e2b5586631199cebf1ae495b6204d37296ca5e16f0c439f40654d9a4dcc9821b1068180ab214823cda1c09641148d5039b3778752e035d41945d1bdf1683395a5c95cb9b93a56b28e1131b20d6817eafe10c85da43e44f524f7a935de6e3c11af7bac70e35146ed860deaa5ad6039a9b29718f3fc24a4c9a416fb73291dfa16766d8551fcb75117d1d42000efdb34c6f830954c19211a1bb3e1b95cb8d27f094b68294e4c9d0eac426dad7467cfe17af5ec7d3cc63eff828ea3bffb6d6fe2f80dbdb23b94b2b9b97eee8f40f3bde187ca34e15df57b4c28da72ea47ba65d1f8704fafd91301ae21066ef27b29007fbae3999f34a030d3ab6e49c417c13f5f9bcd2dee913bfc7fd293b36f0b2d6ba0f2df3d48587e13a4720eb35482e52d341506aad135d82da6009dda97747e7837eeb3d0eb0372e8975cbda2d99e800718b18109a17eea6419bfd962b172c6676f9b3deffaa304fa42e46748f1dab64d49130c5c41e0527aea1b75aa09b2eef2395672954a659a54b5b18ff64b3c8b4adf8f78a533609dbf11a9be91a2c2ef000d5695655839f76890b741c522c4aec651a8d0a93b526f9d825f32ccf2708caf764bda487df21e1ad45ce30b51d31ff12d5ef760d354416b813e06e00beed29be9ab599bb0a906de2319ae8616e7197311ac807266e66ea64c1e2e69bd3683f6c9955ef4f4b847734363e3253663af747184a49533efc4ae2ba55dd98c2e32c3aeca1a530fdaf908111945df55500e652a2b3772b38daff26187eaeefe8e87803e67a1dcbdd979e9b8ec01c6da8cafe85dc269d41d00d21854f191dd81ebb8c409b07af7fa6441fb0cccfa7aa9b0ec0f3a1dc792765db59dc802fe4cdea8fa03847280b23db0ec961a2b80c245567e8713ea5cf415f586e3788253508d8c50189b1843ef2d8640d2942aef8f4f942a2395b31ff21e11744e1a1ec87378302cc5b04fb99806df90b392a657dc01d0dec8c125c786b8604365085a6acdb0ff33599bdff61054cf78e63526540154340ccdb15f19dfecac6058f6f4edcf8706c34e3a09dd15bf800889c2ffffe8c5750803ff15fe88434155562085d091999d3391ef667122d1f92dc430ba491cd4f99e15bcbc87cc8ea48cb2c19008d51f490eefedf56018cfa908fc1a3bf9d536b8f45878aeb650b5d1da270abe5bf342038c2fa3405b0908be31a5c4c23b55f5422b175fd6de69893661c0cd9f806986d61c8d02195a0febf4715910d7b552cec3d62e198a1d51e715de9296b7051836c3cfb676c7bb48f787dd1e3f35242cee0d9469ca1d22e56e17eb5a926e8da00215fc99bfd2a21a96230cb6328266ba4d2e7d76d9bdacfa78595a7bcf0851608ff0c3181f33bb11ec53b5f8179851b5093c4913e913852970f18f8a90f3b8f7c344341a2346c47119e415f00f38ba109435cc14f70ab318682e1d8ae8f5cbf15851257e4fda5d7b7a615c2ab203912264b88f60efe6c745761365af02379b540ba79487c0165837769583b0cc70171ebd39bc1f9c6d67c6ff3d50541a49a4b70bb9afbeeed7a3ab08fd441e8aeee39157f178feb448d68ef8cd6c5d4a229bc7842706dae1792aed43823e73da137ed6ba943b47b9398b0e9c9ae7d2e1fbc5b3e155441496ba67da2a60fe977f987ddfa4e5ac2d79df9bd848c9a0310fd012a618a6d19d1944141c49b012f7278ce83651ef2536b7866418784cc1d4b830ce4463473202e8596fe9ab65ef74a650ca96b70d78d7037b28d10673362e7b6ae9de425a54e52c2c03b2b0b1c423b48083078bed67cacd4339e3838d322f0ed8ab3340c0fb7d64b0a3b9f8f9e1b0313fd1cdc2371ae7a4166116dcbec764851cd1422198122a40e5f71c15eff99ad65738f088177445e7d9f544e4d6ee79a5ba409e258087f7297983264607c7125319326a2d13bcafd3ec5fe6ec5e5364a45b7f7d2f8a826765256aa88826919d17933f70c1223cc3966946b992d034ff03e2e99e1fc884293c19525bb8a497020edbd0fb6cd5aebcc34d0a1dac05870956db8bbfe33115506ed5e8a397796f64f34a2607e843be3174f7ad9d52ab70e097a7f66f0d6e7d274f12954f0de9a6d1", 0x1000}, {&(0x7f0000001440)="9d0839764b8d05ab56fe89f8862cac68015a87c4ee9ebec32058e4917663a096d8ecd6c31e024e1172ca9b0c57924221851c8787279d705ecf068f4464b17592f962be36d53a10aa1b135374b1b883a060bd8650391b5f274e6992b7defdd6d2da7e6bacfb3ec60f670da4798a8e8e4efc34bd32988cac4a0f29f9c6feb260cad4d3f1", 0x83}, {&(0x7f0000000200)="dd", 0x1}, {&(0x7f0000001500)="6491af071f0b8bbc52920b8a3168da4848880668357de436beeb714e2d6be1bbedd693d4b3e74a1755aafdd9eea1bc4e1580016f1b01a6d7dce82196a3e0519908f9b14bb392dcb51c939c9466f8131af02412f8", 0x54}, {&(0x7f0000001580)="b15c2fc9984463e17004d6b9868f12aa2fef1da0ab9fe5f120901f4af4167db00349b53661db2032eaf4bc87cc712164f34c4e0d05f4e0d5b7fd21781ea98c0ce706b43dcd39970ce9f916a1477646ae7fbd74dd63176a5b22dd9333e37a79727541be3ead0289d61cc763fc9580b9f54194c01f2fa9f9558103c71a018319586e355e53b543302ec1a0c03248e6b51434d350d8284278bf19d2c82e0a1195dae99c8800dbc68fce9c5b29d4d65d930b95cf6ef92ea4968be43615c3efd9eccec3d63a3622eb4744980fad0d2339779f7d48e92b57454980d1b588aceb0da370628b9b", 0xe3}], 0x7, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r3, 0x6, &(0x7f0000000380)="c00ca5b10c66feee9f55eb12d5d39e91ffcc864af8624d88c01b27a4dd9c9f6d9a0d6d4f3f9cae388f3aa36d90d7715ff5af5b223918eaa9734a113380efd8259382276a14641f2f09207128c5d366ebdf35890a15775fd7d676d413f44d2cf8acfe47556fbd2a3352da0946659aa0c61e4b29642d9bba94406c10d3273f875e20af8c364006698ac233a46eee339f79f5fe91ac44505a13071acc7bc6859e59a422ab78e7972b8ce7c67be60b03a89e6f3c58b43242465c") ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x276b0367a6f6e4d5, r0, 0x6, 0x7ff) exit_group(0x0) 01:53:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 733.076688][ T2441] PM: suspend entry (deep) [ 733.091553][ T2448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.109673][ T2441] Filesystems sync: 0.031 seconds 01:53:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x300, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 733.130156][ T2462] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 [ 733.139203][ T2441] Freezing user space processes ... (elapsed 0.009 seconds) done. [ 733.152510][ T2441] OOM killer disabled. [ 733.154224][ T2441] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 733.157844][ T2441] printk: Suspending console(s) (use no_console_suspend to debug) 01:53:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4001) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 733.196713][ T814] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 733.719619][ T2441] ACPI: Preparing to enter system sleep state S3 [ 733.719758][ T2441] PM: Saving platform NVS memory [ 733.719762][ T2441] Disabling non-boot CPUs ... [ 733.723285][ T2441] smpboot: CPU 1 is now offline [ 733.725908][ T2441] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 733.725965][ T2441] ACPI: Low-level resume complete [ 733.726048][ T2441] PM: Restoring platform NVS memory [ 733.726058][ T2441] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 733.740539][ T2441] Enabling non-boot CPUs ... [ 733.740819][ T2441] x86: Booting SMP configuration: [ 733.740823][ T2441] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 733.741015][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 733.742265][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 733.743959][ T2441] CPU1 is up [ 733.744298][ T2441] ACPI: Waking up from system sleep state S3 [ 733.879753][ T2441] OOM killer enabled. [ 733.880987][ T2441] Restarting tasks ... [ 733.892681][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 733.894576][ T2441] done. [ 733.894907][ T7182] block loop3: uevent: failed to send synthetic uevent [ 733.902626][ T2468] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x12 01:53:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) ptrace$cont(0x20, r1, 0xc0000000000, 0xfffffffffffffe00) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)="275fd3129b1aca2658601b4cca7d1dbfef72cc6789f44de5716e55c86e78b79c6d33c495ef03ecec0802a1ee4dc6ffd3cd6cb2b40af15877c15590232dddb59d788772f250b337d9d781f6ca629d6c8e3aa109125b10118cdb3f077753aa696f3efc572312b6dd2e85585e0aec6d7e2ff23defe9d410b5") exit_group(0x0) r2 = clone3(&(0x7f00000003c0)={0x800000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280), {0x31}, &(0x7f00000002c0)=""/35, 0x23, &(0x7f0000000300)=""/121, &(0x7f0000000380)=[r0, r0, r0], 0x3}, 0x58) wait4(r2, &(0x7f0000000440), 0x8, &(0x7f0000000480)) [ 733.912645][ T2473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.920907][ T2441] PM: suspend exit 01:53:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e8f04b3797fa10b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)="42f0dabda963275e91f9c726ce500d42d103e633030223adb3e2f3e6cfa2618aadaf7ba24feef781252204778ad27253976b793da97b189fa82dc4e687a0f8118c15b0f59466b52f061c1b774aa9e2d06f57", 0x52}, {&(0x7f0000000340)="42ad5d5bee25fa5106c5998114b576f2c623b88832ea0aba8e376b900ff6ebaef1ee7fa70099ca2fdf04b83ee64b698bb84a1be86a8bcb94df10b20d20b2aec98b7da44ae8f336c47d2108f77a0ab5f896c7ed72af0a2b12abb5a8ef004851e38d903fa5ea0bdc9a81d0f230e5bdee658479d18168b5452ddf9e3d7d3cb0d5e3e8424d297343194b4e23db95d8513868fd32a600c8f414aee7546338696cdafc011463715ad438f59a2f69744d2268a01321ab3876e5268f83fc7f49e68405705cafd42ff5ccfd15187a505aad36", 0xce}, {&(0x7f0000000440)="54595c56915eec23abe4738ea73951f8e2a2219bcb383eca18540c57076e8f7039d0bbfb1a20121ca9616304aebb4cab8147853d9fd7537baccef7c65caa01f9ead83b9205e9d9e6c9042fd16c8687cd064f1a323785280ebb659c9086483263c0d9c1145684610791cb431f42944b85b72437d3fd783d2e305a87968b2ec95f5b93cf93ff0faaa6a9949fa6b0fdaa6d786fee428eb382b59d91e0bbe3d85cc498fd49b6df0e80e513356e6cf30855bddf7be8032da7d456789a887714dcff62afa946a2395a8841ac4f07d11639f3481fc4b3f90dbc771c3c9cf1963d8c6c6cb409db0b10445285", 0xe8}, {&(0x7f0000000540)="0ed58a48b6cddcb8a3d11abc5f633fcace8e84befd98f406eba7e894ac26aa7ea8f461a9e09e3508776f57815057a701550717270389e6f4f012fb9586455294c476a60c1353201714a357e2d66feb513ec1571f740913414d646d2861be7dd1ddfa60ac25a79ebb2f78d58c3a7076b3aa74bb757f4f2b711eaac2589a6253d016cd30c34b03690786fadd2459191de0f315d6fa01b5be40524b48211fff9fb292975a7077bdb682f48d50156f3f2aa8541ca2c4cd2500a2d94c4942ba212da0d6a691c9", 0xc4}, {&(0x7f0000000040)="fee3810eed859e521cb9d67fc0a0d9c7e573cfc286e50985ba3b26dd687d07fa913ad8fed7a94aa3c911860fd0bb359174be2420682cc52b9d39e8201afdab5a", 0x40}, {&(0x7f0000000640)="aac623788ff782fd3b0fc1884e446ee9fffa5b9de17b7ba4726c014ac2674904f337b887bb83d0e05d5edc879efefc8b1d3fd6b490106d3003193c67fa40c8290896c5efba9fb62d16ba2ebe8b96fc3a32dbdf56b8d1d64432b4ce4938080d4a7986a2b1192b0798e048017e03f44c8d65f8371fe4055be4c6b4572270c70156e88d70ef6eaad7855ca1fd1cb66534a60dfaceba7c228fae62827c483afce02a9ec4ceeef6660e3c98535a50f84988de6637df746ffc14dba470cb1d3f33da5f7557fd1fbebe261ed9f48a2404545567e2167f50e1715f4e210477c4119be3ec0cf0b73f901c45", 0xe7}], 0x6, 0x8) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0x4, 0x1, 0x9, 0x0, 0x9, 0x10582, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x10001, 0x132, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xb, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x436b9000) 01:53:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) tgkill(r1, r2, 0x25) exit_group(0x0) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x7fffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000080)="94fb36ff6f46a010682895d3a70f73463dd5fd8b26d33bd010282fb8f6cf39f43638ec3c4aa446939e83b6b5c3f4f7d986b0926fdc3c4b0b6caa3c988bc837e2a54e8c033516bf8b42502ebe993546d44a7e1e6dde8d38f6ec5d186dec7c52ae154881d84348f2270ef71ac582049d9a96bd9b8fef6a807b2a36aa8440") 01:53:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x777ecf1fbabf, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 734.003430][ T2490] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x104 [ 734.014598][ T2494] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x104 [ 734.015022][ T2496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:53:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) clone(0x40014d80, &(0x7f0000000280)="9fbe4b1af21ca86688193a27650b4882a261c614000dd2fa115b1d6ca480b1eb31b7a10affab002bfa0fc7dbab0940406ff0f0efca9ebaedafff47ff48558c3a1b6d65708dc858a79e39174747f3f642e01a7ca86dddb9bf4f017cfde644b292f2a163211c16ca497f201423e4bc3c12469d0d9c5bdc397bd68cd24d6a50105fcb72f9efad04211508dcc0669284538aeea3105a5883e6673fddf0ef3fdc185f70e29c1ef41e4cdce6ad6401f0", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000340)="fabd432e4d7de8b4bdec9ed1994c1919a0b4c8b8dbff0a625a89cc7439bc025bb9f5f3ae4f967299c5acdba6d1cb27b363537df2013ffe6cc9e864090bd7662a07201110e84fed5947bcc87bede3665a376aad01b9a08552bf0d7e20c8a1107d339331c50c8bb93cf17b3b6f72dd9e693ef22b1c369717970b2cd60368b3616bbf90fa60b43eb533824081a5") tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="6744669800000000bc0000000000000000000000824cbfd4616ee9bdfbf90b28c25d6aa1a7ba50efd48c57e224f8f32b8a4f338b3b2f9d30d586364923b9360464e62b0e2cef56f123b39fd967f97a93cb1b28f3f9d891e1e3ed2e2c75a0e25f0000007c5000"/111], 0x18) socket(0x0, 0x0, 0x0) [ 734.109753][ T2512] PM: suspend entry (deep) 01:53:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {0x0, 0xffffffffffffffbc}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000380)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}, {&(0x7f0000000100)="0490820f667cd438268a8def0d164c58ffd1887b53b41b5b4a20b6ff73eb5cbfa87032b998a06abfb861d86bdd8453973a96648b9d14d49bde7efa4ca1fa3b4f34dd8294fafe29fd6363426037f0f66214ccf4235217d55df12e", 0x5a}], 0x5, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) waitid(0x0, r0, &(0x7f0000000180), 0x4, &(0x7f0000000200)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) exit_group(0x0) [ 734.181164][ T2512] Filesystems sync: 0.069 seconds [ 734.188507][ T2548] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x4002 [ 734.221757][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 734.223909][ T7182] block loop3: uevent: failed to send synthetic uevent [ 734.232048][ T2556] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x4002 [ 734.248496][ T2512] Freezing user space processes ... (elapsed 0.007 seconds) done. [ 734.258764][ T2512] OOM killer disabled. [ 734.259451][ T2512] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 734.262633][ T2512] printk: Suspending console(s) (use no_console_suspend to debug) [ 734.464169][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 734.988928][ T2512] ACPI: Preparing to enter system sleep state S3 [ 734.989011][ T2512] PM: Saving platform NVS memory [ 734.989016][ T2512] Disabling non-boot CPUs ... [ 734.992444][ T2512] smpboot: CPU 1 is now offline [ 734.998343][ T2512] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 734.998402][ T2512] ACPI: Low-level resume complete [ 734.998488][ T2512] PM: Restoring platform NVS memory [ 734.998498][ T2512] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 735.013632][ T2512] Enabling non-boot CPUs ... [ 735.013800][ T2512] x86: Booting SMP configuration: [ 735.013822][ T2512] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 735.014064][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 735.015141][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 735.016675][ T2512] CPU1 is up [ 735.017023][ T2512] ACPI: Waking up from system sleep state S3 [ 735.150135][ T2512] OOM killer enabled. [ 735.150863][ T2512] Restarting tasks ... [ 735.167653][ T7182] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 735.170619][ T7182] block loop5: uevent: failed to send synthetic uevent 01:53:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0xffffffffffffffff, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:53:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2800008, 0x13, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000009c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)='./file0/file0\x00', 0x1a4, 0x141000, 0x23456, {0x0, r9}}, 0x3) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2000000000000000, &(0x7f0000000040)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1000) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x0, 0x0, 0x0) preadv(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000380)=""/104, 0x68}, {&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f0000000180)}, {&(0x7f00000007c0)=""/109, 0x6d}], 0x9, 0xfffffffc, 0x0) 01:53:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x1000000, &(0x7f0000000280)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 735.185937][ T2512] done. [ 735.196144][ T2512] PM: suspend exit 01:53:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 735.249664][ T2579] __nla_validate_parse: 3 callbacks suppressed [ 735.249678][ T2579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1803, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:53:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x80000000, &(0x7f0000000100)="112854d2af17cb5edd5e1993759caf5ca9d581e83cdfa31cf867151455f1f8238ed207aa92b73d792962e421d625b7422d3a27b667b526baa0b83a128ddb2782035da5c608c5f8", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)="e450c138937ead8ec026ac95df11a69b81ba66a8ce48ee6639f94e57bb49efc052190da1ca5a9220fe55ff25782c0de0c082f14708f8cfa8205fd4c734b2b63fd169") wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x200000000020) 01:53:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 735.298415][ T2589] PM: suspend entry (deep) [ 735.313373][ T2591] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8002 [ 735.337903][ T2589] Filesystems sync: 0.037 seconds [ 735.346065][ T2602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 735.354358][ T2595] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8002 [ 735.390744][ T2589] Freezing user space processes ... (elapsed 0.010 seconds) done. [ 735.404327][ T2589] OOM killer disabled. [ 735.405088][ T2589] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 735.408591][ T2589] printk: Suspending console(s) (use no_console_suspend to debug) 01:53:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = fsmount(r3, 0x0, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 735.782252][T30054] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 736.303598][ T2589] ACPI: Preparing to enter system sleep state S3 [ 736.303670][ T2589] PM: Saving platform NVS memory [ 736.303675][ T2589] Disabling non-boot CPUs ... [ 736.307530][ T2589] smpboot: CPU 1 is now offline [ 736.310149][ T2589] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 736.310207][ T2589] ACPI: Low-level resume complete [ 736.310351][ T2589] PM: Restoring platform NVS memory [ 736.310363][ T2589] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 736.324687][ T2589] Enabling non-boot CPUs ... [ 736.324869][ T2589] x86: Booting SMP configuration: [ 736.324873][ T2589] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 736.325049][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 736.326122][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 736.327521][ T2589] CPU1 is up [ 736.328057][ T2589] ACPI: Waking up from system sleep state S3 [ 736.443696][ T2589] OOM killer enabled. [ 736.444473][ T2589] Restarting tasks ... [ 736.451698][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 736.453841][ T7182] block loop1: uevent: failed to send synthetic uevent [ 736.455892][ T2589] done. [ 736.460576][ T2589] PM: suspend exit [ 736.474226][ T2618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:51 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2000, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x65, 0xd6, 0x93, 0x0, 0x100, 0x200, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1, 0xfff}, 0x1000, 0x3, 0xa0, 0x9, 0x7fff, 0x2, 0x3, 0x0, 0x10001, 0x0, 0xdbde}, 0xffffffffffffffff, 0xc, r3, 0x2) socket(0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)=@random={'os2.', '\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x2) 01:53:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1804, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:53:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) exit_group(0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000041dca6ae44ed4594c74e8af30833630c55f9146fc7cc60dbfd35b2a79b8a58cf7835e86295f92d0feb7a6447b900778b", @ANYRES16=0x0, @ANYBLOB="00000800000018ceffff314500000008ee000039000000084c4001", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20000021) [ 736.566058][ T2634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x1f, 0xf, 0x4000) [ 736.621051][ T2650] PM: suspend entry (deep) 01:53:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = gettid() tkill(r1, 0x7) tkill(r1, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) waitid(0x0, r0, &(0x7f0000000100), 0x1000000, 0x0) [ 736.661744][ T2650] Filesystems sync: 0.039 seconds [ 736.667592][ T2650] Freezing user space processes ... (elapsed 0.038 seconds) done. [ 736.707247][ T2650] OOM killer disabled. [ 736.708152][ T2650] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 736.711129][ T2650] printk: Suspending console(s) (use no_console_suspend to debug) 01:53:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1807, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 737.069021][T10364] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 737.605706][ T2650] ACPI: Preparing to enter system sleep state S3 [ 737.605771][ T2650] PM: Saving platform NVS memory [ 737.605805][ T2650] Disabling non-boot CPUs ... [ 737.609319][ T2650] smpboot: CPU 1 is now offline [ 737.612149][ T2650] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 737.612209][ T2650] ACPI: Low-level resume complete [ 737.612374][ T2650] PM: Restoring platform NVS memory [ 737.612386][ T2650] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 737.625690][ T2650] Enabling non-boot CPUs ... [ 737.625901][ T2650] x86: Booting SMP configuration: [ 737.625906][ T2650] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 737.626084][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 737.627063][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 737.628724][ T2650] CPU1 is up [ 737.629058][ T2650] ACPI: Waking up from system sleep state S3 [ 737.760319][ T2650] OOM killer enabled. [ 737.761079][ T2650] Restarting tasks ... [ 737.767415][ T7182] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 737.769527][ T7182] block loop4: uevent: failed to send synthetic uevent [ 737.773034][ T2650] done. [ 737.775870][ T2650] PM: suspend exit [ 737.781518][ T2666] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x9c00 [ 737.789089][ T2667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 737.807462][ T2670] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x9c00 01:53:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x2041}, 0x1}, 0x38d2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 737.839065][ T2680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:52 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:52 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:53 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1808, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 737.903971][ T2697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.917695][ T2700] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc000 [ 737.928482][ T2701] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc000 01:53:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x32b}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x1000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001200)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYRESDEC, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b0008000000000000074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f9e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e15179e8435815ff0fd89ad8e4342c79b161531cb1265a507536be8db7f3f5f5a9160f73f4e398a6d9124ba0601046b3e86acc21361d878e6571e9e04a45c29f36f02db5053b317c831eed0d97d8669da67e98acecb5cff9b219be9943a3fa223e8a66308c31da0ebaf1f7c9694bcf90738405808086e92012ad5268cecd8a4fcabeaa8a9e3899b8ebd04dee8f6c027b98e8d6ded5680c8f3f304ba1ffba8e13958fa14635aa1f0e148f76c71e5947e2b6a0c3a0c13eb5ea7b1093b689cd698e159504413068d04cb0143f702196774cef3ea143cf344d78605192e2aa26e1bc8b3f30e1a3f6b5535603ea46305d72cd138575c20437c73722bc36825f8a3960fb65bc98ab255b869d10c094fdec27f062702320404edeaaa6e2778f6420ac7c73979863f4f39fea280663b46825bdf876a91599ea6ca9dbbe3535952f7019cc56053f3dae94c2b7db7bb60d22697a8642903ff9596122e8a0d09e41d4056cbd13e314503e40acc21f60a8b8bf973baba6f6f96eb55096a0525a1280cfd7102f1d8730de1630a4ce1ecedb40cd1d0b8dae489c52937bc90bb99981752c8e", @ANYRES64, @ANYRES16=r5], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="ba01000015e902e73ab82083271a850455e66e48f8ab6340ab7eb5be671d74010000000000000021964771a5daf364daf34a7bc1bdf18c4ba98ff8199775863f84c471d71975672ce83830e109d40abfec1103cb9a1fdb1d41f552ecacdff9742840baf9b3248f853c3a0866b8c8db05c01d17468f1c5702d54280d0cb1cbe631c4f47acc100a4918d11e189dd08d527ffcb2f6588d51a8e89ad3e61a114bd7bd354865812ad283fc8eee46cb7fd999c5bed57fa62b96c8ce7e87e01d6d8fe54b2269bffb6fd8ffa67c6cdb3674521bb7b878c88a057ed2ce84e44be0b8084291ce1508037d953339f93a1b4d455511b70647dd7e8142f71bdfc69552f0883880ff0dccd51b95504d22279135b3dde22fefee05f71250da37f4f3f14f504e1c46cb6a2cbf6fc70aca58b97e76ed440000008000000bfee8023f99be68e76782d479b9f7d26ddef0ea828e305b9aac8055180ccf555d429e58a7aba6df0291b88237fe41e711942095e8c02e26a22675bcc54300094a1af5ce11ffd1104db9f71eddad711c00c24e90f8f90ef866300f81ca06d66f4b17915fef24a7a6b8e7c1e80d3b8dffff2c96c77a578875c793445ffb3ec7ca8696d288552e6df1039c48e4ceb77f51b14127fcc001cc3248744d462b43d48cba20ccc3d40be923594a7b65b737fb9983a45164b8f701996c7d1d0884f604d179149c2deb908000000e3006173372860f0c5", @ANYRES16=r7, @ANYRESDEC=r5], 0x1d4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000001c0)={r5, 0x1, 0x20}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000200)={{}, 0x0, 0xe, @unused=[0x0, 0xfffffffffffeffff, 0xffffffffffff8af2, 0x4], @devid=r5}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000200)={r5, "b4533b4f5f87ddd4537c3d1ad60c478d"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000001c0)={r5, "4fb226d0935ec1272dc5c4b3723457ff"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000003c0)={{r4}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000140)={0x1, 0x3, 0x6000000000000000, 0x1, {0x9, 0x9, 0x100, 0x80000000, 0x9}, [0x2, 0x3, 0x56]}}, @devid=r5}) socket(0x0, 0x0, 0x0) 01:53:53 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 737.966577][ T2705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.027208][ T2718] device lo entered promiscuous mode [ 738.029274][ T2718] Y­4`Ò˜: renamed from lo [ 738.033261][ T2723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.054788][ T2724] PM: suspend entry (deep) [ 738.091189][ T2724] Filesystems sync: 0.035 seconds [ 738.094101][ T2724] Freezing user space processes ... (elapsed 0.003 seconds) done. [ 738.099242][ T2724] OOM killer disabled. [ 738.100120][ T2724] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 738.103245][ T2724] printk: Suspending console(s) (use no_console_suspend to debug) [ 738.385646][T30054] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 738.907435][ T2724] ACPI: Preparing to enter system sleep state S3 [ 738.907507][ T2724] PM: Saving platform NVS memory [ 738.907512][ T2724] Disabling non-boot CPUs ... [ 738.910815][ T2724] smpboot: CPU 1 is now offline [ 738.913755][ T2724] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 738.913890][ T2724] ACPI: Low-level resume complete [ 738.913979][ T2724] PM: Restoring platform NVS memory [ 738.913989][ T2724] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 738.927552][ T2724] Enabling non-boot CPUs ... [ 738.927824][ T2724] x86: Booting SMP configuration: [ 738.927827][ T2724] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 738.928022][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 738.929098][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 738.930437][ T2724] CPU1 is up [ 738.930902][ T2724] ACPI: Waking up from system sleep state S3 [ 739.062309][ T2724] OOM killer enabled. [ 739.062981][ T2724] Restarting tasks ... done. [ 739.064260][ T2724] PM: suspend exit 01:53:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) wait4(r1, &(0x7f0000000080), 0x2, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:55 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:53:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0xfffffffd) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4000, @fd_index=0x7, 0x8, 0x5, 0x2, 0x8, 0x0, {0x1}}, 0x4e5bbaa8) 01:53:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:55 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x10001400, &(0x7f0000000380)="f85149ddbe1903f435855713da47b716adfb60db210ed154e0db73962ff477d30b003e23b7339df18a89121b1eae59d03d7b946ecbbcd515f1ba9598737dfe9a1522", &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000400)="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") wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x20, r0, 0xffffffffffffffff, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 740.807774][ T2754] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc002 [ 740.812099][ T2756] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc002 [ 740.820915][ T2757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:56 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 740.868002][ T2774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.882490][ T2762] PM: suspend entry (deep) 01:53:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)="6547f31d25ebc8b1b11ceaf7f2afcc17b2b00e0a1804ffe640633dcfcf4594999561d580f534613ab80955c6abaea3a0707eb1beba94f937abfb72ae520e0e7f9b1f773de3110cbc09ca61aacc8b7d929686e0abb51d2d7ec448b2d74fc1b1702d16435790eb63a39c2dcc37b9f6c57667a08472b81dc2b42aa36a2bf054a0d9a55112c9bb515c6d08ff3e970830788c85c7bb160165769b34eb8813cc0d585aa6545241e1ad8db328a2374b24cc57d6146372a6915f0cc58091ae9f26", 0xbd}, {&(0x7f00000000c0)="03051a08c36925337e1b94dead73853ce6f1ff62492537c58ac3c265ce43ceeaf959bf", 0x23}, {&(0x7f0000000140)="85b4ecf99fafbd083e7c33511f6b78e13269", 0x12}, {&(0x7f0000000380)="c61e823b00b5258776fb7b5b4aefde48fc9e19d2d65d2413fe1257c097a722be2e93d9fc23c1d420572bb3576c8b3ef2d05b625a5ea58eb05816957cf8a38bad5d677d9241cfeea62b9b60777261ef4b9693973f0712e7f9fc9445fc6fd3e311c8624b5fca5a6e4e39106f34bced189fceb182e4bef87444832e218df36e4d653307b3184d382214ceaba488b17e32", 0x8f}, {&(0x7f0000000440)="bd362c26791d79869652d9395ad3c835d2b64dd7762b0c16ce6c5e4f408330e81c4bed5492e7b0dc868580213622cd78bc545fe1a12f9263c47a3c3015df832e2190319ebc44af6977f4ed37ad57892fa0ba0e04d5f132498047fe5a473d58ac78ef21079ba5ad3a86084e889ee65aeaaacc1e2aea726d19a81a95639f082e3ab931230a3e548d1448879e7d19b265bee49cffb5dab1acea0358c0097fe0820c0038348502395eb6695dee4f7509de4be42e3210461c35804bf6db29650566a4bcb1db9ef74ddef8e44c4d3907042c2f1e55a54f05041fe75df7ad8bbdda04772e63127a6979673d0f5575202be86e", 0xef}, {&(0x7f0000000180)="7a20cef43ab88f5c45fcc41311e1ab5389cbe9e1ce63a5db34acf1e0", 0x1c}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="ec237872157c2fda183d24f78873e1c80550b945994b478702263fb66367ebb47dbfbc23f132505e003a4847d0ca56d65885ed481b17992933976f1421758edc8b6bde1435bf8c38d7f7d7d715308d0efb21afa0290b96539f1e58c13f7a3270f504b701cc02c1041e6abc6d134327b1f22727", 0x73}, {&(0x7f00000006c0)="0ce0485b67138d63c87ba16282b12ff3c847629fb006956c5095bc7bf06dd4b18feb27b3b3119b270093522658e2e7867a1a1f2429c2239127b4fcf1cd32f131d8798aa7e8ce481071b2a78b4cf59ccb3d3248181002e765dd1a03c6a554b38291e1f2ac55dee6c288e200ab8d7b0fed1bd069ff1eb0ccf96d16a7d72720fa770f7882cb56bdf0472900a0b4082506a755c610b265d611c537404f8b1bc5500e607b2751442824b792366d5555bd6581a83e348ee419badb95", 0xb9}], 0x9, &(0x7f0000000840)=[@txtime={{0x18, 0x1, 0x3d, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x78}, 0x40008804) [ 740.927203][ T2788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) tkill(r0, 0x21) 01:53:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x2, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 740.962072][ T2796] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc800 [ 740.975653][ T2762] Filesystems sync: 0.091 seconds [ 740.988369][ T2802] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc800 [ 741.036032][ T2762] Freezing user space processes ... (elapsed 0.076 seconds) done. [ 741.114554][ T2762] OOM killer disabled. [ 741.115479][ T2762] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 741.117897][ T2762] printk: Suspending console(s) (use no_console_suspend to debug) [ 741.164382][T30054] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 741.678928][ T2762] ACPI: Preparing to enter system sleep state S3 [ 741.679029][ T2762] PM: Saving