375777][ T6528] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.384220][ T6528] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 5:
add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffe)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x2c100)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

[  949.430496][ T6528] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.438956][ T6528] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.454700][ T6538] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.463200][ T6538] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.476366][ T6538] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.484842][ T6538] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.497785][ T6515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.506247][ T6515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.519853][ T6515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:46 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x1279, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4c8701)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3467, 0x7, 0x0, 0x0, 0x5, 0x10, "cf6e6ca2d8b023cb36ab12bd449a867c5d1b69deb4fb4fc0ddc734c37fd33e35997fae278b179a9abd8cc5c99bb3c544b78f586c4249097f3e44132c50cb74f4", "10711284c9613f3fa96a027d3c5eb4a4f18d49d4704c0cc043de1d3c74a98505a37bce40df3d3bc141f2344c1446c8a5fc63b46b44d56c0f7b10c1cd8612e193", "647ced6f63a93c46e9516a502802bd4d8ae61d0340ec3731be30440ee4bb4379", [0x200, 0x3f]})
fadvise64(r0, 0x0, 0x0, 0x3)

[  949.528311][ T6515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.542314][ T6544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.550771][ T6544] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
fstatfs(r0, &(0x7f0000000100)=""/34)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0xd0002, 0x0)
preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0xffffffff)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7ff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

13:06:46 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x4000000]})

[  949.578234][ T6544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.586691][ T6544] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.611485][ T6555] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.619936][ T6555] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.649819][ T6555] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.658276][ T6555] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127d, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  949.745173][ T6566] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.753621][ T6566] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.789560][ T6566] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.798026][ T6566] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.804700][ T6570] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=512)
13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
syz_open_dev$vcsu(&(0x7f0000000040), 0x10000, 0x600000)

[  949.837524][ T6568] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.846472][ T6568] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.890079][ T6568] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.898544][ T6568] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x30000, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:46 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127a, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  949.955614][ T6568] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  949.964122][ T6568] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  949.994894][ T6568] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x4, 0xfffffffffffffffd, 0x5)

[  950.003443][ T6568] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.045115][ T6566] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:46 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127e, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  950.053558][ T6566] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x17, 0x4, "9b6bfd635f5f4591e48e2137f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "690b66032469dad550106c34f138d1e27b1866adb682b4793f05f971117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

[  950.106151][ T6566] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.114608][ T6566] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfdfdffff]})

[  950.155222][ T6584] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.163654][ T6584] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.196193][ T6584] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.204648][ T6584] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.226773][ T6590] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.235222][ T6590] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x14, r1, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0xb21, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x0, 0x9, 0x2, 0x8, @local, @remote, 0x1, 0x700, 0x91514bd1, 0xff}})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc891)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x7)
fadvise64(r4, 0x0, 0x0, 0x3)

[  950.249084][ T6590] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.257532][ T6590] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.271682][ T6586] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.280108][ T6586] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.292173][ T6586] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.300670][ T6586] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.325282][ T6597] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.333765][ T6597] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:47 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127b, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:47 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127f, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7ffffe, 0x62202)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x4880, 0xc8)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

[  950.359470][ T6597] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.367926][ T6597] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:47 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = accept(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x80)
mmap(&(0x7f0000790000/0x3000)=nil, 0x3000, 0x800001, 0x4018012, r1, 0x20e0b000)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000000480)=""/88, 0x58}], 0x5, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  950.411219][ T6609] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.419682][ T6609] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.446380][ T6609] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfffffdfd]})

13:06:47 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

13:06:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
fadvise64(r1, 0x0, 0x0, 0x3)

[  950.454904][ T6609] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffb, 0x80000)
fadvise64(r0, 0x0, 0x0, 0x1)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/96, 0x60}], 0x6, 0x7f, 0x2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
write$binfmt_elf32(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x23, 0x9, 0x4, 0x9, 0x3f, 0x2, 0x3e, 0x1, 0x1d8, 0x38, 0x132, 0x1c000000, 0x9, 0x20, 0x1, 0x5200, 0xff80, 0x2}, [{0x2, 0xffffffff, 0x800000, 0x6, 0xffffffff, 0x7, 0xee, 0xffff1d58}, {0x4, 0x2, 0x8c99, 0x8, 0x158888df, 0x5, 0x400, 0x6}], "d561b47b1e75099338f05fa94e6f459e6ddf355db63b6bf6c01532bc1020040ce372903dc681e7a6f7d0a5c0c228496c1122f2304a3e398036fa753f7d7e33193d3d54057fdd689bdf36d40449a1302c1b5183531d2c06cbb323bc21ce597dc63a2332132595f728014295b1d8ed681342cbdd918c291c90", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5f0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000080))

[  950.486315][ T6617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.494780][ T6617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.511148][ T6617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.519591][ T6617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:47 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127d, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:47 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x0, 0x8, 0xed, &(0x7f0000000040)="31442fd43e90fa11a2c99b1bd83a0cc6db338d7d774c1152176d5a4bb583254d5dfea1ca90dd8ef9bca5465980637a55d233461a5ee132e3feac045fe4dd8586383be9d99e00a8db39ef6a5bfa993fe690d36f815c20fc175d3c70b97b465152d0432f7bc2c3c2cae45cb50e16f63945f8724f516ee6b8b4e027bdd19ebe3676453adc155e176c1ab601c7b623f0eacd60eff7fcbb59011d9aa865aaa56c977a30a489b5b1254cfac7a063dd8496959194f29c180cf02b0559152e761b578b4b6f645d661182cc6444e86df15e6c5fb4989250ad851dcf30ef4e602d250bbdc1947f2af597b0d139c0e0b985c2"})
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

[  950.564896][ T6615] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.573338][ T6615] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.602988][ T6615] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.611434][ T6615] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.623872][ T6624] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.632294][ T6624] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.656959][ T6624] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.665396][ T6624] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.677739][ T6617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.686198][ T6617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.698893][ T6617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x100000000000000]})

[  950.707312][ T6617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:47 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4b47, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  950.753989][ T6640] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.762429][ T6640] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.774368][ T6638] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=5)
[  950.791536][ T6640] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x400001, 0xb)
io_uring_enter(r2, 0x2b16, 0x1a85, 0x2, &(0x7f0000000080)={[0x40]}, 0x8)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:47 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x8000000000, 0x20080000001, 0x1)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="1a6f8ba1961c9edf56dfda2157cfdae9fdb15447655a6cd21e56e1e8c486c05e2be6ce326a87659fc7ab53b62fdd13e9ce5e577f1acf9cbf01cc9f33f338841a7952688a6b587cae75065fabd8ffeab8c2e3e6326b60ad654de9f657471d2e53a1cc59edb65185d285717f434a426d647531b5953c0e19f60432a69bd0d8e72855c0306fd1eae5e80a16c577fa0dce2c5e8fcb47aae91dbdf7b40a76074e3e1a46d22a59c4faabdd051c2d5a800ed47d05180d3eb69b", 0xb6}], 0x1)

[  950.799988][ T6640] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.836481][ T6653] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00')
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, r2, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000001640)={0x0, 0x0, 0x4d, 0x0, @scatter={0x5, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000002cc0)=""/201, 0xc9}, {&(0x7f0000001580)=""/185, 0xb9}]}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f16a60e192ae2cb7afbf6e22e9fd0fe9f3f6c490df0b642685262142cd523b15e8a63a0243602599d5edb2df3f", 0x0, 0xffff, 0x0, 0x0, 0x0})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, <r4=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r5=>0x0})
socketpair(0x1, 0x20000000000000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRESHEX, @ANYRES32=r4, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, r5, 0x6, @inherit={0x80, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x3, {0x3a, 0x791, 0x800, 0xffffffff, 0x3dc0}, [0x1, 0x0, 0x0, 0x5, 0x200000000003, 0xfffffffffffffff7, 0xfffffffffffffffd]}}, @name="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"})
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200040, 0x24)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000001300)='./file0\x00', 0x6, 0x8, &(0x7f0000002c00)=[{&(0x7f0000001340), 0x0, 0x3}, {&(0x7f0000001400)="f05e73960d0986eff7aba943727d9dfbdba30ada445e7af91a0d5d6f5745470058e4ab48ac467effc0a7e6ebe8efbc7085e7ac7b5ba18e0d3a6c1a373b90ea04af8dccce4900ccf14a4a899fa1f07cb6d702e7fb931f3e66ed61dde8b08c14bf1987053ebaf1d2535fb44ac7fd2c81d1ee79464d3491a289c98897d0abdf35cb34c81d51086d24ce2f1896edc8603567da24b0cc13e7a1f9ae439ae5021b92cec5e7f1592c2b7dc334d4cfc1d93ee8e7be748e2052396e371fb03b4fe1bfd633f655e5b2ad94542847634a1cc110fa5169cf3e225a419869577cc7", 0xdb, 0x4}, {&(0x7f0000002940)="b767f42d54a5795d9963d64033032468addaa03616855446d2a6a70aaead4c4b2cfe775da5f6880928a1c64e1dc325bd21bd1920b562cca0983eb4acec4f6c7cbe1e449511b50b87680ceb4274809ec8668acbc42221b8b29aad08f70430929f41ec5b203a7921e70ad15d9ef66f5d23c6237b242399845c701809c9c9dd28f8c98d7c2ac19b0b042de6333fd32dd6fe13f0099c", 0x94, 0x4}, {&(0x7f0000002dc0)="57b3c6f7bc745e2b52b8fc1fdced4665bb9a1109bd72b9461d0cee22ecbf152798a4d9ae5f2baa158b7222576caf3b2b823f86774ff54400182704ad6e5ef661b0dfa999bed4273bfda197722cee0e629806bc3b6f4759274fd146e2f7be1cb3c0", 0x61, 0x6e06529e}, {&(0x7f0000002a00)="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", 0xfe, 0x3}, {&(0x7f0000002b00)="9e7c5ac3fcc1f2bfd5e088865a430fe0d8c13ae70213e1e6626700e8e70dedfd2efad38f5cde604a1e0bf2d6edcf5046d5a90655f2e7aaa0c559e9a89064063e9621d51266914ed9c133ae594bd4916e4d78e5412887a4f0df8f9051f7f674cb03d6e8e2a429ec97ea375985913278e4ce5330ed2ea1d0a1558ade515cb424348912a54d54219aa9205c26190edc08f44be6ba5327424a9bae0aa1aa7fb8df166291073c190fcb6767def0ae2df70c78b8c07dfebfb1410b01528d494d9559c199a12cde85883436af600cf9a863", 0xce, 0xffff}, {&(0x7f0000001500), 0x0, 0x1}, {&(0x7f00000016c0)="2649dbdfc998ba10415e54cd1874fd0065aea97225e47e755adbba994f93e9f7c67ed0aedf29b44030ec83810eb6335dc765982cf8858597ccf7ecbb13c85a87190ef4c8cad7abcc777fde748b589cae05a9728c2625477bba4d9183c78c", 0x5e, 0xffffffffffffffbd}], 0x800080, &(0x7f0000001380)={[{@nonumtail}, {@rodir}], [{@subj_role={'subj_role', 0x3d, '&/\xdb}'}}, {@euid_lt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r7, 0x0)
preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r8 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r8, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:47 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x501000)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080))

[  950.845286][ T6653] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.870138][ T6653] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.878606][ T6653] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.907550][ T6640] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.915991][ T6640] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.940688][ T6640] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 5:
r0 = syz_io_uring_complete(0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x80000, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x1, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r5, r5, 0x0, 0x4)
sendmmsg$sock(r5, &(0x7f0000003380)=[{{&(0x7f0000000240)=@llc={0x1a, 0x30c, 0x7f, 0x1, 0x1, 0x1, @multicast}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="f06ebe6cf793edf2d185bc8a18da39f1f180ddf01b7011ed0d15c656ba22e140ef39f6e662611afffed3a049770eeaf79efdd3372ef557409f41788f55b7413ef26c83f36ee76dff87e14b16bb3fa8d4808c992569f7d48f74664391f68ba24f60a27c619904667b1ac8bac9b6f8926c36408062d8da6d143000d1017938f3491433994e2de2d5b0a8b733dc8b0af898", 0x90}, {&(0x7f0000000380)="51835517cde2f08013e34de5727fbd8c800c56a58671e6a8349eb0c4c32c88661c04d29d61f4e8dc1bcad18b3684bdc62a9b09c59b8416e9e6f7c44542611b5ff15ca9de7474450efe4a70af", 0x4c}], 0x3, &(0x7f0000001480)=[@timestamping={{0x14, 0x1, 0x25, 0xad}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{&(0x7f00000014c0)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001540)="faaf96d38e5e57da7ca1203b71717a3f7d7c3e409f29624ad23b6a38bd891fdfece1a405c6e08cb0d322058f639c829a54209a006be55a1dd16ba9b2ada7d23d0f17a711447530fc930716fa68cdf45a0917338649052c0da1a56aab7483e22cd4bce0b05312e877240786c8f239f4c48eb051eae02adb65854ddb8f998e7e587329e7736f4ea9cd08bdb6fd56c6cd45ec73a8739eae514539fc8fb464b51b58a2307c622ee3cdff080f696a78d17632e6ad6f2f7a6a04a5cb3c146e141c6e1449eeb32bfa7b4dfe0b", 0xc9}, {&(0x7f0000001640)="5e6109e183ff4008e03b69d4e3f7c2458b44da8d7923ed3ca1a11d7c2a1d9781028db13c830b64734b81545e890e4c339f3e62b70bac5c1deee5a0f93f485d8db5f2bfcbf7be0ab2e0e34893b30e4b1f00c56d10215f62f82f5061026d49c2db351678764b4148cecf0a1898d9a03a1b85d4a203adce45b8845d8731ca2272ada8a4d0d9c18db1405f5758fdebe6b765feb0c8aaebfa85f1f241981900722b26358c5e1b1ec63dbda16e82f965321c4d1fad5cd6057eea47d1428cf56483217bd9109c684f1227baab9e43010da8ff2f8cab7e0e83dfdf2b670c95bf44c1dedbcb20f4c32c22bd158897db", 0xeb}, {&(0x7f0000001740)}, {&(0x7f0000001780)="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", 0xfb}, {&(0x7f0000001880)="535ead4cc8800dd31028700f00a8154668e6f032ecc9d23130166b78f4b8fc769d5db523882a68f49e8337a05e78ca3ab0b7ba1c8670d30bd187a753573b143f12ab3d6ff003a21e041d5a240044b47686e90b18c2441e32435cf8fda336f96a0911d65239152e64303e86f2c3", 0x6d}, {&(0x7f0000001900)="8f9ab361484a42835c0d454fd005f17db078e08503d740be1c630708235d", 0x1e}, {&(0x7f0000001940)="5f8cbb0a33017a63b5e605b63e6a5450e17eeb6d9b7dfcdd9587e4e311fe0442ee12216589930a4023e74ae4e3e92b22ee448a10a5882269757c57f8b41747e0ff28cab88c46919b0eb6c6f8f6578747548ca6f57e3c5703b3b45d2a80d4bcde73f3850f39323783c388d985bec088a117c52bf282aba75769caad1baa90d5a2dfbdc86a8ebecb747faa697532c4626515", 0x91}, {&(0x7f0000001a00)="6ab31a0273a261dd78da774faefa1e729a51229f3cc638ad0677f9c65c36c8a06550ff72de1d67971919ef0b32a0019c13c0b8a69cf8fcb3", 0x38}, {&(0x7f0000001a40)="72f447239909940ac257cb641d8a3ac9a1d426d7d3b94563f10393410500f26c0b6734b08de07d1cda6b2b84d45bb3e89fc7c7b2abbfac7a4b415a3d522f6b25f9773b236a0dfdf36eba8ce0eab1345fbd8ed1a566a6d14036d04dc53f174238ad", 0x61}], 0x9, &(0x7f0000001b80)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001bc0)="dd921f4a0cf56ebccdda43e92260855067bfa47a23413ae6e319a8faa37cb67bc6d46dec3eee587dfea00dcf0f34e1be0e679972d53af45d7891e0e95f1b070a511bbccfc2acf5360286547985f64c08c62d5ac269a29e0185e1f4444c075df2bed7ea09462ed301c3ebaea89afbfca79e69bebc517cd69e41d1a9dff54763beee57ca793006f854cc45866c4eb87f6882a9e6d1e016abf9a4c8c32248622733ed6c3ac5212ecfbf1d1900d82657f7af013bade3e629a4f1bacf3aa223c584ba2060ec4ea482be83c0e89bc694dd37b7b54eddb197a6665a8206a6f10f0490fd67893f414f67b73017e41c3e7193e10abb950a017ebdc211", 0xf8}, {&(0x7f0000001cc0)="d1d26025faa8676462722d0ae0fa6b9ab996119f7bcf1d513cad13fd9219db3ed548ae1b8f84693a072f0947f0254e6ef8dc22682417", 0x36}, {&(0x7f0000001d00)="82c5d33b8efda450be22564647a171da96bc85d94161bc03d7a4a517b0da3e26443e04eeeb19ce3578aec104950cbef5d1206897f8dc683c99d8ad5271fb2feebcfb8bfd8197a88d1b8e", 0x4a}, {&(0x7f0000001d80)="d1a0417fd9555c5d025a4bf7ba72554199fe22e3fbb314fe5c1b294c0c81eaf740745b508b80212b692a29388b295f9ea0863d38c490ad38f7914f8621766a4a525e4d20ad6252f832c801ff5a8e241f715f5e2cc2e9569cd9d8a6f934ded3ca7606844d90a219d83c6818e556282a07fc9302981acbd5ba51adbe13986bb4c300f8fb0511fec7124f2741380711b2da26833ecd9db1df3cae5339815dc44a3b7c979d7e075150c28401374c83d1869d815ca9c2bcea32a259ad2b87adc8cfcae884071bcf8b1353d035521470807a274d065895a7b1fff54a7fee1d4f9c82aacf", 0xe1}, {&(0x7f0000001e80)="b3fad2c82e02f095fefe29c43986e2370c064cb1a0d70cb850537427dee76edd14788a9e8f67b7c1fd4c90737b43757b7437cded3eebba67fec5c471fd69c1ced831b59b53d6a020981447175102defdef8d060220ae7630957ee83788aacd6b0bc55399e6a02c4b83c815d3080fb0c9f64ba423a211bd4962197d7beaea90642517b59b2346275e799d617cb147e79af98947e29c5fb07b0d89159641c2b43068dae9efba29d3150b476df071e4df25a903b9974cf24a07bdc13213c67427c08c2071c8d775e817b8157998192d2f43e462d3566975113cdd81390fdcc3ab117aed0116be981fbf68b78364d4ea03c4dde1e8ce89a208b3396a28e18baf7885a087ac6a8f0316ffbccb6ca0fc0cd15e194614ad07044b9eb18e8392ff41b6eb7ffd2c9a1f99b32e20746bb8f8296a34b050068743df25da17439332e555d932014d782faa41c25f0d16759eaf24aeffd3c61ccf69894f4ee19daa53d647d4fe658685e36a5c484fdee7efe3677666c8f60946eb4173bcbacd8fa9e6744a8f8a1f53a8a67eed0978bcb75a167a0ccd8b18391511b64c9333df6395a1f10c97731b1ab5b10dc5983ba56d28b61c7efa79c11512e0800ab0f58c7592c04ebf048c87fbfbeb5f4ef1a596e1e1a37325a1eaa9e2bd4ba07d6e1cf58be0f09f9d7abfe6fe3a10be825b6865078836a3df5bc6dc4fa753c37cabb72a1c7b845dd0f014c3a5f337f5cada0fc4eb454e65ca7d16377fc35bbec98473c30707e838998bd9af690998af3f51cf70382b05eea80472d5b19f86484a2061f6ef3f533dff443abfc4a3d7bd95f3965a916be0393eeb80e40043c2af985f12fc8fc145c3f94062faa58f4bd2591f4d4d0b61e3d9b87ee005b13825ba771498a2520fcecbd6537b4081a7d653f835b9075d02242aeac603c1ed41e7913955083d802857803bdba6bdced569e8576d2c48267ae6a4d0098700211cd55f83f62db98da5b060e9ea063e15aef980ac5633bda2499bcffe89fbd82b1f9dfd1d9754be135dcb8d038ac7015f7ee192c7dce8ba57079137873874492de1d66f6ffd68f27a9dcaf8580fc3a0c63e627c9792b6ff980dec693cf699187c3c402a40d298d0f6ff0cc38c8b0936a9479bd0a6e03c893d9f201667dd6f3b82c0720ec17c2e50a94808c89aba7e5fd7c75e1e670988187a54143e40c4211ba7922c79c5492d008273f790b1c48b08916ad3c5c5981bde6830bd5194575aa80e53974f1ef8d0dcd19d612590a4fddd324b57bf6ea5350d0d0b07f7350a04cc4709ebb578d24cfd9b8fe87a041cc751391ceb285498621fb31fd87c2e3bae6dd99d3ef337a64fc9f27a512e78cf6f0e85048732a8d3d415a9700d26c7b1e1108500ef6d3c6723c26788bde55f88a84e80d19d8b0696530b182ad7d85b8fa2011771352e25fabb4b4ff8f99ecffa538efedfee9c07aba2d61a31b949f3d1d0d9b3a6bf6d2d8c1f2c91585cac6ec97d9514679c8e1ce56979b29a7231657735ebf4f5e8183fc3d6c8692d3fbe9127c36e76927ff46929e135d8dfebe7246097ce072a8bdbca1e34a593ffb1e52e5587c70fdf88f754d50d1946d1d8c10dc8fc0bccec289c4a395c22e5516857dc6e07c3b1a702d6a0ed690908d68c0a29037aaf7cb894a2dfcf9c254d6149073c6fc9c8701ec680a90f2dde687cc826658501c794fbcc84876794f2e0f8e2d1bc913553fc2570981285f45a2bd6540aac58d42046abbefe4640752724773be37a43f262b85b53e8a3f66e81c58cb3a8ab624a958f6763d6e00fd3d43470ab13b4014d71d680598c9b5242e2c6369dc9a856fa74abd43f729235652f7bca91a333f90fe687ad276cc3604ac1752c285a3569a1a8b4b264ba2570a47dd67e2776bc2c78946ad588aff4277d2dd0fb65c6f60570f1504d02eef1d21b5cd2a2d844f7e7015d0d69a7236e811eccb28068eedbc86e04034f0ac8caeca604185295654c17ffa55368bccf7d87c299c20667d0344ca9898424b6c352cf3d1251109f26c4a8635177dbd7fbac67e8177961a08acb5d8b715b9d978cc9d70fb0515f0c7aebf18e923167c1911da345fc229e4a7729163944a694758e91e362c5f78dfbe4aeaa35076c9d6a2da47c4e83332c6f70ed7f0f3a6ba310ccbbf0f30a11ae06b7c573b383b27b90b86e422e87f30cecd94e626e270e15739133ea1c355c17641698176480783306e745674a0ea088f15955140a94e6761b64d3e723b14a331287e3ddb8217a523d6b50797cbca7ae5783065f2e8f059f03aeaab072cc26c99934c049946fd03ee9099a94a9358d8cebcb15c8c0b403ccd6d4b08dadaf250e2cd6b7585d826ba0de26ae3465589e8a84fadc8103f39b3b80fb92544f2bc701c4f8f8f7bb1f1c031920ed340416f23df7c3865b766a7b02b6a11ae00d7b162b47cfe053259a51e395eb61d7f056812a201a42e7fc5a7e5a040ccb79c62b4d8bf527e530daebeca96b167bfaec6a9c839725e72859b2bf014049fc40a19be57c33abe0b74780583224badbe8ce5b86d9d56c3cc63a487f7e00182003340f7fd6dea96b84b66b4c7fae86162744480bb021116e6d38aa2c37324d28bb8f6f86db6c6c9c4876c2ef3a5fbe5a4268e83efddcbeea2e734889dd291e7b244db12d52c20b8453d005105e2c9e00ed923802c393418bbbbe40430fb07c3fffc425001f301ec525ae48622b389a35fb4e23dc4d69614058011234d05a039652b13cd7c601412754166dc823eb75230f811f272cc8bafe68e90b6d1ef20bf20890d7b8cb81efab87b883d42226242238adbffc7f1a22974e5729ea5bac5fd707db08a9168f6d31428d4fc23b2a82948e128831b55c2a748eba5e10a26dbee5b90d3e7a3baa5bcd4a7ad08e97fcecb1e4581afd8506ff096b28a21df0beed92eb9820ba9254c05dca596cb041101dbb66ff57adca4d08c0a4c85d00c10d3f6978ed3cd50695d0bba474a5489764d6c9763ec29bf54c59ebac82e26600071aae4d4c799645b5a1319eb126c41a969861a9ab40be192c116df37adf1a83ef5f891c22ef5067d92b59ef3c37734af7f5e4890d64aef1788533cfba94bf7e8f0c8158ad9957eed54d3ff97a7b65723cab7c120f58eb2e4907a055e31b0cccd1962695dca7e9c060890492d8b94a56288c9f9c3e1d64a49697b76c3cbc50abf7d7b2d0e8d2ce2956d17bf5d1c3c9c8815a933d607a932e116bef3535298b4337bcd6e3b9d98af6ae542130aed66229c25bf2e9cf007b72ff30b744b5f6d3443817ccbe606e464455e7532e057986b2db20c582421a4adbad97a85925d8c7b54edc9682914de2a3f132389b90b4076bd7883956e389c06c2c7cf9155734a689e161176a11243ecfa02c10322cda148abbe3027da8d2536bb1f1686ce731a5c432b69b96b82b169cc39795245fc75ec80a0687cd642ea071784899929a686ea5971fb073f993401a5e15cea992a9cf1e3ce94eea41eb9633adbf7bb34104588e91b7cfcac33cabad39ce5b705bf37a386ad284b9cedf6b7c02eb44c2d31bc9fad3678b63c13e3d94c35cbc65b49fe789452cd200f3c41f388a972a7c08059424cc17ad457a3740946f39c005a2fe4c76b95acc5803e10553b0acbc0b3b1bf55434b56382c188cbfd61aab870c78918fa695b507a7e5cee6067ec35ab57f0d43212b327a18aeb31da49dfd935a9e813f137e26aa80bc3023ecd65c1f3f9a0577529bc4246945dc56ac8f9c773e5e5cba37592456f850eaa45ceaa9739d54acbd3774dcf9b9d6365a72c0ebcc1d89773b6e2ee1c9bed66f563a4843c5e815f886b07747f740a3a35354233ec0d37e3ffd37c6195ef3595898c7349c1508cf8aad738eb369b63d8304cd4de5e2dd9061eef27f2617b0a8256d8bea6c1d55075776a98f4efa7a81e4645a85bdb81f94666c1f0b7f198c86f30b51af62b76fa731d7695c7847f9a4ab3f585ca90a5f86d78d0cf492abc9d66658a9c0f8fa420afca1e0ddfefa800eca166dcb53f94c485721ee0d351a2a0252c61941817f52c18350fd11b2b394c4d854531e3e2076e21b8558ca6f1871b1e19424538140e5f342c4aad0ec5248295b9b092ef9570ca5bca19d01ca611460fd0c49b803e7c69b92904bb4251a6decb52ff2d22d89db35cfda7f43ccf11b5e83e133fd467e2999f4cc1927870aee8d00ae696dd1fcd1388ca60f441ca62fecba761b23b494442de6ce03494cba614746429b9847cee2ba18266ba3b68df6eb743e13e3c4a455f7eca51a5c28919a6211e1a7054ca209cae3e82701fc154d5488fbe8d41ee76ea68ecfde0a12aeb2c08898ecbe8a0be20ca925960e4b1c56a317d60b4017dd1a950fc09889f13eef949149e58f780ea989be835f19198be876b68a452207812b08e8045856b3712e1ddb9f0bd517ecb9414a17b3ba31c1efe6b8510dc5c60ea0c0245846d3aeb6cbe5cb3887b063eb70dacabe5a57966c90588e86a5d4ffad18cbfb0fece349e6799110d316f54f0050682b3935f0bbcd002cd2bbaec62cd308d878e105b1cdd5afde6c288f2180a10caad9084a3fc217b71eb0fd74c57d0186e6afdf41d36875ec0c436705b79af2e290d81e2737a0451b5bfb933d451be5239f674fab389d60642d45f70effafd22ddd234ac40c25e77809b85c39eadb24c80251946f6f094cc8e0a7dd2f27a4f255ae93c695e75916080b595fdd88c392cb7caa1ca459680159d9b7d523f132e56d8c83f23fce91a1e704f22d24419cdd05f0f058029e03841dcceb011002ea27259164f70fd770400821193d4e6e9c7783fb18a3742c023b669b1600adb6c01585885d315ce98f689d224e650980baa5f66d7cab8c5952266b5a6eec51f9de4bf57fedd90d21fd63e8dc673a14a86491c1e3c9284af8b44081d88125d9dce6a3b5146dd1bb64ca4f979162908c107276945f6f83e936920a4112b9ca2c7e2c79a743883ce10c448ce6e9088d1f099f618e853113c24c520e21c08bee655acef71ae369d6937839b8cef81e79e4457dd97c22a93c625b17046478a821ba0bd7ac5d54b860e87c0539397356b300d3bbe9103c7ca71fd2a1ca5d4e4df4f82557b65cd3a305b05ae76eecde17cbb8e89598ed4a21ae5e68502c03f8f6992270f3a6a7e9e9276a0eb340d896c8c3e52eea58cda45143012276331080ba05ebd87a8e842d10beb1cf4858de7e612150c583eaaa8548f5bb4e186efd3e6c23e4718f542fa4f0cbb495e53aad21e4b40e597af954ed74463fc0932b71c46b731f2c852de30c0b7ce28cbaa4274a299eeb9fdb8773e97cb4b55a2b963552c9fa50effbe3415f0dc9db8f932262cfa95f9f2c1b3535a24365102af2be2e07bc2f826e19ffd9b9be67148e09523af48c2aa4922dd7cf83d46f88515de9872b109d9b74f68a74453ae37c3462de2325762ce7370d6e82fd33fa3450f1f1457cda5c7aabc6ae89e85a93eec017bd2648e17b3a040a7b45b4234e4e5dcb5b8c22c516cb68cac3660094f5aa744fc835cc4520740d95cbb9098e4886635b7c217073e7fb9a113ff7617ae72a6a388e3e69e0978eaf6b35fb2e49c51829d0a2329653851293baf1673e8788c44cefff73ff5b9075815e85552ffcf369c819f2f78832f4b6f880909ab9e4841db0109b4c9af1b9d1bba41918fbbf8fa8e4b8213f4d5ad745aba5511fc11ac99e34c2c8b873c7c37b0b95f250ce0a9a132da60e7cd1abfb596d6810b5238b50871d8edb8a8531d0c7e70fdbd3a2d2095fc8de9b2acc2a56079b35e2fc3", 0x1000}, {&(0x7f0000002e80)="45290f57ae9cb9cae1deb8ad9e3c9141a0e4ea3f0dcef929b13b0b4a21b3a14f678ddd8da4e09f9660a1d5523bb0c2ce030de498da23756d608fb156eaf9ab6c688168a439aacb96c393246f60f3cf740b188b440ddee0f2c5ba9f310616a66b48bac84ff883384bba773217c74089ac9dc3495cc8c6ed8bce665b8099e340a1fff88bd704a620c7db82c984b88dce5e12478f3f86a988e017938067f3e4757021d08f299b05c281391414e44ebfce5a693e3212c0690dd824c3a284639ba614ef14d96afa07eab9cd9865fe668c6c617b6a3cff72497ac44fa5fc5974199cf20085853306185ba54d466bcfe2969cb112a3900aff5f850fd5d04e2e7e", 0xfd}], 0x6, &(0x7f0000003000)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}}, {{&(0x7f0000003040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0x80, &(0x7f0000003280)=[{&(0x7f00000030c0)="7ad94a3bd20a163aa3c8ebeb648f666f5704a3fe936fbd0966d8c677009e70ee22210aae993094e09ccebe903d0caa9331f230824719da56438482e52c3a68c20f2a93bb39fabd9b70ad53639ba3ce0545b9eb7b67ce201d9e4be2082560d19d717f75ae1995aeeae0798ecc751ab7c2cec8257db5b04e045612d65488b9298d08e875a30fcaeb04d8b1c8ba734e1000d76ddca6d992a730da847b234d14", 0x9e}, {&(0x7f0000003180)="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", 0xfd}], 0x2, &(0x7f00000032c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6f7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @timestamping={{0x14, 0x1, 0x25, 0x75b5}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x90}}], 0x4, 0x200400c0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, 0x10)
connect$packet(r1, &(0x7f0000000040)={0x11, 0x10, r4, 0x1, 0x2a, 0x6, @broadcast}, 0x14)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2a101, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001740)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x2)
getsockopt$inet6_buf(r6, 0x29, 0xd3, &(0x7f00000001c0)=""/29, &(0x7f0000000200)=0x1d)
r7 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r7, 0x0, 0x100, 0x2)

[  950.949152][ T6640] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.961233][ T6658] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.969698][ T6658] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  950.982108][ T6658] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  950.984611][ T6675] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=1)
13:06:47 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127e, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:47 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x400000000000000]})

[  950.990568][ T6658] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.048143][ T6667] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 0:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0))
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r1, 0x0, 0x0, 0x3)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x100)
fallocate(r2, 0x0, 0x7fff, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/pata_oldpiix', 0xc00, 0x8a)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000700000000000000050000000000000006000000000000000400000000000000000000000000000000000000000000000000000000000000080000000800000001800000000000002000000000000000020000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000593b6828437885bfd788762ec1b02482ff017485"])

13:06:47 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4b49, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  951.056598][ T6667] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.069224][ T6667] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.077685][ T6667] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:47 executing program 5:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xab, 0x10}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x9, 0x9}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x2, 0x0, {0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x7, 0x3}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8040)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r2, 0x0, 0x0, 0x3)

[  951.117683][ T6682] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.126162][ T6682] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.147338][ T6682] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/23, 0x17)

[  951.156785][ T6682] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.175732][ T6685] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.184151][ T6685] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.209597][ T6685] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x5)

13:06:47 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127f, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

13:06:47 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}]}]}, 0x5c}}, 0x1)

[  951.218039][ T6685] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.236300][ T6692] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.244732][ T6692] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.280458][ T6692] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.288901][ T6692] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfdfdffff00000000]})

13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r1 = dup(r0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'pids'}]}, 0x11)
sendfile(r2, r2, 0x0, 0x4)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'memory'}, {0x2d, 'memory'}, {0x2d, 'memory'}, {0x2b, 'rdma'}]}, 0x1e)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x0, 'cpu'}]}, 0x13)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:48 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
sendfile(r0, r0, &(0x7f0000000040)=0x7, 0x100000000)

[  951.349879][ T6703] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.358339][ T6703] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.384844][ T6703] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x541b, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  951.393271][ T6703] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.415104][ T6710] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.423581][ T6710] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 0:
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  951.463300][ T6710] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.471834][ T6710] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 5:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1, 0x8, 0x52, &(0x7f0000000040)})
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r1, 0x0, 0x0, 0x3)

13:06:48 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x8, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  951.525365][ T6725] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.533801][ T6725] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.559233][ T6725] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002f6327fc072cd5a7bc801ae096351307c9e64db0149accf3a3c4c98d3fbcb069d39d0d45c87ec5c22dfe5e079344405a668ffe4d16b693e432bc72534325c7da008b29504a66ea5f12199b6334a59bb212ae49c37bd694339b0200a6d03e33b6e5c1a58667f6b41ce46df31d773aa8f14408ae8471", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf251000000008000600", @ANYRES32=0x0, @ANYBLOB="050029000100000005002d000100000008000b00ffff000005002d000000000005002f0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004c011}, 0x20000000)

13:06:48 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4b47, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  951.567691][ T6725] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.602057][ T6736] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.610496][ T6736] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.638218][ T6736] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xffffffff00000000]})

[  951.646759][ T6736] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5421, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r2, 0x0, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0xbc, r2})

[  951.694816][ T6745] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.703371][ T6745] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.726799][ T6745] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

13:06:48 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x302)
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="23869054378c7f4a64294fbc591c660a3513ab4dd5ebd88d3250868b91b9fd09b6b6192637d0c597a39056539e220a83678e4edfb33b34d0732b448c9749fad2ec0ca4f713e3b80a9dbc69826d3d1fec86792b8b469bb01992feeaa17e127af528294a40fe6ad01a7b93e56f59cddb3a555a97e0b9aa5116f9c0ad3ab029737a06386004546d00203289b60782be51270735f4f9", 0x94}, {&(0x7f0000000140)="0a261dd98ed65a57ac905e4208dc3c14778ea056501b07e8b5738818a6eb5aad9d725795ad53eb671ec034624d34ae209b980c7c51766c60f8d96a4e3cfe8a7224327dd2324277b6edfe0b39584d8c8fe7f6a4595b429df7", 0x58}, {&(0x7f00000001c0)="75c700bb322416c3e0da3500e3290c9e689c16f06c3a272ad5e24a083e7dee5c642c35e334f9f2cc073c25baa15dce939fccd6ff71ccf8d1f1aac800516fb567fc49e3bc96b96437f453c4512874801e4cf09785c8a68922f132585b5f66d5ba355aba4d6111c1f1ae2b4fba23d1c189e0957e4ad15c3b9ad67730a93f0ba625108d234b2282923391bde8e5cd6bae4f2117d932cebe2858368868cc5605a444bd8eb95c9d95dcccd568cdfd1f9da8dd41fcfa5656d67f1c4cdfda01d5b750f855fd8909c3c9b777c3a247cfa3b36bd70892993e79250bf99e3cdeca7acd40d03d2788b97883ae34c8e6606b1c65c11bd84fe94eeb", 0xf5}, {&(0x7f00000002c0)="e41d1f0a2730eeb40c9848e5028f4c36d53934d6f0d24db49981baf9133296cb901cc355c309da2ac004da72af9d26f1e77af00c95e40b6480377894191545916269d08b5392358f80a0015c362bc2560344e40a850355d5ee1733d5ec4091668fc4eb33faa8aaba01e3548a7bbac82c6859234aef83ed660e6ce63997c63a10ad0848b6c559e56cd6b68056d803adc22667312db3f5c2bf4c485de8e3c612e9862fe0f36934fafc2fd4530e0342ea6ce5cdd2629f4211483bd17171663a51454f43a5eceaa516d4698797ab6f", 0xcd}, {&(0x7f00000003c0)="bdcbf154f7fee19a39546759233e5d9ce61d6f230af80d03b8c23ceb5573e6b9334f6652458105a1d4919488daab0d653c4aa5b293239bb6144ad0415812b5805bbb7776b6b78e30bce9d45d5d912fa286f1401d8c635a655a84db679785892c79e4082a74833d3c78f4", 0x6a}, {&(0x7f0000000440)="47a9a2435de750046f4f59a17f", 0xd}], 0x6, 0x8, 0x7)

[  951.735297][ T6745] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.774981][ T6752] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.783414][ T6752] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.795821][ T6752] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.804252][ T6752] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040))

13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff7, 0x503641)
fadvise64(r0, 0x0, 0x0, 0x3)

[  951.825605][ T6763] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.834032][ T6763] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.862698][ T6763] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x7fffffff, 0x2, 0x1e, 0xc, "218b1311af40895a7acbc96d59b0b925d553eef4dda2c1797cd72b0855187b6cec3a47f53a68363c9906c34ef1685ffe2af27255a19b7c2a399b8bfdeb316e8c", "7f2dcffbff6731673d700d0cf637751ce7a27f09b40083dfc36eecab7f5a702b", [0x7, 0x10001]})
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:48 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000100)={0x0, 0x7, 0x3, 0x0, 0x0, [{{r0}, 0x84fd}, {{r1}, 0x9a1}, {{r3}, 0x8307}]})

[  951.871146][ T6763] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  951.936931][ T6767] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.945958][ T6767] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  951.958801][ T6767] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  951.967243][ T6767] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4b49, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  951.994890][ T6799] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=4)
[  952.027784][ T6804] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5450, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  952.036240][ T6804] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
syz_open_dev$loop(&(0x7f0000000040), 0x100000001, 0xc00)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
syz_open_procfs(r1, &(0x7f0000000100)='loginuid\x00')

[  952.070356][ T6804] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.078873][ T6804] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.093026][ T6801] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.101502][ T6801] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.132140][ T6801] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.140583][ T6801] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.171155][ T6809] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{0x0, 0x7, 0x1, 0xfffffffffffffff7, 0x6, 0x1, 0x4, 0x9, 0xffff, 0x80000000, 0x8f0, 0x0, 0x20, 0x6, 0x400080000}, 0x8, [0x0]})

[  952.179634][ T6809] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.215440][ T6809] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:48 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x541b, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  952.223968][ T6809] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.244403][ T6798] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.252852][ T6798] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5451, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  952.280066][ T6798] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.288547][ T6798] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0x4})

[  952.355290][ T6829] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.363750][ T6829] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.387145][ T6829] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.395586][ T6829] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.436218][ T6831] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.444657][ T6831] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.458195][ T6831] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.466645][ T6831] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.480253][ T6829] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.488690][ T6829] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.500398][ T6829] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.508844][ T6829] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x8, 0x20, 0x2, 0x9, 0x2, 0x6, 0x0, 0x30b, 0x40, 0x1ff, 0x8, 0x8, 0x38, 0x2, 0x2, 0x401, 0x77}, [{0x1474e551, 0x3, 0x8, 0xfff, 0x9ba, 0x3f, 0x10000, 0xffffffffffffbdf4}], "e419fd79c8766f60064c5a8d052dc07946549caec7b9d77c6898306216dd34946dce0c476765e288098ff8024aa8266527aee955cf855050fb1ad65dd5b46d460fcae9d1d1eedc846dbde3e48ef6009981", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c9)
fadvise64(r0, 0x0, 0x2000000000, 0x3)

13:06:49 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5421, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:49 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x0, 0x101, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
close(r1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140), &(0x7f0000000200)={'L+', 0x37cc}, 0x16, 0x3)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  952.539294][ T6835] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.547727][ T6835] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.602450][ T6835] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.610980][ T6835] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/module/ata_piix', 0x1c0c0, 0x65)
openat$cgroup_ro(r5, &(0x7f0000000c00)='freezer.state\x00', 0x0, 0x0)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r6, r6, 0x0, 0x4)
io_submit(0x0, 0x5, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x4d9a, r1, &(0x7f0000000140)="47fd1eda7295205c7afc6191dc561a84ace4607ae6043cf38be28e1dbb34ecb5a64aea2519f3daa5ab60e7cbbc5dd0b6d5315f0f8f93007d64cf8467bd9b5cfc776c1e42c56d66529bfc1625fb192689b02967cf851a8dcbe0a4426b871d2b0f88f10d88c00563b11f39d4e113578aef4bdf515543523284b4593674eb4f67ed23c051e59ecf6c3bff666f43cd482e3667067c06e0ec1d52e06b51f6b1b5b334323ea0ec77563e93c9f6f825dac62c5c8a5378d1f6b7d8", 0xb7, 0x6, 0x0, 0x3, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x9f, r3, &(0x7f00000002c0)="a76da083e1f57fdccc386718935f4d0d7c5d512ca3c16dc7245f9dbfdb063b51536410cc7e76c3d3c40e8e9071cc8300e37ce5813b2d3b9530d159fae8985ceeb06cf0cca4f6e8a3a3227b67a8f11e9c3a29f19ffdaad230f0d2eaf1177e542a4719e7c8b52b73aaa23e4c07583e01192970ce224fbdc17930f77c66d78f2cec8bf990f9c6d5bd992286518d9f1ce346c1f7f7d121291aabca8ba69c84a5800b96e8d69a3c79d45b9d5ed04403277ce645a4724d6c72cba4220ad307dcdeadf95366b01ed34f1f54824ac4eac4299ab5e064d5454acf1b7ab8185e1ec2aea82fee1eefdd6b23929838fc25", 0xeb, 0x2, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x200, r4, &(0x7f0000000440)="600a2da010f4d52d7e5a55cc74b56036e47274d5086d006a0d8ba042139ba172f42190654d9ff3f064315a3f2a802c748b4e9da96599580363351d064d2c5263c7483102010ea794ceccf11fff8c31", 0x4f, 0x2, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000500)="b2e039bd3f877cb5a8e0b0a2b6aa2f3134fdb85bb4ca44b4ffdfca57622f3704d8532c3352cf23eaddf7ebe65e66cdf8d8a4bcf47006d3d4aeb9bfaf3a2b16be7532497415b70b1ae1285c2c66f1e50f366b24cfc9897672048af3", 0x5b, 0x3ff, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f00000005c0)="d1f57122afbe89f662c0d5b87b3a0df3c90885f79dd6e7733924e6bf98c2933c1dbeef2b1a32d6fe61224d8deec8c93db9bfb24296c7f33c60f508407c0dbb3f77d259b0360c63e74508eb9caa26c2ea85a624a2e52aadca123f", 0x5a, 0x32, 0x0, 0x3, r6}])
renameat(r4, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00')

13:06:49 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5452, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  952.701500][ T6846] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.709980][ T6846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.754801][ T6846] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.763242][ T6846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x1e47, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000080)={0x2, 0x2})
vmsplice(r0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeda}, {&(0x7f00000001c0)="82b05834d33c7dbf9571", 0x3}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x3, 0x0)
tkill(r1, 0x36)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x1000, &(0x7f0000000240)="925a5939001954eadd8a2cb0ac484b2f4211f4aa24b9c59e5d619f00666cbfa0c616130d180499dc59307ab07112d4578e3f1b74087fe16f592b5fff9a7f9a93cbc748a9da67b13bd1f2caae29ff0aa9e6e065ea333c855695bd6d26025826e91ad56a98cdbd367220")
ptrace$cont(0x18, r1, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x8001, 0x10100)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000140))
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f392a956c5c6ba1cb34401e0b937fd387", 0x83}], 0x4, 0x0)

13:06:49 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0x1000000})

[  952.825026][ T6847] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.833510][ T6847] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  952.878357][ T6847] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.886816][ T6847] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5450, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  952.938688][ T6868] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.947149][ T6868] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
syz_io_uring_setup(0x63e3, &(0x7f0000000040)={0x0, 0x17cd, 0x20, 0x1, 0x1c2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000100)=<r1=>0x0)
r2 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
read(r2, &(0x7f0000000180)=""/72, 0x48)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x2}, 0x8)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
r7 = creat(&(0x7f0000000780)='./file0\x00', 0x1d0)
ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f00000007c0))
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r6, 0x0, 0x2f8)
dup(r6)
fcntl$getownex(r2, 0x10, &(0x7f0000000280))
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7)

[  952.985137][ T6868] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  952.993584][ T6868] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.010455][ T6860] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.018902][ T6860] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x2010, r1, 0xa127b000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  953.035402][ T6860] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.043829][ T6860] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.068015][ T6876] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:49 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0x4000000})

[  953.076451][ T6876] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5460, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  953.111574][ T6876] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.120014][ T6876] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.175173][ T6882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.183613][ T6882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.196904][ T6882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.205353][ T6882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:49 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5451, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  953.219854][ T6883] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.228309][ T6883] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.258371][ T6883] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.266819][ T6883] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.290296][ T6886] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.298748][ T6886] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.311659][ T6886] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:50 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0xfdfdffff})

[  953.320099][ T6886] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa3003, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0xffff, 0x9, 0x1a, 0x8, "5faf501b15d69dda0261f3bb14006961d676e24b45c4471c94fa619597fc9f6bf877b3f9d6a12dac29e5b93733bd7c56ad898c6820e8152f9c439ab6c00a8068", "e372ffde59462293a2a6310155cb3d5153351ef9c5545e87e051c4e18ece98f9", [0x2, 0x1000]})
fadvise64(r0, 0x0, 0x0, 0x3)
syz_io_uring_setup(0x3df9, &(0x7f0000000080)={0x0, 0x2506, 0x2, 0x2, 0x10a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000200))
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r1, 0x10000000)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
pipe2(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000002c0))
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='personality\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x1, 0x201, {0x0, r4}, 0x6, 0x4, 0x1, {0x0, 0x0, r6}}, 0x2)

[  953.375671][ T6900] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.384132][ T6900] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.406369][ T6900] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.414816][ T6900] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40049409, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  953.434582][ T6883] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.443009][ T6883] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.463700][ T6883] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.472143][ T6883] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.484397][ T6909] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=2)
[  953.497920][ T6898] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.506361][ T6898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.519328][ T6898] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.527780][ T6898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.544419][ T6911] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=2)
[  953.588049][ T6912] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.596497][ T6912] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0xfffffdfd})

13:06:50 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x0)
fadvise64(r0, 0xc6c, 0x0, 0x3)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2000, @fd=r1, 0xf8, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/113, 0x71}], 0x7, 0xb}, 0x0)

[  953.647071][ T6912] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.655531][ T6912] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.712239][ T6898] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.720742][ T6898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
fadvise64(r0, 0x0, 0x0, 0x3)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000000c0)={0x5f, 0x8, '\x00', 0x1, &(0x7f0000000080)=[0x0]})

[  953.756295][ T6898] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.764751][ T6898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:50 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5452, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  953.820656][ T6924] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.829097][ T6924] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1fffffffc, 0x111000)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
fadvise64(r1, 0x0, 0x6, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc1})

[  953.916413][ T6924] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  953.924868][ T6924] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  953.999773][ T6937] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.008236][ T6937] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x88000)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
r2 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r1, 0x0, r0, 0x2, 0x0, 0x1, {0x0, r5}}, 0x401)

[  954.051439][ T6937] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.059887][ T6937] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.080594][ T6924] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.089037][ T6924] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x200, 0x2, 0x2, 0x0, "4b7f7f720ff5c6ba3612872ff35b721fd253207fe78cfbc380b92fee1d256facf5e0daada765aa935cb7000d0d8268ad8f92d690c2ee2537d4fbc48ff34eef36", "e53ec1e3ae2e59aadc9a99355c66806964a449898c63c10b444d3c258a59b404", [0x3, 0x100000001]})
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040))
fadvise64(r0, 0x0, 0x0, 0x3)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x400]})
openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x80, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

[  954.128601][ T6924] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.137049][ T6924] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xd010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:50 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40086602, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  954.204520][ T6938] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.213036][ T6938] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.250138][ T6938] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.258718][ T6938] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.274427][ T6959] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=2)
13:06:51 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x28040, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)={'syz0', "ee52ac62588dd5edfbe5c31f5c26da8ea98e8dcd6c1b20eb6a85299493da528eb7e5b890f97b1513fc4358efeb8bee6db0117515e3677a52af12dbef38bcc0a81103534af123993decf9519ee28e3febc3a39768ffbaadac16477190ace5c4b559658c52bb7b599e7028a822815ebbb3d4742e1deb0f9d479ab98fe210a1d8c3ffdb122fa26c40ddb6f1875793d3cd565b65aec343a75017f679a1a2f54f577fbe19cd4887704b9aa696099b88b98176788875801d6a905a4b80f804667bc715e9a4523b63d6fd975c08e7e952522a8fa6a8c747dea059f90fe5"}, 0xde)
r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0xf2300, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf257000000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x2f8)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000440))
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  954.308629][ T6962] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.317131][ T6962] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.390955][ T6962] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.394294][ T6963] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=447)
[  954.399402][ T6962] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.427333][ T6938] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.435839][ T6938] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.448373][ T6938] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.456811][ T6938] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.469663][ T6969] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.478096][ T6969] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.490688][ T6969] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.499206][ T6969] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:51 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x5460, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  954.543372][ T6962] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.551874][ T6962] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.588684][ T6962] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.597275][ T6962] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.608600][ T6969] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=512)
13:06:51 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40087602, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  954.664267][ T6971] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=251)
13:06:51 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x4, 0x5}, 0x18)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)

[  954.736322][ T6969] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.744791][ T6969] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.798758][ T6969] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.807283][ T6969] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  954.842696][ T6976] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.851332][ T6976] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b91e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467b50e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f500", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
ioctl$LOOP_SET_FD(r3, 0x4c00, r1)

13:06:51 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x20040000)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc)

[  954.965728][ T6976] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  954.974179][ T6976] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.033984][ T6980] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.042472][ T6980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.056853][ T6980] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.065296][ T6980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:51 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x91, 0x0, 0x3)

13:06:51 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40049409, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  955.093189][ T6994] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.101658][ T6994] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.157270][ T6994] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.165722][ T6994] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:51 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101283, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  955.197950][ T6994] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.206415][ T6994] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:51 executing program 0:
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040))
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080))
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  955.245493][ T6994] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.254024][ T6994] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.324583][ T7009] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.333025][ T7009] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000240)=0xe8)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0xb0001, &(0x7f0000000d80)=ANY=[@ANYBLOB='trans=virtio,posixacl,msize=0x000000000000366b,access=any,fscontext=user_u,obj_user=-,dont_measure,subj_user=/dev/loop#\x00,smackfshat=,fowner<', @ANYRESDEC=r2, @ANYBLOB="2c42cd4485d137fa31a960be8ff456d2f706b069b65755ebf64736650c6e8dfcf0857b258aeaa08cd7bad889ac8e886d0c80f5db5ac9e0e3d1d202da1de379a7c8a6e1"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000400)={0x507000, 0x48, 0x6}, 0x18)
openat(r5, &(0x7f0000000440)='./file0\x00', 0x101000, 0xf5)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000580)={<r6=>0x0, 0x4a09, 0x7})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000980)={r6, 0xfffffffffffff6e9, 0x1, 0x1})
mmap(&(0x7f0000226000/0x3000)=nil, 0x3000, 0x3000000, 0x2010, r3, 0x4a9a5000)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  955.365426][ T7009] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.373856][ T7009] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  955.413340][ T7012] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.421812][ T7012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000001040), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000040)={{r0}, "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"})

[  955.479478][ T7012] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.487927][ T7012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.523943][ T7021] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.532412][ T7021] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.567184][ T7021] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.575640][ T7021] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x40000, 0x16c)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:52 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x59)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:52 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101286, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  955.614693][ T7027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.623129][ T7027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.715981][ T7027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.724451][ T7027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.758699][ T7039] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.767149][ T7039] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
io_setup(0x4, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="93b6c5da22197ba2a18b1f08635e0e76af8b89388d3058e73e3fb556e3a299bb48c2f65a58cfe8362e652abb7f2b93526eb9303bfe2668", 0x37}, {&(0x7f0000000280)="7648fac274b3c49fbb52dc7f0c81397ddc1beb70decf4e8331b8d93cd546034426e564412127f8a7645c4947fe17e67cbdd59275721240ab8ab850d458aba52825d140a693268c66b68176d8766d3ab3489a7b4e7c41e191287e9cf48e0ba8ee83246979cb", 0x65}, {&(0x7f0000000300)="3e57986ed592180ebd5d1027e8a193659f3760890bb038048ad5e6a3c97308e7507f5a423273c4889fa2eb636329b48eecf5c6e37b1ac601c9b8501e89c2da5074ec110dd08952ade6efb6590e5bea9dee298b1e84035ab6722783e085bc6873dd2302e260301b63f32db9426b19697d420ff54d4d45d740abcb9b050c4a35f20f1d6d5b2758407e652bbea2ef896fbb7234fc19ada0779302dbb954def60a5e37ab152e1abdc07e1d217efdc3ff8813573a357f314127ca1bee0575ff2f026e76533c8826d1f716d64523b257753b5dd993db0f04a74e8fe849ca22fcc00c58931d4b9ec599a590b02f42c1b8bab14e03ad7499ec8229", 0xf7}, {&(0x7f0000000400)="3c291970533a970910abba192057e4ed8e55f8fa6b9d1f63aa58c7a17a2c67d6f4d8f1b59f0fd6f9bd884d6b610b7829b064006b006fb1889483963a57ca7688771a08cc15932a20e8b74ed8c5b013407f7c86ee11ab747628266d56915b188bae50146cdce7c427f30594291538c5aa7089135e561dc3806139bcf16a8a1e6248d36c5ad968", 0x86}], 0x5)
io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000080)="f157b9964cfbad177c0316a2ff83504c75bebe283e37b207a34063b283195d2b9e5ec377fab75f52ecfb28aa818c061ae9adf28253c53468c076a06e7968d29d314509fa687a9378da8a233acd10898f157386f9982d1a16cf60188cd5ca8c8782823a80317bdbd3c18281f2ac01d8904e6234d0cabc914d3280b4955ef047cfaf7cdc02fd0c9cfb80ab6bd7e2f382cdbd5aa123d6d4ff54ca561743341e31aa0570fb29dc43cf538c3ada8caf51096dc652fe03c646dc8214748d752671fdc332c05c6af13d143cea4221d8030bc027985c251175f34789c33980038341857ec8", 0xe1, 0x4822, 0x0, 0x1}, &(0x7f00000001c0))
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a80), 0x2000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000ac0))

[  955.806189][ T7039] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.814664][ T7039] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.877452][ T7027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.885937][ T7027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.914930][ T7027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.923410][ T7027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  955.978139][ T7036] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  955.986598][ T7036] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.008128][ T7036] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.016606][ T7036] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40086602, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:52 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101287, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:52 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x0, 0x1d, 0x4, "9b6bfd635f5f2b91e48e2037f933f3e266e16b7f1467d20e97dedd03345c668a22df09cd48451d5674409bc67c2373e5a2f1f400", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/20, 0x14}], 0x1}}, {{&(0x7f0000000300), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/3, 0x3}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)=""/53, 0x35}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000880)=""/156, 0x9c}], 0x4, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/110, 0x6e}], 0x1, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/98, 0x62}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x2, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000ec0)=""/181, 0xb5}, {&(0x7f0000000f80)=""/211, 0xd3}, {&(0x7f0000001080)=""/25, 0x19}, {&(0x7f00000010c0)=""/52, 0x34}, {&(0x7f0000001100)=""/127, 0x7f}, {&(0x7f0000001180)=""/132, 0x84}], 0x6, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001380)=""/138, 0x8a}, {&(0x7f0000001440)=""/194, 0xc2}], 0x2, &(0x7f0000003c00)=ANY=[@ANYBLOB="f1aef9ffffa748b1734a7c75250000000b5ccf510d7d7309aab3984bd21f60854da891a4442ff79456de25b16115a01f62c7432d6e5f23727cbfd4dbefa9b5386882348f9526b8f5d13f1d217a3d0d7e4cf2d655488a85763793a9df754a5a300527", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x58}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000003900)=[{&(0x7f0000001680)=""/103, 0x67}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/213, 0xd5}, {&(0x7f0000002800)=""/233, 0xe9}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x5, &(0x7f0000003980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x8, 0x2020, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x100010, r1, 0x40ce5000)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200a00, 0x0)
readahead(r5, 0x200, 0x2)
fadvise64(r0, 0x0, 0x0, 0x3)

[  956.037828][ T7036] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.046643][ T7036] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.153564][ T7036] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.162035][ T7036] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:52 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000100)=""/123, 0x7b})
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  956.236004][ T7058] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.244469][ T7058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.275184][ T7058] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.283632][ T7058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.314158][ T7057] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.322655][ T7057] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.353537][ T7057] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.362066][ T7057] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:53 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101288, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  956.452548][ T7057] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.461017][ T7057] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.474116][ T7064] loop_set_status: loop0 (›kýc__+‘äŽ 7ù3óâfákgÒ—ÞÝ4\fŠ"ß	ÍHEVt@›Æ|#så¢ñô) has still dirty pages (nrpages=10)
[  956.492727][ T7057] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.501193][ T7057] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.518426][ T7063] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.526968][ T7063] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.540189][ T7063] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:53 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40087602, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  956.548646][ T7063] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.564837][ T7072] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.573281][ T7072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:53 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040))
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200002)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x5, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "052f942387dad0e51925c7cd5e"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0xc000)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0xa8b9d820ec50894e, r2})

[  956.610672][ T7072] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.619197][ T7072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  956.740160][ T7079] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.748692][ T7079] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:53 executing program 0:
fadvise64(0xffffffffffffffff, 0x401, 0x1fffffffc, 0x5)
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="bbb51c63d0f720bf1d52d3417c960a", 0xf}, {&(0x7f0000000080)="2e3096fa8b8628c4c7f0b806be1198a11fd0e1eb6ae982fda2d65fbe89f456a83e77424d71680be53b72645d98ec81adf0ecd02bf95f465ec8ed26468e613cef469d0de81fcfbdac25a793e3d175fc637aa1cb0ea66ef69ae3f0368e3eba6512a1fc8d42ff8cf6e9b5f25997", 0x6c}, {&(0x7f0000000100)="200acf1a68f91492f39776e74dddcc94e1662c0bff3f4ffe262676d24f648ca165914cc2f0487f256758879385cdd2ddaf21e856322110df6d4f6d0caa17470f14b155d20f60bb1d739c9cfe71abe7d20ec332c82b6e007f5117d1425bd8ba450bf800cf268d10b688a9f68a4027ae661c5370d657a437ef751d399d1830371f580b2e5e70b16b40c7690430594d175a4acc1fa9bc4b1eada25bc323bb41094ac7d965588766bc57a6137b1809a8a38a54d2da7b4608d87855991620abb367737b49e751edbd02ac8095a2e7cb7b6afd6575c674c128", 0xd6}, {&(0x7f0000000200)="4919c9ac4082de188717b4f435299acc88e041ddaaec6dd520c758a1d2c7afb13655ffe9c4a87831d3e341aae7bef56be07067e691749813fe80a6c35c7b780e7729989455611c439fdec2b102031e8267614c0cd28e81343d5c354e4f08ed4a895eb728a954acae943a0e1d007ffc3cf2e30ff4d48ab4df46e0ae371ccf66215f56e1b387c3b9644a3738bfb5ce6d0ad3a378aef69201f2", 0x98}], 0x4)

[  956.785677][ T7079] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.794148][ T7079] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:53 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x8)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r3}, 0x0, 0x18, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x4, {0x5, 0x20, 0x0, 0x1, 0x3ff}, [0x2]}}, @devid})
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:53 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

13:06:53 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101283, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:53 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401070c9, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  956.973443][ T7100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  956.981965][ T7100] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.004069][ T7096] loop_set_status: loop0 (›kýc__+‘äŽ 7ù3óâfákgÒ—ÞÝ4\fŠ"ß	ÍHEVt@›Æ|#så¢ñô) has still dirty pages (nrpages=6)
13:06:53 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
fadvise64(r0, 0x0, 0x0, 0x3)

[  957.014467][ T7100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.024389][ T7100] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:53 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00')
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"a3f452e80a2c8d396ffddcd8440c6e87", 0x0, <r3=>0x0, {0xd3, 0x5}, {0x0, 0x4}, 0x5d, [0x39c0, 0x6, 0x80, 0x0, 0x5, 0x80000001, 0x2, 0x6, 0x7fff, 0x6, 0x8, 0xe00000000000, 0x7fff, 0x7ff, 0xa3b]})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000880)={0x1, 0x6, @start={<r4=>0x0, 0x1, "b83196c9ce823bc23cb1ebd4adb21582664df4740ce26aa41c070abaadb7338aa6d4374712aa01424565c12b16a32296214fea9d7c1aeaf4b828c75e2eb793fff51a8ae5a2973d0ec21322608431484d63ac46bb7fbe9f42814814a6783db53a48687e564126a24a8dd7f43ecfc4a4c7d1e34c7c96c28b288d5ec10f3ab767d8405c01967d482aae66c7c0677c1db28e14ead58bae813393c77c6abc64683548f032f14bb6308d6da47f0be1871bab35f7413832d324a9edd309b269c41e7ce4b5b54d08038432345986dc9700103ead9d1205501159fe07a41d9390b478ef845a1132afb98b920fc1d0810aed26452b7b443b3bea62138e7ab62d57ca2c47715587e010c028ea4ea28c73e1904f2c386280d36918a23e6c670d9a89f56f171808c2227739116c0e398fdad04ab07417cd8818ed619508108be2b6675bd6a64144981622abc92c071db6f1f17076f87c976128830fdbc5f6a38c9b886134dc98f23495a3a7e1ad0d784502bb18fb8ff90208d3e4ba783588f1a6fc6825bb119e707f3947cd403c50cb82b1aa1a6744a0483e39d9db8ab6b1e64b848ef57a6e26b5592a9173a6d6ac234333a348cb9a1462abbb5f457278179bcfd922cddbde783c6a20435fbb94320598957ecb8830ef42f62fd1d7c035987e059fa7bf3b31b3b2c47b16e1bdcd80d6c458a503cf2150a798ba38af2cf18fd0a65b948752e7609aab7a366f581a5cef9a108d89db20e113bc7c09caecf7ad016e08d652041c38840bd7abe6e09ad5181f60c09ccd91dff39e55d38cab297aebcb02a167ee2d1f247dda4d243c20795390e1046b49a93be744461b504939e553dad577749c91b0ae2d2bf7064a9d01a88f60493b76b642e5e7a8a1861286ca158300af724b8635cd3a50e58fbbbb7aedb2d1120b475132ed5a1db662b734f47992e0df61ad6639bad324db71199879c509ac09bf3ec8d2d3fb14aa5012e958f437eaabe1fe06e27ce001fc85e7bc05ee8f0ea9e671a3af5c89e7b606ebe32291c7a8d0353261714c448dad19016f9b5f3e6d1cc471ca469d884f2a97145195fc4180bc0e3817128398e471693d9a960edc88e2af3387dea1d2de4e5a1946ed65a104d4ac06c0d59660c5808efd205034de0509e690b1b94a895be905e4e73ef3abb015398c52ecf0264e0f5f1fbbeb4a6dd5efc7ac1aa9645fb8c4af37cb9b2f80e8ac31b3bbfec3c85507433b97dc72c6bb66c6a0d5f4318196439944b6050e421855b8528fbf05085ee1b3f220c059ef534a60e76353bee628b17b98cc465da41a2ce8b18896cb047dc8808ebe51ab6a845156592afd9ae35633b6360f3c0561920e3e9bd6ba06689fbb8cfd20629df6f302a770f709eb4fc5bc75bb70adabeaf73365f810132f95d1b4f7433cafa44271c23779d3aaaf851d6937d0b355e7e4cd629733987f9f", "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"}, [0x0, 0x1000, 0x3, 0x5, 0x8, 0x0, 0x4, 0x7, 0x7, 0x10000, 0x7fffffff, 0x20, 0x7, 0x0, 0x1, 0x3d, 0x8, 0x0, 0x4800000, 0x752, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x0, 0x5, 0x1, 0x80000001, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x8001, 0x1, 0x3ff, 0x8, 0xf74, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x1, 0x5, 0x7ff, 0x6, 0x2, 0x4, 0x3f6b, 0xfffffffffffffff8]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000012c0)={{r2}, r3, 0x2, @unused=[0x12800000, 0x31dc000000000000, 0x9, 0x80000000000000], @devid=r4})
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0})
r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {0x0, r9}, {r8}, {r8}, {r8, r9}, {}, {}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r8}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r8}, {0x0, r9}, {}, {r7, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r7, r9}, {}, {r7}, {}, {}, {0x0, r9}, {}, {r8}, {r7}, {}, {}, {}, {0x0, r9}, {r8}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7, r9}, {}, {}, {0x0, r9}, {}, {r7}, {0x0, r9}, {}, {r8}, {r7, r9}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {r7}, {r7, r9}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {r8, r9}, {}, {r7}, {r7, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {}, {r8}, {r8}, {}, {0x0, r9}, {r7}, {0x0, r9}, {r8, r9}, {r7}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8, r9}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {r7}, {r7}, {0x0, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {r7, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r8}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r8, r9}, {r7, r9}, {r8}, {r8, r9}, {}, {}, {r7}, {}, {}, {r8}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r7}, {r8}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {r7, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {r7}, {0x0, r9}, {r7}, {r8}, {r7, r9}, {r8, r9}, {}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r8}, {r8}, {r7}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {r7, r9}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000022c0)={r9, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054400)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}], 0x9, "fb763ad15637bb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055400)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055600)={<r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055800)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x80, "093c65a178ae79"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056800)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r10, r11}, {r12, r13}], 0x4, "eebb50b2f19388"})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x100, 0x6, 0x15, 0x0, "8439adb5f223d1d49e6dee67829d685dbe093004f3a248fd073d4b810867ea5347ecc7591bb48c64dc9f3e2932c974fc46a3f51ed382282c00719ffdc9bdab2f", "d26807ab83abe1ee74315f9d24f2285c9f8adbb672ee5acf023c8eb9482f1a92", [0xb70c, 0x10001]})