platform NVS memory [ 741.679034][ T2762] Disabling non-boot CPUs ... [ 741.682277][ T2762] smpboot: CPU 1 is now offline [ 741.684970][ T2762] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 741.685026][ T2762] ACPI: Low-level resume complete [ 741.685114][ T2762] PM: Restoring platform NVS memory [ 741.685123][ T2762] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 741.698149][ T2762] Enabling non-boot CPUs ... [ 741.698376][ T2762] x86: Booting SMP configuration: [ 741.698380][ T2762] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 741.698612][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 741.699780][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 741.701289][ T2762] CPU1 is up [ 741.701638][ T2762] ACPI: Waking up from system sleep state S3 [ 741.827955][ T2762] OOM killer enabled. [ 741.828611][ T2762] Restarting tasks ... [ 741.832062][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 741.834874][ T7182] block loop3: uevent: failed to send synthetic uevent [ 741.845861][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 741.847934][ T7182] block loop3: uevent: failed to send synthetic uevent 01:53:56 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x3, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:53:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd=r3, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, {0x1, r4}}, 0x7f) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[@ANYBLOB="00fbfe00c440ec433af2d56e3b4bcb3f2c766cd4771429f87155cf2dd428e644d580469696080684cc8996fa4a714aaab94df911aa7a68d3d96f52f3932928ddf96af1accd6f2a4f31ecf1ba4f2cebec6caabb0de7acbe4d3ebf06a966f160ca75e20fe5b3edca035f92d45748341b1e726bb32dc26ab97c84d7d18a6223e3baba1d5a0a370a6b91fafaa6f4a750b1880eaa618fb753d249cb6ab987e938b859d5dd299edd04d8d087984fe774ad93e9daa4c3be87883362758753b3345a497aec520830f640db7dfeb4770d06ddca6b3c13724a7d2d2d6716b6fe572617f17da4917b702b0265331a998c58b1e93ba110eefa1ec44d48ab567aecad0b335446497d0d3d9f98dc353917"], 0xfe, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') socket(0x0, 0x0, 0x0) 01:53:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x7) r0 = gettid() clone(0x10000000, &(0x7f0000000280)="659329bb83e5360b5545dfeab67ac0dee876874dca371e727e918950c297e444ceb17ad75a7bc525d0245fe4dfdec9a4ce89dd4fcf02f61e8906584cf55a02e8e8959655a7f7da1c3ce476fef61a0bfacee5f0a937e1b5fc4dd3246d12d5a79dfffda288da031557c0795727f10a26ecf3564a23ecacda37240fde9a3b74247e6d9143", &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000340)="c1493ddd5ee05598836d23099507378e0dfc7302bd3ff74181e62d7a32e7b3b6c8df752b2ff2dacb1c435ab0c2df67af40ce7f6986113e6425a402bd5f068c14cae23bd2fc4501c6aa10b74e17c1964e686ef26d409e9b381473911708e6eaec496aaff67a2c8ea81597449a10d1b955f2ad36c4a50fd01f1fb58e0266b604464c9fc97a457d0830fcb1323f7c7f6d3e1da5a20e32ce336477e850160be1050c2f613eca2eea2efb399ca7bc45") wait4(0x0, 0x0, 0x40000000, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) clone(0x80000, &(0x7f0000000400)="6ddef136a6", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="fed0e5a334ca50970e9af71642bcff5c7b415e36849e1e92d75e5d9f0a21188d83780de803d8bb6a8c1156d4976ffb41b9fae412f16565bbd4af3b27f79562a8fa17bcc867b00dcf2c6e69dd2cc5f950e14b564bcf0c7cca108248b66712fecd4e5e067a64ffbb5df1a65486ebf4b9aacf87dab1a73ddce30f7400a50542e38ee2e88b177f24047080bc1076962fca55c6b47e0ead0e98e5981b3326347dc84b75d02443b334456cec77264186e9de8efa8ad2922da622754d01907ad6835765f78919b6d14c5a7cb25ffe23eb91ce5f364ca84059") close(r1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x61d, @private1, 0x3a9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x8d2, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) vmsplice(r1, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x8) ptrace$setopts(0x4200, r0, 0x0, 0x5) fcntl$notify(r1, 0x402, 0x20) ptrace$cont(0x1f, 0x0, 0x6, 0xd32) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 741.859464][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 741.861121][ T7182] block loop1: uevent: failed to send synthetic uevent [ 741.862021][ T2762] done. [ 741.864767][ T2762] PM: suspend exit 01:53:57 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x84250000, &(0x7f0000000100)="62395906fbddca304e714cb7ed26cf3240b51a4be2a9d942ba789049f089f20e646822facbf1bc0d250f9490aece85a7dcdc3cc2073a86218676bb2f48fa96194e7503dc4ee6", &(0x7f0000000080), &(0x7f0000000280), &(0x7f00000002c0)="d4da72d05c9fd2b8a2f26dfe96a343d16c65d643209aaa1c82aaac1519975aec74cdd4d4822e1a7f9c0f65260ddbc9da26800970bbe3d33df4683b53dbc3802f017a1670e37dae8aeaf5a823f2b9285a0d67c8f037cfb455438166086326") r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) syz_open_procfs(r0, &(0x7f0000000000)='net/xfrm_stat\x00') ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:57 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1000000, &(0x7f0000000080)="8bc3f2", &(0x7f0000000100), &(0x7f0000000840), &(0x7f0000000880)="225cb44386e9a1c4e903dec54777e45469ce32a18d59b248668fb73bd6ce7fd3ed9fa09fb5c77650ec67d17a8d2fe13835ee13a7e3186a26d9fb83b4b3cf80a56b1a3f387191a1b7fa60115828d86e02e70917219055609cdf89bb8d8d057e058496897b6ffbbf29ae112d03273eac20bfb3895d3d076622de986fc9507fbf4aa356695bff995aa4854335f3c7977458106c4cf27e4727a20aa2650c2759f5bd6ac5a6a9182e35dc6540379247c0876dc27b475d3737aa4df1f2e9ee50") r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000940)={0x0, 0x0}) tkill(r4, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:53:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 741.924747][ T2830] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc900 [ 741.940776][ T2838] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xc900 01:53:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 742.030595][ T2862] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xe000 [ 742.043079][ T2866] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xe000 [ 742.046736][ T2860] PM: suspend entry (deep) [ 742.054562][ T2867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 742.061667][ T2860] Filesystems sync: 0.014 seconds [ 742.071492][ T2860] Freezing user space processes ... (elapsed 0.023 seconds) done. [ 742.096383][ T2860] OOM killer disabled. [ 742.097376][ T2860] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 742.100374][ T2860] printk: Suspending console(s) (use no_console_suspend to debug) 01:53:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:53:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:53:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:53:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f0000000200)=""/50, 0x32}], 0x7) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000440)=r3, 0x1) [ 742.459974][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 742.994785][ T2860] ACPI: Preparing to enter system sleep state S3 [ 742.994924][ T2860] PM: Saving platform NVS memory [ 742.994929][ T2860] Disabling non-boot CPUs ... [ 742.998032][ T2860] smpboot: CPU 1 is now offline [ 743.001223][ T2860] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 743.001280][ T2860] ACPI: Low-level resume complete [ 743.001374][ T2860] PM: Restoring platform NVS memory [ 743.001406][ T2860] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 743.015890][ T2860] Enabling non-boot CPUs ... [ 743.016097][ T2860] x86: Booting SMP configuration: [ 743.016102][ T2860] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 743.016281][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 743.017390][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 743.018750][ T2860] CPU1 is up [ 743.019143][ T2860] ACPI: Waking up from system sleep state S3 [ 743.142701][ T2860] OOM killer enabled. [ 743.143671][ T2860] Restarting tasks ... [ 743.150226][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 743.153065][ T7182] block loop1: uevent: failed to send synthetic uevent [ 743.161903][ T2860] done. [ 743.164047][ T2860] PM: suspend exit 01:53:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:53:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf603, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 743.202304][ T2883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.209399][ T2886] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xe100 [ 743.213621][ T2887] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xe100 [ 743.247376][ T2896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:53:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x400000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 743.277304][ T2894] PM: suspend entry (deep) [ 743.325665][ T2894] Filesystems sync: 0.047 seconds [ 743.339444][ T2894] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 743.342954][ T2894] OOM killer disabled. [ 743.343769][ T2894] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 743.347536][ T2894] printk: Suspending console(s) (use no_console_suspend to debug) [ 743.517621][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 744.046204][ T2894] ACPI: Preparing to enter system sleep state S3 [ 744.046315][ T2894] PM: Saving platform NVS memory [ 744.046320][ T2894] Disabling non-boot CPUs ... [ 744.049973][ T2894] smpboot: CPU 1 is now offline [ 744.052644][ T2894] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 744.052701][ T2894] ACPI: Low-level resume complete [ 744.052778][ T2894] PM: Restoring platform NVS memory [ 744.052788][ T2894] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 744.066314][ T2894] Enabling non-boot CPUs ... [ 744.066534][ T2894] x86: Booting SMP configuration: [ 744.066538][ T2894] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 744.066713][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 744.067885][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 744.069319][ T2894] CPU1 is up [ 744.069748][ T2894] ACPI: Waking up from system sleep state S3 [ 744.198740][ T2894] OOM killer enabled. [ 744.199472][ T2894] Restarting tasks ... [ 744.203005][ T7182] synth uevent: /devices/virtual/block/loop2: failed to send uevent [ 744.207291][ T7182] block loop2: uevent: failed to send synthetic uevent [ 744.208940][ T2894] done. [ 744.217001][ T2894] PM: suspend exit 01:54:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x5, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf703, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x0, 0x1, 0x2, 0x0, 0x9, 0x44, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8000, 0xff, 0xffff, 0x5, 0x4, 0x80000001, 0x2, 0x0, 0x79, 0x0, 0xa0}, r4, 0x9, r5, 0xa) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x4) socket(0x0, 0x0, 0x0) 01:54:00 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x0, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 745.034264][ T2933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x8, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 745.082612][ T2947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000dc0)='9', 0x1}, {&(0x7f0000000e00)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fcc95abe7a706c05e4cb2e2875107608f9143f299d8e3f78f46484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e11bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xe8}], 0x4, 0x6) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) vmsplice(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000840)="56809a3d2d0d405946e4e668f6a3de5972d5c7b5ad26a3f1a19932a6c693ab3b23c730cc478a674c80c72e07ec5f030ff96bed1ed14e4185b9605dd15186b14a7306cb07ab888e75d7aaa845bb6533b0033641275d39673ab7f7cd0999da06d1b8ec0dffffc7b14362d1bd0d915844ced3f887ccb24ab2b370bcd4fc4471a8463e2b6b99d1f9df33c0ca7d6cdf2407d0a6196e64d8d9292975b6a62dcc892ef5e981f23dfb787c576581726003fe6aa99e811bb2fde3fb3f226f45dca56a225d50b837c19555fdee88942156a2e5e35c73182e390b3a6f49a8", 0xd9}, {&(0x7f0000000000)="3b456ffc4a5f04dc017ff675fdddad0dcc4623858e5d98a594e65cc40d9bfe96578cb8b9b784625522ed612ba9", 0x2d}, {&(0x7f0000000940)="d353e0b6387762501491251f42ebfd671705e453bbac31e07ed1a43abd134739695e74fa741091c7f78039e5652f1610b12afb91e522a95b2e09cdc5cbccecc183de35eb0b421c3a99d7c3c938b8eaf9b8ac61de88af0a0e63843a18c0397e62a88afc792cd7e881728641ebcc17f53d90d2d15ffb02c989d554cb2fbfe306768bbf1809df192c11c562cb256496ac57b2adf7f29735edc63e0fc130ccf2b51c927e3f372a414bd2b8557b05313ce8c11c5e04c7c050ecd520c186556f0f9b23e483f5699e082a800b61989cb95fb476bfe6", 0xd2}, {&(0x7f0000000a40)="f950c12416e50f4876ecc999cb3c9be0296d3caa830091a2937162148c537460d2927213a7341d91438a1b0f831a106cd8324f5ca176255fe2cb4b1b974ca4e0d7bb8ea8e11f220a", 0x48}, {&(0x7f0000000ac0)="02f49252cd56edf494a4a272c67e5b0e8a581358e5d0d893732017d529f82385d707fb39fc9409926650f5c1630b38028bb3b78b6ca57f4a48da3009ad1f21e09d9606d4b44f65b8350676dcb1f3e044f553c520405da3300cd9d2c1b2fa1ee29c93e2cbcbe8219bd716da84901db457fd3c098c0faa21d79953d8a2d00ddb67bce55dfa29d95d4affa64978279afb4ef7984ff82438404a9a6998ddd7ef4a7a1a612dd7c0481c9f20d274f612430be0958dc9349409a2fb7aeb94586737cb949ac6b6b2c6b75e29", 0xc8}, {&(0x7f0000000080)="5bc6eea4b952c8c1261dd36668b426db661315f475607f36f2f57c8590560ee7568dd6202f8531e16bc8a399c8a5598ffeba80396d30fff4bfbc0e11c6c918", 0x3f}], 0x6, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="ee5e39fc808c2dc6f95710869d2d8beb0b06aa57f26236df88b532d9ee0c5a1420408eb105906ca19ef2a90c87c872d370f79ecc869645694bb376f5e0280be80e2944535285f6b9c738f916b733664cc08ba8907ef6c5631f41944e50c12d9293e4f1c40d94104a8a296d581d62c466c7de55f1ffaa4f0387100447ae22b3bee5ab4025386000b3a0c78ea4f21933b30508700f36868b42232bc9a2c0e17a8ee67d4e2da15800df889c1a1253287898b422b3ff1d1ea4575dfe21a041d5a8048d942352f5290a4244f72b3c7b6695e5ea6e7bc28ca05ca5c70103197ad3c8f0353230e8b38b0e6e6c0d7b3adf6e635133fda83746ec3a18e76b4b266f47ae8340fe83045e67729001f2b44e3f7a9533432c4c28b2f3150ce90934d5ae158f101e90535aa5de1241dac62c135f28e9d4b5a876a463a62f8877f3ff7b400921cedde2603faa74c7012ac53fe2147b8dd9d8a7d4a4c6b813edcf4ff807b113a5f0ee00757f2a4047e70154c52f2e3e7fafc6c8742ab7399988352e9d52874d52b98976e2df154f1a958c64c01217f24a569acf2a6bb2eff5ae6a183c01049a6591e89b842684f9783c92fb5eba4a29fbb611044df81af852746816ea916d3dc1a5ec32b749405c5a4f8dd8a315ea1c3db35a4a6c09451df8cf9c17be0bb3ae13dca800d2a6d8d884f900f7a654e88a7c198e89479e51be25159794f51db58ceba86644f1caa3a7db07e78e26bb721b67a576572d45e4f541a47b72860fd5f29401cbc175965c4f97262284e80f19b396e1635ba6393ce891bb9c0477a4c21f433b808620293baa3e15410b55a959ebfcd8f670347a19aa42df75bd04bd55d28d7c3711a35530f47f0d44e0d595353cffb0f7995768e26120cf9c342db43b8853a0f0557a7abb23da377bde3b241bfa21c3b0274369755bb96649035aa13b22db5980df237df1a9a9bde6642ef3346be6251d902b031c4a5c977e264aae7b78bc8e9a03c85b8d2a42dc9dd56f08f331a488834223b7f38f60e160911f52379eda235f9b6fa46a46d199972bbcb125e76218e5180f092c631aa825c999673562186297dcb7e8f7529daeb2b1a748462d259fca19430ee848ff3905082f67911a1ff53a99a9236fee38859ca7ae02766ad87f7047830136b9f55e27269d62e2e2a4cb1494445ac54a57fdc8173f56122571763928bd661675c225808c31c4f1076f3cd7797592e18b3b44d12a0b4438eb06d0a9833a55484600681679b584abc44c1d414bf3fd47f5a3fa96c9478ddd255c084967fade21eaab512b7a5a7c2e3dc9fea61167edde3d5de42b88e56e1dc9fcb3005484e9350496780dde6be007da5cd5259310564363315deb435578ecfb2882570f2d809426b3780b3a28f65646eb2dff662239070e25ed4621a4374582f475f28906229360f43cb1d32cc04b8a794ab3693e9402a59faca38384e49030192a67e4d5d2e049c605c59d43148607d212d18263846b42988d11a91d1983cfcd7a3fa6a3ef4067bed49d5ab262b08947807f43ed5bdabbb3f555ce7b85ed5ffb32555b329618ea5fef92be35f4e3fecdd7bb2af2610ef27caab3a647a4e058ade59404bf59882230b7b6583ae136cdecd2911e1a96a5df6c23edfe88cf3841a6b078e88530e6", 0x495}, {&(0x7f0000000cc0)="7e0b4d7b0b373792ffeb6768a61fbe2f2c0ca2fcd610d36547f742e252a551dc64566629fa05b27a9a7f73f324a4293df5495d6ff7f8543dac3db90dd035dcae27733e6d9e4b9d4a0dd2071f0edd72751cbd33c1d6a0b4a8223e7448", 0x5c}, {&(0x7f0000000100)="afed7568fb439efe2ba005dbc4882c4c07b14b07", 0xffffffffffffffd5}], 0x5}}], 0x1, 0x400c078) fcntl$setpipe(r1, 0x407, 