[  957.109626][ T7103] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.118080][ T7103] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:53 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101286, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  957.154944][ T7103] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.163388][ T7103] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.261884][ T7095] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.270556][ T7095] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.279214][    C1] sd 0:0:1:0: [sg0] tag#6996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  957.292192][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB: opcode=0xe5 (vendor)
[  957.299063][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
13:06:53 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:53 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401070ca, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  957.308644][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[  957.318220][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[20]: ba
[  957.362535][    C1] sd 0:0:1:0: [sg0] tag#6997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  957.372904][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB: opcode=0xe5 (vendor)
[  957.379777][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[  957.386423][ T7095] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.389329][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
13:06:54 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x40000000000ffff, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:54 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x100000, 0x400)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000759000/0xf000)=nil, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}, 0x0)
syz_io_uring_setup(0x75ca, &(0x7f00000000c0), &(0x7f00003b2000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0)
dup3(r4, r1, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
open(&(0x7f0000000000)='./file0\x00', 0x3, 0x47)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r6, r6, 0x0, 0x4)
recvmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000000200)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000340)=""/166, 0xa6}], 0x2, &(0x7f0000000540)=""/85, 0x55}, 0x1}], 0x1, 0x40000000, &(0x7f00000005c0))

[  957.397731][ T7095] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.407265][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[20]: ba
13:06:54 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@unspec, 0xc)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

[  957.494895][ T7121] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.503335][ T7121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.546750][ T7121] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.555212][ T7121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.584522][ T7127] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.592944][ T7127] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.605840][ T7127] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.614296][ T7127] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.628455][ T7121] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.636958][ T7121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.649802][ T7121] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.658236][ T7121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.675512][ T7095] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.684039][ T7095] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:54 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
sendfile(r1, r2, &(0x7f0000000100)=0x100, 0xfffffffffffff000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:54 executing program 5:
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x2)

13:06:54 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101287, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:54 executing program 0:
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x80240, 0x80)
fadvise64(r0, 0x9, 0x0, 0x4)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x20, 0xb, 0x12, 0x10, "12ff0190cd800b1d34e1c2f176829950c8bbcd28c40a92194028dc4b204f06bee2bbbe33ea0a00b0570238ea436397a38be149adc760ef3d6b1aba5ca414f471", "14807915d74ec38e2de46d8a7c5e635d2b569a488b944570c0cc4e69f79f8fe1", [0x7f9, 0x9]})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4)

[  957.748542][ T7095] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.757010][ T7095] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:54 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401070cd, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:54 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ff, 0x8043, 0x0, 0x12, 0x10, 0x11, "fad0fd98c07199b5a334add23b7e4db6f0aec6dd05adb650a1f7abb2f89ddfe9d203505b7699a70258ba2335d1a765218f42565de821010ec73849ed83664e1f", "84b06c8a6dc27496254d79190525222a48d6f1fb095ac4edab522259b5ef384d64874fd5ba93c2115f24c360e5050374c86ddd0600000000000000d61e0be25d", "12d150ac1e87f30d6f3778c86ac7d6130748f2644546d3650e8b56c06a39d800", [0x80000000, 0x1000]})

[  957.864962][ T7153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.873408][ T7153] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.904473][ T7153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.913006][ T7153] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.925148][ T7156] loop_set_status: loop0 (›kýc__+‘äŽ 7ù3óâfákgÒ—ÞÝ4\fŠ"ß	ÍHEVt@›Æ|#så¢ñô) has still dirty pages (nrpages=6)
13:06:54 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
fadvise64(r0, 0x0, 0x0, 0x3)
syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200))
r5 = syz_open_pts(r4, 0x88003)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r1, 0x1000, 0xffd, 0x11, 0x14, 0x0, {0x0, r6}}, 0x4)
fcntl$notify(r1, 0x402, 0x3c)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200))
r7 = syz_open_pts(0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0)
r8 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000380)=<r10=>0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000000c0), 0x1, 0x0, 0x1, {0x0, r11}}, 0x7ff)

[  957.956466][ T7155] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  957.964911][ T7155] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  957.993493][ T7155] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.001993][ T7155] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.051466][ T7153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.059921][ T7153] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.087800][ T7153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.096254][ T7153] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:54 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40101288, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  958.153338][ T7155] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.161818][ T7155] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:54 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc04c1)
fadvise64(r1, 0x1, 0x0, 0x1)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
tee(r0, r2, 0x4c9, 0x8)

13:06:54 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

[  958.212840][ T7155] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.221306][ T7155] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:54 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401870c8, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  958.279277][ T7151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.287836][ T7151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:55 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4e02, 0xa100)
fadvise64(r0, 0x0, 0x0, 0x3)

[  958.345926][ T7151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.354392][ T7151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.400759][ T7175] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.409241][ T7175] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.438444][ T7175] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.446925][ T7175] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.503702][ T7186] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.512247][ T7186] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.533397][ T7186] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.541849][ T7186] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.609420][ T7151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.618049][ T7151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.630746][ T7151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.639252][ T7151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:55 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
statx(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f0000000300))
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:55 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401870cb, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:55 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401070c9, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:55 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040))
fadvise64(r0, 0x0, 0x0, 0x3)

13:06:55 executing program 5:
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  958.737737][ T7199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.746290][ T7199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.772800][ T7199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.781254][ T7199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:55 executing program 5:
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x7, 0x9})
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x490400)
fadvise64(r1, 0x0, 0x0, 0x3)

13:06:55 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r1, 0x0, 0x0)
fcntl$setown(r0, 0x8, r1)
fadvise64(r0, 0x0, 0x0, 0x3)
socketpair(0xb, 0xa, 0x7f000, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
wait4(r1, &(0x7f0000000840), 0x20000000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x48000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x458, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd05f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xeb}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0x23c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbe, 0x3, "fabb2e3efe083698dbfe7b13a57277dc5af6fe076152ce62e98a23f04f659913c4856677a01bcb5dc20b82c8b2284037f9f82f439e9761b962df7f98121248715a2fd0e3d139a9a9d14c5bacdd79b58a210144849f64ed4b3b90b17c3741e33615496ef5a80169d80c1bc56ada61e65102ccb18607898abb3084c8c66b58190eeb9ad91533893f74c8fd0225182655c2a892080442d69390804211c060f665f8bf0c779c36ba2871bfcb467b3df1a3f3f3fa1701aca9747cf4c0"}, @TIPC_NLA_NODE_ID={0x63, 0x3, "fb661a0a60c63a17713c03cafc64fc1e39903b5c1449653b6cb8bbbfcd360fe92eabf7f5d38e2c0bc1ed30bc48a365b5a83aa12b89ec660378bd1e42ac0d6c8ddd37a11dadc628b25dea8f24f50742f65dd95cbe3b08a1632bea93adbbb9de"}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "e5f8979d15c757a3f253481b5389e567ef6ab6562f9c6f8795cc2b8387c4735e39a0ebca0050099823de43c1ad7cff38e25d8a57ffaa7cf33423a6c61cedb1f74dadf13752e94ba0703752588827df8924abc621ccbadd123f052defcee3457c6da77250800fa8d073534a067181b25cf0f4601c23b3289f35e5f78ffefacbb8af037a0e4302d8875209d44184503072b9873a39cec4b1891d632ab51f38921f06276cff28d295773b730d28ea930b02d6485e6ba13edb32cd9baabce3d64905b29efa68d4262d70e2d50df48d9e7abd0e64249c1ede6b62dbb1ca11ec"}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "40c16c56d476627c5a5c16071dd988b3e76d6fb430339d1677ae1fdfc0a630bf4439296d714007e0c241"}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe73}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6826}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2dc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff6ec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x8000080}, 0x24000080)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
writev(r5, &(0x7f0000000900)=[{&(0x7f00000008c0)="bf2b65ebcb32538bc6433b8bbd87d812b2489e06c3110cf5ca98c2225d1ed75225feb25d3edfe29371d7aa8994847399a8d27b52b3b21d7c74f8", 0x3a}], 0x1)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x480c0}, 0x1840)

[  958.810807][ T7200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.819262][ T7200] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.832777][ T7200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.841245][ T7200] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:55 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
splice(r0, &(0x7f0000000040)=0xfff, r1, &(0x7f00000000c0)=0x4, 0x3, 0x8)

13:06:55 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x4001)

[  958.884190][ T7199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.892631][ T7199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.921455][ T7199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:55 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x420240, 0x122)
perf_event_open(&(0x7f0000000180)={0x6, 0x85, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setxattr$incfs_size(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=0x8, 0x8, 0x1)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x400c00)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r3 = signalfd4(r0, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800)
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000200)={0x2, 0x5})

[  958.929909][ T7199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  958.964656][ T7202] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  958.973115][ T7202] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:55 executing program 0:
close(0xffffffffffffffff)
fadvise64(0xffffffffffffffff, 0x1000000000000, 0xfffffffffffffffd, 0x3)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
splice(r0, &(0x7f0000000140)=0x40, 0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x347, 0xc)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040))
preadv2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000000)=""/57, 0x39}], 0x2, 0x3, 0x6, 0x2)

13:06:55 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8)

13:06:55 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401870cc, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  959.045328][ T7202] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.053771][ T7202] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:55 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401070ca, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:55 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4)

[  959.146825][ T7238] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.155281][ T7238] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.169044][ T7238] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.177504][ T7238] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.203158][ T7241] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.211623][ T7241] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.245062][ T7241] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.253520][ T7241] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.298287][ T7248] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.306753][ T7248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:56 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401c5820, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  959.346470][ T7248] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.354927][ T7248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.388182][ T7241] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.396640][ T7241] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.428281][ T7241] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.436768][ T7241] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.472109][ T7258] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.480627][ T7258] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:56 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401070cd, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  959.536199][ T7258] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.544690][ T7258] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:56 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_io_uring_setup(0x54cd, &(0x7f00000002c0)={0x0, 0xbd0c, 0x0, 0x2, 0x4c}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000440)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000024000/0x1000)=nil, 0x1000, 0x300000e, 0x2010, r3, 0x0)
r8 = signalfd(r2, &(0x7f0000000400)={[0x7fffffff]}, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r1)
syz_io_uring_submit(r7, r5, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x4, 0x0, 0x3}, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c400)={0x5, [], 0x4, "181c7e4173f953"})
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd_index}, 0x7fff)
syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r9, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x3, 0x1, 0x7})

[  959.584223][ T7258] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.592651][ T7258] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.621438][ T7258] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.629897][ T7258] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.671975][ T7263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:56 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4020940d, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:56 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
fork()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc)
r2 = socket(0x6, 0x2, 0x800)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r3, 0x0)
setfsgid(r3)
eventfd(0x80000000)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
sendmmsg$unix(r1, &(0x7f00000010c0), 0x2e, 0x4000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  959.680419][ T7263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.701806][ T7263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.710263][ T7263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.748784][ T7263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.757319][ T7263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.784568][ T7263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:56 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401870c8, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  959.793012][ T7263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.807248][ T7267] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.815710][ T7267] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.846993][ T7267] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.855431][ T7267] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.893638][ T7267] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.902089][ T7267] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.943164][ T7267] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.951606][ T7267] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  959.985880][ T7275] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  959.994339][ T7275] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.025189][ T7275] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:56 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.033749][ T7275] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.081214][ T7265] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.089661][ T7265] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.119158][ T7265] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.127603][ T7265] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.157023][ T7281] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.165464][ T7281] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:56 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401870cb, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.197788][ T7281] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.206235][ T7281] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.242279][ T7265] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.250790][ T7265] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.279564][ T7265] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:57 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)=ANY=[@ANYBLOB="07003200ebef0992d35108f4a1f41bfbe665f15d1daa43665cb5e5dfb096aae002383eafca9204bced2525b6c1b4222402fbff63f545"])
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.288019][ T7265] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80081270, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.351504][ T7293] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.359969][ T7293] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.416530][ T7293] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.425030][ T7293] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x82802, 0x42)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xbd8, 0x0, 0xfff8}, 0xffffffffffffffff, 0x2, r0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x541003, 0x0)
sendfile(r1, r1, 0x0, 0x4)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x3, 0x6, @dev}, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="240004002652439f2f061a567be09f528e1f965037f5222c2a84d95fe83c8165fa133518e19185b5def5ac74402a10afa39144794ab25d647595c2455a478512395961ca6fb135b206b75f569375b6d51e36d90069417ad4b2d1f80df64627fc902c4f8d3da5ff83ebe49d3129f054e02cf19658d11503e26bf7e2ab8dd49a2595dc8783b65aaac3b964ba11f59b0b267dc16c5b33f54a87cef760f6628335483909848d14e845791e5486a628b6135df2e5", @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf2509000000050038000100000008000300", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x8, 0x5, 0x9, 0x5c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7, 0x0, 0x3, 0x9}})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000440)={r7, 0x1, 0x6, @remote}, 0x10)

[  960.460228][ T7296] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.468676][ T7296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.500471][ T7296] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.508925][ T7296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401870cc, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.546744][ T7298] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.555195][ T7298] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xc0, 0xfc, 0x6a, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb6, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x9200, 0x5, 0x55, 0x5, 0x8, 0x0, 0x9, 0x0, 0x6, 0x0, 0x80000001}, 0xffffffffffffffff, 0x8, r0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.612679][ T7298] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.621130][ T7298] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4040, 0x90)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.657934][ T7312] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.666380][ T7312] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.700974][ T7312] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.709429][ T7312] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80081272, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.745145][ T7314] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.753578][ T7314] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.785609][ T7314] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.794084][ T7314] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.821814][ T7317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:57 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x401c5820, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.830318][ T7317] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.844860][ T7317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.853302][ T7317] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.882691][ T7322] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.891228][ T7322] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.911151][ T7322] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.919605][ T7322] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$RTC_WIE_OFF(r1, 0x7010)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0x5]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
sendfile(r1, r1, 0x0, 0x4)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x402, 0x102)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r3, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xeb, 0x64, 0x0, 0x0, 0x1, 0x5, "a9944d820b0b38780a793d255ce6eba39e1eac4a0c22461f25234b484060d405824c13f4050df5ef5634a265293b3f1b409e7cd5c50d63d908f6bd9604025de1", "b18271f97b964a436b1f69cb3d1fa6a3116f65c76df9cec1c809c9caf47f2cd7c6369d7eb4d7f3cfb1745f102eaf24bd03690c771a5e95c36399117257276feb", "90394676d2a10a0f37b2d27351b60828aab7686e466805bfaed54706eb4505dd", [0x2, 0x6]})
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d56744099c67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x4]})

[  960.933145][ T7317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  960.941600][ T7317] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  960.974065][ T7317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:57 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80086601, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  960.982514][ T7317] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.001948][ T7327] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.010503][ T7327] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x7, 0x101000)
mmap(&(0x7f000059a000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r0, 0x130ea000)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000000300)=""/98, 0x62}, {&(0x7f00000005c0)=""/66, 0x42}], 0x9, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xffffffffffffffff]})
r3 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
socket$unix(0x1, 0x2, 0x0)
write$binfmt_elf32(r3, 0x0, 0x2f8)
r4 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000540))

[  961.048364][ T7327] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.056829][ T7327] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.094435][ T7333] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.102952][ T7333] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.132252][ T7333] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:57 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4020940d, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  961.140708][ T7333] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:57 executing program 0:
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x4010, 0xffffffffffffffff, 0x25539000)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x67a30000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
fadvise64(r0, 0x0, 0x7c, 0x3)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000500)={0x9, {{0xa, 0x4e23, 0x7f, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x7f, @mcast2, 0xc431}}}, 0x108)
syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x240)
socket$inet6(0xa, 0xa, 0x4)
write$char_usb(r1, &(0x7f0000000340)="63b90823cec24b85a3f4dcc0a08a0ede228c9fbd45229ac620164e409db5207691dd3129aff3e51b6f7f057b00d87e60bd54dad38093a0d099e7d6cc5561c5216da29a61e81e40e2aa87e431eb4c425b16ef2e201e390fb6dc7c09aed2e9bbd2cb8eaa12efd857625fa32849c6c1309edad61a", 0x73)
socketpair(0x21, 0x3, 0x380, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x4c, r5, 0x9eec7f43d0c61617, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x1)

[  961.201560][ T7333] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.210013][ T7333] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.245746][ T7333] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.254187][ T7333] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80087601, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  961.291988][ T7331] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.300462][ T7331] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.333486][ T7347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7347 comm=syz-executor.0
[  961.349694][ T7331] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.358149][ T7331] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.389326][ T7336] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.397774][ T7336] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.426270][ T7336] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.434707][ T7336] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.446131][ T7347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7347 comm=syz-executor.0
[  961.472081][ T7344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:58 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x80800)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x4, 0x9, 0x1, 0x7})
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r2=>0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8001, 0x10000, 0x3ff, 0x6, 0xff, r2})
r3 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180))

[  961.480530][ T7344] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  961.529687][ T7344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.538183][ T7344] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.604844][ T7344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.613381][ T7344] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000380))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x42000, 0x2)
r3 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x6, 0x0, 0x7, 0x9, 0x0, 0x9d, 0x80, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x44000, 0x800, 0x5, 0x3, 0x2, 0x7fffffff, 0x1f, 0x0, 0x3, 0x0, 0xfffffffffffffbff}, 0xffffffffffffffff, 0x9, r0, 0xb)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r5, 0x4c01)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65153b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb0000000000000000d83dc0ee8e817300", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r6, 0x0, 0x2f8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x84d9, &(0x7f0000000240)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r5, r6], 0x7}, 0x4)
ioctl$LOOP_SET_STATUS(r4, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x2]})
dup2(0xffffffffffffffff, r4)

13:06:58 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x100800, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8003, 0x5, 0x8007, 0x206, 0x100000, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000003)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r2, 0x0, 0x0, 0x3)

[  961.670617][ T7344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.679067][ T7344] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.717501][ T7353] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.725976][ T7353] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.757308][ T7353] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:58 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:58 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
creat(&(0x7f0000000040)='./file0\x00', 0x80)

[  961.765758][ T7353] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x801c581f, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  961.812833][ T7378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.821341][ T7378] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.837139][ T7378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.845581][ T7378] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  961.903679][ T7388] loop_set_status: loop0 (›kýc__+‘äŽ 7ù3óâfákgÒ—ÞÝ4\fŠ"ß	ÍHEVt@›Æ|#så¢ñô) has still dirty pages (nrpages=1)
[  961.916693][ T7378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.925150][ T7378] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 0:
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@loopback, 0x4c})
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x3, 0x1, 0x0, [0x7, 0x2f, 0x7f, 0x5]})

[  961.962734][ T7378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  961.971207][ T7378] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/126, 0x7e}], 0x1, 0xd9f, 0x6)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  962.006371][ T7390] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.014824][ T7390] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.041193][ T7390] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:58 executing program 5:
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x3f, @empty, 0x8}, 0x1c)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @dev}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000004740)=[{{&(0x7f00000015c0)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x4}, 0x1c, &(0x7f0000004e40)=[{&(0x7f0000001600)="64a668732a728720c65982479da71b790b2e10c4128931a6ca21f26118dada3a57209fa37e989d1c295d5719752fbd7382fc01b86d0139421887168a3e03998a595e639c51718e12fa415ab044c4fabf", 0x50}, {&(0x7f0000001680)="b6e87ef792e6a505721bd8910ce2b3c059618545c8f0d9574703aa", 0x1b}, {&(0x7f00000016c0)="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", 0xfd}, {&(0x7f00000017c0)="31ba50c84e2a81a24554a520a150379a96fa1ef6c3e930bf2d79407181651405fa499d65f096aba40a7ca680f8a048a8f97a6b32f757dbadd11c6629fe334012aef2b57cd568b57efa5a5bdfd12022a0d00b2f2dac5fd2c3bad326c3365882f38d77db75eb4fca9489392882762be2b3547ba0727448d587ec131cc35e7618af231284f1ed6afb74cefdf1f7b4f69203825ff311c73f0c54ebc2c5bae22ca8a4ee44bb53d46dd04abd801e22e759230606c451c46b2a9a9d6c36cb92577e4abe1483d7b50fa802aedf892c48bdf8f3ccd8450966a6f6ddc1c866d4d99ed5aeab2b3ba08c8eaa09dc625a88afd73f51900c", 0xf1}, {&(0x7f00000018c0)="eb8d4dce74dac8557514249ba89cbc6ab92a09945e95b7614d7bee0991d538e8666b53dffa5fc9d5de14d3349b4f671f300601b8d6b7b7440b0bbe7369969b0ef40290edffbac16a7bb7b420c3af63ea29893e81b243373fbb0b16f4d307543ac29e588fd5415e0553331ec05d2ca23adcc663c2801b457b83f360c0dec5c49192ea54423ff6ca0a91fe07e984e50c8eebc0c9919a85342a014f23fd5c7136defd7bce35a9b117b6d70096aac4941ef7951a5d688d627c6e35a0a6fe3e1e7bfb39a5b970052c78eea8a3e27fbfc0f19ddffb", 0xd2}, {&(0x7f00000019c0)="be888c611540fde592e087c8ff10da41ebe4130ba989d0158b4cf074adb049f697df2cf8ecf793a66415e8a01a90951b2f27dc713fe441745901df4684b8d8d2fa14aaa6deeb60f78b42b04c59090425bac2cf138ef59486baf7b7081000d1ed8bc5605fc0ffa348b6c162315f485a", 0x6f}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="d105775124664142f3eab070b13462bd141a542f21151faac64d6009426b7aa1b2024b79a0fa58e91a6e3b472da19751978d66c60f280dfe3ff6ef32aab838007734794def7cc5943e611b558134aa5acc1b6bb84e3d5d14a975f4879daf0ec5f428c0d9e2fe95cb3117fbfca601dd4bd07f42a3cc4f82e00b9676813cb71c3dea5aab720f4443119fd29d8aec0dad5d3d92e5da8449c9ba0911d5acda99f4285938458f6744016fe6105143b80fe9", 0xaf}, {&(0x7f0000004180)="a42b9503c8bd87fd3cfa9627c759841df73c2338e9660977d0cf6c7314eeb9d4d6cec77509d0bbea853f9cefff7a44f976cdd683a5423abfd119016bd1e3236659ac36ea991095327b551e6755de01301497574ac3e1d2a0d799db82187749611f5cbeed3ae3594365cc45bc420061839b8643b10a8ff6af181fd9968602b48afad92e421acec293e5171414eef2", 0x8e}], 0x9, &(0x7f0000002b80)=[@tclass={{0x14, 0x29, 0x43, 0x40}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x30}}, {{&(0x7f0000002bc0)={0xa, 0x4e21, 0x8001, @private0, 0x3}, 0x1c, &(0x7f0000002d40)=[{&(0x7f0000002c00)="100f8e1e0263b948ceae873766cf766646879a4fe2e33fe90652cacc5c4d5e1d2720332ffbd6003914cb0d0ab7fa47b0aac7dd4d4b00b7b6c521c6b3fd30434e89290612d11b197fe5076d8d19fe6752f9d3747dcd0925fe451a4b573c8344a4ef662f2781d2320fc1850b985f4bb4a0f25b0e4e2bf9dc9750279df8da606f9092132af13898ef70f86c0d97455b7fc6472c126d6ffd7ace9d0f9b432080a1ad0bac1702", 0xa4}, {&(0x7f0000002cc0)="b27b9da8f300613f82e6b70cfbba0c622364534bc2f543dd888de45a4ab6ffd8c6a6171e96fe1e329aecbd553a725ed5ce25eeb16daf2307627cfdf0a44d10b10437b632773668388adaf0", 0x4b}], 0x2, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts={{0x28, 0x29, 0x37, {0x84, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0xcebe}]}}}], 0x40}}, {{&(0x7f0000002b00)={0xa, 0x4e22, 0x949, @mcast1, 0x10001}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000002e00)="95f992af9d1fb736e22f29084c53bab54059dc575e51b97beb53bf1a65da8332c5c9c5d838d3fc29acf0b258e7ff11a06615bbe9fcd6669a59a493d501fd7eb9adb228b34d6da169962acec88333d7e17fe96184ad8650ef614dc50ca5aa3355a22c14c67d1d43d8921b87a94b11a3f25027444568ba0590a2", 0x79}, {&(0x7f00000048c0)="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", 0x174}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="b630eb883bfd898c733097851b240fdb9e58262648e955ccf27de8d735bfbfed31c9dfbcf25d717bba49e4bcb5806660ff56d937705f89bf5bebaf6f221f4b6a07fbcead8c36d5eace49cac4a1e2ed242460be1a960600000000000000d3cdcc373a940f76c4a35a7e0bf5fac2f78ac1b302eb5400f12cfb5e2e1131fb15d68e45158a8ab302eea32f3189e29bbc642ea8dd7adf6b3c1b4be1ad190f1e5a69e88c443d117f2ca6fa2a6055b38ac75dbbada25d7de673eb88e2d2d54947e3f29267cac3abaaf5c6d149bc8ab3", 0xcc}], 0x4, &(0x7f0000005140)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x2e, 0x10, 0x2, 0x81, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}]}}}, @tclass={{0x14, 0x29, 0x43, 0x702}}, @dstopts={{0x48, 0x29, 0x37, {0x0, 0x6, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x46}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4a, 0x5, [0x400, 0x85]}}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x87, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r3}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x22, 0x0, 0x0, 0x7}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}]}}}], 0x1a8}}, {{&(0x7f00000042c0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c, &(0x7f0000004600)=[{&(0x7f0000004300)="2afdd23a4bca88d53a66bafdfd464cd32c5dd7eab14e05d2fa902b4893f478a83ccc9c948015b6dde96e2c92fede4b8512697084242b9aa7f35d079b", 0x3c}, {&(0x7f0000004340)="622688ce3e8fba0b404b23cd31fb1d57046176f06710a4867368d440510a05b5c3369dfc8479f457dd855c98ad1449ef909bf9bbefaebf45750342b2fdf25caf7048fe504dac3e5448a58d1fbf469363977a82543b4a5f20a1704e4f3a06dec0f5670bbc15e94bcccba6f5429111f2bb9c35ddd82db7390897a50431cd4e018a3be2be3b9fd7ee866b53623ee9d46f648229f9fe", 0x94}, {&(0x7f0000004400)="8b8493aad51262341662562013eacda6b770c6d510951b60146ef2ca0c1afe6d8837bc60fa66102f984bc3d7ad491c6a8716190d100a6f86c1e45c18a1e06f6272896c3330a6a51f11c8c7546d1009add21264a29c8feef879a5651adad4b8619774cbcaefa63b595cd070097c5a3bb34dd379", 0x73}, {&(0x7f0000004480)="8daf3599e877d701e8cb0601f6135cabd5a0568631eab049fe9f16a70e0cb7543cb4ffaf42ecb4a5f95de79fb00afe11e6cabebd9464dc51", 0x38}, {&(0x7f00000044c0)="67bd23df6ef0d902395a233930481f336298adb1dcfa2396ab7e79e0d1250169bb463b23c17a", 0x26}, {&(0x7f0000004500)="528c8a20f33fcc05e25a9503adff8c4eb32ddbcfe37453f4e65db95c42f1031bbf26fc5702f540587f7f08440c4cf0dda9e8425d8c45", 0x36}, {&(0x7f0000004540)="a679df7111cfbfd655a68142c500ee3e446afa86e9c91eae4b057c748bd7a08f3f7e111eba092c256fc41d335546929be77411961ed02bff0cd158b5ce52e5d1faea8557fe2c0325d48b049290029e7c6e26d085f8417dc382c71543d1190ecb13ac76cf5ddf585c09a7c1ddc23b6f2c321ba5ec96ec6096bab122cb70a14068b1115af2227383e309d46198047210373a554b48b45c3b7cde8034bbaf3bd10edd9dfcf0314f", 0xa6}], 0x7, &(0x7f0000004f00)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x3c, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x20, 0x7ff, [0x7, 0x1]}}, @pad1, @pad1, @pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffff0000}}], 0x90}}], 0x4, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xad, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000040c0)={0x4, 0x13, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x20, 0x200, [0x8, 0xb7e, 0x0, 0x4, 0x5, 0x3909, 0x8]}}, @pad1, @enc_lim={0x4, 0x1, 0x20}, @enc_lim={0x4, 0x1, 0x6b}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x3, [0xef88, 0x9b75, 0x232, 0xffffffffffffff80, 0xfffffffffffffa15, 0x4, 0x1, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, 0xa8)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000004880)=""/50, 0x32}, {&(0x7f00000002c0)=""/164, 0xa4}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/45, 0x2d}], 0x6, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000780)=""/101, 0x65}], 0x1, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/239, 0xef}, {&(0x7f0000000a80)=""/38, 0x26}, {&(0x7f0000000ac0)=""/91, 0x5b}, {&(0x7f0000000b40)=""/49, 0x31}], 0x4, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/34, 0x22}, {&(0x7f0000000cc0)=""/180, 0xb4}, {&(0x7f0000000d80)=""/195, 0xc3}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001080)=""/95, 0x5f}, {&(0x7f0000001100)=""/144, 0x90}, {&(0x7f00000011c0)=""/132, 0x84}, {&(0x7f0000001280)=""/95, 0x5f}, {&(0x7f0000001300)=""/15, 0xf}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}}], 0x5, 0x0, &(0x7f0000001580)={0x0, 0x989680})
ioctl$LOOP_CLR_FD(r6, 0x4c01)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004ac0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010829bd7000ffdbdf250100000008000100", @ANYRESHEX, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000400003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000004000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000004000008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES64=r7, @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000080000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYRESOCT=r5], 0x218}, 0x1, 0x0, 0x0, 0x24008840}, 0x1)
fadvise64(r4, 0x0, 0x0, 0x3)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0)
r8 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x0)
sendto$inet6(r8, &(0x7f00000001c0)="6f69cbffd7663f4e5d897f00870b7854b0384c225b25774e161ab88e11f6ff40e67134b0e94f1985bdfcc71b15e6df", 0x2f, 0x4008051, 0x0, 0x0)
creat(&(0x7f0000002d80)='./file0\x00', 0x70)

[  962.049654][ T7390] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.064871][ T7394] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.073338][ T7394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.093663][ T7394] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x2080)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r2, 0x0, 0x0, 0x3)

[  962.102186][ T7394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.130425][ T7380] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.135474][ T7411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  962.138896][ T7380] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.167398][ T7380] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.175834][ T7380] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:58 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0045878, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  962.198467][ T7416] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  962.213536][ T7402] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.221975][ T7402] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.236046][ T7402] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.244478][ T7402] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:58 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  962.261115][ T7402] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.269556][ T7402] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.290295][ T7402] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.298747][ T7402] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.311561][ T7380] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.320051][ T7380] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.342912][ T7380] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:59 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xfffffffd, 0x0, 0x1, 0x0, "9b6b050000004591e4ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f500", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)="a3c533fd9d3f44c95fdd028da5e8c7eaff2f0eb478bbb79cf9", 0x19, 0x1)

13:06:59 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x700, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r3 = accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x80800)
splice(r0, &(0x7f0000000080)=0xfffffffffffffe9a, r3, &(0x7f0000000140)=0xff, 0x6, 0xa)

[  962.351354][ T7380] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.374724][ T7417] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.383136][ T7417] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x1, 0x5, 0x5)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xf6)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x26200, 0x35)
clone3(&(0x7f0000000300)={0x50006080, &(0x7f0000000080)=<r2=>0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x25}, &(0x7f0000000140)=""/199, 0xc7, &(0x7f0000000240)=""/120, &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

[  962.410431][ T7417] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.418865][ T7417] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.439554][ T7423] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.447990][ T7423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 0:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
recvfrom(r0, &(0x7f0000000040)=""/251, 0xfb, 0x40000040, &(0x7f0000000140)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x4, 0x3f, "2b7ee65d9567a16e6ec82ffd435c84399654c4a4cc26cac6fc9620ae231eddaea30b6ca5a6a3bdc83100e6307f047f21b7740cb727b277f89da8acd1c7ddc8", 0x2c}, 0x80)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x6da002)
fadvise64(r1, 0x10006, 0x8000, 0x1)

13:06:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
clone3(&(0x7f0000000500)={0x0, &(0x7f0000000240)=<r2=>0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x11}, &(0x7f0000000300)=""/195, 0xc3, &(0x7f0000000400)=""/166, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r2, 0x1, 0x1, 0x9})
fadvise64(r0, 0x0, 0x0, 0x3)

[  962.469413][ T7423] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.477853][ T7423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.492963][ T7423] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.501411][ T7423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8400, 0x108, 0x4}, 0x18)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x3, 0x0, 0x200, 0x4, 0x8, 0x1f}, {0xdee4, 0x8, 0x87c, 0x7, 0x6, 0x100}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

13:06:59 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80081270, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:59 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0045878, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  962.527126][ T7423] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.535567][ T7423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.557372][ T7434] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.565903][ T7434] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.603870][ T7434] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.612296][ T7434] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0xfffffffffffffff8, 0x0, 0x4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
fcntl$dupfd(r0, 0x406, r1)

[  962.647627][ T7435] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.656079][ T7435] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.669566][ T7435] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.678035][ T7435] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x2a, 0x40, 0x7f, 0x0, 0x5, 0x8, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x8040, 0x2, 0x1dac, 0x3, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x1, r2, 0xa)

[  962.699168][ T7458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.707639][ T7458] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.723245][ T7458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.731685][ T7458] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.753619][ T7467] loop_set_status: loop0 (›kýc__+‘äŽ 7ù3óâfákgÒ—ÞÝ4\fŠ"ß	ÍHEVt@›Æ|#så¢ñô) has still dirty pages (nrpages=58)
[  962.774757][ T7460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.783239][ T7460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

[  962.796392][ T7460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.804900][ T7460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.831043][ T7435] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.839513][ T7435] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.852557][ T7435] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.860987][ T7435] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  962.887290][ T7458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:59 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12000, 0x6)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000200)={@id={0x2, 0x0, @b}})

13:06:59 executing program 0:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "41195cf5a1a85de67dc632e3e13f93fd71f998a6e52bf96e4165a7a0c7bababc89da47f4c5d208be26ad15878ad670551083fafe31cf029d1f093ad761dc611f3f7343f86a4e117913d23b92906ef086275375d5f2867969e8ee29ed6804bc43b66df1b4455ef18cd5b96b53e673a3a745bc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d91}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "72e9c441a92d2aa70ae77c656a28b36ebd0f319d16c6abbca366063ba59edcefec"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f9c0cca8bf73d4773efbba7bf1d9de6284a84c485f9a"}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4048008}, 0x810)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x80000001, 0x4d400)
fadvise64(r2, 0x0, 0x0, 0x3)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
close_range(r2, r2, 0x0)

13:06:59 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80081272, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:06:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000001380), &(0x7f0000000000)=ANY=[], 0xca, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x2)

[  962.895732][ T7458] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  962.931559][ T7458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.940033][ T7458] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0101282, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  962.978761][ T7470] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  962.987240][ T7470] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.002624][ T7470] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.011075][ T7470] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.076746][ T7486] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.085172][ T7486] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.101877][ T7486] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.110405][ T7486] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.122929][ T7487] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.131353][ T7487] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.158651][ T7487] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:06:59 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @multicast2}]}, 0x24}}, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x60}}, 0x51)

13:06:59 executing program 5:
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x4}, &(0x7f0000000280)=0x28)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x4, 0x3)

[  963.167069][ T7487] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.179275][ T7502] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.187730][ T7502] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.199843][ T7502] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.208252][ T7502] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:06:59 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0189436, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  963.234713][ T7470] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.243214][ T7470] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.265638][ T7470] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.265706][ T7520] loop0: detected capacity change from 4095 to 0
13:07:00 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=0x9, 0x8, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  963.274082][ T7470] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.303371][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  963.320398][ T7522] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)

13:07:00 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
accept$unix(r0, &(0x7f0000000240), &(0x7f00000003c0)=0x6e)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x36a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x0, 0x20000d9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x10, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
sendfile(r2, r3, &(0x7f0000000100)=0x1000000000, 0x7)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r5 = open(&(0x7f0000000200)='./file0\x00', 0x20800, 0x10)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x2, 0x1, 0xc, 0x20, "09ca25c90762140ec6685cd5824203c5cce7a3ea4d366dc64dd79ae579f7e7ce1ccb63beb2822ee9caf2f4d60270fb45f8dbba5fd5867be138e51d7b3fd61f6a", "59245ce0a06a5279f4ce45f426e793efbce598a08f138234a77a9a21a0308c27", [0x8, 0x7f]})

13:07:00 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80086601, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:00 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = signalfd(r0, &(0x7f0000000100)={[0x1f]}, 0x8)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x300, 0x70bd28, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}}, 0x40)

[  963.328841][ T7522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.348472][ T7522] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.356927][ T7522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.374330][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
13:07:00 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:00 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc020660b, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  963.448244][ T7535] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.456696][ T7535] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.480495][ T7535] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.488939][ T7535] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.522566][ T7535] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.530989][ T7535] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.543180][ T7535] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.551628][ T7535] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80087601, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x42a40)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400082, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080))
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x2b02, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa, 0x5, 0x0, 0x12, 0xe, 0x8, "b7f9fcaf2de6e7cab6a4dcde806427c2d785bde7f2fae328c93fcd70f3b21ee7b126de83cbaf147e66013a3c1eebcb0b210157f690b18d63860b5f1846e8a013", "daf2a529c60d55aeda490bf070e3dc8cf6a1c813ac1f29668d55cb84b812820e8751d6d7674345560ee04f29af9d375e045ad5c6b5359b03f3f9ddd6571ac659", "38756a85d6f44190ae4e3767a81fb7875b0c3c56d933943cdf78975c4e0a485a", [0x3ff, 0x7fffffff]})
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x420481, 0x0)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000240)=0x66)
fcntl$setflags(r0, 0x2, 0x0)

13:07:00 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x2d2, @time={0x20000}})
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:00 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  963.642444][ T7545] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.650892][ T7545] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.686694][ T7545] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.695159][ T7545] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.708995][ T7544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.717477][ T7544] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.729639][ T7544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.738060][ T7544] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x8)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
flock(r0, 0x7)

13:07:00 executing program 0:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8d8, 0x80000001, 0x6, 0x5}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/1, 0x1}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000015c0)=""/121, 0x79}, {&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/84, 0x54}, {&(0x7f0000001740)=""/155, 0x9b}, {&(0x7f0000001800)=""/50, 0x32}, {&(0x7f0000001840)=""/193, 0xc1}, {&(0x7f0000001940)=""/66, 0x42}, {&(0x7f00000019c0)=""/98, 0x62}, {&(0x7f0000001a40)=""/18, 0x12}], 0x9}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/225, 0xe1}], 0x1}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001d00)=""/31, 0x1f}, {&(0x7f0000001d40)=""/158, 0x9e}, {&(0x7f0000001e00)=""/225, 0xe1}, {&(0x7f0000001f00)=""/200, 0xc8}, {&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/140, 0x8c}, {&(0x7f0000002180)=""/192, 0xc0}, {&(0x7f0000002240)=""/146, 0x92}, {&(0x7f0000002300)=""/93, 0x5d}], 0x9, &(0x7f0000002440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x4, 0x2, &(0x7f00000025c0))
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x2c, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'wg1\x00'}}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x9b)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3)
fadvise64(r2, 0x0, 0x0, 0x3)

[  963.821307][ T7545] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.829825][ T7545] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.844095][ T7545] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.852579][ T7545] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  963.876659][ T7561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.885108][ T7561] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.899485][ T7561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.907948][ T7561] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x141000)
fadvise64(r0, 0x7fffffffe, 0x23, 0x0)

13:07:00 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
fadvise64(r0, 0x0, 0x0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0)

13:07:00 executing program 4:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='rdma.max\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x14040, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:00 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xa0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)=""/2, 0x2}], 0x3, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x89)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7)

[  963.921517][ T7587] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.930042][ T7587] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  963.945237][ T7587] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  963.953704][ T7587] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x801c581f, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:00 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000040)="4824e372d5ece7cfa9751a95dff039169b7b98df00f3682390eeabf8ac4fcaa1e4da36c7743e9608554f165a42b1afe180275641aa7fb173ac960c33dda48bb4cbc6ba3a6f0225786f96bec6b2720ab82ffedd985087a602ef77045c13ef73a2199cf1f184601f499559e514d98415f499fe59915209eb56b38931d6b579aa65c1dbd72c76febb6a4d869797e24b57944c86e8d6f057f987ab29e8257b3b", 0x9e}, {&(0x7f0000000100)="b98d4ea74b750ac989b5749fa9fd8bc1b24d1ce9fc7c99ecf20959cb0041a003a5aa7546acf7c455f9c014e27a11a95a72176afd7ab1ae417f286f651bd2c14c794a470ab61803bfe030c8a81a8511e21e1e8480290dc16852201ef14a7e1258a862779fcee63d2211b8c4732ae7cc0a04dc67530682de1c451c5acce1b61b4d0b8d664054cd1946fc45", 0x8a}, {&(0x7f00000001c0)="d0d0e2a993fb88eafcb6884c96a36341237be802c2f551171c8e1a06f37335fa46a2198b88c47893d001350a87745c51896d562ff912d59cfebc788146cb45a1b067764fa4a2da656e7c15b24baef6b895df5c9859a9aa0f257dbd332b82578b388b41d1aadabfbf2e672da9463c7feb7f2d631dee8378d23716ee28f1de7ee20182cb110bb798204749f79a3f354de7210a603c4ead4e1c735bf9634090b9a982788cb9341d044ab84c929aff2f8052ba37e52692807b0e3ae361ac40701a51ec0dd7dd43bd056f2e2285f9ea5311246ab307afbf01", 0xd6}, {&(0x7f00000002c0)="cc868dd909a7dcb85a9015da84dc9b9c68ad6581c106d20c2d2346e4537a4c2d160e79e8337338ca6e31442fd062d814eb0940a27b1918ff333462ea093e46fa310698cbbe98cbf92aa1005b4bf4efd3333e68b4be1aee988fc7fcfe5eb160627a774fa06664956825e9ef0ffa063ec08fab2479f31a10429542ad1619e1706dc4cb2c0c8e5fa5991507b2da0428", 0x8e}, {&(0x7f0000000380)="14c9660827e23f0452fc0b19dce5389dfdeb70f8af8aa3ae2b40b63e0a1fd5278df38404cef1851b1ebc038f18b76adca2dcae19b963dcbb09b9cea1b63a7227e52b3af60a630e435364e6ab1cc0b405d22a31e27ad8e706bdcefc83d87496e60d4ad1bcab110c76c7652beb097a79f8ab3b6d89fc0fb02b6655cca9feb90d7bbe8fe7a40ae87cbcff3a8a2131d45ff2616d79633b187b67a03bb0e1ce2cfa6e9536e84e4f46fa16e77c8b39867bdbd3cc39084a969f2ae25252e66b334c07638327b7bd0916dd51d20477fa1ada2df644", 0xd1}, {&(0x7f0000000480)="e901baa294a3635165333e7fc094a96c481bb0b53176554f4ed457068bf11acecaebe0253fd6a99f", 0x28}, {&(0x7f00000004c0)="f51062d070d083208217caa72b1b44ea9dd7083d9c026d855990dbc084adade66da8855fcc4a39", 0x27}, {&(0x7f0000000500)="24538bdb09db4da8d4becaa67f59fb6ac35fddf486347f8fed8aa4d24f423854626378b0dcb8305a10ae918143ef4f15fe3ea56b4a27e1ae1966b1cdf9054a24ab5175550f8b850efe29509fac93d888d31cc40b50c47092eb71bb711e1a1168b4021bc5721507deff20a04d8c61097534578f6be920f28c619cfab6f64f618d32bb2bf008105c1ad5a6039f3b54d1f42b3a90a9b59d61ccb68c1a6f00533192115423e0c1188df05c315f99c1706d66ad885495b642da5bc5b733faf62fdee878f7de9e92494df8a8c71da51289e2f96046b82862bf61462e6c34e7ca", 0xdd}], 0x8, 0x81, 0x7)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
fadvise64(r0, 0x5, 0x1, 0x2)

[  964.016490][ T7587] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.024967][ T7587] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.053100][ T7587] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:00 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x10, 0x3d, "af809b5c66ebf38704aa5d2b838208eb3346961534fdcf1c8349bfe909c96ad7e01e3a757ce52549e2b05def042c81c9054292fb9bd4c9e7ecf8e105313a7b76", "251f76dc8572f3074da673c803875af00ba18aef7ac1c45d9f1062693aaff093", [0x0, 0x6]})
fadvise64(r0, 0x0, 0x1, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50fee29bdb9ede090cc0c51bea991d342099e04456d42b29ce962b9f54859f3d5ecbc28ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x1c, 0x8392fa4a09fe2830, "914efe00cb3b7d2b73343b69095c8336b125f52c2f6b41554eda709030323a5826262cb1c3aa65a52999947c07029b0c690e6f1c74780ab322c2bde6471eb690", "c3ac4f6b8cbbf54ecbaf267830448f8baff655249ead6310e3bade0d7f31d6c6", [0xfffffffffffffffa, 0xffff]})

13:07:00 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  964.061633][ T7587] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.093653][ T7593] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.102166][ T7593] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)

[  964.121355][ T7593] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.129823][ T7593] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.145735][ T7597] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.154181][ T7597] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x24047)
fadvise64(r0, 0x0, 0xfffffffffffffffd, 0x3)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))

[  964.166614][ T7597] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.175052][ T7597] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.187844][ T7605] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.196302][ T7605] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.211186][ T7605] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x10d000)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
dup(r1)

[  964.219622][ T7605] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.253728][ T7617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:00 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x11e)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xef, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000100))

13:07:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
io_submit(0x0, 0x6, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f00000000c0)="f58be94f022b2c51266626312b27a8fc7b87b4e470ed71a4", 0x18, 0x5, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000140)="06231e0c3c0bd42598ea76b2d8a1461b557d6afda12c00fa69d001fa862e83c59f1b781f35ae2a179e12c7b4cfd1798e4ba428785a0ba52049c9bbf9ccbf4a7e72dafd17f37972b2a8f18410cba5450c43cea240ca7e587bd87c3dfc2ed49888fbaa348689ca382147b44042cb923d5188", 0x71, 0x1, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000200)="0fd68c4cdedbe972a0222b65ffdb06f1ccc76ba8fc367b8d2d065681b7", 0x1d, 0x7ff, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000280)="83b5a4fc36c2723aeded6797015c09126c01e561ff8e3fdbd55d7dfa8d0151e81f43e782ad9beb37e5a4705ceb4db14e964cec3c40803405c3a05f7bc650b8e3c11295dea0a3be9bd8073c82f2d1fa29960c55912b0bb7acaf02e709ea3b3b86ed25fc9224ea9e560f657b2ea05c85ecc49881a1ad2e85fb1a6d326ecfb613ccf627d88a546693dbdf7637db887435ab06c2b82d04653e25888585657464a70408d4844c0ef4b94079d1b16b67a859da8384b297c62e922250a1c03db6591a73521a88a0d5acd308017cba01e7f1ee47388bf56e86543ac9d4173793f75b955cc62adce88e5433efffb10f2d2541801c1b0ef18fe243744b1a13c49c2adc", 0xfe, 0x8}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000003c0)="385d4652dceac6e695682a0f6d181254160657346705775915db36c2c3649baa3c8c8ced1c0d6424d3b49f3527e185d68320c62012f1cc031772b03f193c12f0498b974d39a0", 0x46, 0x2, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000480)="e915e13b7d2c86db56c3fc48715dbe079b5fdf6110aba4491a66b188a7ac8ed001b119353b1517e9f3d8e6df22f9873846f5f745c4789badc19114117688e6cfde36f145b82464893b06c1bd80e1d54111b4c8e73b59f060517511426fbd9af10f64ecea322f9e473313dd5e26b3fb9c03fbdd172114b4ec1a66759a9ab9715ff9d681f10fc899020b4170a50e38fc58c6e623d0462757c7f0", 0x99, 0xffffffffffffb6a1, 0x0, 0x1, r3}])
fadvise64(r0, 0x0, 0x0, 0x3)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x4)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0x0, 0x1, 0xfffffffd, 0x80000000, 0x7})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)={0x2, 'wg0\x00', {0x800}, 0x5})

[  964.262190][ T7617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.285097][ T7617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.293813][ T7617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0045878, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:01 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fc02000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x80082102, &(0x7f0000000200)={r3})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r3, 0x1, r4, 0x1})
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
finit_module(r5, &(0x7f0000000240)='{\x00', 0x2)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  964.333678][ T7617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.342168][ T7617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x13, 0x1, "9b6bfd635f5fbc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f500", "69f1c0f9117ad4d800", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$LOOP_SET_FD(r1, 0x4c00, r3)
read(0xffffffffffffffff, &(0x7f0000000040)=""/34, 0x22)

[  964.403876][ T7617] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.412308][ T7617] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x1000000, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  964.474217][ T7636] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.482666][ T7636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.533919][ T7636] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.542363][ T7636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.582800][ T7646] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.591279][ T7646] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.619911][ T7646] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.628349][ T7646] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.665857][ T7656] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:01 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x12, 0x6, 0x19, "068ec0af8d60708168ffcd516465cc2154313d12dccdb5b6b162a8e9e7b925859db66a566866ce459ddeda4a6768ec138f9fbcc4380e52471263c864d8b3b6f9", "1c2baa22b7bb45dd9e22428bf61983ab2f1f36e93b8165f5e793d5343974ca5a4d6572b49a9e8b02338d2d75739ce2e50fb9fbf8cdac8972b3715fcf5416d0b7", "608412c6a644c3e5b86a7ef6e1b41af9477d4c8ac465306b2dd7d73cf7421c95", [0x0, 0x100000000]})

13:07:01 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0045878, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:01 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x9, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  964.674311][ T7656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.693273][ T7656] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.701730][ T7656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.755621][ T7656] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.764249][ T7656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.776680][ T7656] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.785100][ T7656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.824223][ T7671] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.832675][ T7671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  964.844529][ T7671] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.852930][ T7671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x2d2, @time={0x20000}})
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:01 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0xfdfdffff, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  964.874036][ T7672] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.882470][ T7672] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0101282, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  964.915407][ T7672] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.923829][ T7672] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x2d2, @time={0x20000}})
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:01 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xffffffff, 0x0, 0xd, 0x0, "5dcbeeecd716ad6bdd555268bec1ac3d8dce8de7cbab8de47135e2f7e4cfb452d49d577eb2f25c205d3a030b2281789a3f42a5cc77d682ec10c382f55290a684", "bde3c3beb642a75eaf8591efcb68558465c9965513f6f5afe070a425d428fcea", [0x4, 0xfffffffffffffff7]})
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
fadvise64(r0, 0x0, 0x0, 0x3)

[  964.959690][ T7672] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  964.968206][ T7672] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x2d2, @time={0x20000}})
fadvise64(r0, 0x0, 0x0, 0x3)

[  965.012337][ T7672] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.020792][ T7672] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.058342][ T7683] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.066849][ T7683] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.079581][ T7683] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.083408][ T7695] loop0: detected capacity change from 0 to 4096
[  965.088026][ T7683] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.106228][    C1] print_req_error: 11 callbacks suppressed
[  965.106250][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.122926][    C1] buffer_io_error: 6 callbacks suppressed
[  965.122951][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.136871][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.147757][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.155572][ T1040]  loop0: unable to read partition table
[  965.162964][ T7688] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.171441][ T7688] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.210382][ T7688] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.218815][ T7688] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.237200][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.248071][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.256276][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.267127][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.273663][ T7647] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.274946][ T1040]  loop0: unable to read partition table
[  965.283312][ T7647] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.309151][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.316902][ T7647] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.320028][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.328424][ T7647] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.351033][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.361950][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.377520][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.388404][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
13:07:02 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
mmap(&(0x7f00006b4000/0x1000)=nil, 0x1000, 0x3000002, 0x810, r2, 0xd5cc5000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x8b, 0x8, 0x1, 0x0, 0x3, 0x2, 0x3e, 0x3, 0x29, 0x38, 0x329, 0x0, 0x4, 0x20, 0x2, 0x3f, 0x5, 0x72a3}, [{0x60000000, 0x2000000, 0x1, 0x8, 0x1, 0x7, 0x7ff, 0x81}, {0x70000000, 0xfffffff8, 0x4, 0x80, 0x2, 0x7ff, 0x6, 0x309}], "6ed57618fa6246052b15a69d3782e871fe97c5eb1b97e72ae37bd9261e7e7b4231f3c60c376f90960764abdb72fdc6877cbc773aaab9ad527fcb230fa1b3c7b9062427527906ead009487d9ce20079c33290f323a1c7974dd737463fec84372afe05dfadf75e96a72a59a5bb1f60468998026beea691161df23b5d66d8fea438ac02f56abb59f577d4b86ba300198a028541a53f230bd20460399df137c8f07d13cb5143a4f21794f17afefe84a079571f214abbb22ac48601", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x831)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
mmap(&(0x7f0000107000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r4, 0xe21fa000)

13:07:02 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
openat(r1, &(0x7f0000000100)='./file0\x00', 0x2000, 0x6)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:02 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:02 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0xfffffdfd, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:02 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0189436, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:02 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:02 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  965.554694][ T7714] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.563221][ T7714] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.591020][ T7714] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.599454][ T7714] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.626756][ T7715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.633184][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.635197][ T7715] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.646036][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.665747][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  965.667517][ T7715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.676618][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  965.681338][ T1040]  loop0: unable to read partition table
[  965.685112][ T7715] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.713384][ T7722] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=1)
[  965.728244][ T7717] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.736681][ T7717] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:02 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc020660b, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  965.757265][ T7717] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.765707][ T7717] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.779400][ T7715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.787863][ T7715] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:02 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  965.799564][ T7724] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=512)
[  965.815746][ T7715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.824185][ T7715] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.830171][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  965.849629][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
13:07:02 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:02 executing program 3:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x422282, 0x1b6)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x90000, 0x8)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB="0007000000000400eb0000000000090000000700000000008f24000000000000060000000000000001000000010000000700000002d800000900000006000000000000009a88d1a56e000000000300000000e5118bf15049a0de000000d3000000000000001000000000000000004000000000000000000000000000002e21f0275c60883cfcfcb893d917b11ae126f6cb172b87a2171227f598d2a5479a2e055f74b4b1aa465dbf8a131a11be606d75de25dbab3c86a038ac079cc3b5203ea8d589f9bfe4b82cd499fdc661c5570dc259b76c47c7179f8af1a828cd7aa2ffc7b08f7815d007150deb4c229327"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
sendfile(r4, r0, &(0x7f0000000240)=0x7, 0x3)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
mmap(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xddb15000)
ioctl$LOOP_SET_STATUS(r5, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  965.873380][ T7726] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=1)
[  965.890151][ T7718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.898627][ T7718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.946510][ T7718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  965.954977][ T7718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  965.966310][ T7743] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=511)
[  965.980138][ T7739] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:02 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  965.988575][ T7739] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.005530][ T1040]  loop0: unable to read partition table
[  966.015269][ T7739] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.023709][ T7739] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.053896][ T7718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.062314][ T7718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.074590][ T7718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.082997][ T7718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.095416][ T7748] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.103843][ T7748] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.119283][ T7748] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.127698][ T7748] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.139479][ T7747] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=512)
[  966.171930][ T7739] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.180343][ T7739] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.192563][ T7739] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.201081][ T7739] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.213335][ T7752] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=512)
13:07:02 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
write$evdev(r2, &(0x7f0000000100)=[{{r3, r4/1000+60000}, 0x17, 0x144, 0xffff}, {{}, 0x12, 0x1000, 0x1}], 0x30)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369f3d550106c34f3f7ffe27b18669bb682b479d800"})

13:07:02 executing program 5:
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:02 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:02 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x1000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:02 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  966.244818][ T7746] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.253262][ T7746] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.274873][ T7746] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.283320][ T7746] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  966.329370][ T7770] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.337913][ T7770] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.350920][ T7770] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.359364][ T7770] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.383646][ T1040]  loop0: unable to read partition table
[  966.390982][ T7746] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.399458][ T7746] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.425686][ T7746] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:03 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cgroup_ro(r2, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r4, 0x3, 0x6, @dev}, 0x10)
r5 = socket(0x11, 0x800000003, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r7, 0x3, 0x6, @link_local}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25130000004400018008000300000000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e7230000000000000000000000000000800030001000000780001800800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES64=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200776730000000000000000000000000001400020076657468315f766c616e00000000000014000200677265300000000000000000000000004400018014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776730000000000000000000000000005400018008000100", @ANYRESOCT=r0, @ANYBLOB="1400020073697430000000000000000000000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100c6fdb695e194fce2aec9c680d9ca92ab22cba6424242bd4ff5127d8e1aa4391f218bbe98c901034fd1c40874fb2434ff640ecbc047fcf98c33c3d8e886bf6416ce3bd40a2203ae2e55c787fcdaad4b674dfe462e1d00921b322d64952d51dddd7cdfb065551b6e8a76d919579b94f9a039db855543eaf59cbc7ebf8f363bb41e1d94e613127f273baf0f17f2e153282fadfed3", @ANYRES32=r4, @ANYBLOB="1c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="44000180080003000100000008000300030000001400020076657468305f746f5f626f6e64000000140002006970766c616e310000000000000000000800030000000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r8 = syz_io_uring_complete(0x0)
ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0)
r9 = syz_open_dev$rtc(&(0x7f0000000100), 0xfffffffffffff154, 0x40)
ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000140))

[  966.434130][ T7746] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.451271][ T1040]  loop0: unable to read partition table
13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  966.482410][ T7764] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.490914][ T7764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.523572][ T1040]  loop0: unable to read partition table
13:07:03 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
socketpair(0x26, 0x2, 0x4, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, 0x0, 0x305, 0x0, 0x1, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x4004000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4)
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x28}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb7e1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf54f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x14ab}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x8000)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  966.576648][ T7764] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.585197][ T7764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:03 executing program 5:
sched_rr_get_interval(0x0, &(0x7f0000000040))
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  966.626127][ T7762] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.634652][ T7762] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.651571][ T1040]  loop0: unable to read partition table
[  966.659073][ T7762] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.667521][ T7762] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.730630][ T7762] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.731270][ T7796] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  966.739152][ T7762] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0xd2375000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c65302025372b20242d2b2c2b210a0f4496061d314045ef80ae9e2d52938a3f207ea312845a32119cb737deaa801c4ed473b552ccb08199daf9b55a36649a0e57bf4f265521b0e0d0a1e88bbc881d2371fdbc771f9549845f23bad7487eeb29a45261ff83f26ace709df5e12035cb894b000099eb112fc3afd0b0a6fc6031f2982eec8ea56c2e06b891b29cd67a"], 0x95)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3, 0x1f, 0x6, 0x2, 0x0, 0xfffffffffffffff7, 0x42000, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2, 0x8, 0x7f, 0xd, 0x5100000, 0x20, 0x3, 0x0, 0x200, 0x0, 0x6}, 0x0, 0x9, r2, 0x9)

13:07:03 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:03 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0xfdfdffff, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:03 executing program 5:
sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="f46ef4d1f4d9ef3827304b9f042cd9575d0a18eea7101303b14d8fac3fab39ff9d509fa7fcfc82ea80644cb03c54d473959cd7f21e47c42afe87f0196fbcd9089221ac972da34a25dc1a58092bab6648d1ff64515aca7056afe5de67f6a0b90c3d5051ace542a5b14c4849b6ed992b072d1647a383fd3e52e44f4806a4fb347db5e144a703387c0f80cadcf4fe34bd71", 0x90, 0xc014, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040))
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x323541, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xfe64)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000200)={0x0, 0x9})
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000001200))
fadvise64(r1, 0x1000000000000000, 0x0, 0x2)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000180)=0x1)

[  966.776323][ T7762] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.784824][ T7762] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.810557][ T7794] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.818998][ T7794] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 5:
clock_gettime(0x0, &(0x7f0000001500)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000100)=""/132, 0x84}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/153, 0x99}], 0x5, &(0x7f00000013c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x1, 0x40000120, &(0x7f0000001540)={r0, r1+10000000})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001580)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x4, 0x6, 0x500, 0xffff})
r3 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0xc9640)
fadvise64(r3, 0x0, 0x0, 0x3)

[  966.854289][ T7794] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.862791][ T7794] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x200004, 0x1, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0)