0xe6) ptrace$setregs(0xd, 0xffffffffffffffff, 0x833, &(0x7f0000000c40)="b3bd5fe92b80c77c9e548cde0b566b69f002cff693db6ef972f4ab8638e682eac281e630e489d94133eff82c4aa26a4e1931d1259bb044be38f1c90ad00c9724c7ee744350a4a5dba5517cde3835322815cf2ce5baae5c1c105abb0793141ec4e5aa34e7c0cf3abe0ab2a5fca4d9f3117cd00cbab2d0db5564f4cc2cda") exit_group(0x0) 01:54:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1722, &(0x7f0000000000)={0x0, 0x9eeb, 0x8, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="b64468935fe21742cf9eb39ba6cd32b8cb8440d810ee648e1296f358616c8ca0eb5c1cdc6a7b62fbac45ebd4b91997268140294a27307931206f4939d2ff18150ce6cc803b8e32b2edac4f3c3e66fe18d9dd8d4ff7b3d4bafef17d9bdf805bb0d4184172ca487b70e716ed8c472d0bba2c9ffb9199c084fa0c", 0x79}, {&(0x7f0000001080)="a8ea55a2076ad16ab2505cf88862809817a5468bb997e43e584283a653020cb22d9b1837feaa121dee847b07e8c139bf5e98aa5d28f90a48512d06070cd9dd6803d71eeb90ec18f660d5438499689a34e48c416cd723a639bd1abd91ff41269466f72dd02265673cbf727eb55f89fb2a06e0aed18a852d3d8aa28c69c98c2c469dcfd2242f16cc9306608065235cc153a3292b91aeb7fe3396a2baea683ec33ec728946b", 0xa4}], 0xfffffffffffffa2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) socket$inet6(0xa, 0x2, 0x1) ptrace$cont(0x7, r0, 0x1fc, 0x1) [ 745.165214][ T2966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 745.179730][ T2958] PM: suspend entry (deep) 01:54:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 745.211314][ T2958] Filesystems sync: 0.030 seconds [ 745.244069][ T2983] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 745.264559][ T2958] Freezing user space processes ... (elapsed 0.007 seconds) done. [ 745.273591][ T2958] OOM killer disabled. [ 745.274254][ T2958] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 745.278127][ T2958] printk: Suspending console(s) (use no_console_suspend to debug) [ 745.314591][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 745.829392][ T2958] ACPI: Preparing to enter system sleep state S3 [ 745.829541][ T2958] PM: Saving platform NVS memory [ 745.829545][ T2958] Disabling non-boot CPUs ... [ 745.832927][ T2958] smpboot: CPU 1 is now offline [ 745.835330][ T2958] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 745.835387][ T2958] ACPI: Low-level resume complete [ 745.835465][ T2958] PM: Restoring platform NVS memory [ 745.835474][ T2958] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 745.848600][ T2958] Enabling non-boot CPUs ... [ 745.848857][ T2958] x86: Booting SMP configuration: [ 745.848862][ T2958] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 745.849052][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 745.850224][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 745.851699][ T2958] CPU1 is up [ 745.852043][ T2958] ACPI: Waking up from system sleep state S3 [ 745.990082][ T2958] OOM killer enabled. [ 745.990997][ T2958] Restarting tasks ... [ 745.994700][ T7182] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 745.997843][ T7182] block loop5: uevent: failed to send synthetic uevent [ 746.001433][ T2958] done. [ 746.009655][ T2958] PM: suspend exit 01:54:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x0, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xf, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10044800, &(0x7f0000000280)="8138de97a61f8171f445a1ac93ab774b0bc62ef63c164caed03e82a094312eb2e288d0d25b3bdf34bd92f07ab788b753d53806c455315eb3143b9aeb5fda2d5b919f431435a96ee8ae193d1da7f60c8c79b5a32c9fe1691b8e05054c59ebd81622dd00acae7887d3fab4096b5519dd364741e03425f5e6aef6cb35b5df827d7f1ae17e9be8c359011092dbc7e5c6d55ddb5b11b210715642be5fc36579c8c5d05f1c03eb7eff62c406bc42703982654652899397f03d04712a2ab51a00ead6d9be84bd75cfa1f487686690a0c3bc26f5d05d826271698fbd8eb6d38d2df56c9e3ef8fb04acd2dcbf", &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="c74128c344a86ac974091aca8831188014cec2") r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r1, 0x36) ptrace$cont(0x18, r0, 0x4, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x7) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x3, 0x4, 0xe7, 0x0, 0x0, 0xa1008, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp, 0x4, 0xf9aa, 0x1, 0xf, 0x8, 0xfffffff7, 0x0, 0x0, 0x6, 0x0, 0x99}, r4, 0xe, r5, 0xb) socket(0x0, 0x0, 0x0) 01:54:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 746.026879][ T2991] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xfa00 01:54:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x7) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000280)="987586cbf6badcf17d2b36782f0e1665c4dc244f20cfbf6164cf35200e99a1ded4976f7dc9af3c8c0dd329835f34b1ba645e2922a8cc78b630a17cd779a3dbb839af40b691868531e0d147ccbfbe9670d7b70c3b340eab408044c51dce5fb44beda9ae5c60dd9b43ede75391fee5f57548d2cd06f88703a3b85b465c035e398ce50f36f3dc64e834ef1b1349752e4f4cdb5cd99e") exit_group(0x0) 01:54:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 746.082842][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.089379][ T3016] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x40004 [ 746.104164][ T3022] ref_ctr_offset mismatch. inode: 0x361d offset: 0x300 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x40004 01:54:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x10, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 746.133588][ T3035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.140436][ T3027] PM: suspend entry (deep) 01:54:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 746.222109][ T3048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.225400][ T3027] Filesystems sync: 0.083 seconds [ 746.253391][ T3027] Freezing user space processes ... (elapsed 0.044 seconds) done. [ 746.301800][ T3027] OOM killer disabled. [ 746.302938][ T3027] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 746.306593][ T3027] printk: Suspending console(s) (use no_console_suspend to debug) [ 746.400091][ T9342] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 746.928217][ T3027] ACPI: Preparing to enter system sleep state S3 [ 746.928358][ T3027] PM: Saving platform NVS memory [ 746.928362][ T3027] Disabling non-boot CPUs ... [ 746.931701][ T3027] smpboot: CPU 1 is now offline [ 746.934471][ T3027] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 746.934576][ T3027] ACPI: Low-level resume complete [ 746.934655][ T3027] PM: Restoring platform NVS memory [ 746.934665][ T3027] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 746.947398][ T3027] Enabling non-boot CPUs ... [ 746.947529][ T3027] x86: Booting SMP configuration: [ 746.947533][ T3027] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 746.947714][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 746.948703][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 746.950138][ T3027] CPU1 is up [ 746.950522][ T3027] ACPI: Waking up from system sleep state S3 [ 747.086222][ T3027] OOM killer enabled. [ 747.087464][ T3027] Restarting tasks ... [ 747.091579][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 747.094298][ T7182] block loop1: uevent: failed to send synthetic uevent [ 747.104956][ T3027] done. [ 747.106066][ T3027] PM: suspend exit 01:54:02 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x0, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x24, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000840)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r2, &(0x7f00000000c0), 0x0, 0x400c078) fcntl$setown(r1, 0x8, 0x0) r3 = gettid() tkill(r3, 0x29) ptrace$cont(0x7, r0, 0x5, 0x3) tkill(r3, 0x20) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x20, &(0x7f0000000100)="392c5335be72ffc7922500e03da65a5073dfce479cf3875916bf91c0a38c7273b6eae1c5b344477e4f964629d2ee90eb5745b882abd3311699b78ad38f42a11474bff4d87396ec5acc8586fc61") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="29ce62c6051bf6c62b4605080e43db247e9d") exit_group(0x0) 01:54:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = syz_io_uring_setup(0x3977, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r6 = syz_io_uring_setup(0x5417, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x2, 0xc04a01, r7) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2004, @fd_index=0x2, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000000)=""/23, 0x17}], 0x5, 0x18, 0x1, {0x0, r7}}, 0x81) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 747.148242][ T3038] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 747.150973][ T3038] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 747.161868][ T3038] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 747.163616][ T3038] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80100, &(0x7f0000000000)="077bf012556ccf", &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)="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") r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x50, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 747.200032][ T3067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.270640][ T3038] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 747.271411][ T3076] PM: suspend entry (deep) [ 747.272898][ T3038] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000f926b245 [ 747.283051][ T3076] Filesystems sync: 0.005 seconds [ 747.284745][ T3076] Freezing user space processes ... [ 747.350344][ T3038] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 747.353890][ T3038] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 747.363968][ T3038] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 747.366200][ T3038] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 747.375446][ T3076] (elapsed 0.090 seconds) done. [ 747.376441][ T3076] OOM killer disabled. [ 747.377072][ T3076] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 747.380237][ T3076] printk: Suspending console(s) (use no_console_suspend to debug) [ 747.505600][ T9342] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 748.030379][ T3076] ACPI: Preparing to enter system sleep state S3 [ 748.030478][ T3076] PM: Saving platform NVS memory [ 748.030482][ T3076] Disabling non-boot CPUs ... [ 748.033897][ T3076] smpboot: CPU 1 is now offline [ 748.036587][ T3076] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 748.036658][ T3076] ACPI: Low-level resume complete [ 748.036743][ T3076] PM: Restoring platform NVS memory [ 748.036753][ T3076] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 748.050213][ T3076] Enabling non-boot CPUs ... [ 748.050424][ T3076] x86: Booting SMP configuration: [ 748.050429][ T3076] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 748.050683][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 748.051804][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 748.053178][ T3076] CPU1 is up [ 748.053612][ T3076] ACPI: Waking up from system sleep state S3 [ 748.177663][ T3076] OOM killer enabled. [ 748.178298][ T3076] Restarting tasks ... [ 748.195861][ T3086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.203932][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 748.205573][ T7182] block loop3: uevent: failed to send synthetic uevent 01:54:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x5560, 0x1, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80d, 0x1, @perf_config_ext={0xe5}, 0x4000, 0x395, 0x5, 0x6, 0x200, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff}, r4, 0x0, r0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)={'U-', 0x7}, 0x16, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 748.208937][ T3076] done. [ 748.209682][ T3076] PM: suspend exit 01:54:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = gettid() tkill(r1, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="a11abad177a267334003b5ebac9564e3f219163710b93f3debfae60427a3ec36764c040abdd2cc187ecd23c2bed7eb2dedd0227cd30978d962b1071c390d3232a3dace9d27ca2b05157f4fa00fface2cd0f6b5e7cefa9a52d832605059fa0ce610cf9152175c5f170b92b1da038dd51c45e947ef8ff281639392fd80ad0d42d823e9005370513627c881eaacb3473b659e85a7eaf0b5f5caf5134393c0", 0x9d}, {&(0x7f0000000300)="3aeb85165db361c18f39ec11dfefbb3068d04dc7dd2a0b3730976909dc91bc54111d06fdda544aa8c972ba09c211f092b8af76fe4e64ccb4d8c6e4531ec6df4076db1fbbb49cce1814e742389c310f8e268f7164f75b", 0x56}], 0x2, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd0e}}], 0x18}, 0x1) wait4(r1, 0x0, 0x8, &(0x7f0000000380)) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) clone(0x20000400, &(0x7f0000000100)="d370041455f7bcdeeee6cebfcd94320c0abe09d9c2bc96868cbc23efac0594bb7625f5383a16e76c19b2a4931edb59cf550828d05e59cfe84f62450de8e03a435d", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)="7cb177872e215a8e101cd560309ed69f480388745d5a5144de36c964e279871e7443ce0ff6b1") [ 748.239078][ T3100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:03 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x0, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x58, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0xf1d0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = syz_io_uring_setup(0x3977, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = syz_io_uring_setup(0x5417, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x2, 0xc04a01, r8) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2000, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd=r9, 0x80200, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x30, r2, 0x8000000) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r14, 0x2, 0x0, 0x0, {0x0, r13}}, 0x3d8c) syz_io_uring_submit(r10, r12, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xd5cb, 0x3, &(0x7f00000002c0)="630ddba4f8184beb1c6251f82c0b6a9aa75e05de6a57bb9d19131d8f304989d14b2067096df316c1eba5b1b1a17fbf91546c4560bfbb1c30fed635c94ede063903b71174963ab91e8705e6771c486f1a6c75ce8ad328e02ade33ba394b0f3625e07e57e72610bfa637415c023d0ded3def492e582d965734815489cbdd6c8bbdf69eebfdf93ddaa6f38b19322e6a22d01a911ec89589c1cc1cc868034d6e88370634184c6d62a8a03c12ecd9ba0923e9e7582da74850ba6ae8bdd0c2aefa37579196af1e7e6a4288137c1ec2d1119c7bd5d7991cacf37f76", 0x8, 0x0, 0x1, {0x3, r13}}, 0x2) socket(0x0, 0x0, 0x0) [ 748.334601][ T3094] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 748.336958][ T3094] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0/file0\x00', 0x9, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="d70f386cd0747defbe65f7605d406ae42d7ae474751992c9d4364fe7bfa96fc2396a61fc794c6ab40da60c530def63f6985de29e8a08e4364f76c2d44b8de79a8e45a92f186d32d69076eb56f5cc54de2bf15d3eaf9053f3d99ddb203289efac0af2cb24aefed7", 0x67, 0xfffffffffffffff8}], 0x20, &(0x7f00000003c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x33, 0x35, 0x39, 0x65, 0x37]}}], [{@obj_type={'obj_type', 0x3d, '\\D'}}, {@measure}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0/file0\x00', 0x10000) r4 = openat(r3, &(0x7f0000000000)='./file0/file0\x00', 0x600001, 0x0) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000500)=""/15, 0xf}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/50, 0x32}], 0x3, 0x7, 0xc325) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x4e, 0x7f, 0x4, 0x0, 0x4, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd2c, 0x0, @perf_config_ext={0x1, 0x6}, 0x420, 0x0, 0x9, 0x9, 0xfff, 0x5, 0x1, 0x0, 0x3, 0x0, 0x101}, 0x0, 0x3, r4, 0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1f, 0x8, 0x90, 0x5, 0x0, 0x6, 0xf0604, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x1, 0x80, 0xb05c, 0x6, 0x5, 0xffffffff, 0x0, 0x0, 0x77, 0x0, 0x70}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0xef96f000) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_NOP={0x0, 0x2}, 0x10001) socket(0x0, 0x0, 0x0) [ 748.378136][ T3118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.394674][ T3094] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 748.396492][ T3094] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x7, 0x4, 0x8, 0x3, 0xc31, 0x400}) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 