13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  966.910108][ T7811] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.918614][ T7811] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.931922][ T7811] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.940438][ T7811] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  966.960453][ T1040]  loop0: unable to read partition table
[  966.969678][ T7831] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  966.988785][ T7814] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  966.997310][ T7814] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
syz_io_uring_setup(0x4cf7, &(0x7f0000000100)={0x0, 0x71ce, 0x4, 0x1, 0x399}, &(0x7f00005cb000/0x4000)=nil, &(0x7f0000054000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x1}, 0xa4d)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  967.009603][ T7814] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.018037][ T7814] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.033267][ T7837] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=2)
[  967.033960][ T7810] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.054708][ T7810] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 4:
r0 = syz_mount_image$nfs4(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x14e, 0x3, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="4bdf4788dfe89c010e2beda08a324b9a464ed8662d0688bcdffe9974b708697a4241c21c88e692ea76a43795cce40dc398882334632192b89d", 0x39, 0xffffffffffffffe1}, {&(0x7f0000000b80)="e7131c05bb14aeb17eaf6dfbafe30cc798530fffc41802c5e5f08fb23d79bd9841d6dee7f65e4c98aac1c17eb32e3651b0dc9789885bfa77dfa6847619830135c13b75dab851deac5060b25ada922ca5d1f38eeeab3e7d1a856a32dd5418", 0x5e, 0x8}, {&(0x7f0000000c00)="ebb0121f1c165a3f7437c8c5605cf9f82b66adf2412a084c818870b9846b390ca9c86104d852d1debbad0be5da39c1f6e640b3cd666afda2b3026eab9d6ff894ac2344271cc87eccb106e05f6eed344f4db13d23f82ebd1a930321be5e70426928e15f359991caec9cb2ec5107b360a6ba3c259621f6a470f6dbb4b92c8025273db3b7582cbe91ee5ea8dcdbe8404f32530e26c41f6297421dae84aef067af4a82bab5c8142c4ad4ed3c45c9879bfcc426dc7f0a96445c4e68ec3453cd56cc", 0xbf, 0x5}], 0x2f0014, &(0x7f0000000ec0)=ANY=[@ANYBLOB="262c200100000000000000000000000000022c265e255d2a407d7b2c2c2b2b2c7b2c002cd8262f2c657569643d", @ANYRESDEC=0xee01, @ANYBLOB=',hash,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c657569643d4e2ab0affff43370484b1e81bb8b2e12090473e0fefd8bb61dfc238f2b456d2fdd69d61f15684d39ab4b5c48289167844abef2f8d1ce0111e8b75c467572e9e76a7a37d940f53e0bfe11756c756a15d8245f700acb069d3a7e96a4a191df104ec04efeb80172fe9a5f21586474b7bdc4f7b899c7a8ea7b9d9136bfd4b462c4b5721ef64a610567b2ac16c7030d16bad7b19001a29a3b5f16bb0cf72f", @ANYRESDEC, @ANYBLOB="2c66736e616d653d200100000000000000000000000000022c00"])
openat(r0, &(0x7f0000000000)='\x00', 0x402802, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0xbc2e5000)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r3 = dup2(r1, r0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r4, 0x0, 0x2f8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000e00)={0x1})
sendfile(r2, r2, 0x0, 0x4)
sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="7ae0cd416bdfd7c4025aae5eddce4d4045af935cb66138f72d3ab3ca55f060ac439bab393de65cb46f58b528061d4ee8a9a0a9d4098a28f99be98579db3bf5430bc9ca3796d3d5a7ef98c249356b10912af1a1e0229a2c4ef46aebffb8bff7870aef0ff4c63288e1d7cc52ce20f9f8fe44d1de23bf26ed19da18d8e275b330c603e7526441b892bbd9af3419cbe037f5a65d5e94358425cf", 0x98}, {&(0x7f0000000300)="d6206ae8d90c521ceb46cdcdb6ac43b19ee87403bc02e0e3f55bbca4e951ef5a2903083ce49ff01d9e84e90b24cda46d4d80bc1465f0b47796b079dee0437a2b651a6e5d6db336d1540abb0678a1d4213d541c5c467b8e66bda1dd9e4cf17cb4cc00adc2b3e251190a247617a45c89dbb59976d9ea12a9c1e49fd749e0d5ceed57ce76080738ebe9716695c42d2d42bcb45bf2928465154e86a26e448f5c0bbba429c90bd168c326e2a6145f01ddccb09946bd7e2c71be2146d1ed9495a8de8cf11b0c5f9b3453b8078ea064fb3899e3b0913ebc8202d059cc17a590f17eac", 0xdf}, {&(0x7f0000000400)="83a148f3e55f3d619c7812ee72e6c3d9c4658171cf3572c8b58ad66bf7c3afa8f2a4a0ae81acf726707513da48d7eb0630b4a2fe09d0ee70c7bc37f9c3f3a68c3939bcb163d3b837be1fa0ce144556c2f6eee84d4c41317a63f7bb8cbbc1694950fa6e270d1cdb29da4895063626089d766ad606cde53902cab281e614320d2266c9ef0c17f9a44993b9a4f1b2d567b3cd67c1bff01f69abe3bfdf00c5ba9f3c337d0b0842840dccf9a7750d38c68df4f14786ec4fe43d301a08642c21d3773a8bfbb397f51cc25007a240899238e0b24ce344927a33876bbc40e863ee8660fc4d55f90d3fff8d26a9b297f056", 0xed}, {&(0x7f0000000500)="694da44ac8b06e68c7979235ec6338a1f1ea001eae0996b37459004a33d47e2e3c6c4be99db969c7899614fb73ebc1ffcf08704b3c06cb459e5c796e2e41f91bb883ce924f61cf9253bf697dc6488fabfeb7be910dfe9621f9a894044b9213a085387e8e908793de25d8f9b8a7f7ba0af2bdf2d09fb083ea0d1ed06bc1d48d4a8045a0cb86a1515f4ea9b052e50c47738550772922b92b06cf805fc598b21b812523cccff00d5561ed7c0a934cdcd870efb207b2dd8fa353b7088c846d133b5b", 0xc0}, {&(0x7f00000005c0)="bf7fd93487abdaebf0399de0fc525efabdbea4eef93793a9394d5e289497d17642fdb2bda0ef5393bd3d5e398e7500c695ab8458fd82619c713fa320d7d63767a2ce239f646f898765dead0be1c870858f343a16032df4c4d4f2a0be2b34764f166d34ac05f703b50c05d8fe48", 0x6d}, {&(0x7f0000000640)="0f107f607d268b74e0ac0d317e7efc792e6c82d7b9da330558fb205c057a53b8224a56f06ff74ef7036177dace6881ba8febda153cb1eb27407c5c7f9742ce2b63eecde92f5737c66b9e6bd07f6f742ec10512793874e48ac82e707c7fee21f322787ec8c2d46284f92ad1137728274e80f91129f3c3077a23b83f3f54bbe2d530a3a84414808d4b1fd9a39ecf5fd8ff53f30e09074a72954845d75c8b55bec07bdb5b020ecf41e02117423a57662964c8a2f7a6b8abb879be6c5a818f5e87de8d3ca2fb515993454693a51206f637c0b7b51530", 0xd4}, {&(0x7f0000000740)="61612cdedf5355e13faa26dbf0990ce597bf2b6ba2fc284f5dd474716b310c9120e5a86adb4927e70d45323085b3a7388c4844e68b4a2c7da04f4397eb1cbd0fee62660d097ed47709b82ef9a8816b71245b9565e0c6521e9e81d3b8bfb7078984e4", 0x62}, {&(0x7f0000000140)="ccb8699f6898818d8a95b2355a15fb8bbb038eb7c91d5795", 0x18}, {&(0x7f00000007c0)="333a56606aa087dfbf6ac8d1581795ee52b809288c3403bdb3428447101b823ee04b42b97d112fe6b95c7f9032229b580bc6b5cbdfc48c397065b8368769ec7946f31694ad908c52a89f0477f917251add561cd321ddd0f58a471c2dba50b87f93c62d5eb6bfa7de538781", 0x6b}], 0x9, &(0x7f0000000900)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x98, 0x29, 0x39, {0x29, 0x10, 0x2, 0x1, 0x0, [@remote, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}, @empty, @remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x704e}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5c, 0x8, 0x0, 0x4, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}], 0x160}}], 0x1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000001000)=ANY=[@ANYBLOB="d83465e4c5e3e00e177e1c640de74c2b0fc4b18b31665c38d7e1a683ea14847781e01762c8122eda66bd68c625f3bf6e369c071a5d8636450615e7e819675f954a99b14aba58f8cb50d3436c4c6428a9939d97985fb4292fe9b0d5814a174286058f66633cddbd1eddba8563cfae8ef0af92dafa4326d63322c10400000000000000f010c1663ff4c45112dc16a5746bd4f8b9dcaca7080efce7a13a24310f502565067e0116e5247c3777854e966373aa0a3890fd5c09d84f4f115144fbf3a87f5a4a"])
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
pipe(&(0x7f0000000100))

13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:03 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0xfffffdfd, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  967.083712][ T7810] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.092144][ T7810] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x113440, 0x0)
openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/210, 0xd2}], 0x4, 0x2, 0xffffff80)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:03 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x1000000, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:03 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
fadvise64(r0, 0x0, 0x0, 0x3)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
writev(r4, &(0x7f0000001380)=[{&(0x7f0000000100)="e52ed5b7a323bb7696214720de67a3b01c1084a3376828c02fbb0fe1bc3843145bfa37cd4485ece420e7704e63d31dc1f8003b0e8b65d03446067d9526c4e972ecc20c7c1feaaf0c56383bf4ecdbe37c55228b1554ba42e7fa7162b5b161ce87f6e4102b52736a30e9b4e09f9e0e4966e8c9d8c31fefa89046e37df09e6309", 0x7f}, {&(0x7f0000000180)="f917b4ea68602f088dce6124d30b6d1a2fb711e982c5becc2e0796f6bd1a46b6a070e7072cb4a9be69b25eb2ec95bf8b69b8da7e097e32c439fb2902da117ddf545034367a2300ba98355f6452f7c574c2a6798ebe0a7cb7b62042910bad74819b6bbef102104dda0735d91545dee6be326ce99a6b", 0x75}, {&(0x7f0000000200)="acc6bf38c600108b8e09c290c130116ed7ed942777dbef6510bdcdb9c1b401fdcd686beeedb0a0edcf1cfe9ef8026ca5c7a1bc374eaf3c6a94c5ad5a53c33b9c8c7db92423f2fb769e1d6b6c2122c960c6f68658e8bdb6bf994b1a440c96e18f8f12695d97e1e2552e2bc947396c5ffbcd0fcf1bf7ac730de61df04187eecb89bbd28edaedf969e83126b8f5fcd5c1b6f465e8e36f87860667960e68b65d98c6b19d499204367a00b749de31f632a0fcc56f7e81ebe18a17bf3df0442d03b726dbeaa615e2510efe01", 0xc9}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="deef1bcf24701b61041d646c99ba034b966496578bc0bfe2ffd269f5032d2df40541f3405bf3089c77b335978c0500267be06f394d4d264d6af12b4ff38011ddad42a4eb3fe8", 0x46}], 0x5)
splice(r3, &(0x7f0000000040)=0xacc, r0, &(0x7f0000000080)=0xa7, 0xffff, 0x1)

[  967.197089][ T7839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.204774][ T1040]  loop0: unable to read partition table
[  967.205548][ T7839] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  967.256305][ T7839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.264768][ T7839] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.287827][ T1040]  loop0: unable to read partition table
[  967.288045][ T7848] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:04 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00000e5000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r0, 0xd510e000)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r2}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000200)={0x1, 0x8, 0x4857, 0xfffffffffffff9df, {0x32, 0x1000, 0xffffffffffffe39b, 0x2, 0x100000000}, [0x401, 0x1c5b, 0x3f, 0x10b, 0x3, 0xf1, 0x4, 0x7]}}, @subvolid=0x10001})
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  967.301925][ T7848] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.343922][ T7848] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:04 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:04 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
mmap(&(0x7f000041b000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0xca9b3000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xd, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b02df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adc800000000000000117ad4d8"})

[  967.352455][ T7848] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.361615][ T1040]  loop0: unable to read partition table
[  967.386387][ T7863] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.394866][ T7863] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.417437][ T7863] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.425915][ T7863] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x100000000000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:04 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  967.462888][ T7877] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.471429][ T7877] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.489612][ T7877] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.498043][ T7877] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0xfdfdffff, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  967.510205][ T7870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.518735][ T7870] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.530851][ T7870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.539324][ T7870] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.587549][ T7882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.596008][ T7882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.613584][ T1040]  loop0: unable to read partition table
[  967.626886][ T7882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:04 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:04 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4800)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  967.635327][ T7882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.669731][ T1040]  loop0: unable to read partition table
13:07:04 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000004c0)={0x2, 0x1, 0xfffffffffffffeff})
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f0000000400)=""/31, 0x1f}], 0x5, 0x0, 0x73)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:04 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x81)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x7990a000)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000000100)=""/62, 0x3e}], 0x2, 0x0, 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  967.685841][ T7886] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.694274][ T7886] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.718264][ T7886] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.726734][ T7886] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:04 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x2, 0x6, 0x3)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x8000000)
r2 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
setresuid(0xee01, 0xee00, 0x0)
r5 = accept$packet(0xffffffffffffffff, &(0x7f00000080c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008100)=0x14)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r6, 0x4c01)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008240)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007d80)=[{&(0x7f00000003c0)={0xc4, 0x22, 0x4, 0x70bd25, 0x25dfdbff, "", [@generic="5e57c34c86d674bf67fd95c36f44f62589deee14cff0a4bbfdd2fcbf", @generic="0a71378cf8163ec3916f92cca8ca37ae9c33b741c577e153053e7318eb4234744d2301d85612224826cc628c0858121983cbaf6895385e4eda79f260b9098f59447be9a58889a7b719d6e39f336211ee47babe53e629638a4f1f38c49aa9f865faad7bce94dd68279d61db76292244c8876cd52121599f2df569dba37383a7c811a2d5941e7492a724220566ed3f571a817e1fbaede7"]}, 0xc4}, {&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x580}, {&(0x7f0000000300)={0x14, 0x1b, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x4, 0x1d}]}, 0x14}, {&(0x7f0000000bc0)={0x222c, 0x20, 0x10, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x1102, 0x2e, 0x0, 0x1, [@generic="373bcbca374d3c7d935e82d49f6db69ecce739021757ff289186dfd2dc7bd58529c8ddca9e4b30890a673ff3d94d0202632c91455ae6e034c3801437ed233b23303ff6891a03fb1d5d0ec734f5140ca434845920f63852d417addbb420dc80e09da48fb7721456fa19d56dbc05878a9def1225185a741c8bad4dd95a945055a70ccab3158baf797df579c431ba359da1242fdf6a39cd6cac3a805af92dcab60c46d3042836c087d5b86dc3367f40afba5588fb5c9b50ce360c99e06625bca2c6e69bb6f218d6d37da532823295afe779ec076c237620285f8477e8516ec277cef826c51fca752cadb8b30153f7428758964a02deacd4daa9846d4ee6d3ff35d310d2e28f0f2bad2d1ee41c0dc43669564e08ba290b15bfaabd2c967ce7ea02e030ac6163e1fcd3cc3f3e470b26fdb36483da1fb8ac729d87a45dfbc8c7621f406a61bad7fee7da930be80f5d3b07d0400cda9eecb95dc3c20d7c03d053c510e1a00eb42f163901683d7cf2646c2cf93ce350fba26e061dbce13d0532e40f30f790b4c0092d55ca48f7a6b9e27af3100687338b3e4e8acf38f7fea724583ac7d7520ad85e7ad4cd5639a9d5e8439eb4a2333b800528a91e96b6f6eba3c64c2a87d42a436d1fc3bf56bd99f5e3be3d7b8d9534b1b0e6fbcd1e777466cec64da159e48fab9f2cf1a9b5eed693299ea940311c6bf51245bc389a1e3acc53965d200372adbad1df95065ccceed97dde2ba707fd2e6c5d2993b9292f91dba08476a86e74af79bba229b9116b57e3b3e0836266038f61be50af575e88c0eaa2d9cadaa290d93d7d32fab85739fd38dac2ee26ef0c51c835ec725dfdc10953191f2d95077bd7a4d63af6db56218f51a33e0a63ddc9da11cb87156293ee1c4ecee041b12204c11a99ee9e8f27232031de80e711932322fa1af00e8a8dc80bdda706b61641467ebda64249a72c47bf339d3965dffb5bab2acf96cda9e503155df6c4c47e5146c3f3f3197fa3386b24b2f02b50e91a9af9429de13c4e6ca497f48a3314e48757494a3c5f5f79c3973ba6210464eec589c3f9e46d989ee33649cfc1f455b6860521932cd2cd91f107e1714b944518758c6e095521aecc13f5ad55ff3981f18ea3b4218434fc115e5cb1c3704f6cef9476e1d3f0dcca883d8854a9527558525a8dc9af2b347d5d0f128a14e1e4602371ec92b8ea520ca43cc588e40bdaf8c136c1eee0d76099a07ce2de1718508884e3103501afebf9a19883b80c398d41eb93892a3df3c85ae2a1d1362874cb94a535fc247ac60c8b2634851ee8f840a0287cf5defaf801caa19576d86819afd7f6221be56b7604060cb4a94b8f87624a477f0a0fdb40099835e661f579c922bd0061a2426661f9373b8476705797ff5b487ace5a0270f3ac8446135e7a6e7d441b6cbbe38798c72f9871c13f60ff5ccb3b40cf612274b93aeed88c0b31125fa8f7eac28626bcd5f06348e7f3843798beccec9fcfdb2819e1048aadeb90143cb50e87c355640780021b88d3c27f8abef0c5d4242180ffe2858076131b7e48fcb58a6ec683dbf4e86c177b49dedeaa3f0464951ea76497805969712b9f05c3368200bf652d4b0a6b19c3cf0ebd7f9b8ff9f7f9938af1a3d8a40a0df0666bedbcf0a7ee23ebe98ea31fb96b62bcd8013fa636360e3aa2acc1c4e35f31bef9abe6678f34cdbd13e66b5fc8639fcaf2884744df72fabfbba56ddf5d2d44faeecd91c62710591cdb63556b2b2403afc45a0bd3e00523bcdb5400895e5fa5a74ed87e11ef6b9dc875f37e7d3a4d51f1058025938561eb788acae16e5bdf30f5dd9a653bc796ecfa31b8426320f2ede901f6d6defa3eaeb579403b7929cf6d9ae4af8882d966e5e26dbc64684ea921a175c428213d66d00d92c467fac5b3c47ae383eeacb64e981e06ee988168b6c0e3dc729db23c8f9059afaec17a5e1f5cba2a72f0587af00427fd85454c6c5e1e819e3f442811a47486b280077c781f80d22ecf077f8d6dda667acd6e60e2926199b8e0450e4b35b8d3171d0c002fcbf5769ebd62621723c8c624f4b96501a9e816c9d4a4a89d5123ae9573800bdbaa41b6e24211cb28efa8fc6fa69f0e77e0e551347c0e7c5ab13b970fa4be380dfd5a2b2490eeb008dd2a9d83e8df26bde47e8da08f78a68de44a98c077be1f13b025ba0ab5581cb6a14656ef8ed0ed23052abf7c3fe5adbbd1a6c83a3a50774a81e867b323b4d73f9d801416727777fe9f3fc531e30bd0fca7c0e8526169e8af61079b10f208448df84958a559f3ff6b87f2247a3f4e2aed86b0ba92c0298759f5c2f2f53c1b949dfe16b616859f25c34512e1f2c231bc451ac0df4f17674ad6194aae95dbf552b0d4f9d88e338222054be1005cecc0cd53b18f5b665d53efd7f6aedfe1b596cf7d11b893c7ff8a237c79aad321ddc1c6f835ca2c5ea54d22d72c48eed90056a468037e6fb8008d43dbe967c151723c08c4bb7999a0474ba91b6746503ef16cb66b7e9d2426b2c477a36fb9322c643724e61618cc4944acc385eea2783887f608db5ba25e7e2cd68683b27a174351fa378eb16002fc5c6d2d1b6700188d0d060cbd15ee812b90a67c9b4d31adc1bef795dc62595c6916fbd6d7a3478e9daff5fa3c9a6f35dcd0dfa33601520d1c35868ea57870d42287c74fde9b7ccfbfe07b16c0d980e173d523497946dec3e8cc1a16d34bb490f752fec8f431e0f6917a440a232bfc2d9cb480b5f4f7bbbf73befc32b881e18b9df52d47d5c9c6c5844b99771cebcf9549ffdebba597d98b517f67d35f0e6b6742897ae843d934d44611363cb6fc5cc8b2a3f1ba81f5aee72d1d286748dc8931efbf7d05625cbb969059f1c9769f21f4670fa82e3c7c01ff3183ffb8eb2351b44232b3f44399e657ef8ec74f47afdd3cc003aaad6c6d056c4cdc2f9459fe0a37d2ff37b230c4695d5a541d222636aecfa89b6be50e01b834949c8a60bef9acfd26eac8b379f678563daf6fff7206ffdd45493db9ba5630e71d165683df863230ad9af0f2545bbc5dc375513d2feccf6063f374ea54095bf80fa48d36e767a2bb1cc34c6ecb62ae92e79da45ab35360cb036ec9fc6834f611da9c4b41b2e4134f8e059d2f17fc93cbb27c028a2a02d986e590f499cec8ee4005d37586fdcca56256738637b06789cfc76d1405d175c581ece1ae3d2e56ba269778ce7b5776dcace01aeec7d3cba444c22370d93c41b5186571e28251445c18835026447b05fa8851bafe8024eb5ce3b5c8537dc9a3b719b4cc56306ded6d0835b154bf8412dc3be20e2681dab45bde6ca3819897d86ec2385f43129c9885bbcf965de2dda0cf4e17f445864d5552f7250152f6df5c1ed2b0ea616b233229a4ba75d456168ad34922f10cc2a85dce696f141f31df82e5b15c832073a5ce72ffaebdace0ef90eecbbcd12190525421e90615b14a4bd6e9cd4bc23fe8bbfc0f6f50de3281bd0db0c9e2ff45a19fafc294c1d09787dc221af0206da9d3306a09b000380aa8029bd6fc0dade0d3344a97ad2080e936607eae18377abc007e8f2b729ce284e7508505bcd3ebaaa36e0e4c4ba1db83f1a653a4786060d0e2bf8f8b1702bf55285a1dcd520d92b8b84c1809e1641dc7432f4b9b44873075a417fe76ae621c9bb28b350bf9a22fb59909a2c2b31a6bee0bbce1db8edfd3c8a777889c89fc950bc97421095d82b565a66e582f1614c060d381fe95375dc02282034f55837a25b93e1a3010600564dfa5040a8a193381c41b05f3c7934dcc9f7830adc91a469ea87830e9bab7b0943651380f2ccd54ccdfd3169d60976628b62f920b89b68591766f44f8d30fb71376b8df33524d1ebfdea588bdeaf5121fb800f7d097e0ab1753770e0e52c78b1160fd2eedc7cd2552763a94d1fb39f0829734dc9043a751adb7d19d023acadc84e887622c211210403c373bb051082b9de712d7652027e8ec1d35d5baa3337efd90e7de535a3d9305497f2b34a4b3e3022b87803a590eb4daa3c50fd5aef1b70d67260ba1cd3e1b76226d2850b6f7db516ce3efc3c8592ce8e74582998ebba8cd9b9c731bcc5eac6c6e470b2a396ecf6438b7eacb71b2663b05dcd87c87e7f15c40466d5f330a4ccea383e1d249c52d5b944c927113bfcb8841482ee12ea9a2734e792d8c8b36bec8373f509fabf217f4a6d2e9becafc64b2aebc74e6eb778babae0485e402aeb8d78755cb62cb84fa197f9aeb08d80dc2f315f52f5b060ce71fe2605dc53906f5ca4932f9f3c0af4aac8406cca1ec768ad23265ca839db80b1113ea89fe7949bd03f803a786d0858d1c6da384719c72f142c1f944eb7a3307703e87c19afae1f77f73f958efaac3a127d0c152e8045b769eae4c1a0230b160c3d660d218e87a8f9e110344beede66b740ee6b636146a209f5e72f32d0d8ae285f4dbf13c0f6a35afd98d992611ef1b78b05b2bff33cf1d0295c964d97d4701881c85d0f4acd5cf2e7e342873c00e1767005844e40d9527e7802fb8ecccebf4e2f59def55252d2bb993fe2a09700e7d6a1bc602c91687ccc991ac615afd2ea87d9a152a18d4dfbdc48530bb091d4938ad2db253da687cd47116a285dcc3d0e8d9bf84a575210b8e860f1be9f7ef54d98697130d27e080a59d437a1bb3aa714380fdbc15f86e414369a549032a1a04e0c141a5f512b5fedb33723dfb7b96889904d54cd7d6bebb32d0e849b62fe18d52bf713557587ba5f94af78208aab636d40124ffae1ab52aaeedd8431e163c2134f8f8b3f015bf3a28466faf067e89ca6b53fb7013d84924aa5cd7992344363827ca97cc411163f85653e5ae483c598fedac608faf863cc7d56781c0fd098c614a2d0f9dc0290360b073f48e09d765781c7f8e0bfa1222280c4954a8806ee4a73d61c5e561b8ae511512fe1697b9c518dc18078ee1cf28c3f43a119dd69ac9cd92e13485e09bcb3a1ac2a15eac43f00fa579f49b1186e4b44a77f4f774cfa2f02c7d2651f6b835ec94d0cf3dfc17a091c72800c59f995e9e48dcdd931ac7a6c265ea53e67be0f5d2f3f1261930eea2a6af8fc6c789f7c16dd663893ea0c7ff90a1199ec054afe480ae47c517a5bd3bc8ac3420cffb915e7070437df075c85a01e25908f0a09b9040fce052a3c6bbce473347e282b26a5f7d3d20491735d60417e6d8f780e2af4a3b676c551b859d773ea9665159673bf35b78ca4c3d9ef300fab6be6db378b3e1b36583b39cc22ebaec25208de2b5a8a392fec177384df7bdd0ec2a6544420e7c42c86abb48d68df9c72d323db7217122e401efa0983ca8a8e1918c74328d149f46c58904767753e2cb55af66047a8d719b6999f7c9d26c510776a5d2397f1e1c0b9ccba6ace440bb96d2211a15a71ce660a627cef9476c261efce2ee038eb6212a68da883eee17f64f3f00ff7dff4fbfb2977921e2224d38db54dd411aa1f17495dfec050f1b6398e86a609d443675bb7306bd63ae0e9411154f44472df7db11040db3be99a4203a9d81df161de90fdcd3aaa12a56cde1bfaf0875edd79567693ab1b05e4492cc5e9d1bbb24ce57a06a7c0b4fb60c4a662ac9fe1a9ca8b1e2e0eca66f4c55e85429d5fcdbbd1bcd2ede8fa03ec6d1b2fe4fefe41dd47ef775e2cbd86e717db7d6c12824e89b781c8c33279f9f04df8c0dc62191c4fe7ec985697937e79ee8d59638958df21c23b9cadc74ad474a017f04b52cf8654c262e7dee220e5d2700a037e46e8705b1cc4ca1472954f174261bc9e8f8f797067ccd556efb73a53e65b30c", @typed={0x7, 0x69, 0x0, 0x0, @str='y#\x00'}, @generic="ca8ad97438d7ce25135ddd54497952a085a6bf0dd4e47adebd", @generic="90b294fc6b624f43d5fb5fc6af25d83d5009e7c6557a5ae0eb46d8614be29f88d5c691fddee2cfc5d0bb5a4470876f3ecf3c76cf56d53f9d3aeffe0c925d00b6ba7b797d3b2119c4d1675bc9862fd7fe1eea973a105250302360c21e42550b2f04cb5eb75e", @generic="f3e18d8c81458237c79f86e956f220ec2185a653bbeda7011b687d2867c79a93f5bb897c034b6f87e21d65b9bce0e14384253cdbd691ef53faa595d79a7d41f860e30d2f3af0da4d864702cfd10fede4859674f85e08d199ec49f3dbc8e4109410394ab31490152b354f28eef0396feb", @typed={0x8, 0x49, 0x0, 0x0, @u32=0x400}]}, @typed={0x8, 0x89, 0x0, 0x0, @fd}, @nested={0xc0, 0x36, 0x0, 0x1, [@generic="cf42cceccd21bb2b54989de77fe235682935", @generic="219f8753c5e0bc907948e7b2dea87d4bdc4d7fe9dd6843ecb42ca2490a62a47ac76054feb1ef39ae28d6278076efda9b7f1b464be1734b146003eebd05e258e0d7ea4522b56d9331187c9a49af6e4b304ef7249f34ee5290a3d04a661873b159096325e9bf1e92e4d3ea490106f0a7cd4a8a248bcf489aa9875190d90d9105ab8eca111672c3b52a1e80be32960b7f29d5f721053f78b19de75b", @typed={0x8, 0x48, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @fd}]}, @generic="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", @generic="a4c048254c135e8065193ba276656c292e3318666f34f4dede3051de15a67ec88b70bedc0aec33e361a3ff2cfc8004e2f42c3c567cbc6e955ed750e630d531e79cc8ca7d9ee790605fe29f7dc7cffc"]}, 0x222c}, {&(0x7f0000002e00)={0x130, 0x32, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="162411e4535c2e133f740425a53749768f9203d62a4375e8298597b6e9cbe7ee087c2fe9355affde07e9717a56a3c1aa391c34c04ce0", @generic="59cafb4413f0d701b14eaf9a51d7581d548bff106a84d5d801f8dbfc350bac7c742e01d56022739cbf54a1656ef64e79c2a9d851c1caf4fa06cd51f0b05743dca631e2f7d77755840ced8aedc0708b7d399386f2759e5371d20e48251e8cd6ac3126e17e6de39972472f936e98e3565a242f65dd5914c046a107c0390faf1ae3d83da3e0256da1d0dd9ef407822740648746ce2b5e7f5f3a4fc5220348382ea3776ea1a544949e5afb09dd92735a824a80321db336476634c046a8011b8c0febb3a793650d92a59a9b7391d30e4652a139faffbc36b349101f1deee35d12ba849f1aaf85250bfde4"]}, 0x130}, {&(0x7f0000002f40)={0x1330, 0x27, 0x800, 0x70bd2d, 0x25dfdbff, "", [@typed={0x6c, 0x8e, 0x0, 0x0, @binary="3e1155c545698c82afbc5d85d25cbd7178880f74da6389f22c9160d17acac910ab1e68154a22bb926c573be5b2b0cc6b275893ec241d12eb5538dab71888640a286c87d9291e6795fc8d7b599dd0e5a876594f9a16515e218879b2b98211fb19167bf676efb74f31"}, @generic="58d86aa1e33d0c699421ee427041ca34fa7dc03385b70ee311986ea696fbd1849edd1ff8c55b72df42fee3c6977d01c1b5f5e855e780481c3c13d974bdedf7978adc647a7e9b2f7a9ddff9bc60cac84e112d99026477a65fc5b770e951ce357a039f2ae086669cd95d78bcea0b6ad0f0e06dc2d3c862b1a0da409f9b4703fe4233", @typed={0xe6, 0x8d, 0x0, 0x0, @binary="03f7a113e58ec0d5c35bba6bb33b1f1564828da3834bfc9f543666aa99c6bb96ee3062ab789406e8071b124b04a7ffdb5517f8876395b1ffb39a98fe807dba717440ac6009538d156175c8ad71fd162b3d91a5b35c9b55e2291dd689c3703fee1ae10759ae3b697e4e5a4776128769cd04eee1bb58721e8cb33b4a185526458048b7bcf56f4222cd64a8b08efc19eb64cae8a123c20c71d244407342fba38223ecdf2982c3fa3c3091cad4a497feced490f8be5f7f2e988e5b9d1613b7b41f6a3398ed52d4f09e9cab1c855b69894df9dc949e6da9747ecf69df036bade2ecf7d570"}, @nested={0xab, 0x23, 0x0, 0x1, [@generic="6061790c7635750b1dcfd13f441334c3e91c7920b1787bb6c1e0b135b7d4b7adceb69f3478f22166705fce4c3fc28171b69e7c8c60b9ff46af7453558ef6d9761b8e4a12309e9f04cd19d35b2b4461a6608c892f22ed95258c127172e8a049f63be7367cc739366362f3e50a22fc6e842ca4f8190ac5da6737ef634015461ffb4c9fb363161fb3f28dc234ab0005b3fb2ed568ab85681d3cf5c9856cd3e7939dbb2e696cc1da6a"]}, @typed={0x4, 0x81}, @nested={0x101c, 0x9, 0x0, 0x1, [@typed={0xc, 0x49, 0x0, 0x0, @u64=0x9}, @generic="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", @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x4}]}, @generic="5b7e43a9d262ea95c1382ec0a5a9b9da939ad9faf7632bd3c7a615f8948760c8cef00920beb03700665182e9601d1442fb", @generic="5132949e86befafe4345d3db2d6755572f78306c2f0c77c132e592b5bae34a0da1fa91eba179f72cca55b5d691cba3872fb104bdbda78cb74bfb945fd332cca03334cf5227dce82af2cc49c579"]}, 0x1330}, {&(0x7f0000004280)={0x1428, 0x32, 0x600, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x26, 0x0, 0x0, @u32=0x7}, @generic="20b8f0efe6815e37cd13c8a546bb295577c875482ffe938c8ea9a8e62f1f56ef6e7efaf334e894e9860ded2dd788adc4fd797ddc63f75aadc62475aacae3f5f3be86abf8cc86d81893aa92c86f696933f246e4b53b2806191745d776e908fb8a7e6d1e8027720403c8ee868652b051cc7ba6d36006e597c64d1c73", @generic="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", @typed={0x31, 0xc, 0x0, 0x0, @binary="48a198ae870055f09697261084eee7ecbed9455896bb7c2bb346cf84871b169fea1e01a09c4dcfa6850b1eb74b"}, @nested={0x27c, 0x10, 0x0, 0x1, [@generic="8095009af82b35b65673f1067386d30edd507d49f73c507a00025bdc23994afd4a3f2eaef491514474333f9d98f97893437e1ab4b9c3a1dc0f88dd851b0833d15d7921b8539d4e28d534f91ae3838a623ffca35ca423a74a35ee74298f59c103797b27633364b3e962f26c608cb8511ce3dc7c9163e8777904115d3da86af11031031492f7d621942bcac466012bc4e216851b6b0a9e111dadc4613cce705c26", @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="ea824e0a298925e87f844f209bcf713a0ef13a0d641430edb17bb9b9381ba666a1bc78840dc2c1334d9fdb7359eef4ef53641ecf8196f659eab315070361fe7e6a192f16430cb38a587080a5ea1c92cc6652a73116df84b440efb50b00a0c71df4467dfcc87d0d3e6134bf3c094d4fc5fd76c5762dafe8def07403e9031a4ef7888597155f62a567d765f776acc365f8cdb19bcbb51b9982853924ff78bf268253913a6c19f9b9666068babf53c55a7a463850c5425ef63dbcf3dd429a5b0fd01ef0eccf3843eb29305169102ba116c1690fe695cd5bf7fa", @typed={0xdd, 0x82, 0x0, 0x0, @binary="e1d9c29386db19ce05fe33349b9f04553dc0adb855977589ad1a5a86cd79074254729ec5442077b234201163918ad8acb326199e2fb8c02e4b1bcd3716f42deffbbd3d5a5daf47224668b36dfa20f328481e974d6dc178ebef9654517ab18e97f3348a79b5f62f845cb45d222922617542b5f5cc6bdc263eec8e664b5445bbd8d884822481b1c6846be253a13975a4f59c6d925fa41dc24f1babfae292a85bb8f2f02a747e6c650b8aa2d3221cef94d5543e9a6b805db38c9a7d0c23c06346ffafe0a5ddbb1a1886d41c2bad767cf64498aef3ed0797b6ddb1"}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0xca3}]}, @typed={0x8, 0x53, 0x0, 0x0, @u32=0x9}, @typed={0x18, 0x5a, 0x0, 0x0, @str='memory.swap.current\x00'}, @generic="5d4df6c6d8bd2aa921da7ed18d787ecd1a6fbcce129cece17f0d6f306b74a2e02aefe128fcf443980889dc969b36e95c900aaf60bcd4c042f1efcb41bef255fce8013d7434628e5007c48ba8e55565168ff474322490761c0348f141dc225c3ef656b1b088ebb4adfcf8fa14a5af7f6c3e1bb5eb60755f875dd7866237f6e53c99b211332d803da3fefa07da311d7aa9305493f1bd9ec2749aeed1e60d7a88738720cd69207b138d03d1a08708c3ec984b4ef5d9cd333184999fef26b6ee31c5bf2a92fc"]}, 0x1428}, {&(0x7f0000005800)={0x18, 0x2a, 0x20, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x17, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f0000005840)={0x2514, 0x19, 0x8, 0x70bd27, 0x25dfdbfc, "", [@nested={0x142, 0x80, 0x0, 0x1, [@generic="7a66046e3a1f4b46a582ccb7b7880455db", @generic="7373f9c31aa0cb18906fdc56433a61c184a3648ffd221613cfe48be9bbd1aad0a3d1c2f9833094fb033a772863bd0bc5108e82d3c058d6980b6dd3751aab912cbf74ccb35233b32297f762595673e8f111f81afb037a3c11f79e160bddac3517c614a05f7e00ae12ec3c16fcee7d3070b02df302fc4b78e164b62a1b18b9c198d0ede5abfe8e73b3e941db588074b1e476f7686f5f5fe1d3c0d01eeeb8e622149d92f3c6f5c33343b5a1b4d2583f23a8c70a1177fe5dd90e5868cbcc3a2e1ccdd5a89d0b4b87c6b927d9529c3864", @typed={0x8, 0x3b, 0x0, 0x0, @pid}, @generic="519e4e87522a6463c2b273dc12e1ecb0dd0c8cfa45c15c7f8ad83bb745", @generic="846ab8e4de781c0de8d029cccb36b30e6428658735b4146ee4829b0374f1087bef30828bb39e86a8b32add12022e6d2611bfebe462741da65613"]}, @nested={0x18, 0x2f, 0x0, 0x1, [@typed={0x14, 0x50, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x1150, 0x4e, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @fd}, @generic="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", @generic="a936bd66e1d54d72b4ee77515e", @typed={0xb1, 0x31, 0x0, 0x0, @binary="e6b5d7d4cd03271630902794e7e315bc2843ce0808372321c8fefd14f384cfd9d0d8dfb8dd7ee6298d3e428eefab84f75bf965ada36a38eb467b53830c2b5095eeeda3214c06f36c0b48deddef7e543290f45f27051ccf260f8bef26c7a1c9f2818977c646ba408bd3d445b76b5fc89e953d7ebb327ab13413424c0cf54eaeab4c7148e100722891240e14b0d7921ddaa06168e8731b28090abd5fb937ad4ecc74c4b4b430b7f61923780c9ad0"}, @generic="ef192ad440e33fb6ab08c23768c671a86cc9986621317ebe9036a99b32e6aaf1ef686131a8f3bdfc3a17a45dcbdf7e8dc9be48d5c871c9", @typed={0x8, 0x58, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x1c}, @generic="7b3d831643833e13dacb2faf67d9887951fddf5f319fa442bace72e25ab205b25b392d539ce937debc484aa8f8c1060b103c64da1d72a41e6728f1b5ad18db9e"]}, @nested={0x1255, 0x2e, 0x0, 0x1, [@generic="e13fe5ff2ebe3f0f07b0a381134e514e114f574dbdd2fed8b01e46f9f244d218dcd29f164ccefdd93f9b189966e5d928853d9b460983f74bdae0372c8bacb99f8b172560", @typed={0x8, 0x69, 0x0, 0x0, @uid}, @generic="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", @generic="63eabb659d6eaf37b4080c87ccdaf0172466a27560efc78a62d9703b11db27d9c9a344662f3de94dd235ab6758572a617b2a7c528ff3b6b7b63c567bc7fc2502aea7b1c923a9ff02c6683e2ef0e2439945a9d19b9a847e20320a8fb314218aeffac7bc8cccbea2def4d6c79014a9649011be66657ae6b9ab420e0fa1c2473f5ca78316298bceffd503a7f33019cb9f25b1e3b6a6d86a430e15baae8e57dca143a2a9aa5f4c6fe8bf699fc928978bbe06", @generic="2005fbe8dbd2942205fc3a5035010200000000000036da2cdcb6b522ef763e00883e2ade95a3112e3d7cc80eb500c9c631", @typed={0x8, 0x35, 0x0, 0x0, @fd=r2}, @generic="6efd53d6e70626328511b4768deb557258da0f07fad36eb88f24af322838357b0ef5dfb666f49c7b6e60721ec6c8e3a11dc68f468e902fec0176c3116267f2ecf8e383b76a31c93358e11c0d4dcfea1e8af959c1c4e7a17a0fe0f17f2f294b98db846c31a7eb533a3c360929b98e2014b73a8230ce55eecdc24c8c2102fa6c4f0c51a6f6108eb4c7a6b34d5cc016cb665cca311933c4cd9d362ea517769d3ccad9c2e3ffde1ef6342f95cdcdf14d5f4747a80dc388947414f33c35901052a934", @generic="1328044941d0aa4ed285595ad4191b3c77d51e41dbd58486077d19d898c06860fa14a7aa2f7ffff9ab3864e78b761d9060839d05d2e90317c22e57b705704203b740e004bfacc0b3cb27cd6a232df01dbb1146975906ebfe959946a4"]}]}, 0x2514}], 0x9, &(0x7f0000008140)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, r2]}}], 0xd8, 0x4080}, 0x10)
r7 = fork()
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0)
syz_io_uring_setup(0xfa, &(0x7f0000000180)={0x0, 0x39a3, 0x1, 0x1, 0x346, 0x0, r8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000240))
setuid(0x0)
prlimit64(r7, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000200))
r10 = syz_open_pts(r9, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x81)

[  967.774577][ T7886] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.782992][ T7886] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.795084][ T7886] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.803524][ T7886] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0xfdfdffff00000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:04 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:04 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0xfffffdfd, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  967.874340][ T1040]  loop0: unable to read partition table
[  967.875495][ T7906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.888455][ T7906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  967.921507][ T1040]  loop0: unable to read partition table
[  967.921554][ T7906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  967.935585][ T7906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  967.946574][ T1040]  loop0: unable to read partition table
[  967.959823][ T7904] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:04 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x10000, 0xa803)
fadvise64(r0, 0xfffffffffffffffe, 0x0, 0x3)
dup2(r0, 0xffffffffffffffff)

13:07:04 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  967.968285][ T7904] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x800, 0x2000000000000000, 0x2)

[  968.003439][ T7904] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.011866][ T7904] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.037407][ T1040]  loop0: unable to read partition table
[  968.038440][ T7906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:04 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  968.051468][ T7906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.073740][ T7906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.082169][ T7906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xa7)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:04 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x80400)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0xffffffff, 0x5, 0x19, 0x4, "5474e3f349db46c2515e4aba53e395968572a82285dcb327ceb82bd8f6898b3d8396f94b6c87a9595d775d3c73288575de87c83a1ab0d0d7def497b4925fe0e5", "d99e2699eee8ad33d054d02297062a38b1bd53202e8c12ac07c942c14adbacaa", [0x9, 0x8]})

[  968.103161][ T7907] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=1)
[  968.120959][ T7920] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.129410][ T7920] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:04 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:04 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r2 = signalfd4(r0, &(0x7f0000000100)={[0x8]}, 0x8, 0x80800)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8)
fcntl$setstatus(r3, 0x4, 0x44800)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x11c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  968.168152][ T7920] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.168529][ T1040]  loop0: unable to read partition table
[  968.176658][ T7920] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.198140][ T1040]  loop0: unable to read partition table
[  968.242356][ T7916] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.250807][ T7916] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.266414][ T1040]  loop0: unable to read partition table
[  968.267269][ T7916] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.280468][ T7916] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:05 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0xffffffff00000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:05 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:05 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0x8862, 0x2, 0x26, &(0x7f0000000040)="bcd847c6f5c5674647ac213fe597356656ff8d8473d79644c673bce157792acfbf00ea027d0b"})
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  968.311679][ T7950] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.320138][ T7950] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.343875][ T7950] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.352328][ T7950] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:05 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r0, 0xd4304000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  968.477309][ T7970] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.485765][ T7970] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.497590][ T1040]  loop0: unable to read partition table
[  968.552643][ T7970] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.561132][ T7970] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.573723][ T7972] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.582124][ T7972] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.597199][ T7972] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.605802][ T7972] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.623125][ T7977] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=512)
[  968.647763][ T1040]  loop0: unable to read partition table
13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:05 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
fadvise64(r1, 0x100000001, 0x91, 0x4)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0xc1)
r3 = dup3(r2, r0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x10001)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r4=>0x0})
write$cgroup_pid(r3, &(0x7f0000000100)=r4, 0x12)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:05 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x1000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  968.668193][ T7986] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.676631][ T7986] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.697898][ T7986] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.706364][ T7986] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  968.725718][ T7970] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.734175][ T7970] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.751526][ T1040]  loop0: unable to read partition table
[  968.768718][ T7970] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.777169][ T7970] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.810469][ T1040]  loop0: unable to read partition table
[  968.822947][ T8001] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.831396][ T8001] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.843909][ T8001] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.852394][ T8001] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.865502][ T8001] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.873990][ T8001] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  968.885828][ T8001] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  968.894239][ T8001] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.069909][ T7956] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.078349][ T7956] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.090762][ T7956] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.099181][ T7956] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:05 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/240, 0xf0}], 0x1, 0x1, 0xdf)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:05 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x22bb01, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0xff, 0x3, 0x9, 0x6, 0x0, 0x4, 0x1220, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x8e4, 0x10001000}, 0x12021, 0x4, 0x8, 0x0, 0x1d7, 0x200, 0x0, 0x0, 0xffffff8e, 0x0, 0x10001}, r0, 0x4, r0, 0xf)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200))
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x40, 0x2, 0x8, 0x0, 0x800, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0xe}, 0x8000, 0x5, 0xffff, 0x6, 0x40, 0x207, 0x1, 0x0, 0x401, 0x0, 0x9}, 0x0, 0xe, r3, 0x0)

13:07:05 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:05 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0xfdfdffff, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:05 executing program 5:
tkill(0x0, 0x38)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = inotify_init()
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r5, 0x0, 0x2f8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="a80000002500200028bd7000fcdbdf250f0066002f6465762f6c6f6f702300008de6e3b1df50f40fb93faec7cb188a4afc35e59555a764f7f115a91fc872783a721040190f04b73b0576c19da1bf15a7599f980831f86d5b7bea7d6e25e23662cf2f0b55d08f2002447692b1d01ceeb611280a0e4ebc6ab3c19524cfef4942a3a379e9d99fb16a8baa4b9412da7ad506eda49a21fc9687b2ae3ed041ba08003500", @ANYRES32=0x0, @ANYBLOB='\x00\x00Z'], 0xa8}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="3d0c3ca7d6c3f96c5a103911287f33e3f3794b597ed2fd916b8bcf6a9887314487756e7a849f125bf82345230ab2b371f06515eb53a071a5c9af0b980f26524db600cf3b701fab9dade0c65e46b3dad32d5af28ed7d6ec3ebe57edcfc5b8395fb8be5b4bf69eac3613bff43a64d75f3b9d5798dbb29a8a96794f9a883dc0ce7e7d9f2fc30b4078ad076846d45a0b621a8dbf97f21055f5bd222a2414b3002802302382b47ef71614ab7d84591bfa91e465de2bec5b544c576e8942c642eb241c7b162fffe682c236d45102804ebf5207f6"], 0xc8}, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80080, 0x101)
r7 = fsmount(r6, 0x1, 0x80)
ioctl$LOOP_CLR_FD(r7, 0x4c01)

[  969.120250][ T7956] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.128660][ T7956] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.183973][ T8015] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.192399][ T8015] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.207126][ T8015] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.215559][ T8015] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:05 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  969.243061][ T8014] loop_set_status: loop0 (]Ëîì×­kÝURh¾Á¬=�Î�çË«�äq5â÷äÏ´RÔ�W~²ò\ ]:"�xš?B¥ÌwÖ‚ìÂõR�¦) has still dirty pages (nrpages=512)
[  969.257984][ T8017] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.266503][ T8017] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x90)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x8a, 0xff, 0x9, 0x0, 0x4, 0xd0140, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x4000, 0x7fffffff, 0x9, 0x7, 0x4, 0x3, 0x1, 0x0, 0x3c7, 0x0, 0x10001}, 0x0, 0x9, 0xffffffffffffffff, 0xb)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  969.295173][ T8017] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.303665][ T8017] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.316010][ T8021] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.324597][ T8021] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  969.349820][ T8021] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.358307][ T8021] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:06 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0xfffffdfd, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  969.394040][ T1040]  loop0: unable to read partition table
[  969.402020][ T8035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.410535][ T8035] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x1000000, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  969.452689][ T8035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.461109][ T8035] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.479496][ T8021] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.487933][ T8021] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.517212][ T1040]  loop0: unable to read partition table
[  969.545732][ T8021] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.554170][ T8021] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4)
r2 = syz_open_dev$rtc(&(0x7f0000000280), 0x7fffffff, 0x480000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfffffffffffffffc]})
pipe2(&(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000001700)={{}, {0x1}, 0x9f, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)="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", 0x1f3, 0x0, &(0x7f0000000500)={0x2, 0x10e9, {0x1, 0xc, 0xdc, "f642b0a29ac340b295beb94a51ddbc3fac467099268ecb76dcb8889c350a32d18edeb8b53fc13cb3960098e00f55a46295b800e6f4f59700cc33aefa688b466dbce8a0e7334a98e801e3449573f0baef4489a069d21cde8afbd0ed3031ed34ba22bc2ca0cca6a3064a7d33d492b4f8c532ad551dc9e07241d7d72838ff6f54b0ab1a097fe8ff538ece338ded15c309d75d238c90b7ed02187398de6ec96490c321c6620a88ca029401c6714c50580e8e423a23bc927c7913f23d77f642d1c133a3e2ea3e01f57736bfcb8fa5a09fb3ea62902bdfe27bb1a67755eb70", 0x1000, "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"}, 0xde, "2cdd7b3331d9d6b413c303e92e6460a3cd5a3fc61902cd70b944f3dda6575030df76c9c6b2d745feefc93b8a65c97b4b1d97b39fb3e510718528a8e10f9d06c6fc32907239e2d89d0218b2258ca73468b82762b2228dd8dd005b45c63d3fcc03e299591be8f2342085f363c27cc5b6dcabcc96a1232207a22735682f910106a86a4b3383ee9aaf8f73b63e1a6d089c9d1df4145baa5c134c87f32669067dc62bce5a76f12762bad9730dd441a74a4e1fff3b47b84df0a03b75acde15ad871a34f60e739785153beb6d5d540272e8471913c1a7662322ee16f38a4667b4db"}, 0x11d3})

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x82840)
fadvise64(r0, 0x0, 0x0, 0x3)

[  969.571318][ T8033] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.579782][ T8033] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.598763][ T1040]  loop0: unable to read partition table
13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080))

[  969.622306][ T8033] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.630758][ T8033] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  969.680514][ T8042] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.688963][ T8042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.708038][ T1040]  loop0: unable to read partition table
[  969.722070][ T8042] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.730556][ T8042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.743953][ T8053] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.752369][ T8053] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.771240][ T8053] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:06 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x10200, 0x8)
fgetxattr(r0, &(0x7f0000000240)=@random={'trusted.', '/dev/loop#\x00'}, &(0x7f0000000300)=""/252, 0xfc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f000041b000/0x4000)=nil, 0x4000, 0x1000008, 0x20010, r1, 0x1bd61000)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, r4, 0x0, 0x4)
ioctl$TIOCCBRK(r3, 0x5428)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x80}, {0x1d98}, {0x1, 0x6}, {0x80, 0x7}]})

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100))
fadvise64(r0, 0x0, 0x0, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x80, 0x0, 0x1f, 0x9, "63779ae0b45adab290241d4a3ce0eb8c23fd5464d83ca2381b80171f71c8de5225887e43f587e2596078d3f4784f240d226595bc0029f9ca62fff3508c3a3f0c", "51b864128c51cde764af778181fbf08ebdab53b147479c804c51e67d599c5c4b", [0x1000, 0x7]})

[  969.779719][ T8053] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.806817][ T1040]  loop0: unable to read partition table
[  969.807188][ T8042] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.820868][ T8042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.848565][ T8042] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.857044][ T8042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.879361][ T8060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.887871][ T8060] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x100000000000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xfdfdffff, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  969.930551][ T8060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.939012][ T8060] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  969.963101][ T8091] loop0: detected capacity change from 4096 to 4095
[  969.976481][ T8088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  969.985010][ T8088] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.001216][ T8088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.009702][ T8088] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000200))
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)=',\x00', &(0x7f0000000140)='./file0\x00', r0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.040817][ T8092] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.049258][ T8092] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.091469][ T8092] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.099917][ T8092] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.117795][ T8094] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.126252][ T8094] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:06 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.150974][ T8094] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.159482][ T8094] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xfffffdfd, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  970.223325][ T8106] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.231803][ T8106] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.277037][ T8106] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.285520][ T8106] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.316868][ T8094] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.325309][ T8094] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.370859][ T8094] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.379295][ T8094] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.409293][ T8106] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:07 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0xfdfdffff00000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.417739][ T8106] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.444985][ T8106] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.453435][ T8106] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x40a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x210501, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
sendfile(r2, r0, 0x0, 0x7)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x8, 0xaf, 0x6, 0x0, 0xfff, 0x80000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x18100, 0x200, 0x2ceb3acd, 0x2, 0x1, 0x9, 0x101, 0x0, 0x80000000, 0x0, 0x81}, 0x0, 0x5, 0xffffffffffffffff, 0xb)

[  970.519195][ T8125] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.527704][ T8125] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.540198][ T8125] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.548646][ T8125] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.566717][ T8126] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.575178][ T8126] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.597398][ T8126] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.605846][ T8126] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.653539][ T8136] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.662058][ T8136] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.674127][ T8136] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.682653][ T8136] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.695084][ T8151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:07 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  970.703546][ T8151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.717229][ T8151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.722981][ T8157] loop_set_status: loop0 (cwšà´ZÚ²�$J<àëŒ#ýTdØ<¢8€qÈÞR%ˆ~Cõ‡âY`xÓôxO$"e•¼) has still dirty pages (nrpages=1)
[  970.725659][ T8151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.767466][ T8126] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.775959][ T8126] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.788390][ T8126] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.796829][ T8126] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:07 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xff, 0x3f, 0x9, 0x1f, 0x0, 0x200, 0x6000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x490, 0x0, 0x0, 0x9, 0x9, 0x0, 0x8000, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
vmsplice(r2, &(0x7f0000001580)=[{&(0x7f0000000300)="c968ee43a95c8178959ed914dd6828792d5da1bf587cdd539ba55d013311f19cad32931cd9cab84f462ebbee1080122a8056a0bf0f6299401ffed8145152aa774a06a91fab66899d4d5805", 0x4b}, {&(0x7f0000000380)="343e5579020d98455635a56d2f16e60c3936fbe8e05ce36a994909d9c878b5daf6a675134dd7e20581521080253a771c2438a5776c0ea5432f3033de6e4b41da613c86d6a9b5cfd6e4fc37ef15bbd2d53b789e62a72994fc6b1d8b9477e4f201310c36141d0beb6ce1d0b88630ac7b7142ac93d14df40f8d9dce0ac3dfad2c48aec467b5df4338eb4d00d19a95d16bd656480022b0c6f162fdbbb52a10c5053c9c08047e90b98ffec115f5c0cd72000ec5e790607c841a8e951d1b0f7c96b911afe9102c13d1ff8a7c40aeb1c44902fda23b546909d6c6bc2f15b205156b7e5894e49a6cecd78dc3322e9a16af670140372cb4c2", 0xf4}, {&(0x7f0000000480)="f5167aee5ae4a7673711475970dc8fd8874fe66299e3fc4fce26a46f151d430103600046193fc3b61135ed59a86c87598a949405ea5cb0bc50806d98f12c23d7106d5e98ae57d2826d85406053e328f2268d0188ca0d6c46512f1a82aef9717735a76ba3ef0e14d6e1aca161aa0b119416613da187aa5d501a500a3cb1144726431e4771856ccf6b971d1cd4e2e93d68cb19611fa2ed65b28f78609c74ceeabf39c8d7f2fda5e97f1a954ed425b9547ce95ce4727639ea42553d6ae7074fca19bd5538db261a33e113fcece81b09d91fc8af49d1f53f1af4e79c4eca7e03ac6f7da1f61cb80e4ca5433e04040f", 0xed}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000140)="dc415b01936959732948d210da267dfccaa3c27090d4f00271c6b78a5cde6538191542999426bdc671f749795af78705bc1eb486fe447dde", 0x38}, {&(0x7f0000000280)="d861f5a8e5dc0d21f41f234c0e3871be7ff0747957d804ecc69a321c10a83a897b1e5f6be6829587de1fb92361c991d19f729da624c12f664694f19192ed2fa7", 0x40}], 0x6, 0x8)

13:07:07 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.808488][ T8161] loop_set_status: loop0 (cwšà´ZÚ²�$J<àëŒ#ýTdØ<¢8€qÈÞR%ˆ~Cõ‡âY`xÓôxO$"e•¼) has still dirty pages (nrpages=2)
[  970.823203][ T8151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.831619][ T8151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.854600][ T8151] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:07 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0xffffffff00000000, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  970.863043][ T8151] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.880180][ T8164] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.888684][ T8164] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.905076][ T8164] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 4:
r0 = syz_open_pts(0xffffffffffffffff, 0x80)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000600)={<r1=>0x0, 0x7, 0x1000, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0x1d, 0x2, {0x5, @struct={0x1, 0x7}, 0x0, 0x25, 0x5, 0x401, 0x4, 0x100000001, 0x410, @struct={0x4}, 0x80000000, 0x6, [0x0, 0x5cf4, 0x101, 0x1, 0x5]}, {0x1, @usage=0x6, r1, 0x80, 0x5, 0x5, 0x5, 0x800, 0x8, @usage=0x7f5d, 0x7, 0x7, [0xffffffffffffff39, 0x0, 0x4, 0x0, 0xd75, 0x3f]}, {0x80000000, @struct={0xec, 0xfffffff8}, 0x0, 0x5, 0x80000001, 0x4, 0x10000, 0xfff, 0x48, @struct={0x7, 0x8001}, 0x3, 0x40, [0x3, 0x5cc, 0x8000, 0x8, 0x3, 0x9]}, {0x34d, 0x9, 0xb}})
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x1)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r4 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7f, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="75b02ce0ed74a72ebd55de00727b3f3a85baf9016bb051497d6e2d835c5018447e6c85c47218044193ddfdb07368d826cdef50f97c7f44f61a5f9e2d33d7a3856d8327b39a92f677d9bb72e84430f43376314ddf794b08b723db6963f7dd2f3d257c120442190d0e32f181dccc2b9cb7366b99888c33c0f60e13dc55c2b744a16f670a5fe18c4bb44a8570d06d557e8b73ed8c5ed0b57b5bc4b9372ad98aa7e26e7b3bfe85c9d415ac3a71a199f60f75aa57c33e17c8c996400f89420a01190cff38365d68f72aebdcbdb266ebb0b8e4a94964551955442b8451b8fd7ccec65715587db1", 0xe4, 0x4}, {&(0x7f0000000200)="ebde78c8033f4681366c636d6d4509c404c709dcc94a5dd31dff5700dec72cc0e8527d7bef9b831a01fc9fed40c86a7538d96892f707aa554204022fb17f11d1f3ca1676599fbf4c4a6510ff7ccda160394a6cec59b2a8d809281261d00e1a98aef30d8e0c0da43b", 0x68, 0xfffffffffffffc01}, {&(0x7f0000000400)="576b678d15aaab5758c585496a9b83105f8926d130372a75b3736ce1559c56ccb5609507586a3a62a6303a4fcab4c8a2d10a7f7fbde0ec4984e102d080fd469e926731adff2de0994e961409abb4face546fa23476fd0d36438f44b0052b02d544f79619c6be8cf91f97122d0b49a27137eec0dd5e39a1bf8588159b4907f646b3a78fac014675d01c013e0e23f3400a919aa4d966da12e0be63f9f09158ce8b662c87495b818b17b7eb05fcfe", 0xad, 0x8001}], 0x2010000, &(0x7f0000000f40)=ANY=[@ANYBLOB='check=normal,shortname=winnt,uni_xlate=1,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',context=system_u,dont_measure,euid=', @ANYRESDEC=0xee01, @ANYBLOB="2c61756469742c61756469742c000c0a549852b808b4f5eb1aaa19f865c2608272ac401c213a54a780a36df985155f640735bc3e2c17934f39a1066d2e7bb94f3fff26bc69550f200aee50917580f1445f8c8ab8b1ea17d785d6599204949bf82b55a21e6816c9bf59844170f3a0db6ce091e413159667"])
fallocate(r4, 0x50, 0x0, 0x4)

13:07:07 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  970.913626][ T8164] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:07 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  970.971435][ T8177] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  970.979883][ T8177] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  970.996117][ T8177] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.004551][ T8177] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.024763][ T8184] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.033194][ T8184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.044560][ T8180] loop_set_status: loop0 (cwšà´ZÚ²�$J<àëŒ#ýTdØ<¢8€qÈÞR%ˆ~Cõ‡âY`xÓôxO$"e•¼) has still dirty pages (nrpages=512)
[  971.048208][ T8184] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:07 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  971.065243][ T8184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.108760][ T8191] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.117211][ T8191] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:07 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:07 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  971.155296][ T8191] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.163726][ T8191] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.200742][ T8169] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.209215][ T8169] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.227015][ T8169] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.235526][ T8169] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.263486][ T8205] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.271945][ T8205] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.283970][ T8205] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.292477][ T8205] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.310207][ T8169] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.312943][ T8173] loop_set_status: loop0 (cwšà´ZÚ²�$J<àëŒ#ýTdØ<¢8€qÈÞR%ˆ~Cõ‡âY`xÓôxO$"e•¼) has still dirty pages (nrpages=512)
[  971.318667][ T8169] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.352139][ T8169] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.360608][ T8169] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0xfdfdffff, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:08 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f0000501000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0xdbadf000)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/1, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00')
ioctl$LOOP_CLR_FD(r3, 0x4c01)

13:07:08 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x3a)
ptrace$setregs(0xf, r2, 0x4, &(0x7f0000000140)="06da39f9a5abff186fb192e6dabff15f8fec5fdcb2ff117916f01cd463a1c768a19e67f2767330dccd3d46aaadf2697a2bf10e47950fc5db41453853")
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{r0}, 0x2, &(0x7f0000000100)=[0x1, 0x7ff], 0x5, 0x6, [0x80000000, 0x7, 0x6, 0x40]})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)={'U+'}, 0x16, 0x2)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
fsync(r0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x29, 0x9, 0xff, 0x3, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000, 0x1, @perf_config_ext={0x7, 0x10001}, 0x180, 0x3f, 0xc9af, 0x3, 0x4, 0x1e40, 0x1, 0x0, 0x5, 0x0, 0xfff}, r2, 0x7, 0xffffffffffffffff, 0x8)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  971.408284][ T8205] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.416723][ T8205] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.441621][ T8205] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.450133][ T8205] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:08 executing program 0:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  971.494372][ T8218] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.502808][ T8218] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 0:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  971.547470][ T8218] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.555941][ T8218] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 0:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  971.598123][ T8214] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.606576][ T8214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.626086][ T8214] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.634587][ T8214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0xfffffdfd, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

[  971.673082][ T8224] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.681506][ T8224] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.700287][ T8224] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.708780][ T8224] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.727444][ T8229] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.735907][ T8229] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.758048][ T8229] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.766467][ T8229] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:08 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

13:07:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0xffffffff, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x1000})
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  971.787008][ T8252] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.795449][ T8252] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x1000000, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  971.829274][ T8252] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.837726][ T8252] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0xffffffff)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x84)
preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/208, 0xd0}], 0x5, 0x10001, 0x8)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
fcntl$getflags(0xffffffffffffffff, 0x408)

13:07:08 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:08 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

[  971.904549][ T8262] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.913002][ T8262] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  971.935261][ T8262] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:08 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @multicast2}]}, 0x24}}, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x60}}, 0x51)

[  971.943752][ T8262] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  971.982560][ T8271] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  971.990999][ T8271] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.004302][ T8271] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.012722][ T8271] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.029254][ T8272] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.037682][ T8272] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.049746][ T8272] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.058276][ T8272] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.070001][ T8288] loop0: detected capacity change from 4095 to 0
13:07:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)='/dev/loop#\x00', 0xb, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  972.083174][ T8277] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.091583][ T8277] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.122392][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
13:07:08 executing program 3:
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x624802, 0x0)
r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x147500, 0xcc)
mmap(&(0x7f00002c4000/0x4000)=nil, 0x4000, 0x180000b, 0x12, r1, 0x67631000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000300)="3092892843bd37378b243fd4b3ca90a63eaae7298e3250f30469fb579e1322655dd02eb56d5a01709231164a0ce926cd3ce75c6e1b6679b830de95950bd79607c7ad4f39c58b3ccb2774034774aa030c785364e25291c1eeb743ea0e2db4f401eedfa067f9944b85b818644e48b26a0d57b50298a6dfa9921940a4b6918120aef14a6bcb94ee3bdbd623b50b4bc73651ad2f1b51fb9f46b7ecca414dfabd11b909ad6dc2b573d939f865f5926d32fc8ec2fbd65c0d4f1a4704f53240f42cca4493633ea2273192389c9beb5a6afa67cd627957ec1cb30582489bbe87c022bdf840d3b9b747f6b800deb12825040f34b25a35febaa8386bcacedfbbc034834a6f")
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
dup3(r1, r1, 0x0)
r3 = pidfd_getfd(r1, r1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0x0, 0x8, 0x81, 0x7, 0x0, 0x8000000000000006, 0x13c63, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbe5, 0x1, @perf_bp={&(0x7f0000000100), 0x5}, 0x6d22, 0x400, 0x3342, 0x6, 0x8000, 0x9, 0xffe1, 0x0, 0x5b, 0x0, 0x1ff})
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:08 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @multicast2}]}, 0x24}}, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x60}}, 0x51)

[  972.141026][ T8277] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.149477][ T8277] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @result}], 0x60)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:08 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xfdfdffff, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  972.210363][ T8271] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.218810][ T8271] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.232215][ T8271] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.240661][ T8271] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @multicast2}]}, 0x24}}, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x60}}, 0x51)

13:07:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:09 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1000000, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:09 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1000000000, 0x402480)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
sendfile(r2, r3, 0x0, 0x4)
openat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)

[  972.279489][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  972.297103][ T8314] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.305577][ T8314] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x5, 0x5, 0x4, 0x0, 0x81, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xa3, 0x7}, 0x102a0, 0x100000001, 0x4, 0x2, 0x1ff, 0x4, 0x717, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, ',-{{'}, {}]}, 0x29)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2, 0x140)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000300))
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  972.347337][ T8314] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.355837][ T8314] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @multicast2}]}, 0x24}}, 0x0)

13:07:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  972.421349][ T8321] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.429836][ T8321] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.443129][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
13:07:09 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xfffffdfd, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  972.478142][ T8321] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.486575][ T8321] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.501645][ T8322] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.510128][ T8322] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  972.541200][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  972.550856][ T8322] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.559303][ T8322] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @multicast2}]}, 0x24}}, 0x0)