748.426555][ T3132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.471388][ T3134] loop4: detected capacity change from 0 to 16383 [ 748.473392][ T3135] PM: suspend entry (deep) [ 748.483134][ T3135] Filesystems sync: 0.008 seconds [ 748.484666][ T3135] Freezing user space processes ... [ 748.515466][ T3094] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 748.518513][ T3094] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 748.526775][ T3094] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 748.528699][ T3094] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 748.536254][ T3135] (elapsed 0.051 seconds) done. [ 748.537239][ T3135] OOM killer disabled. [ 748.538124][ T3135] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 748.541129][ T3135] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:04 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0x9) exit_group(0x0) 01:54:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x95, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 748.601757][ T27] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 749.125975][ T3135] ACPI: Preparing to enter system sleep state S3 [ 749.126039][ T3135] PM: Saving platform NVS memory [ 749.126044][ T3135] Disabling non-boot CPUs ... [ 749.129367][ T3135] smpboot: CPU 1 is now offline [ 749.132488][ T3135] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 749.132583][ T3135] ACPI: Low-level resume complete [ 749.132667][ T3135] PM: Restoring platform NVS memory [ 749.132677][ T3135] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 749.145605][ T3135] Enabling non-boot CPUs ... [ 749.145738][ T3135] x86: Booting SMP configuration: [ 749.145741][ T3135] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 749.145974][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 749.147125][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 749.148716][ T3135] CPU1 is up [ 749.149166][ T3135] ACPI: Waking up from system sleep state S3 [ 749.279319][ T3135] OOM killer enabled. [ 749.280103][ T3135] Restarting tasks ... [ 749.291491][ T3145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 749.294665][ T3135] done. [ 749.295286][ T3135] PM: suspend exit 01:54:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:04 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x0, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x48, 0x0, 0x9, 0x0, 0x10000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="1df9ab10abbc9792864948c713d7ad6152fa9e4be5eed6250dc10ca49af3ca9398725d072fb21c507c4277e25ace46f2cd9b8ea2e61fbbba35c44603ea8d09c47ce1c02bdb6383864055d71921a6435267f488012c50b73664f6c432916cb519fce5", 0x62, 0x10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x1ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x112}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4004, @fd=r4, 0xfffffffffffffffb, &(0x7f0000000600)=[{&(0x7f0000000000)=""/17, 0x11}, {&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/150, 0x96}], 0x8, 0x18, 0x1}, 0xffff) flock(r3, 0x8) [ 749.369306][ T3168] loop4: detected capacity change from 0 to 16383 [ 749.382875][ T3172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x1f4, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 749.466498][ T3180] PM: suspend entry (deep) [ 749.475411][ T3180] Filesystems sync: 0.007 seconds [ 749.476819][ T3180] Freezing user space processes ... [ 749.489089][ T3158] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 749.492502][ T3158] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 749.502469][ T3158] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 749.504718][ T3158] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 749.514864][ T3180] (elapsed 0.037 seconds) done. [ 749.516157][ T3180] OOM killer disabled. [ 749.517496][ T3180] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 749.520809][ T3180] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:05 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x0, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 749.898064][T10364] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 750.417771][ T3180] ACPI: Preparing to enter system sleep state S3 [ 750.417901][ T3180] PM: Saving platform NVS memory [ 750.417905][ T3180] Disabling non-boot CPUs ... [ 750.421334][ T3180] smpboot: CPU 1 is now offline [ 750.423994][ T3180] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 750.424089][ T3180] ACPI: Low-level resume complete [ 750.424169][ T3180] PM: Restoring platform NVS memory [ 750.424179][ T3180] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 750.438581][ T3180] Enabling non-boot CPUs ... [ 750.438768][ T3180] x86: Booting SMP configuration: [ 750.438772][ T3180] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 750.439086][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 750.440096][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 750.441385][ T3180] CPU1 is up [ 750.441756][ T3180] ACPI: Waking up from system sleep state S3 [ 750.564770][ T3180] OOM killer enabled. [ 750.566096][ T3180] Restarting tasks ... done. [ 750.583202][ T3180] PM: suspend exit 01:54:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af1, &(0x7f0000000240)={0x0, 0x14f4, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0x110, r0, 0x0) r5 = openat$cgroup_type(r3, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r9 = gettid() tkill(r9, 0x7) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x80, 0x71, 0x1f, 0x40, 0x0, 0x7, 0x60004, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000008c0), 0x5}, 0x8540, 0x3f, 0xed3, 0x2, 0x3, 0x7fff, 0xffff, 0x0, 0x3, 0x0, 0x100000000}, r9, 0xa, 0xffffffffffffffff, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x38, 0x0, 0x1f, 0x6, 0x0, {0x0, r10}}, 0x4) sendmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r3, r5, r6], 0x4}, 0x18bfd802) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0xfe, 0x2, 0xbe, 0x8, 0x0, 0x6, 0x21a01, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x8, 0x200, 0xfffffff7, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r3, 0x9) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x218, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 750.729225][ T3158] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 750.731532][ T3158] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 750.739243][ T3158] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 750.741131][ T3158] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 750.767028][ T3211] PM: suspend entry (deep) [ 750.777148][ T3211] Filesystems sync: 0.008 seconds [ 750.778687][ T3211] Freezing user space processes ... (elapsed 0.062 seconds) done. [ 750.843904][ T3211] OOM killer disabled. [ 750.844929][ T3211] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 750.848229][ T3211] printk: Suspending console(s) (use no_console_suspend to debug) [ 751.005033][ T9342] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 751.530542][ T3211] ACPI: Preparing to enter system sleep state S3 [ 751.530636][ T3211] PM: Saving platform NVS memory [ 751.530641][ T3211] Disabling non-boot CPUs ... [ 751.534278][ T3211] smpboot: CPU 1 is now offline [ 751.537125][ T3211] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 751.537189][ T3211] ACPI: Low-level resume complete [ 751.537268][ T3211] PM: Restoring platform NVS memory [ 751.537277][ T3211] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 751.550068][ T3211] Enabling non-boot CPUs ... [ 751.550198][ T3211] x86: Booting SMP configuration: [ 751.550202][ T3211] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 751.550398][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 751.551403][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 751.552986][ T3211] CPU1 is up [ 751.553409][ T3211] ACPI: Waking up from system sleep state S3 [ 751.673749][ T3211] OOM killer enabled. [ 751.674421][ T3211] Restarting tasks ... done. [ 751.689805][ T3211] PM: suspend exit 01:54:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x241, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:07 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x0, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) clone(0x20000, &(0x7f0000000080)="e3c32df13b234ca6", &(0x7f0000000480), &(0x7f00000000c0), &(0x7f0000000200)="58f7b999eb223ec4f7941cac905d7ba325cc09f7512313b28c8dc6f007d1ee8dbb230116d9d8f457a8c72a6e72fc64225f1c0eebc71e2c57cf6bf1c9a5407fd729c34c1f2b95e7069c5c4a281b514f033fb939a5615abef92a5066650d82f1c799394d0294b787d55b34676610f72ff05ee07c7bad17deb8e42a5d5c19f8eb1a3881c21205f522ea5a1e4d7336cb5261f43e1a89ce01e37538c12b66e8c4100e9c890e88e94f0c3bcad0765729e5ace1426ea7d6c57a2beb8f75319ef0630cbe71ef445f6b85927e1836618f475d10c515c42162014bdd19f9819c13") r1 = gettid() tkill(r1, 0x7) ptrace$cont(0x18, r1, 0x63, 0x2a) getpgid(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) wait4(0x0, &(0x7f0000000040), 0x20000000, &(0x7f00000004c0)) tkill(r0, 0x36) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="36c2f13709ddce25d75c1c52742e837d37faa440d765c5a5b7b0", 0x1a}, {&(0x7f0000000300)="8d81e166b2649375bf85acc98811a623e52c344d16c21a5837607cfa2e01425972f81e67f60fb5bc2e88b6c0c72a57c2a9a7f397d607d0893c6ba07ac290da97410b67931449c0d2c961bde701a30589ee9bf798d8a6e0352fd04ad99a6115b8dfceb798c0f2b7308e891fbf2c96c45feececf15af45d78b", 0x78}, {&(0x7f0000000380)="210f23e0", 0x4}, {&(0x7f00000003c0)="baaeccd077b1350ab8920a0dc682b67ba550ef1feb2c1920dc6f8cf424b3dc15f6f946f49678ee6c6b243ce995884e621a38c9bbf13c3ec7bdfbf4aa31", 0x3d}], 0x4, 0x0) gettid() ptrace$cont(0x18, r0, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffc, 0x40000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @private2, 0x7}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x300, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 752.473714][ T3232] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 752.475506][ T3232] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x0000000012c79fe3 [ 752.482537][ T3249] PM: suspend entry (deep) [ 752.491253][ T3249] Filesystems sync: 0.006 seconds [ 752.492688][ T3249] Freezing user space processes ... [ 752.574696][ T3232] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 752.580262][ T3232] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 752.593070][ T3232] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 752.595263][ T3232] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 752.598694][ T3249] (elapsed 0.105 seconds) done. [ 752.601303][ T3249] OOM killer disabled. [ 752.602337][ T3249] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 752.606194][ T3249] printk: Suspending console(s) (use no_console_suspend to debug) [ 752.650958][T30054] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 753.174056][ T3249] ACPI: Preparing to enter system sleep state S3 [ 753.174145][ T3249] PM: Saving platform NVS memory [ 753.174150][ T3249] Disabling non-boot CPUs ... [ 753.177577][ T3249] smpboot: CPU 1 is now offline [ 753.180760][ T3249] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 753.180894][ T3249] ACPI: Low-level resume complete [ 753.180972][ T3249] PM: Restoring platform NVS memory [ 753.180982][ T3249] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 753.195627][ T3249] Enabling non-boot CPUs ... [ 753.195773][ T3249] x86: Booting SMP configuration: [ 753.195777][ T3249] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 753.196084][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 753.197085][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 753.198894][ T3249] CPU1 is up [ 753.199297][ T3249] ACPI: Waking up from system sleep state S3 [ 753.334993][ T3249] OOM killer enabled. [ 753.335916][ T3249] Restarting tasks ... [ 753.343584][ T7182] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 753.345888][ T7182] block loop4: uevent: failed to send synthetic uevent [ 753.351343][ T3249] done. 01:54:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 753.366606][ T3249] PM: suspend exit 01:54:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xe8, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x44}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2ce3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x558e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x128, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x100]}}, [@INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "7b6c9e932ae1098bde12a9455cee6c962d70a045920c8909b36feede39d3cc111eeca49d31ea775f9657e7ae5baed68c44bdfa5e9c2691924c966bec41632a71b10504046b69f6f59ae4873ff9f077684f6feece9bea7e6ac43ecb0ad445a2f3ceb030fecac09c24f4b35297787a9556aac59f7706a9880028bd64eb50a1fb108c2a1a4b3cc4d289d0fc5a3cc0bce12d1b12025569ed79ebdded58dd3dfe36258e997470c076f8b86413b9ac66bb2d45132a7c782c617c27dac948b6970d601f6a37573811d89b956cd6d7cae5"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x3, '\x00'}]}, 0x128}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x3e8, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 753.456798][ T3232] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 753.459413][ T3232] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 753.475747][ T3232] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 753.478541][ T3232] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:08 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x0, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4b8, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) [ 753.635827][ T3285] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 753.637666][ T3285] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 753.719113][ T3308] PM: suspend entry (deep) [ 753.727018][ T3308] Filesystems sync: 0.006 seconds [ 753.729248][ T3308] Freezing user space processes ... [ 753.764943][ T3285] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 753.768873][ T3285] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 753.776710][ T3308] (elapsed 0.047 seconds) done. [ 753.777923][ T3308] OOM killer disabled. [ 753.778645][ T3308] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 753.781406][ T3308] printk: Suspending console(s) (use no_console_suspend to debug) [ 753.978434][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 754.498780][ T3308] ACPI: Preparing to enter system sleep state S3 [ 754.498857][ T3308] PM: Saving platform NVS memory [ 754.498861][ T3308] Disabling non-boot CPUs ... [ 754.502634][ T3308] smpboot: CPU 1 is now offline [ 754.505405][ T3308] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 754.505464][ T3308] ACPI: Low-level resume complete [ 754.505548][ T3308] PM: Restoring platform NVS memory [ 754.505558][ T3308] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 754.519690][ T3308] Enabling non-boot CPUs ... [ 754.519921][ T3308] x86: Booting SMP configuration: [ 754.519925][ T3308] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 754.520109][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 754.521215][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 754.522874][ T3308] CPU1 is up [ 754.523278][ T3308] ACPI: Waking up from system sleep state S3 [ 754.650725][ T3308] OOM killer enabled. [ 754.651413][ T3308] Restarting tasks ... done. [ 754.662684][ T3308] PM: suspend exit [ 754.732008][ T3285] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 754.733746][ T3285] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 754.738757][ T3285] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 754.740854][ T3285] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$setopts(0x4206, r0, 0xe28, 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x50, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x46002, 0x112, 0x10}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) 01:54:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x500, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:10 