13:07:09 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  972.591250][ T8328] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.599688][ T8328] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.620013][ T8328] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.628484][ T8328] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:09 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2}, {0xc}, {0x6}]})
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x7, 0x40002)
write$binfmt_elf32(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x81, 0x4, 0x0, 0x2, 0x3, 0x6, 0x2, 0x3a7, 0x38, 0x128, 0x2, 0x2e, 0x20, 0x2, 0x2, 0x9, 0x4}, [{0x6474e551, 0xfffffa6c, 0x9, 0x80000000, 0x4, 0x9, 0x9, 0x1ff}], "0f110bace587a352c8585dfb8463b7e90fc22144568687fa32016dac5f837e5c9007cbdc769b2eb04b82c0e6bd7737b5f998f3988ad60135bb8435563cdb9216c7b6aa664c49d7a85daac7ddf9b41de14e211675d08d29675bc5fc6b9529eaeea564b6daa1f2ccdef54eb77509728c82910446a334a26025cf832a59e2aa637a029e9baa0eaea298723bbd0d917eea1c51198c24c10b5abffd5f3de6bbbb903950d4fb170f1c2e3e1a9e7dba93dc5ab2cd460e4402c2d15896fde5c2d1957adb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x918)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10})
syz_open_pts(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
syz_io_uring_setup(0x7760, &(0x7f0000000c40)={0x0, 0xaed0, 0x1, 0x1, 0x370}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00007b0000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000cc0))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, r4, 0x0, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100))
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  972.655544][ T8344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.663982][ T8344] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.685759][ T8344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.694202][ T8344] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.697860][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  972.716288][ T8321] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.724803][ T8321] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  972.737623][   T25] audit: type=1326 audit(1629378429.414:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8357 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0
[  972.761568][ T8321] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.770003][ T8321] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.787316][ T8328] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:09 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xfdfdffff, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:09 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2)

[  972.795770][ T8328] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = pidfd_open(0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1, 0x64, 0x1b6)

13:07:09 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:09 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  972.841808][ T8328] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.850254][ T8328] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  972.870222][ T8368] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.878819][ T8368] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:09 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  972.907757][ T8368] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.916231][ T8368] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

13:07:09 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xfffffdfd, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  972.959339][ T8375] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  972.967882][ T8375] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  973.004558][ T8375] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.013032][ T8375] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.039534][ T8376] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.048037][ T8376] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.060776][ T8376] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.069234][ T8376] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.083713][ T8392] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.092211][ T8392] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.119970][ T8392] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.128473][ T8392] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.151738][ T8392] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.160200][ T8392] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.173212][ T8392] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.181645][ T8392] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.559874][ T8357] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.568351][ T8357] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.580956][ T8357] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.589403][ T8357] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.601775][   T25] audit: type=1326 audit(1629378430.284:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8357 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0
[  973.628311][ T8357] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.636813][ T8357] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.649348][ T8357] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:10 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

13:07:10 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:10 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x440041, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80000001}, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800007, 0x50, r0, 0xfffff000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xb)
getsockname(r4, &(0x7f0000000200)=@tipc=@id, &(0x7f0000000300)=0x80)
set_mempolicy(0x1, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20004000, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r5, r3)
ioctl$int_out(r2, 0x2, &(0x7f0000000100))
r6 = timerfd_create(0x8, 0x0)
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, 0x0)
set_mempolicy(0x4000, &(0x7f0000000140)=0x6, 0x100000001)
timerfd_gettime(r6, &(0x7f0000000340))
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x4, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:10 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:10 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  973.657772][ T8357] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:10 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0)
r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = gettid()
tkill(r2, 0x3a)
r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, r2, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x1, 0x0, 0x4, 0x8, 0x0, 0x800, 0x10, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0xf}, 0x10008, 0x6383, 0x400, 0x3, 0x200, 0x1, 0x2297, 0x0, 0x10000, 0x0, 0x8}, r1, 0xf, r3, 0x8)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  973.705561][ T8409] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.714039][ T8409] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:10 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xe, 0xff, 0x0, 0xc6, 0x0, 0x0, 0x42225, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x14000, 0x3, 0x1, 0x9, 0x7fffffff, 0x400, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101102, 0x8d)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  973.747375][ T8409] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.755889][ T8409] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:10 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)

13:07:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  973.804447][ T8412] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.812904][ T8412] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.842121][ T8412] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.850598][ T8412] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.863201][ T8409] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.871605][ T8409] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.883510][ T8409] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.891958][ T8409] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:10 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0xfdfdffff, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:10 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  973.906072][ T8427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.914504][ T8427] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  973.970081][ T8427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  973.978558][ T8427] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:10 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  974.040277][ T8427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.048817][ T8427] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.075771][ T8427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.084250][ T8427] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.114555][ T8442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.123027][ T8442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.144691][ T8442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.153216][ T8442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.167002][ T8442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.175545][ T8442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.187285][ T8442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.195737][ T8442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:11 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fsmount(r0, 0x1, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f00004f5000/0x4000)=nil, 0x4000, 0x0, 0xdadd9261bf51412, r4, 0x2e7a8000)

13:07:11 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x1000000, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0x9}, 0x16, 0x1)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000113000/0x1000)=nil, 0x1000, 0x2800003, 0x12, r0, 0xd746000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x31)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xd, 0x19, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe86c34f138d1e27b1866adb6117ad4d800"})

13:07:11 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0xfffffdfd, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:11 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  974.631731][ T8455] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.640215][ T8455] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  974.673100][ T8455] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.681616][ T8455] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.699758][ T8460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.708238][ T8460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  974.738079][ T8460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.746599][ T8460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.771811][ T8458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.780258][ T8458] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.792978][ T8458] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.801449][ T8458] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.813648][ T8456] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.822046][ T8456] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.835827][ T8456] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.844354][ T8456] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.859144][ T8456] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.867608][ T8456] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  974.879846][ T8456] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:11 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', &(0x7f0000002e80)={0x410000, 0x15, 0x4}, 0x18)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f000000a000)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000009f40)=[{{&(0x7f0000007100)=@abs, 0x6e, &(0x7f0000008540)=[{&(0x7f0000007180)=""/87, 0x57}, {&(0x7f0000007200)=""/177, 0xb1}, {&(0x7f00000072c0)=""/106, 0x6a}, {&(0x7f0000007340)=""/4096, 0x1000}, {&(0x7f0000008340)=""/193, 0xc1}, {&(0x7f0000008440)=""/195, 0xc3}, {&(0x7f0000005ac0)=""/22, 0x16}], 0x7, &(0x7f00000085c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000008680)=@abs, 0x6e, &(0x7f0000008780)=[{&(0x7f0000008700)=""/122, 0x7a}], 0x1, &(0x7f00000087c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000008840), 0x6e, &(0x7f0000009dc0)=[{&(0x7f00000088c0)=""/80, 0x50}, {&(0x7f0000008940)=""/253, 0xfd}, {&(0x7f0000008a40)=""/120, 0x78}, {&(0x7f0000008ac0)=""/239, 0xef}, {&(0x7f0000008bc0)=""/4096, 0x1000}, {&(0x7f0000009bc0)=""/94, 0x5e}, {&(0x7f0000009c40)=""/87, 0x57}, {&(0x7f0000009cc0)=""/114, 0x72}, {&(0x7f0000009d40)=""/117, 0x75}], 0x9, &(0x7f0000009e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x3, 0x2, &(0x7f000000a040)={r3, r4+10000000})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r5, 0x0, 0x2f8)
flistxattr(r5, &(0x7f0000001580)=""/60, 0x3c)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
recvmmsg$unix(r0, &(0x7f0000006e80)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000001300)=""/181, 0xb5}, {&(0x7f00000013c0)=""/236, 0xec}, {&(0x7f00000014c0)=""/134, 0x86}], 0x6}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000000280)=[{&(0x7f0000001680)=""/140, 0x8c}, {&(0x7f0000001740)=""/90, 0x5a}], 0x2}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/88, 0x58}, {&(0x7f00000018c0)=""/30, 0x1e}, {&(0x7f0000001900)=""/7, 0x7}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/184, 0xb8}, {&(0x7f0000002b00)=""/116, 0x74}, {&(0x7f0000002b80)=""/73, 0x49}, {&(0x7f0000002c00)=""/18, 0x12}], 0x9, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f0000004280)=[{&(0x7f0000002f80)=""/226, 0xe2}, {&(0x7f0000003080)=""/9, 0x9}, {&(0x7f00000030c0)=""/189, 0xbd}, {&(0x7f0000003180)=""/233, 0xe9}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x5, &(0x7f0000004300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000005a00)=[{&(0x7f00000043c0)=""/242, 0xf2}, {&(0x7f00000044c0)=""/139, 0x8b}, {&(0x7f0000004580)=""/236, 0xec}, {&(0x7f0000004680)=""/1, 0x1}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/221, 0xdd}, {&(0x7f00000058c0)=""/37, 0x25}, {&(0x7f0000005900)=""/223, 0xdf}], 0x9, &(0x7f0000005ac0)}}, {{&(0x7f0000005b00), 0x6e, &(0x7f0000006d40)=[{&(0x7f0000005b80)=""/174, 0xae}, {&(0x7f0000007080)=""/93, 0x5d}, {&(0x7f0000005c40)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}], 0x4, &(0x7f0000006d80)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x7, 0x20, &(0x7f0000007040)={0x77359400})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)

[  974.888330][ T8456] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:11 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
openat$incfs(r1, &(0x7f0000000100)='.log\x00', 0x414040, 0x100)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:11 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xfdfdffff, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  974.991467][ T8499] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  974.999993][ T8499] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.013135][ T8499] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.021578][ T8499] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.040379][ T8499] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.048843][ T8499] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.063963][ T8499] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.072403][ T8499] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:11 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:11 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xfffffdfd, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  975.094838][ T8495] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.103319][ T8495] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.132872][ T8495] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:11 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  975.141329][ T8495] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.184149][ T8500] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:11 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  975.192705][ T8500] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  975.260198][ T8500] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.268693][ T8500] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.334555][ T8497] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.343015][ T8497] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.371885][ T8497] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.380405][ T8497] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.419191][ T8513] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:12 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0xdc14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(r1, &(0x7f0000000140)='./file0\x00', 0x400000, 0x1a0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100))
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2382)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x0, r3, 0x30000000000000, 0x1000, 0x2, 0xbae00000000})
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
mmap(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x100000d, 0x11, r4, 0xb5d14000)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  975.427657][ T8513] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.441066][ T8513] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.449506][ T8513] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.464983][ T8513] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.473498][ T8513] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.489154][ T8513] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.497676][ T8513] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1000000, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 0:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:12 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd04345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80900, 0x0)
uselib(&(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4, 0x1, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xfc, 0x9, 0x81, 0x87, 0x0, 0x4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x6, @perf_config_ext={0x0, 0x4}, 0x2200, 0x100, 0x7fff, 0x2, 0x10000, 0x7, 0x9, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0xa, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
preadv(r3, &(0x7f00000019c0)=[{&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/223, 0xdf}, {&(0x7f0000001940)=""/113, 0x71}], 0x9, 0x7, 0x1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xc880, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x5)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x1]})

[  975.600874][ T8497] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.609369][ T8497] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.621660][ T8497] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.630169][ T8497] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 0:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  975.753441][ T8542] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.761979][ T8542] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.774544][ T8542] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.782992][ T8542] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r2 = clone3(&(0x7f0000001300)={0x881000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), {0x1f}, &(0x7f0000001380)=""/4092, 0xffc, 0xffffffffffffffff, &(0x7f0000000300)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
syz_open_procfs(r2, &(0x7f0000000280)='net/icmp\x00')
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 0:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  975.813052][ T8544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.821502][ T8544] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.847491][ T8544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  975.856025][ T8544] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

13:07:12 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xfdfdffff, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  975.889586][ T8547] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.898102][ T8547] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  975.960701][ T8547] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  975.969209][ T8547] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  976.003238][ T8567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.011685][ T8567] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.029035][ T8567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.037522][ T8567] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.075779][ T8547] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.084316][ T8547] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.097301][ T8547] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.105740][ T8547] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:12 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178504f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

13:07:12 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  976.134077][ T8567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.142582][ T8567] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.199369][ T8567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.207834][ T8567] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:12 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:12 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  976.243733][ T8581] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.252168][ T8581] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.298847][ T8581] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.307332][ T8581] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 0:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e85d6132cd9bf2c2879e23527562b79f6636a5e6ada5b0e4ffa43d9b6830a714aace6c6b8904587394b6f00ed597ab1770b56677af0a5779651250a294ac478b5c09f2462e2a4926362bb90922f8ff3eac4e7701f12d8f0cadd37af0b96032f212457b7b65db42cfdaca9590270d0b3626fbbc9d04e85d7cf986400c5fe044ffa0b5dc22d6e8d9d0ea2dd6972f850920e7f02913e8443727f4ace1cfdce62b74ec0b8801e", @ANYRESHEX, @ANYBLOB="05002dbd7000fddbdf2512000000050035003600000008003a000900000005002a000100000008003900a7f00000050035001f00000008000600", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x6, 0x10, "8cf6303ee0498079b0b5944f94743626e4cd496e0fe4dd360be3b18f310e045c30a3f675d789387c8da41f360bc24a7a3cd0b3717e4b526c5c2d1440b309e844", "96331b8df07cd142054cda3ecf96063b2428923618f5452126c8d17e4d4fbf614a9a67ca83ad9f912e6ab44ffe3c2913bffe477d621209188435e5182dd5c127", "0ad901fdc853c9be771069436b12eab686014cf119f896f0b0e69ec6637c526d"})
fadvise64(r0, 0x0, 0x0, 0x3)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd700013e0df25410000000800a1000100000008009f000400000008009f00000000000500190104000000080022019e0300000500190107000000050019010f0000000800a100820000000800260002170000a31001af97e8320a78f13056b5966a14e734c6edbf22e93f8dd2bdb06c719091dcd5904384fcf5f23e3bba2956ad2c68d6009f8f3d5ded9a8de72b1b0e3decea8e048b2369f932624225ca186ba8d27149b9e47a1a1702"], 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2)

13:07:13 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xfffffdfd, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:13 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  976.365199][ T8598] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.373661][ T8598] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.417818][ T8598] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.426278][ T8598] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.449305][ T8612] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.457751][ T8612] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.469958][ T8612] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.478452][ T8612] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.517065][ T8621] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.525525][ T8621] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.555353][ T8621] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:13 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:13 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7ff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

[  976.563796][ T8621] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.602790][ T8612] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:13 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x1000000]})

13:07:13 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x40, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = accept(r0, &(0x7f0000000200)=@hci, &(0x7f0000000140)=0x80)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x401, @local, 0x1}, 0x1c)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
r4 = openat(r3, &(0x7f0000000100)='./file0\x00', 0x2000, 0x100)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x10, r4, 0x0)
mmap(&(0x7f0000767000/0x2000)=nil, 0x2000, 0x1, 0x88950, r1, 0xdf9b8000)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400040, 0x2)
preadv(r4, &(0x7f0000000280), 0x30, 0xd9f, 0x2)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  976.611214][ T8612] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

[  976.658660][ T8612] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.667157][ T8612] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:13 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0)
ftruncate(r0, 0x1)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8000, 0xfffffffffffff800, 0x0, 0x4, 0x2, 0xc, "63c16cbb8e9a42af4df6a96723081fb8a66d60dcdd068926c374c8360a90cc37dc30ab65d6e1939383cd814bc31a23894fdf751405dd438b0dc3c9161377eed7", "e4ac8e038ef4aa5ebafe57dccaf162f195d1904ef54090f73d06d767186a74c92ce0ddf0aae7c154e332b18098aff90ca89ac51e2b476c7c12985fb5ad76785b", "bb0ffe898822102605e7114f3472cb15199afe536bb098766479be4930346929", [0x9, 0x7fff]})
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  976.703908][ T8639] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.712341][ T8639] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  976.758590][ T8639] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.767071][ T8639] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.811704][ T8638] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.820159][ T8638] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.840880][ T8638] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.849346][ T8638] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x3)

13:07:13 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfdfdffff]})

[  976.864534][ T8648] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.872975][ T8648] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.909679][ T8648] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.918174][ T8648] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  976.940365][ T8647] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  976.948877][ T8647] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

13:07:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  976.996314][ T8647] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.004828][ T8647] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x24600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000200)=""/191, 0xbf}], 0x2, 0xfffffff7, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x10000)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  977.045875][ T8663] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.054338][ T8663] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  977.110489][ T8663] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.119014][ T8663] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.154830][ T8663] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.163288][ T8663] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.191414][ T8663] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:13 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x1000000, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:13 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3)

[  977.199915][ T8663] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:13 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfffffdfd]})

[  977.249414][ T8677] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.257879][ T8677] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

[  977.294611][ T8677] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.303078][ T8677] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.322497][ T8685] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.330949][ T8685] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.343936][ T8685] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.352363][ T8685] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.369049][ T8689] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.377487][ T8689] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x38)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x7f, 0x5, 0x8, 0x1, 0x0, 0x1, 0x2008, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000500), 0x9}, 0x200, 0x9, 0x9, 0x2, 0x0, 0x9, 0x200, 0x0, 0x6, 0x0, 0x16}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0)
openat(r2, &(0x7f0000000240)='./file0\x00', 0x80000, 0x22)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, r4, 0x0, 0x4)
r5 = fspick(r4, &(0x7f0000000280)='./file0\x00', 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="6d706f6d3d7072656665723d72656c61746976652c687567653d6164766973652c6e725f696e6820edd78caf6f6465733d39783178316d3925742c6d6f64653d30303030303030303030303030303030303030303030342c73697a653d31253367302c657569643ed75b1a135960dfd888d957877eeb2ab622f471322409b8a65af99342b687c36822b4bfa11826b67a88270083f7eeb79ee0c610c44651f33264f09a7c1ae6870eb8f4de2680c6259c41492ef2e62e380bb112043919de157ba2846967ff6a62", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'])
write$nbd(r4, &(0x7f0000000300)={0x67446698, 0x0, 0x4, 0x3, 0x3, "450d54ec9cfaf2128c64943238df2a9a71850e70f8e273bd39ec157832eff5147e1ab74d75bb82c0c13ab89818943d4e43084028fdb66bd1b0d02596b2a78122744291e409f13d2c01ccbff292b8be88f8067e823045d05005e2f08684a8a67b29855e7e3d4c12f4025456f16f4dc09747055cec23236beb97df78961b8fee5ef51e7bc78c14b3fc67ea36a77c82e5c3f1b08f912b19061d57711060e4ccbc8eb0071de2743a9657d5b2015435c04d21174dd5d22fa4c8466f99005e837d5bc539b6f5"}, 0xd3)

13:07:14 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

13:07:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  977.391853][ T8689] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.400299][ T8689] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.440350][ T8685] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.448814][ T8685] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

13:07:14 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xfdfdffff, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  977.486533][ T8685] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.494981][ T8685] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x100000000000000]})

13:07:14 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200, 0x181, 0x1b}, 0x18)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x80003, 0xd0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0))
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x80, 0x1, 0x1f, 0x0, "c08204722b33c24c9de984af944862771d24b68630c208fd20eaaf773576f396202dc4235bcfe01b720817cc4a13d4b493a0b13b6efe4d0b219de66a552506c1", "375394e06b991307f1cd36b0498c2531ae7de5cb9f9d2db6cc21ae146c20c4f3", [0x2, 0x7ff]})
fadvise64(r0, 0x0, 0x0, 0x3)

[  977.557228][ T8702] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.565682][ T8702] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.616940][ T8702] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.625462][ T8702] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.655253][ T8711] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.663697][ T8711] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.690110][ T8711] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.698575][ T8711] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xfffffdfd, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)

[  977.718720][ T8719] loop0: detected capacity change from 0 to 4095
[  977.739381][ T8715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.748265][ T8715] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x80000, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400)
fadvise64(r0, 0x0, 0x0, 0x3)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4c100)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x2f8)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={<r4=>0x0, 0xfffffffffffffffc, 0x8})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000880)={{}, 0x0, 0xe, @inherit={0x68, &(0x7f0000000400)={0x1, 0x4, 0x9149, 0x5, {0x21, 0x7f, 0x3f, 0xffff, 0x6}, [0x7, 0x97, 0x5, 0x1]}}, @devid=r4})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000003c0))
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffe00000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5033f85d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFTA_CHAIN_FLAGS={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000081)

13:07:14 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
mmap(&(0x7f000001c000/0x13000)=nil, 0x13000, 0x8, 0x4010, r0, 0x94bdc000)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000100)={@id={0x2, 0x0, @c}})
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  977.837064][ T8715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.845580][ T8715] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.923392][ T8726] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.931957][ T8726] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.949723][ T8726] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  977.958191][ T8726] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  977.972041][ T8734] ==================================================================
[  977.980127][ T8734] BUG: KCSAN: data-race in __io_queue_sqe / tctx_task_work
[  977.987314][ T8734] 
[  977.989623][ T8734] write to 0xffff888101bd22e8 of 4 bytes by task 8731 on cpu 1:
[  977.997240][ T8734]  __io_queue_sqe+0x1f9/0x360
[  978.001919][ T8734]  io_req_task_submit+0x88/0x150
[  978.006856][ T8734]  tctx_task_work+0x1b8/0x460
[  978.011531][ T8734]  task_work_run+0xae/0x130
[  978.016029][ T8734]  exit_to_user_mode_prepare+0xf8/0x190
[  978.021573][ T8734]  syscall_exit_to_user_mode+0x20/0x40
[  978.027039][ T8734]  do_syscall_64+0x49/0x90
[  978.031453][ T8734]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  978.037347][ T8734] 
[  978.039661][ T8734] read to 0xffff888101bd22e8 of 4 bytes by task 8734 on cpu 0:
[  978.047190][ T8734]  tctx_task_work+0x361/0x460
[  978.051864][ T8734]  task_work_run+0xae/0x130
[  978.056364][ T8734]  exit_to_user_mode_prepare+0xf8/0x190
[  978.061908][ T8734]  syscall_exit_to_user_mode+0x20/0x40
[  978.067369][ T8734]  do_syscall_64+0x49/0x90
[  978.071787][ T8734]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  978.077680][ T8734] 
[  978.079994][ T8734] value changed: 0x00000001 -> 0x00000000
[  978.085701][ T8734] 
[  978.088047][ T8734] Reported by Kernel Concurrency Sanitizer on:
[  978.094183][ T8734] CPU: 0 PID: 8734 Comm: syz-executor.0 Not tainted 5.14.0-rc6-syzkaller #0
[  978.102851][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  978.112901][ T8734] ==================================================================
[  978.124529][ T8732] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.132971][ T8732] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfdfdffff00000000]})

13:07:14 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x1000000]})

[  978.179622][ T8732] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.188135][ T8732] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:14 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:14 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)

[  978.256663][ T8732] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.265127][ T8732] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  978.334132][ T8732] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.342677][ T8732] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfe, 0x9, 0x4, 0x72, 0x0, 0x2, 0x480, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x20, 0x100}, 0x2000, 0x3, 0x2680000, 0x3, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r0, 0xd)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  978.385204][ T8741] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.393669][ T8741] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  978.451753][ T8741] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.460220][ T8741] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r0, 0x0, 0x2f8)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000400)={0x1, 0x3, 0xb2, &(0x7f0000000500)=""/178})
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x4c, r3, 0x9eec7f43d0c61617, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000045)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4041086}, 0x11)
r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  978.545573][ T8744] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.554034][ T8744] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  978.582335][ T8744] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:15 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)

13:07:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  978.590777][ T8744] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xffffffff00000000]})

[  978.637671][ T8757] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.646168][ T8757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  978.742489][ T8757] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.750935][ T8757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfdfdffff]})

13:07:15 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)

[  978.803220][ T8772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.811697][ T8772] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  978.831555][ T8766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8766 comm=syz-executor.4
13:07:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  978.856774][ T8772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.865255][ T8772] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x6, 0xf7, 0x7, 0x7, 0x0, 0xffff, 0x80, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x6}, 0x8004, 0x6, 0x8, 0x7, 0x9, 0x0, 0x9, 0x0, 0x5, 0x0, 0x4}, r3, 0xe, r1, 0x1)
fcntl$getown(r2, 0x9)
r4 = socket(0x5, 0x4, 0xdf)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2032, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=client,uname=},euid>', @ANYRESDEC, @ANYBLOB="2c302c66756e633d4d4f44554c455f434845434b2c8273757569643d3762360f343238342d383933372d375025392d666461356d37ecc68a3c4d9258be1df255a303f0c73b6824373430386431612c666f776e00"/95, @ANYRESDEC=0xee01, @ANYBLOB=',me!sure,\x00'])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  978.912569][ T8781] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.921022][ T8781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  978.938641][ T8781] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  978.947102][ T8781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = socket(0x11, 0x800000003, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r6, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r6, 0x3, 0x6, @dev}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r7=>0x0, 0x2f, 0x3, 0x6e, 0x0, 0x15, @remote, @mcast1, 0x8000, 0x8000, 0x3, 0x9}})
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x158, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x24004150}, 0x4000040)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r8 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r8, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:15 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.044093][ T8772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.052563][ T8772] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x1000000]})

[  979.094162][ T8772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.102661][ T8772] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:15 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:15 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x200800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r2, 0x0, 0x2f8)
read(r2, &(0x7f0000000100)=""/18, 0x12)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:15 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfffffdfd]})

[  979.190721][ T8795] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.199183][ T8795] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  979.257925][ T8795] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.266409][ T8795] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.312285][ T8817] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=1)
[  979.333891][ T8816] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.342536][ T8816] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.357079][ T8816] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.365538][ T8816] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xdc14}}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x4df3, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  979.406795][ T8819] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=5)
[  979.445798][ T8805] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.454261][ T8805] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r0, 0x0, 0x2f8)
syz_open_dev$loop(&(0x7f0000000200), 0x80000000, 0x418400)
fstatfs(r0, &(0x7f0000000300)=""/229)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)={'syz1', "20ea0d41b50a96f028fe0fc62fc606cfb3d2297ce33c2bf699fd5bb5ba56cf8543cdcce12cc2c0408fe116534b0d4d72a37fc28ab46683c8519466eac26baa11c39cfc2cfc9624b5a402661d075093254b2ef8c72afdee42d86b63cf7e1c05bb2c150c853bdac59a063bf69ba27df4c1dd48a51a11da0de10273c824835b17a89f351fc7ee9d12928dfacd2ed7b1197d0f879bb43c9d5f73f0a1861c194927d6c60a06f06e6186cca610b564404f8dda52852536aa62bc2544a71f17abff1f759736d3b0002ac4deabc2ef764bfb7044dcacb9eee296406033a9f3f8601050b38542b754ced44d4bcebfd6e41bc86fa4b5a8435368e1b56a0149555735864130ae1c89836e5fefcbd37df1f4c34bc1178ccd922c3d4e1ab7cde49a9c61e2fd732eaf997dec80babb0cdd09dd95ccb6cc50588bc912f727246c40373bebcb30743ffaf45fe4553ffab31792d42d27f28ff7d8ad18485dd5da0a2003a6cb77ff00fd95f4c0ab550614d26d8119329fe28696cd02b34950db613da12e7ceabaeb82ea4dcafbedeee2445852e9a682be673d4d90fa9d62c9047ead826f1e16011c121edd0e12bfea42de949366c6be638f908921dac8f3fc34ceef3a811548593779eb3395abcd9a061db4677b1718fdacfd8df7e8249e2c75909f75439035445af37907b1ad8912bad229f675361c4ab759a5618052c6b8afef53112d527b27166eed9a5520163ead4a66c6074fd232829d2afc2373f9207782d83184260c5bd0877e60536747142990b9dd650e4aef45fbc003431791d35bb7b3615e3cfdcaf681875f8e7eb22981020eda9cd36cfdb06265d5b4a685f16ba5e589ea29baa0d6127a04196222de4efdd91ae6326cd147b2d32611d8fdd64b9f112e233b6f0124255363af2f760a916b4353f47a89382c8f01add77e6271b633d8be3dac122dcf2ad94abdf734867fa98014a0776faa27674116a43910ae2d1b49f763e4e3c41ebba595a716a3b8963a09e6d624933d1a15c2904ea685da7b08917c8bff7230a54c32adbed7c1b1be038a6ca41a414fc1697b14bbed4ae986aa74b0128e7f44217d64ac52efb44d8456ff09756ea1080168f312d00082d364f2f286deb34ef2a719d3feac239ebdff2344c7a8cf227ca0ac33384e35fe88745d3aacd6c51f9aa3ca3e775812ecdf1f29778a4679056c6fac2acbb2f65f6793824c6431d25aad2e5f7fee58220574bc3f22d67ead747cb762df0c3157b13d961be274b74815694475616ca4fd58b892577d1a0cb80826ce747ede2dc1269e2efeab7a8edf45baac6c89f60cbcd3a16c694b6b936bd404bcc6028663055509618ac984ba6bef6eaa24fd36d74f8e16c20089cb119583c54ab589a849f0667e1ad3db3862c1df7ebf05638c8c3b94671ed35b7b220ebdd96df3dd2d4a21a1c62f6c85fa8abb1b5e62df4689277ad88dc81a3dda76d1f20ed4ab9f3f7445ebe81b7490811ebec8d982ed9b88be9d9a89f018596d9df6b0fbef3410bc234b4f134e9e988857dd147c7019b4e4e6d848b85b9e53afe2f310d6f4492cbeca1fca9bce723ba5dcc1a01bda5c477febc8350db2fa4954b30404dc4a595ca36252437df79570a6fd8a09440336c23374796bdace4ff9478301375a650479a58436d1b36f46b9db570983ffa756d40c5ddfeba8a03dd8484efaddf61d12423d9c91ae3f4651f335944e0baa1737cb1be985e4a3073ba4b0b6263c36217e4b0f0ed425d9b6d42eac078096a8ea9e1939d8c0faf7ea5d27d0b2ecfa0c0dc1b23b0aeead4a9bf7929927343b8c04463e9a247ea7206fb0802572f96543c6a3f6ebc3372905a81212a0bf599610ca7941465518fe8223255a67a6b1fce2ef447eea2f447815928295e56d1026564822e2cf93e4fd0e16d90a3ca2992dd5e6eb2d6fd230c2ce62cf4e663e6137325358f57eae7e6c4ff2ce7cb1137ecaa284ce6f17806e9c9affa480270702f6abf51e5709c6001043a13c5c18761f07a9f1376f11697201e03808fbd00da29bdb25a37cd1b87015f0dde6d0ff555d75f3abd2218603bc467e2beda10a1aa8a80b559d019b60a2066a7e682871e308cac20cf744fd729ac37bbfe9af5bf8cc9081ac82eaf00c668db83133ef3a650fa6641d697d46faff5e28f695d8b5b0f8a7a67897b7bef7de9019b4e6632604fc39f85306cda19f798809ab39343a9161681067c3d9ce3a514eeb0531dd2335431ee0c653228a36bb971956fe5dbd28852fbce853d10a25c3ac97e9edfdb7f32aea934a254f2cf034aa2c7a9cd395f7bef88fb52d7555eaaabd8ae8a0a9c53830700bddf2976ac49a6788c3834f9a70db584c8f20562db51af78db259121d1db7fde6e006db7a5516145ee139c5b4f68b9c77c3a51c55eab12b5c7f8bb8dec31e788f24516246f1820ce462188cadc1f578504ff2520c4f39caf8787442540e1e84f264b14063eda420feffee0f25fbec4dcef9cf2ab876de7591cab931325d3026f68625286e26de1afcfeeb0f4643e80e4ebaf176da25e5a7ff65cede27b08deec4b9bbd55450a51dd66aa71bf7740fa6502f1f22b727841d8f4450e9eb61cd98898eb3d2e8a3602b05bf33dee4a4cceb097edf8cfa4b30b381777dcf10a922913d7e9a8edcf9d30e488e7b8625ec2fb7eeda88bf74ab985519ddfbc2468f5d01be32ac18388c13af669cfa41681ece413a851e39ec82c21c8aad1deaf64b6cbe48900d0a86722d2f890f473e7f2e430e4509c2d56f5f52252a37ec75684d23618263f115ee85ac808e2bcdf2f640fb50cce81ad010c45dd1feb2dec99f2c8b98fc1fbf0ad27bebd3c99df99b495705c97a11bcbb0663fde7c13b5c07864503963f0568e1932b77bfae99c6893fd5f80b4c9a02f7e0df3ccef7e3cfeb64a3b9dcba21dc7879966b64d2ec07d9f8cf58994461ba5636f756109b3f9218ff003fd2b347741d9552eaffdc79f3ace2b7f14f440c79a3df4f30185c39ae6e43f44a310873fb2687f9a959a9164f337f0950c90ad5355986ba89ecc22ef1a18b2125280bf5a8295eee34a10053123553a7f76d69810c7a528adbffb5977a1e77ab3daf088ea8a96fa819db73890bdb137b7b29a69b611830491ec419770cff32aa18d7586b58efc6a4097f9fc70b826d2645b216afd946ff994337682fd4932a26b0062ebf808494aa2ce594810279397b84d7271c76edc0ec72798623af17b80154ecaa80ec36101d785cc9fb0010fd11e17a5ae521becb4556d33e3951a54c5d4d88309efc48e863eb2031106f7dac5a1c0a2bad73e9c8b36064dd462f5ce817544bfdf6a11d43da1754108a4eb814ec4e0dcc83712c9374c87bca96aa260913dee8d56934e7cabd692d174848f5b22c0299ecfae9d54b6da1a8bf78f476e40df71583c5ab8aa92cd760576a4ae9169bc876582b185f51e30cc4e5503dfd96203f80fc1d54f41eb3b5e0bee9755ec24497472ee81ba2f4a05b9a52f0581b84360cb9a741293d120358665394fe32ec626106b2e02acd9a5ef9235c9b895112ca2804e5c3c712d31248a9d463703db1f968eb8c4cf86d0757c7b793b26cf8c4a63acd683527fc5fee1cfc88ce622f45fc0f9af56c565b966242a393b570685e207263de4bfa104478c5e5ff0c2c48e548ae19714a6e0d0d4634ead210da0fa938f21929ebb74664b4872a02d6e278b3eee0ce5cb9b1a88141c2d98f6d91d5fd17828d13346405570b337615911fe9fb021e2a82d76115c6068b6110e733ad996c08bdbbc872636cb7d27395c651ed463ca63c763d1ce181003c739fe98349ea566d7bbecc48adb23be3e83dd9fc1fb4886f848c75c034434ecb121a6d57b9520d76a0ba2a0ea39c9dfa05b1a224d824d500168fdc9baff89bef1a9545368954128a6cfc5a0a89bbcffffa766ed0dcf90a389286f13d1a9dae11fe414e81e8e9efa8707a34f6671520323a409e8d7f7340cfe168ca4e57457eb3357495cd94d95dd368054e5b1c009fe1e26a9f38de8fa4d38912b891f9a987b02e14d39f566f954edcd9f1cf03b73a2cc96bd589148b2e101a369fd87832d72d0e4db2ed9a7a08da8a4f49f0c1c5fa9d8bd4907d8fe6de92dc7335f3304aaedf72b067366c47498b4fc87e204a79b226bc728064e007b676346a2eb23a16cd1cb0bac42239049a87a332185b60bc98544dfeeea29736396339fe2ff9dc227ab7ad7ee8000632927145eec15d8af1ad7be35b62630ae555a6639aa30059113d46b97ea51908e51ceb83dc3a6644dbcffc4785e02f4c241c88e39814b95b6cc793e54bb46c67fd398a34afdae65ccd528fd0e8b7ad442c8037d75895d7ea0871bb852b99ba12b680fa76239107605a9de407ca72c7baf63a648549301cf67bf9c33e7df3f04aa8b7a8b84cdaca650cf231849184115150d781db29d15ed65a7ef1c07cd8cd4ebbc5fb79505d9b37664fd4b5dcafe133978aa2d0f7a5a48624089d314145f8dcaf594171286d4537a91093de7fdcaf1bb4f663fc9a378b2d91ae9cf9cc4c8f0e19facfa01f227416ee9ef81e879d3dd528e569e45de4c1dda17e72e4ba90c39fafb8c6776e633551e755f0cc3f9ed1fb0851bcf31d4fd724907d0e8cca8f10fc76ed13622b0c076c10e3b1dc7fcf9260458c5861c1f81ce84418439b30082a19a2929846afe0c16c9650b0d0be48d420f06dbd17aa700e29aa9965a93e3f700051a320f1016639738802776c284f72dee8b6978953be41fffc4ab87a4c00fc1bcc81a760e053b9d8c57af43aad4ed0ea54e04a2ea98af467131ef072d3136dfa41f947fb0f1f3974f78db9325e0a58418e8aa763439eb5e1b51a85484aaa44ba906bf2a81f52c2a52606eb07d07923878083e25429ba67eebe593ea7b21e331eb103d23ced693b4368bd7708ce56611b3d2a150640f79aa7ed1bac46d07538b7dd0270b82d4ea586d73f094674371fa97e419539ac619480ffc6c8a133750a194593a185723d9a50d6b73a810c2f6f18b3ed217d90dd461d3a2c936ca0a10997facd308b7a1d58d98099654289d3a0605206cb9776a9bce3e64efd2fb8be4e06b361b2acd908fa00d7267cc10ca24a5556f806ba9501c04ab1cfbbf512415858fbd33a73c4ba021ccff8913d5a7b4d203855643f7499af269f58603fee19b6cd23df15fa0990e6c2baa3efd8298157997b78d09f91e60a41e5b213e4cc181d0ec18801caf54bff0f7f9a214fba12653bf5f4f13bd93b483e9eea4568fac1c4cb3f283b2f2ff31f73e0f0ded02cc37083f532defc0d4c4095c2597ef4e09ca41ce038a36563dc2f01f7c1d189f6b1a8cf4180d3675ed2d5ca8f74714a8c6d14cf03bfb2bea7f2993d9093a5477de390bf0fa88f3bbcfd6b2bfe72b107cd9c3d8912828d41a005f435bc324b1a09de77317c64b18d6f3bfafa57f37d20d24c724f19197d3afaacfaa439d71a3cce8aba57587054cffbb12c8b7de6b247501c9fc043695a32c79c6ed02d62ab3bc4a4a19de45435fb6ce0a247351394c2468495efb2d09b14203605467650281e88c23aa63be1f7c06a17b9915b204d2e189982a93c9c69d106ca5a93435d1e3b333ff706c459115488364bfc5a38156e50b72e31bc9d54d18f92130db99324f2b6cbac19ac8a57e5ba245b3392d162b2e399beb17c3d2eed1b46c137237b8cdcff38dd33a7879ce70418bee51b7c0a1b343a6c383a3429f2b92177fcd07a7b42c4aff49452e614dc780ee05896ce3b5766b10142c2e2e57da5f741d3e9767b7f5d2fb77ab32888ce383aad"}, 0x1004)