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x0, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) 01:54:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x41) wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) r1 = getpgrp(r0) ptrace$setregs(0xf, r1, 0x5b, &(0x7f0000000280)="97592263f2f33e3f223c55f630a7749eac4487a243d8021c9fa33ae377b2524efa20da46ee6b356d37b061942c53ea501a432422a7a073a6af349612920ece33a7ec156f5e270cb1eded3928fd170ba409c6da573fa32be8737c0ffcc853752d90598474ba39fcbf1bf3720b4222ed622b4870ca3e13df93dfba2144b5374fec120c116b5b2fd4ecccd42b7afa74777734584dbbd8a2395b8779f733a283b5f23ffdff3998d0b55ad587382522a364e7c0434216a21669c20c6a33c7a51e31412b3630d6b48c3aa9cb079f329e5d1f61a155dacff6eed83b7638b23ddd094c3af0537eb8bc3cff95c86f62a7cf") 01:54:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = gettid() tkill(r4, 0x7) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x3f, 0x1, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4200, 0x0, 0x7f, 0x9, 0x80000000, 0x80000000, 0x9, 0x0, 0x6, 0x0, 0x8}, r4, 0x3, r3, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xf00, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 01:54:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) getrusage(0xffffffffffffffff, &(0x7f0000000280)) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r2, 0x80000007) tkill(r1, 0x25) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 755.589719][ T3355] PM: suspend entry (deep) [ 755.597648][ T3355] Filesystems sync: 0.006 seconds [ 755.599548][ T3355] Freezing user space processes ... [ 755.601659][ T3319] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 755.605647][ T3319] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000632b4ec3 [ 755.709968][ T3319] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 755.712258][ T3319] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 755.723991][ T3319] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 755.726546][ T3319] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 755.734165][ T3355] (elapsed 0.134 seconds) done. [ 755.735523][ T3355] OOM killer disabled. [ 755.736456][ T3355] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 755.739623][ T3355] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 755.785918][ T1781] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 756.311344][ T3355] ACPI: Preparing to enter system sleep state S3 [ 756.311416][ T3355] PM: Saving platform NVS memory [ 756.311420][ T3355] Disabling non-boot CPUs ... [ 756.315109][ T3355] smpboot: CPU 1 is now offline [ 756.317710][ T3355] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 756.317808][ T3355] ACPI: Low-level resume complete [ 756.317888][ T3355] PM: Restoring platform NVS memory [ 756.317899][ T3355] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 756.331742][ T3355] Enabling non-boot CPUs ... [ 756.331963][ T3355] x86: Booting SMP configuration: [ 756.331968][ T3355] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 756.332155][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 756.333230][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 756.334669][ T3355] CPU1 is up [ 756.335050][ T3355] ACPI: Waking up from system sleep state S3 [ 756.464741][ T3355] OOM killer enabled. [ 756.465402][ T3355] Restarting tasks ... [ 756.482528][ T7182] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 756.485658][ T7182] block loop4: uevent: failed to send synthetic uevent [ 756.488566][ T3355] done. 01:54:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x1802, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:11 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000580)="0ec6b5143005da159df70730c6418d1451e73c0933") r1 = gettid() tkill(r1, 0x7) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000480)="24b9ea6f2f435bc5cd81bcd976db29dfc3b754eb1786b5fc1363d61520984073d42e4b4fd75182375bf20cdd980ddb60f62468cf4d43bd2db9c5b7f546c5d73d50bd8089681f46f5477f725431ac23c6bad60a73342822226508fbf95b2b99575259b21169e24db2fc09133a515c4c9bb443d7718d8344dea114a6e902a7df4d174d392737c6b99614cd29bd259912a309bb6e1578ff50a52d4a360ece01dc3c84599e5e2c2f2ee5cca82f37714e0d880ed73e2f9de6f01f4677ea9b97d19f4a16faebfbc3ce9c8ef77286") exit_group(0x2) clone3(&(0x7f0000000400)={0x300001000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000100), {0x33}, &(0x7f0000000280)=""/254, 0xfe, &(0x7f0000000380)=""/90, &(0x7f0000000140)=[r0, r0, r0, r0, 0xffffffffffffffff, r0, r0], 0x7}, 0x58) tkill(r2, 0x3b) [ 756.506217][ T3355] PM: suspend exit 01:54:11 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 01:54:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:11 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x10, 0xffffffffffffffff, 0x96c0e000) 01:54:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 01:54:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x2400, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 01:54:11 executing program 4: r0 = gettid() tkill(r0, 0x7) ptrace$getsig(0x4202, r0, 0x400, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x5}, 0x40, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000480), 0x9cf6, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3a4, 0x7e}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xec0}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040080}, 0x40805) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) tkill(r4, 0x36) r5 = gettid() ptrace$cont(0x18, r4, 0x100, 0x9) tkill(r5, 0x7) ptrace$cont(0x1f, r5, 0x0, 0x4) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) exit_group(0x0) syz_io_uring_setup(0x70e9, &(0x7f0000000100)={0x0, 0xd310, 0x20, 0x2, 0x386}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) [ 756.833569][ T3417] PM: suspend entry (deep) [ 756.842000][ T3417] Filesystems sync: 0.006 seconds [ 756.843528][ T3417] Freezing user space processes ... (elapsed 0.023 seconds) done. [ 756.869671][ T3417] OOM killer disabled. [ 756.871328][ T3417] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 756.874669][ T3417] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 01:54:12 executing program 4: r0 = gettid() tkill(r0, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, @perf_config_ext={0x4, 0x80000000}}, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat(r4, &(0x7f0000000000)='./file0/file0\x00', 0x400000, 0x89) [ 756.921637][T30054] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 757.456563][ T3417] ACPI: Preparing to enter system sleep state S3 [ 757.456659][ T3417] PM: Saving platform NVS memory [ 757.456664][ T3417] Disabling non-boot CPUs ... [ 757.459980][ T3417] smpboot: CPU 1 is now offline [ 757.462704][ T3417] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 757.462821][ T3417] ACPI: Low-level resume complete [ 757.462898][ T3417] PM: Restoring platform NVS memory [ 757.462911][ T3417] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 757.476465][ T3417] Enabling non-boot CPUs ... [ 757.476680][ T3417] x86: Booting SMP configuration: [ 757.476684][ T3417] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 757.476904][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 757.477869][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 757.479613][ T3417] CPU1 is up [ 757.480090][ T3417] ACPI: Waking up from system sleep state S3 [ 757.608528][ T3417] OOM killer enabled. [ 757.609113][ T3417] Restarting tasks ... [ 757.624031][ T7182] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 757.625348][ T3417] done. [ 757.625440][ T7182] block loop5: uevent: failed to send synthetic uevent [ 757.638512][ T3417] PM: suspend exit 01:54:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x16) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) wait4(r1, &(0x7f0000000080), 0x2, &(0x7f0000000280)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x7) ptrace$cont(0x1f, r2, 0x6, 0x5f229d4f) exit_group(0x0) [ 757.705310][ T3399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 757.708264][ T3399] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 757.723166][ T3399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 757.724670][ T3399] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4102, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 01:54:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 757.828720][ T3399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 757.831507][ T3399] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 757.837625][ T3399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 757.839538][ T3399] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 757.847368][ T3458] PM: suspend entry (deep) [ 757.866193][ T3458] Filesystems sync: 0.017 seconds [ 757.923052][ T3458] Freezing user space processes ... (elapsed 0.007 seconds) done. [ 757.931924][ T3458] OOM killer disabled. [ 757.932480][ T3458] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 757.935709][ T3458] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) [ 758.208552][ T1787] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 758.742990][ T3458] ACPI: Preparing to enter system sleep state S3 [ 758.743126][ T3458] PM: Saving platform NVS memory [ 758.743211][ T3458] Disabling non-boot CPUs ... [ 758.746537][ T3458] smpboot: CPU 1 is now offline [ 758.749676][ T3458] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 758.749736][ T3458] ACPI: Low-level resume complete [ 758.749815][ T3458] PM: Restoring platform NVS memory [ 758.749824][ T3458] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 758.763727][ T3458] Enabling non-boot CPUs ... [ 758.763898][ T3458] x86: Booting SMP configuration: [ 758.763902][ T3458] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 758.764093][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 758.765366][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 758.766937][ T3458] CPU1 is up [ 758.767353][ T3458] ACPI: Waking up from system sleep state S3 [ 758.927188][ T3458] OOM killer enabled. 01:54:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x5000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x2400, 0x60) r5 = fspick(r3, &(0x7f0000000040)='./file0/file0\x00', 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x40000008}) [ 758.927905][ T3458] Restarting tasks ... done. [ 758.966294][ T3458] PM: suspend exit [ 758.999256][ T3466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 759.001123][ T3466] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000001263e5cd 01:54:14 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 759.100620][ T3466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 759.103544][ T3466] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 759.120083][ T3466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 759.123025][ T3466] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) 01:54:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fstatfs(r4, &(0x7f00000002c0)=""/4096) socket(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000040)=""/64, 0x40}], 0x2, 0x1f, 0x7) 01:54:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x5800, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 759.236612][ T3466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 759.238211][ T3466] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 759.252029][ T3466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 759.255101][ T3466] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 759.314092][ T3520] PM: suspend entry (deep) [ 759.328078][ T3520] Filesystems sync: 0.011 seconds [ 759.329813][ T3520] Freezing user space processes ... (elapsed 0.044 seconds) done. [ 759.377026][ T3520] OOM killer disabled. [ 759.377767][ T3520] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 759.380717][ T3520] printk: Suspending console(s) (use no_console_suspend to debug) [ 759.505691][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 760.029924][ T3520] ACPI: Preparing to enter system sleep state S3 [ 760.030028][ T3520] PM: Saving platform NVS memory [ 760.030033][ T3520] Disabling non-boot CPUs ... [ 760.033505][ T3520] smpboot: CPU 1 is now offline [ 760.036378][ T3520] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 760.036441][ T3520] ACPI: Low-level resume complete [ 760.036529][ T3520] PM: Restoring platform NVS memory [ 760.036539][ T3520] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 760.050205][ T3520] Enabling non-boot CPUs ... [ 760.050496][ T3520] x86: Booting SMP configuration: [ 760.050500][ T3520] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 760.050740][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 760.052081][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 760.053712][ T3520] CPU1 is up [ 760.054187][ T3520] ACPI: Waking up from system sleep state S3 [ 760.191151][ T3520] OOM killer enabled. [ 760.192012][ T3520] Restarting tasks ... [ 760.210974][ T7182] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 760.214892][ T7182] block loop4: uevent: failed to send synthetic uevent [ 760.214923][ T3520] done. [ 760.216507][ T3520] PM: suspend exit 01:54:15 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$cont(0x18, r0, 0x2, 0x6) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x9, 0x401) exit_group(0x0) 01:54:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) 01:54:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x60ff, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000001600)=@hci, 0x0, 0x800, 0x1}, 0x6) syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x3977, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r7 = syz_io_uring_setup(0x5417, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r9) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) preadv(r9, &(0x7f0000001500)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/139, 0x8b}, {&(0x7f0000001440)=""/188, 0xbc}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x5, 0x3, 0xfffffffc) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x2, 0xc04a01, r8) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r5, 0x0, &(0x7f00000002c0)="e527544e26bc6a6e641b575ce9f7304d69e7d9cd2723a5852bd1a8e6191ed0e010af192d31f567582954f0f0dd1c078ee43b9ce6bc8dcfdb216d0ed04b207f7109429941fa105f27cccdd16ac89f8fef881c9522c85b5ccfaa69c49cf0e2bb4e7799eec002d364d23b15a9012dbe0299db6a1136dd72359e913e6ee2a9d0cdbe909a1ee3", 0x84, 0x40000, 0x1, {0x0, r8}}, 0x9) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)}], 0x1}, 0x0) 01:54:15 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r7, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x9500, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 760.930142][ T3552] PM: suspend entry (deep) [ 760.938375][ T3552] Filesystems sync: 0.005 seconds [ 760.940167][ T3552] Freezing user space processes ... [ 761.011507][ T3531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 761.015861][ T3531] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 761.027574][ T3531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 761.029958][ T3531] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 761.040910][ T3552] (elapsed 0.100 seconds) done. [ 761.042459][ T3552] OOM killer disabled. [ 761.043333][ T3552] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 761.047109][ T3552] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)}], 0x1}, 0x0) [ 761.102125][ T22] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 761.627711][ T3552] ACPI: Preparing to enter system sleep state S3 [ 761.627788][ T3552] PM: Saving platform NVS memory [ 761.627792][ T3552] Disabling non-boot CPUs ... [ 761.631174][ T3552] smpboot: CPU 1 is now offline [ 761.633746][ T3552] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 761.633804][ T3552] ACPI: Low-level resume complete [ 761.633917][ T3552] PM: Restoring platform NVS