13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.548404][ T8805] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.556890][ T8805] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  979.582722][ T8795] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.591223][ T8795] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  979.614841][ T8795] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.623300][ T8795] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfdfdffff]})

13:07:16 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x100000000000000]})

13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800001, 0x180012, r0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x4}, 0x7)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa9da67bfceae4dbe, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x81, 0x9, 0x8, 0x0, 0x80000000, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r2, 0x1, 0x8, 0x20, 0x9, 0x0, {0x3}}, 0x8)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r2)
ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xfffffffe, 0x0, 0x2, 0x9, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369d2d550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x1, 0xff]})
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000100))
mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x20, 0x2)

[  979.758346][ T8834] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.766806][ T8834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  979.788444][ T8834] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.796910][ T8834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.862786][ T8845] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.871228][ T8845] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  979.883716][ T8845] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.892221][ T8845] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.905814][ T8846] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.914266][ T8846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  979.942329][ T8846] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.950779][ T8846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  979.988785][ T8848] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  979.997284][ T8848] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.048272][ T8848] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.056747][ T8848] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfffffdfd]})

13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  980.100401][ T8834] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.108855][ T8834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.129060][ T8834] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.137553][ T8834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xfdfdffff00000000]})

13:07:16 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40001, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r2, 0x0)
setfsgid(r2)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r4, 0x0)
setfsgid(r4)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r7)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r2, @ANYBLOB=',huge=advise,mode=00000000000000000000007,huge=never,nr_inodes=32K,nr_blocks=kx1k,gid=', @ANYRESHEX=r4, @ANYBLOB=',pcr=00000000000000000015,fowner<', @ANYRESDEC=r5, @ANYBLOB=',\x00=#:\x00,fowner=', @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f726f6c653d2d252c7065726d69745f646972656374696f2c6673757569643d36386430361b35fa2d313466342d355238352d653064302d30343032386b54002c7375626a5f726f6c653d2f6465762f6c6f6f7023002c7569643e", @ANYRESDEC, @ANYBLOB=',\x00'])
preadv(r0, &(0x7f0000000100), 0x0, 0xd9f, 0x0)
r8 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r8, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.205978][ T8881] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.214479][ T8881] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:16 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:16 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x9, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff7]})
write$binfmt_elf32(r3, 0x0, 0x2f8)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
fsetxattr$security_evm(r3, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "f83435b1e6c0a61b918f338e1ff1da43"}, 0x11, 0x0)

[  980.260049][ T8881] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.268607][ T8881] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.315349][ T8880] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.323843][ T8880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.351447][ T8880] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.359971][ T8880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.392267][ T8882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.400692][ T8882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x100000000000000]})

13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:17 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x9c}], 0x1, 0xd9c, 0xfffffffe)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x4, 0xa, 0x18, "9cd561313f7be6838e94d8bd063c8755a98f0c0df1a06bc455a2982c9dd385c36b2e63f33a9bd42f06d344fd2183239125e3787a7edcf75418a52dee04b256a1", "f221bd30916d25b95eda8bee6908ab8c04cfe88cd4fe9111217b3fa0083335db8ec575d118bce5ffb0ae4e86922b4e200c2b6567abedd27784fc205126014716", "115cfda10fc5dbf12388349d33c9a2f84b977c969e8955e4ac3a6eb2cf1d97f0", [0x1, 0x7]})

[  980.415066][ T8882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.423507][ T8882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.502163][ T8908] loop_set_status: loop0 (À‚r+3ÂL�鄯”Hbw$¶†0Âý ê¯w5vó– -Ä#[ÏàrÌJÔ´“ ±;nþM!�æjU%) has still dirty pages (nrpages=1)
[  980.523126][ T8917] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.531573][ T8917] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.545996][ T8917] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.554453][ T8917] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.569418][ T8904] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.577853][ T8904] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.592381][ T8904] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:17 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0xffffffff00000000]})

13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.600805][ T8904] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.620703][ T8916] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.629222][ T8916] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.658751][ T8916] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.667206][ T8916] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.694280][ T8904] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.702779][ T8904] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  980.718637][ T8904] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.727085][ T8904] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfdfdffff00000000]})

13:07:17 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x40081271, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:17 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x42720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6be48e2037f9bdf3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674419bc67c2373178503f500", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfffffffffffffffe]})
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/120, 0x78)

[  980.779835][ T8929] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.788299][ T8929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.828166][ T8929] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.836623][ T8929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  980.897449][ T8951] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.905894][ T8951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x1000000]})

[  980.990721][ T8951] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  980.999186][ T8951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  981.038589][ T8949] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.047059][ T8949] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.082599][ T8949] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.091046][ T8949] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.113612][ T8948] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.122043][ T8948] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.135863][ T8948] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.144321][ T8948] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.164205][ T8963] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:17 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x1a8}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x34)
ptrace$cont(0x18, r0, 0x0, 0x5)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x6, 0x3b)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x1f, r0, 0x101, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x400082, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r3, 0xe5ff1000)
fadvise64(r2, 0x9, 0x100, 0x1)

13:07:17 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  981.172658][ T8963] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.188476][ T8963] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.196955][ T8963] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:17 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  981.270555][ T8948] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.279056][ T8948] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:18 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x18, 0x4, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x3ff]})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x13, 0x2000009, 0x0, 0x6, 0x1b, 0x1, "d5ec01ba0d33d65135c1a0108f3cecfe1748e65b53b217b4905f1c9d1da5b1dbadf02731230111268bc14a740f8270c4fb2356877ff18d16e9d83dc1ee8e8173", "dde45171eeaae25191a5e3b1d1a3242a66a50eee29bdb9ede090cc0c59bea991d342099e04456d42b29ce962b9f54859f3d5ecbc38ead47a300a58857fb0bb41", "628159e5846f051fe853bed11dbccf36be2fb457f46cb96d256a837267d9fdc6", [0x5, 0xfffffffffffffff8]})
write$binfmt_elf32(r1, 0x0, 0x2f8)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0xfffff49d)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  981.330876][ T8948] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.339338][ T8948] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:18 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xffffffff00000000]})

13:07:18 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:18 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfdfdffff]})

13:07:18 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  981.482695][ T8994] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.491146][ T8994] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.549962][ T8994] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.558443][ T8994] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.583257][ T8991] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:18 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  981.591697][ T8991] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.673146][ T8991] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.681591][ T8991] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.696715][ T8999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.705214][ T8999] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:18 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:18 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  981.717523][ T8999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.726050][ T8999] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:18 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x3a)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x2, 0x3, 0xff, 0x0, 0x2, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff, 0x8}, 0xa908, 0x6, 0x8, 0xf, 0xb3, 0x13, 0xdf, 0x0, 0x7, 0x0, 0x6}, r2, 0x8, r0, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x80041284, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200))

[  981.782902][ T8999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.791404][ T8999] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.847529][ T8999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  981.855997][ T8999] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  981.910380][ T9017] ==================================================================
[  981.918487][ T9017] BUG: KCSAN: data-race in io_submit_flush_completions / tctx_task_work
[  981.926815][ T9017] 
[  981.929128][ T9017] write to 0xffff8881326a42e8 of 4 bytes by task 9022 on cpu 0:
[  981.936743][ T9017]  io_submit_flush_completions+0x7e1/0x890
[  981.942551][ T9017]  tctx_task_work+0x38e/0x460
[  981.947225][ T9017]  task_work_run+0xae/0x130
[  981.951747][ T9017]  exit_to_user_mode_prepare+0xf8/0x190
[  981.957298][ T9017]  syscall_exit_to_user_mode+0x20/0x40
[  981.962760][ T9017]  do_syscall_64+0x49/0x90
[  981.967171][ T9017]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  981.973064][ T9017] 
[  981.975378][ T9017] read to 0xffff8881326a42e8 of 4 bytes by task 9017 on cpu 1:
[  981.982908][ T9017]  tctx_task_work+0x361/0x460
[  981.987591][ T9017]  task_work_run+0xae/0x130
[  981.992096][ T9017]  exit_to_user_mode_prepare+0xf8/0x190
[  981.997644][ T9017]  syscall_exit_to_user_mode+0x20/0x40
[  982.003129][ T9017]  do_syscall_64+0x49/0x90
[  982.007542][ T9017]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  982.013439][ T9017] 
[  982.015752][ T9017] value changed: 0x00000001 -> 0x00000000
[  982.021454][ T9017] 
[  982.023767][ T9017] Reported by Kernel Concurrency Sanitizer on:
[  982.029905][ T9017] CPU: 1 PID: 9017 Comm: syz-executor.0 Not tainted 5.14.0-rc6-syzkaller #0
[  982.038569][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  982.048615][ T9017] ==================================================================
13:07:18 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:18 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfffffdfd]})

[  982.058990][ T9019] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.067432][ T9019] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:18 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  982.146094][ T9019] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.154563][ T9019] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.211847][ T9027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.220303][ T9027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  982.294855][ T9027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.303328][ T9027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.370604][ T9019] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.379056][ T9019] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0x1000000})

[  982.431294][ T9019] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.439823][ T9019] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.459997][ T9027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.468436][ T9027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.580504][ T9027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.588963][ T9027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:19 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0x100000000000000]})

[  982.634327][ T9041] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.642798][ T9041] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  982.715620][ T9041] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.724078][ T9041] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.754320][ T9048] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:19 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  982.762773][ T9048] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.783697][ T9048] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.792143][ T9048] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0xfdfdffff})

[  982.886199][ T9048] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  982.894682][ T9048] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  982.941560][ T9059] ==================================================================
[  982.949722][ T9059] BUG: KCSAN: data-race in __io_queue_sqe / tctx_task_work
[  982.956921][ T9059] 
[  982.959230][ T9059] write to 0xffff88813330f2e8 of 4 bytes by task 9054 on cpu 1:
[  982.966842][ T9059]  __io_queue_sqe+0x1f9/0x360
[  982.971515][ T9059]  io_req_task_submit+0x88/0x150
[  982.976450][ T9059]  tctx_task_work+0x1b8/0x460
[  982.981121][ T9059]  task_work_run+0xae/0x130
[  982.985618][ T9059]  exit_to_user_mode_prepare+0xf8/0x190
[  982.991157][ T9059]  syscall_exit_to_user_mode+0x20/0x40
[  982.996622][ T9059]  do_syscall_64+0x49/0x90
[  983.001031][ T9059]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  983.006920][ T9059] 
[  983.009234][ T9059] read to 0xffff88813330f2e8 of 4 bytes by task 9059 on cpu 0:
[  983.016765][ T9059]  tctx_task_work+0x361/0x460
[  983.021437][ T9059]  task_work_run+0xae/0x130
[  983.025929][ T9059]  exit_to_user_mode_prepare+0xf8/0x190
[  983.031470][ T9059]  syscall_exit_to_user_mode+0x20/0x40
[  983.036927][ T9059]  do_syscall_64+0x49/0x90
[  983.041335][ T9059]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  983.047222][ T9059] 
[  983.049530][ T9059] value changed: 0x00000001 -> 0x00000000
[  983.055229][ T9059] 
[  983.057541][ T9059] Reported by Kernel Concurrency Sanitizer on:
[  983.063677][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.3 Not tainted 5.14.0-rc6-syzkaller #0
[  983.072338][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  983.082378][ T9059] ==================================================================
13:07:19 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  983.093630][ T9048] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.102066][ T9048] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  983.158547][ T9061] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.167013][ T9061] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xfdfdffff00000000]})

[  983.200651][ T9061] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.209125][ T9061] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:19 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  983.250717][ T9061] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.259181][ T9061] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  983.319329][ T9061] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.327844][ T9061] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0xfffffdfd})

[  983.374147][ T9067] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.382604][ T9067] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:20 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  983.447943][ T9067] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.456445][ T9067] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  983.514106][ T9076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.522557][ T9076] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  983.544652][ T9076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.553167][ T9076] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:20 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [0x0, 0xffffffff00000000]})

[  983.701790][ T9076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.710270][ T9076] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  983.761789][ T9076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.770308][ T9076] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:20 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:20 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00')
fstat(r0, &(0x7f0000000240))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r4, r4, 0x0, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000480)={r5, 0x0, 0x7fff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r3, 0x0, 0x8, 0x9})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x20010, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffff, 0x3, 0x0, 0xa, 0x2, 0x10, "a49aacc859c6865d16b05953c70abeefc64a1add09a31dc387f3fb2b828a59e4f09db69e11d36086d3423ac1e3c94be8f1cc7a0b3b112b2b44bf81f151bcd7f4", "1aed75e5b2aa77eaf387ce641d52f891af142eb62baa2e3864123deeeee83a70bd8bf77ef2f0417eaeea006d2cc0cc64f2ec11e030352488a783bb8bce5e1aa3", "da1203dd626d40b2b7be9281590955f391f8aff19a142654c532c8b7787ef898", [0x2, 0x8]})

[  983.890621][ T9092] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.899142][ T9092] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  983.986465][ T9092] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  983.994953][ T9092] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.063573][ T9092] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.072208][ T9092] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.118430][ T9092] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.126891][ T9092] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.156657][ T9101] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:20 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  984.165114][ T9101] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  984.230260][ T9101] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.238717][ T9101] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:20 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  984.306797][ T9101] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.315386][ T9101] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.369064][ T9101] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.377532][ T9101] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:21 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  984.495751][ T9112] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.504211][ T9112] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:21 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x11)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0xdc1c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:21 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:21 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  984.619558][ T9112] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.628010][ T9112] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.714604][ T9112] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.723080][ T9112] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.792581][ T9112] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.801031][ T9112] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:21 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0x1000000})

13:07:21 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:21 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  984.929726][ T9134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.938208][ T9134] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  984.978825][ T9134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  984.987283][ T9134] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  985.033959][ T9142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.042415][ T9142] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:21 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:21 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  985.121080][ T9142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.129551][ T9142] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:21 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  985.226417][ T9134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.234921][ T9134] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  985.328483][ T9134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.336948][ T9134] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0xfdfdffff})

13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  985.442726][ T9159] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.451163][ T9159] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  985.480743][ T9159] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
13:07:22 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
r1 = gettid()
tkill(r1, 0x3a)
r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xff, 0x43, 0x80, 0x10, 0x0, 0x3f, 0xa8000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x7fffffff, 0x10000, 0x4, 0x7, 0x7, 0x70d, 0x0, 0x9, 0x0, 0xbf0}, r1, 0xb, r0, 0x8)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
r4 = fcntl$getown(r2, 0x9)
rt_sigqueueinfo(r4, 0x41, &(0x7f0000000200)={0xb, 0x5, 0x498d})
ioctl$LOOP_SET_STATUS(r3, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:22 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  985.491213][ T9159] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  985.587627][ T9159] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.596083][ T9159] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  985.707594][ T9159] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.716072][ T9159] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xdc14}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/111, 0x6f}], 0x1, 0x4, 0x6cb)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8", [], 0xfffffdfd})

13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  985.846679][ T9183] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.855142][ T9183] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  985.892691][ T9183] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.901142][ T9183] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  985.969677][ T9189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  985.978225][ T9189] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  986.100553][ T9189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.109019][ T9189] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  986.127087][ T9183] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.135581][ T9183] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r1, r1, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:22 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  986.176497][ T9183] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.184972][ T9183] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:22 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0xfffff800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:22 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:23 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000300)=""/177, 0xb1}], 0x3, 0x5, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r2, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:23 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:23 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f00003cb000/0x1000)=nil, 0x1000, 0x2, 0x1010, r0, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4)
r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r3=>0x0)
r4 = fsmount(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x9, 0x7, 0x5, 0x0, 0x7fff, 0x88, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x10}, 0x40200, 0x2, 0x7fff, 0x5, 0x4, 0x8, 0x6, 0x0, 0x7fff, 0x0, 0x6}, r3, 0xa, r4, 0x1)
ioctl$LOOP_SET_STATUS(r2, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  986.397198][ T9219] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.405735][ T9219] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  986.459662][ T9219] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.468129][ T9219] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:23 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  986.531912][ T9219] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.540368][ T9219] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:23 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000085baa174f0cb114200000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000f1ff00000000000000000000000000000000000000000000002000002b2432640475055286f616f34595fba9ce247a79ad034ebec698460b63e104b138d9b42c785b870156a30c45c897aa5bef137e51430a1eb1a94c48b10b4cd54fb16473092a1f4fb42d0286922b73697b476815f2373f341cf58a15ccbf54c3bc062972ef5c44dd7290adbae854b8bd58cdaa671888ab34899c7363c3dadb232687d835f31058f43ce241f7f94b"])
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  986.642469][ T9219] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.650923][ T9219] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:23 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x15, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r2, r2, 0x0, 0x4)
execveat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000200)='/dev/loop#\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='/dev/loop#\x00'], 0x400)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r3, r3, 0x0, 0x4)
sendto$inet6(r3, &(0x7f0000000340)="441c9d66be6da0a745d1e49f", 0xc, 0x20000800, 0x0, 0x0)

[  986.698544][ T9232] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.707016][ T9232] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  986.857585][ T9232] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.866040][ T9232] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  986.930973][ T9246] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.939431][ T9246] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:23 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
sendfile(r0, r0, 0x0, 0x4)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  986.973759][ T9246] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  986.982311][ T9246] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  987.021590][ T9246] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.030057][ T9246] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:23 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:23 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  987.156380][ T9246] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.164844][ T9246] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:23 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000001f40), 0x10000, 0x109240)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001f80), 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000001fc0), 0x8001, 0x0)
r4 = dup2(r0, r0)
r5 = syz_open_dev$evdev(&(0x7f0000002000), 0x20, 0x18b081)
r6 = gettid()
tkill(r6, 0x3a)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040)={0x0, <r7=>0x0}, &(0x7f0000002080)=0xc)
r8 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r9)
getresgid(&(0x7f00000020c0), &(0x7f0000002100), &(0x7f0000002140)=<r10=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000300)="5592e9ebd4b05cfe349d1635d862306eb98761833f342801691af4f2491739c8fe414a326f46b7e81316cee5001dc12cd29a106a92c118448fefb58cea5e5aed48c3ecd9d4b0fe64a2a0e37eca066459cbb2a026aaeb994efe64098eee4545214a1bea946ef114192d2aa4c1175373ac58cadf919419233a4f0305bfdcfb3d6390dbb85cdff5e480a83adf418e15bed156094f8652a5c3a6e5a2bcca873a4f31e326f0aad22df2a7323394092ee8fd405be418e58c4b3e2ed30561633b387f", 0xbf}, {&(0x7f00000003c0)="525f9dd3c15a6837cee511059e520f018d17420601e6e13bed7bde311cbaca0e6dfeae108197c33bc73b0a171505b711b819da9f755421b8d70087f989970817afe433da26bd151d9be83455904eccc3ddcaa0950435f41882bfb637561e43212ecf729f9d9bb995c1020361f4366d5671644b6e5df0127523b8947fd71281513152113e476da258a1df138cf77a4a10c61cc27f236c870efc17f46b03", 0x9d}, {&(0x7f0000000480)="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", 0xfb}], 0x3, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x20, 0x4c055}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000580)="8b93ef9b8e63a2274d0eaa10eb2e0237489eb0d3be4a4267965f7da94bb266118b51dc4f04f1a17316898814c4b70543260f8682474498b4ed65d627e4cac066c97921db7552e9919187db629fe219da2d31059ddc43350dcac220c8233f6c4e1be2f3520f47", 0x66}, {&(0x7f0000000600)="62d8d5628ee56d8ef4e06e5c5b1b9861629c02ba2017fb0d9467425af19a3409c8c3737569c7ee4983f91de80a924f07906bd2fe44d225d1db3d4b418ecfd8deb99f452dca5327c7c04f4823ef37cbaa1658cebaf606da35613212056796162037160160fa7c571452e2b74433c397c35dfdc8b72800427a0a057c88c7de7b3cb335f7701810eafe9c30d15573708c5dfb0cd1431dde723df1b4f6aaab9bbd6a0bd17af6f995b3cbd6014d8ca1d9c6e0e28e82236c7f34", 0xb7}, {&(0x7f00000006c0)="f74060a2e347aaeb752395c22c2e4ed1ffbc8b009d8b0af48bd0d0b2db680dff2263ba5abe22732918270023e30fad1f7267cfbaf71ee14637cbc5bf25c8e7abc0f08e4da92d181f896b49f1e97a6c8243539fdffbbe67cdc428058e490877ec26a107bb922a43251da73655222cd3f08c0148c009bcf8bb4cc2710463dac325ed4ff015777591511a629403d523406adb4d9e04a39bf54ad7204bd2f4627176c6c1ff87112e5da095bfc559c8148514f178a56731f0956c23e3355d7305f30b194332d719ca16b169fd8a993eac04f02a1392c08615e38eef490bc78e", 0xdd}, {&(0x7f00000007c0)="3ecc32a3a8b30efb38c9b0549095cf5f5951f98fc8bc566614e595f40ef50cc613584c64afc91f02ae6bb602565fdf248fb821b421c2adcc38c330c9bec7fa6d5058c6294572052fce48153e32f1c11cf1286022622ea833b5586867af77ff49aed60af60706c9f23165cefc08c378ba690a33f5e308aac16b3cd15a7d3b56bc8635f412f685467c917b2e48b5588ff9336a3abba8f8016b0ae7679d1f9b4eae66dfebda5291985b5a2fdc4b3195e061013085fddf39955a7459cee31fb817927a2389dbbc0573cbac6505b861e843dfd322dd97e973ca5f5b", 0xd9}, {&(0x7f00000008c0)="665c7bc76ee212d971f9b308e18caa24a6f7fe11f323d682dfaa36e8b0adcfb06b19ea5031b9e26b9f3fb529bbb99d338e4f848dfd2e04fe4dbf0bddb52fd08a89f1c8e164c0e80faf00d257c60f62ec0960d7c30b471ce3270dc7e7b9d66cf87c60645cac56979cf0d4f8a53d50d31bc75bf7ccc2c3c85286407fd773eb27887c23a5b7c69cc31e8c6dff2329aeee1b3286784cd64fb0d0d7e9954c159ee5028662a070fbc9ad163c8ef420e500fefe89cb0c56791136929d007ad24d622e09b0", 0xc1}, {&(0x7f00000009c0)="5dedc4f8de1c2119920a0b4baccdbac0163599e2f933d7cf2620ee02141940a0528f7d2f2af8591fc6bd4ab85d8c3a5ae61902849a24d338f3b1f44fc1d8d56980dbdd6fc22d99e806920cfaed3a4c08c9b7a31c9669b500cb52910efe6a1cec61e3384ef770fb504b44b1a5d4ab84c69dcfbd850694898d4a078c929600c54b4ffcb6152cab5fa19d7a88989e0f05b95a092819ff456cf63bfc6cd6f1fd6cf0073d1f36ae3ebe30e54470aaa580508e6f3f", 0xb2}, {&(0x7f0000000a80)="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", 0x1000}], 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0xc004}}], 0x2, 0x40)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r11, 0x0)
preadv(r11, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r12 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r12, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:23 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'wlan1\x00', {}, 0x78})
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:24 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  987.339502][ T9263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.347960][ T9263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:24 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x3f, 0x3f, 0x1, 0x0, 0x2, 0x10000, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0xffffffffffffffc0, 0x3, 0x0, 0x6, 0xe009, 0x81, 0x0, 0x10001, 0x0, 0x40}, r0, 0xc, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

[  987.389127][ T9263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.397652][ T9263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  987.443273][ T9263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.451733][ T9263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
[  987.488587][ T9271] ==================================================================
[  987.496677][ T9271] BUG: KCSAN: data-race in io_submit_flush_completions / tctx_task_work
[  987.504999][ T9271] 
[  987.507315][ T9271] write to 0xffff88813330f2e8 of 4 bytes by task 9269 on cpu 1:
[  987.514935][ T9271]  io_submit_flush_completions+0x7e1/0x890
[  987.520737][ T9271]  tctx_task_work+0x38e/0x460
[  987.525415][ T9271]  task_work_run+0xae/0x130
[  987.529913][ T9271]  exit_to_user_mode_prepare+0xf8/0x190
[  987.535463][ T9271]  syscall_exit_to_user_mode+0x20/0x40
[  987.540920][ T9271]  do_syscall_64+0x49/0x90
[  987.545329][ T9271]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  987.551218][ T9271] 
[  987.553534][ T9271] read to 0xffff88813330f2e8 of 4 bytes by task 9271 on cpu 0:
[  987.561066][ T9271]  tctx_task_work+0x361/0x460
[  987.565735][ T9271]  task_work_run+0xae/0x130
[  987.570232][ T9271]  exit_to_user_mode_prepare+0xf8/0x190
[  987.575776][ T9271]  syscall_exit_to_user_mode+0x20/0x40
[  987.581237][ T9271]  do_syscall_64+0x49/0x90
13:07:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:24 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  987.585650][ T9271]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  987.591544][ T9271] 
[  987.593856][ T9271] value changed: 0x00000001 -> 0x00000000
[  987.599563][ T9271] 
[  987.601876][ T9271] Reported by Kernel Concurrency Sanitizer on:
[  987.608008][ T9271] CPU: 0 PID: 9271 Comm: syz-executor.3 Not tainted 5.14.0-rc6-syzkaller #0
[  987.616673][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  987.626715][ T9271] ==================================================================
13:07:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  987.706032][ T9263] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.714551][ T9263] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3
13:07:24 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x0, 0x6, 0x2})
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="59277f83617457ac209cf5ade7df85c16095f7acc587e3d2901b5944706db4ce9eb334a53591ac0d82d331bc77ea96ed5396ac76720d1ca1ce41c295a2d6bd2bd3f4d77c39ee773ef008cf0b82edbebf51f1390b626fac424b82390d3db76910fce94d2348d42829264fde49f684e0e373289f3901fc3d51c2fc0f5a798536c05eb70d3379d0cfe4332067d4c565a204016c92ef666c7de9b42c4df55a04c8bb8be5b2597e2279ceaf7b9b7740fcffbb1f06f91cbfb01cc204", 0xb9}], 0x1, 0x6, 0xfffffffc, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r3, 0x127c, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:24 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x80041285, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "9b6bfd635f5f4591e48e2037f933f3e3bc7414d5e56b70ca4c80f6d52366e16b7f1467d20e97dedd03345c667b22df09cc48451d5674409bc67c2373178503f5", "69175fe85369dad550106c34f138d1e27b1866adb682b4796ca4c0f9117ad4d8"})

13:07:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:24 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc14}, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x40002, 0x0)
r0 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

13:07:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_io_uring_setup(0x5d16, &(0x7f00000002c0), &(0x7f00006d6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x4bbd, 0x0, 0x0, 0x0, 0x0)

[  987.918938][ T9286] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1
[  987.927426][ T9286] ref_ctr decrement failed for inode: 0x361c offset: 0xdc14 ref_ctr_offset: 0x4 of mm: 0x00000000571817d3