memory [ 761.633926][ T3552] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 761.647135][ T3552] Enabling non-boot CPUs ... [ 761.647348][ T3552] x86: Booting SMP configuration: [ 761.647353][ T3552] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 761.647561][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 761.648662][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 761.650374][ T3552] CPU1 is up [ 761.650737][ T3552] ACPI: Waking up from system sleep state S3 [ 761.787799][ T3552] OOM killer enabled. [ 761.789237][ T3552] Restarting tasks ... done. [ 761.799279][ T3552] PM: suspend exit 01:54:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x9700, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)}], 0x1}, 0x0) 01:54:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:17 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x8ad5, 0x8) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) [ 761.942902][ T3531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 761.946275][ T3531] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 761.963643][ T3531] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 761.966128][ T3531] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x19e2, 0x4, 0x1, 0x3d1}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:17 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$cont(0x9, r1, 0x9, 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 01:54:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x4, 0x1, 0x2) 01:54:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xb804, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:17 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000280)="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", 0x13d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 01:54:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xc4ff, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 762.117822][ T3616] PM: suspend entry (deep) [ 762.145651][ T3616] Filesystems sync: 0.026 seconds [ 762.162240][ T3616] Freezing user space processes ... [ 762.192232][ T3600] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 762.206428][ T3600] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000005e6bdf78 [ 762.301571][ T3600] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 762.309955][ T3600] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 762.329469][ T3600] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 762.337641][ T3600] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 762.354395][ T3616] (elapsed 0.191 seconds) done. [ 762.359559][ T3616] OOM killer disabled. [ 762.363796][ T3616] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 762.373839][ T3616] printk: Suspending console(s) (use no_console_suspend to debug) [ 762.417741][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 762.942729][ T3616] ACPI: Preparing to enter system sleep state S3 [ 762.942813][ T3616] PM: Saving platform NVS memory [ 762.942817][ T3616] Disabling non-boot CPUs ... [ 762.946234][ T3616] smpboot: CPU 1 is now offline [ 762.949378][ T3616] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 762.949434][ T3616] ACPI: Low-level resume complete [ 762.949512][ T3616] PM: Restoring platform NVS memory [ 762.949521][ T3616] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 762.962477][ T3616] Enabling non-boot CPUs ... [ 762.962661][ T3616] x86: Booting SMP configuration: [ 762.962665][ T3616] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 762.962969][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 762.963999][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 762.965409][ T3616] CPU1 is up [ 762.965727][ T3616] ACPI: Waking up from system sleep state S3 [ 763.104678][ T3616] OOM killer enabled. [ 763.106281][ T3616] Restarting tasks ... [ 763.126114][ T7182] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 763.130792][ T7182] block loop5: uevent: failed to send synthetic uevent [ 763.133110][ T3616] done. [ 763.141369][ T3616] PM: suspend exit 01:54:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c", 0x39}], 0x1}, 0x0) 01:54:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) r1 = gettid() tkill(r1, 0x7) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f0000000280)) 01:54:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af6, &(0x7f0000000240)={0x0, 0xfffffffb, 0x4, 0x0, 0x240}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40010, r0, 0x8000000) r4 = syz_io_uring_setup(0x3977, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r5 = syz_io_uring_setup(0x5417, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x2, 0xc04a01, r6) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000000000), 0x1, 0x0, 0x0, {0x0, r6}}, 0x3) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xe803, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4, &(0x7f0000000340)) wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) gettid() ptrace$cont(0x18, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r1, &(0x7f0000000080), 0x80000000, &(0x7f0000000280)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xf401, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c", 0x39}], 0x1}, 0x0) 01:54:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x312d, &(0x7f0000000000)={0x0, 0x1749, 0x0, 0x0, 0x322}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x365c, &(0x7f00000002c0)={0x0, 0xf7e4, 0x1, 0x0, 0x68, 0x0, r3}, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000200)) [ 763.318704][ T3659] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 763.320408][ T3659] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000477defa5 [ 763.419348][ T3659] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 763.421157][ T3659] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c", 0x39}], 0x1}, 0x0) 01:54:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000001280)=0xc) ptrace$setopts(0x4200, r1, 0x7, 0x23) wait4(0x0, 0x0, 0x40000000, 0x0) r2 = gettid() tkill(r2, 0x7) tkill(r2, 0x4000034) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1f2) read(r3, &(0x7f0000000280)=""/4096, 0x1000) ptrace$setregs(0xd, r0, 0xddad, &(0x7f0000000100)="092b110938b7c0b98975b8337c89fe6487ae77f764b550a38b42e0f19a9dcfdbcccade189e7556af11e69cb0f191a4c02c2595685eb3fb998e84b70843740e8b85405f93fa853acca6273e596f0d3ebccd2e30ed6ec6ca") tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 763.472370][ T3659] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 763.475561][ T3659] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 763.570666][ T3709] PM: suspend entry (deep) [ 763.581627][ T3709] Filesystems sync: 0.009 seconds [ 763.583386][ T3709] Freezing user space processes ... [ 763.590982][ T3659] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 763.595741][ T3659] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 763.602093][ T3659] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 763.603422][ T3659] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 763.612198][ T3709] (elapsed 0.028 seconds) done. [ 763.613467][ T3709] OOM killer disabled. [ 763.614451][ T3709] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 763.619269][ T3709] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 763.653945][ T9342] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 764.169567][ T3709] ACPI: Preparing to enter system sleep state S3 [ 764.169649][ T3709] PM: Saving platform NVS memory [ 764.169654][ T3709] Disabling non-boot CPUs ... [ 764.172864][ T3709] smpboot: CPU 1 is now offline [ 764.175570][ T3709] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 764.175626][ T3709] ACPI: Low-level resume complete [ 764.175702][ T3709] PM: Restoring platform NVS memory [ 764.175712][ T3709] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 764.188991][ T3709] Enabling non-boot CPUs ... [ 764.189218][ T3709] x86: Booting SMP configuration: [ 764.189223][ T3709] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 764.189415][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 764.190452][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 764.191899][ T3709] CPU1 is up [ 764.192303][ T3709] ACPI: Waking up from system sleep state S3 [ 764.316660][ T3709] OOM killer enabled. [ 764.317609][ T3709] Restarting tasks ... [ 764.325444][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 764.329726][ T7182] block loop3: uevent: failed to send synthetic uevent [ 764.333292][ T3709] done. [ 764.333963][ T3709] PM: suspend exit 01:54:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @aes128, 0x2, '\x00', @c}) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r6) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) write(r6, &(0x7f0000000600)="491f76ba12ea62a53a4c1aa18d056a39070abb6e0bf23ba0df316bf75bc340e7", 0x20) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) vmsplice(r5, &(0x7f0000000580)=[{&(0x7f0000000000)="7c747c04047937954f4b9c1dda26ac5ff899c1", 0x13}, {&(0x7f00000002c0)="e89eeee53023ab1ca6efedf9244f52aae95ded4618d4ff93ea01e5017a88c2d29568128b29ce1b336eaea79f03188400ca0b6095f86f8408b576cacedec586e76446a117e6447308b12327f600e639cb2ac796e0d87bc91f92f825284e6159e29d8586fb8ca737fe4b44ada1f6be478de1b113f25dac0dd2b860bc510b2294fadd9c5a9dfbcb6a1f33cce88128ab6c4effdd8881004532a084c0ad272f854507341a63fc7faf9688313b247680fcff12972b52a4457c0a03a86a131e74228d706b1cbb31da82f7985aad14", 0xcb}, {&(0x7f00000003c0)="309914dc2088307cd72a4729abf44162f62262b61e7831d5c69ca6ec0e687b9c827c611d588d2a00ae00ba46334022dade0e63b70456b6849beee726febc770ac92a8da821fb7b711a183ff8f4e59219bfbe766a337d18d027d6f9e4db1560e86964e184d68c59cb38921d46c9a968f2a1bf514bc76e1eaea923126e13c12f61deca24c3f8b9a08761980407fc84d330df5d6e35d5d9508b8df095eee8369455c4ca31218e1a7f984e1691dcc781bebbb94b5c8d", 0xb4}, {&(0x7f0000000140)="cd832b82f603e29e044e39b18e4fa834ee22cd1fb64fc77af7f57abdb2cca6bf8ae86a2aa43cf83e46f632718a09484030b408c02b0b5be529a6bd26594e2d54e9257cb2eaeebbad626ea27903c7eea3b29201535053807957565411f2fcf241b48c014b9f8f60843c78a1653f8eda6441fd446206a17b04e6f27e98ec9e", 0x7e}, {&(0x7f0000000480)="af5e2bbddb40cb32534ed63dac78a5791802e7f0970ca710b10faede0fefeb416698354d984bf9901c9c5283599b4ebca5b620dd3fb5ddbd1edb1a68ff789fb48204a59abb46ad6c6bd955a097648cf9d456820b08d4f4ce2dc76812a929dc4ca30888f10121d326dbc9bb5b7cedae4f1f78f17aef62be5627593244acb7e89bccbcc4397bca9a43bb8357bd239a9c02d638a24cc5e2a825ecb37f53a535eca8f6d3f047ac50adb4c31f425493a42188a97b634fcc8b59972994b8f78695f0782fff4d6dcd011a2cb6876e394cabda61bbdddc6e3bfade425d4c3ed3a0c2b90dd1c6cd3c", 0xe4}, {&(0x7f0000000040)="e5a555319a74fc37735511c1f8c6bee6ca44acbcc93c0e8afbc92f7f877d227803f88aa9ea91e4b0ace757c9", 0x2c}], 0x6, 0x8) socket(0x0, 0x0, 0x0) 01:54:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xff00, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307ead", 0x43}], 0x1}, 0x0) 01:54:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) gettid() 01:54:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307ead", 0x43}], 0x1}, 0x0) 01:54:19 executing program 3: r0 = eventfd(0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="2c27782ac6732084ef8351d90239697b32b16a6c365a66060f54350a62a60317ba4d98f0765b8d1b36ed3b41245f83721de01a5baf71a12e8aad614caa3b62d34b23c7c896011bfb5689db35154ee273889bf2a8d270a0098f5fe1b3abc43c844808f23f001a7c34c4640af1", 0x6c}, {&(0x7f0000000280)="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", 0x173}], 0x4, 0x0) write$eventfd(r0, &(0x7f00000001c0)=0x1, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x36) clone(0x800880, &(0x7f0000000040)="88fa29e56a96d6812d4c1496281c341f11dcfa92a3ecc7003bed827be36c8a98fd924610ff4aa8c4dd876840c930379ce22ba37f5ccdab2c0a776ab469c7fcca5cd4dd6483b58743d06607495ecc6cf7f717316ac5181ccbedf22be29684754396983e5765493faf2abd3d87217082ce676a289bdbf951b1a0", &(0x7f0000000180), &(0x7f0000000400), &(0x7f0000000200)="b94b3a4e7dad9aa43a1461217be65eccbf0a4a2032177b32c968a05f8a2178c62342ae4d0d9554d3dc56b3ba433834451c951bef42193b5d4477bc07835f69c6690439") ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307ead", 0x43}], 0x1}, 0x0) 01:54:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setxattr$system_posix_acl(&(0x7f0000000000)='\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x4, 0xee00}, {0x2, 0x6, 0xee00}], {0x4, 0x3}, [{0x8, 0x5}], {0x10, 0x6}, {0x20, 0x6}}, 0x44, 0x3) socket(0x0, 0x0, 0x0) [ 764.417844][ T3714] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 764.420920][ T3714] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 764.441551][ T3714] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 764.444104][ T3714] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xff0f, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc", 0x48}], 0x1}, 0x0) [ 764.522442][ T3732] PM: suspend entry (deep) [ 764.561034][ T3732] Filesystems sync: 0.036 seconds [ 764.562747][ T3732] Freezing user space processes ... [ 764.601903][ T3714] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 764.606257][ T3714] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 764.614768][ T3714] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 764.616930][ T3714] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 764.628848][ T3732] (elapsed 0.066 seconds) done. [ 764.630474][ T3732] OOM killer disabled. [ 764.631626][ T3732] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 764.634983][ T3732] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 764.719752][ T1787] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 765.242485][ T3732] ACPI: Preparing to enter system sleep state S3 [ 765.242696][ T3732] PM: Saving platform NVS memory [ 765.242700][ T3732] Disabling non-boot CPUs ... [ 765.246244][ T3732] smpboot: CPU 1 is now offline [ 765.249023][ T3732] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 765.249081][ T3732] ACPI: Low-level resume complete [ 765.249174][ T3732] PM: Restoring platform NVS memory [ 765.249184][ T3732] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 765.261936][ T3732] Enabling non-boot CPUs ... [ 765.262151][ T3732] x86: Booting SMP configuration: [ 765.262155][ T3732] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 765.262353][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 765.263416][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 765.265019][ T3732] CPU1 is up [ 765.265363][ T3732] ACPI: Waking up from system sleep state S3 [ 765.395086][ T3732] OOM killer enabled. [ 765.395739][ T3732] Restarting tasks ... done. [ 765.406399][ T3732] PM: suspend exit 01:54:20 executing program 3: clone(0x10810900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) clone(0x400, &(0x7f0000000280)="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", &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="88b6") r1 = gettid() tkill(r1, 0x7) tkill(r1, 0x7) gettid() openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0xc8) 01:54:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af2, &(0x7f0000000900)={0x0, 0x4, 0x0, 0x0, 0x2ea}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0, 0x80000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000a40)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r1, 0x0, &(0x7f0000000980)="5156bfb636c205b4a07d49a052881fa4325538529adf9b9e489601167f9e32c4104b39613c683f4ccdc802fed90d1144858f86457648a196741d00033b0d9f0346ea4f8e6831c5079a98e6a0e79d4aedbdd7b2bd2aa352b47ba0d45d70c2fef318d66942bba67d4c7b85064cc2eb1a3030c51812ae3e51e64c233850ced16b41f6fb81195b070d4a4dbf725bb1dbe730e813fc10590bd5d7907701dd06", 0x9d, 0x4048818, 0x1}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x8680, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0xff, 0x0}, 0x0) dup2(r4, r4) io_uring_enter(r1, 0x51be, 0x369, 0x3, &(0x7f0000000080)={[0x7]}, 0x8) io_uring_enter(r1, 0x300, 0x10ce, 0x0, &(0x7f0000000000), 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) r6 = getgid() fsetxattr$system_posix_acl(r5, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="02000000010001002d2000000000000000000000080004009d4dd2f4282dda9e563841df3cf8c11f6f548d5bd88bf43939906eca601b2da15fbbd33de51c3907d164ee89edbc09f68eb0b00570af4ed1789e8c7ca59c70d2c7778069b0def310e8d1ed0ba9289efed17c4621488056a61f857d9ef29c95eb3f8cd5286c9d1b33b1719721ff6eed23a394fbd2f72663a2411fedf51ebbeceaa3e0413aac7ceba0001a3ce5f8cb6455345c63193de360bf2def338586d54b001e3b86e6d4e7b01f426854b2e6783a5cc7f79c3ec493af7eb9be27792cdbf104b4919a", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x34, 0x2) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r7 = signalfd4(r0, &(0x7f0000000840)={[0x3f]}, 0x8, 0x100000) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000880), 0x1) accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, &(0x7f00000000c0)=0x80) 01:54:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc", 0x48}], 0x1}, 0x0) 01:54:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xffc4, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc", 0x48}], 0x1}, 0x0) 01:54:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) r1 = gettid() tkill(r1, 0x7) rt_sigqueueinfo(r1, 0x1c, &(0x7f0000000100)={0x16, 0x3, 0x8}) 01:54:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) fchownat(r3, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0xee01, 0x800) [ 765.560495][ T3761] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 765.562398][ T3761] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 765.578795][ T3761] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 765.580992][ T3761] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x50000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63", 0x4a}], 0x1}, 0x0) [ 765.607791][ T3779] PM: suspend entry (deep) 01:54:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$cont(0x7, r1, 0x9, 0xfd43) exit_group(0x0) [ 765.633681][ T3789] loop4: detected capacity change from 0 to 7 [ 765.639719][ T3779] Filesystems sync: 0.030 seconds [ 765.641715][ T3779] Freezing user space processes ... [ 765.673246][ T3761] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 765.676281][ T3761] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000001263e5cd [ 765.762532][ T3761] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 765.765610][ T3761] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 765.777333][ T3761] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 765.781535][ T3761] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 765.794512][ T3779] (elapsed 0.152 seconds) done. [ 765.796193][ T3779] OOM killer disabled. [ 765.798559][ T3779] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 765.802640][ T3779] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 765.844889][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 766.360772][ T3779] ACPI: Preparing to enter system sleep state S3 [ 766.360883][ T3779] PM: Saving platform NVS memory [ 766.360888][ T3779] Disabling non-boot CPUs ... [ 766.364228][ T3779] smpboot: CPU 1 is now offline [ 766.366859][ T3779] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 766.366917][ T3779] ACPI: Low-level resume complete [ 766.367004][ T3779] PM: Restoring platform NVS memory [ 766.367017][ T3779] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 766.379378][ T3779] Enabling non-boot CPUs ... [ 766.379566][ T3779] x86: Booting SMP configuration: [ 766.379570][ T3779] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 766.379752][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 766.380786][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 766.382166][ T3779] CPU1 is up [ 766.382301][ T3779] ACPI: Waking up from system sleep state S3 [ 766.513084][ T3779] OOM killer enabled. 01:54:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63", 0x4a}], 0x1}, 0x0) 01:54:21 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) wait4(r0, 0x0, 0x80000000, &(0x7f0000000280)) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) 01:54:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63", 0x4a}], 0x1}, 0x0) [ 766.514040][ T3779] Restarting tasks ... [ 766.548260][ T7182] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 766.552105][ T7182] block loop5: uevent: failed to send synthetic uevent [ 766.557206][ T3779] done. [ 766.571539][ T3809] loop4: detected capacity change from 0 to 7 [ 766.578122][ T3779] PM: suspend exit 01:54:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:21 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x39) socket(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000140)={0x48, 0x29, 0x2, {0x6, [{{0x10, 0x3, 0x2}, 0x4a7, 0x36, 0xd, './file0/file0'}, {{0x20, 0x2, 0x4}, 0x80000001, 0x7c}]}}, 0x48) 01:54:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x104000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e6397", 0x4b}], 0x1}, 0x0) [ 766.665388][ T3814] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 766.667540][ T3814] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 766.676441][ T3814] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 766.678655][ T3814] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e6397", 0x4b}], 0x1}, 0x0) 01:54:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x272f, &(0x7f0000000000)={0x0, 0xa515, 0x1, 0x1, 0x199, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x9) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x105400, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 766.807209][ T3854] PM: suspend entry (deep) [ 766.812061][ T3814] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 766.814952][ T3814] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 766.819424][ T3854] Filesystems sync: 0.011 seconds [ 766.821457][ T3854] Freezing user space processes ... [ 766.827884][ T3814] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 766.830945][ T3814] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 766.839205][ T3854] (elapsed 0.017 seconds) done. [ 766.841253][ T3854] OOM killer disabled. [ 766.842355][ T3854] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 766.845973][ T3854] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e6397", 0x4b}], 0x1}, 0x0) [ 767.089465][ T9342] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 767.620840][ T3854] ACPI: Preparing to enter system sleep state S3 [ 767.620991][ T3854] PM: Saving platform NVS memory [ 767.620995][ T3854] Disabling non-boot CPUs ... [ 767.624191][ T3854] smpboot: CPU 1 is now offline [ 767.626853][ T3854] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 767.626913][ T3854] ACPI: Low-level resume complete [ 767.627027][ T3854] PM: Restoring platform NVS memory [ 767.627037][ T3854] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 767.640179][ T3854] Enabling non-boot CPUs ... [ 767.640398][ T3854] x86: Booting SMP configuration: [ 767.640403][ T3854] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 767.640675][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 767.641760][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 767.643362][ T3854] CPU1 is up [ 767.643748][ T3854] ACPI: Waking up from system sleep state S3 [ 767.778393][ T3854] OOM killer enabled. [ 767.779261][ T3854] Restarting tasks ... done. [ 767.792996][ T3854] PM: suspend exit 01:54:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3d1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0/file0\x00', 0xc000, 0x5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000002c0)={"efc50b171e55cc8d3ead0de267151ae5", 0x0, 0x0, {0x7, 0x3ff}, {0x1, 0x800}, 0x0, [0x93b, 0x4, 0x80000000, 0x5, 0x4, 0xad, 0x68881e0a, 0xfffffffffffffff9, 0x3f, 0x9, 0x5, 0x6, 0x6, 0x7, 0x7, 0x5]}) socket(0x0, 0x0, 0x0) [ 767.988695][ T3869] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 767.992470][ T3869] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 767.999023][ T3869] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 768.001282][ T3869] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 768.060475][ T3869] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 768.062608][ T3869] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 768.067050][ T3869] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 768.069396][ T3869] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fcntl$getown(r1, 0x9) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) fchownat(r3, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0xee01, 0x800) 01:54:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x400000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x400c0000, &(0x7f0000000280)="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", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="50a07f5fbb05638e9ecf69802e8303176111db0d89d4e419f5b5625da7ff43f072ee48ba10f32b30c03df55654bbbf8d067debad") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file1\x00') open$dir(&(0x7f00000000c0)='./file1/../file0\x00', 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x36) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="2ccb98b0f6799d614170a3b08e284eda9b42ea4ef77e4c332c2defbdd4c256769b738fac54e65cf06c917e9dd47b11cded36f2cd1b1231e6e757c7de26dd0381fd8c57f29188569e2103d375f5c1972d6d1f106f3f0eff46a441223ca6892a5c418bc367bf6860cb5f99aad58d50205eca4177f5a6a233793a83a9694534c03d80b491689a8ba1") ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x3, &(0x7f00000006c0)="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") ptrace$setopts(0x4206, r1, 0xfffffffffffffffa, 0x2) r2 = gettid() ptrace$setopts(0x4200, r2, 0xff, 0x100043) exit_group(0x0) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000480)=""/176, 0xb0}], 0x2, 0xbb, 0x8) 01:54:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000477000/0x9000)=nil, 0x9000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0xa500) r3 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x244000, 0x0) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r3, &(0x7f0000000100), &(0x7f0000000180)=@v3={0x3000000, [{0x4, 0xa146}, {0x7, 0x7}], r7}, 0x18, 0x4) socket(0x0, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r6, 0x8000000) [ 769.662219][ T3897] loop1: detected capacity change from 0 to 7 01:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) fchownat(r3, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0xee01, 0x800) 01:54:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x401000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 769.738623][ T3921] PM: suspend entry (deep) [ 769.748612][ T3921] Filesystems sync: 0.009 seconds [ 769.748892][ T3894] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 769.751874][ T3894] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 769.754568][ T3921] Freezing user space processes ... [ 769.764167][ T3894] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 769.766984][ T3894] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 769.777934][ T3921] (elapsed 0.023 seconds) done. [ 769.779051][ T3921] OOM killer disabled. [ 769.780107][ T3921] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 769.782986][ T3921] printk: Suspending console(s) (use no_console_suspend to debug) [ 769.839712][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 770.392671][ T3921] ACPI: Preparing to enter system sleep state S3 [ 770.392747][ T3921] PM: Saving platform NVS memory [ 770.392752][ T3921] Disabling non-boot CPUs ... [ 770.396471][ T3921] smpboot: CPU 1 is now offline [ 770.399451][ T3921] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 770.399509][ T3921] ACPI: Low-level resume complete [ 770.399589][ T3921] PM: Restoring platform NVS memory [ 770.399598][ T3921] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 770.413880][ T3921] Enabling non-boot CPUs ... [ 770.414140][ T3921] x86: Booting SMP configuration: [ 770.414145][ T3921] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 770.414527][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 770.415690][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 770.417056][ T3921] CPU1 is up [ 770.417446][ T3921] ACPI: Waking up from system sleep state S3 [ 770.546295][ T3921] OOM killer enabled. [ 770.546937][ T3921] Restarting tasks ... [ 770.563456][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 770.565893][ T7182] block loop1: uevent: failed to send synthetic uevent [ 770.575809][ T3921] done. 01:54:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb4, 0xff, 0x3, 0x2, 0x0, 0x7, 0x40001, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8001, 0x77d1}, 0x0, 0xffffffffffffff81, 0xfffffff7, 0x4, 0x43a, 0x4, 0xd4a, 0x0, 0x10000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r3, 0x1) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000200)=""/47, 0x2f}], 0x4, 0x3, 0xffffffff) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2fef, 0x71a3, 0x1, &(0x7f0000000040)={[0x6]}, 0x8) chown(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x6a) signalfd4(r5, &(0x7f0000000000)={[0x6]}, 0x8, 0x80800) socket(0x0, 0x0, 0x0) 01:54:25 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x200, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)="d6a356ae9b0b649e65ed612272f5726f1b80395fcf47fe8ae20cf0d1b312d7bea15667c080fe2b0e64f369649be3615046165e2508a35f9d31fec965be381b13d376919f16fdacd09b153197246d7b895c7e94167b8799557912295e40c500a0ea8dd9d6e39ef455533f7b8b388561fc8b859024fbafde7d21671afe72") wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) r1 = gettid() tkill(r1, 0x7) ptrace$setopts(0x4200, r1, 0x2, 0x10005a) r2 = gettid() tkill(r2, 0x7) r3 = gettid() tkill(r3, 0x7) r4 = gettid() tkill(r4, 0x7) ptrace$setopts(0x4206, r1, 0xffffffffffffffa5, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) fchownat(r3, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0xee01, 0x800) 01:54:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4af000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 770.608258][ T3921] PM: suspend exit [ 770.616202][ T3930] loop1: detected capacity change from 0 to 7 [ 770.695552][ T3894] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 770.698013][ T3894] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 770.715036][ T3894] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 770.717238][ T3894] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 770.748629][ T3955] loop1: detected capacity change from 0 to 7 01:54:25 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clone(0xa000000, &(0x7f0000000280)="dfdfa975889f36aabc3302ecc6458f45628d86eac3dfed9011e2f2a111f8f088aa5c47bf8f56085c9fcbff7790145f9f621fbbb709b8e82d94081646c9b254036ec8681ea79e71aa343ad407d4c6b8c685aa9780c3aaf43570081ab144cfa063cab23ef0cb21871355b4d5a509d4422741ec904771d19f561bfa43dd23283ec78012ce278bb34d0f1967a56c725ef44a8737f764a3fb7f729158f775c3562cd430fe66e775b49bf6195d2242ebc950fca107c265b332d8dbfb9f75b6cccf32abc57fbc38c51c18e91af0e16392f2a655f330e5be395dd1e08ad0eaeb4329807284aed2fc16729f", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="831af68f68b10ff14ed64151d724e62379bcbf8bdc357bdfa042caac440230bc87108b0b868bb43783d7ec294be1810280c8d8f1fd500aa0e55ad8db8088e1edcc5cca9bf95a66bfd15dbb66eb50d55d228016522201c9a791672d4ea92a995a2bcaafa9621a7f1e5c8c533c7e56ed2c6fe6c63eddbc059359a3a2dd1b7dad2c") exit_group(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = getpgrp(r0) sendmsg$nl_netfilter(r1, &(0x7f00000028c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f00000003c0)={0x24b0, 0x13, 0x3, 0x600, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x6}, [@generic="8dc7494fc603274e5bb763954f5a6776449c5616eb030985d9d55520bcef4be00ab2b5db89bdaaf996d6c8380b21838ba8d2bd21023b97a287a719297d8a784967ba0c1a9db3ba2b7fcfaf4ff6ea6c4fb29eb2f54604d84be8f694df71ea7275f0582bf953643825540ebe6f4526905464f0b2dfef39994eafd71913e12a7bf30d31d05e04f8b8c22eb679ffd1c2e0139cb4de33328e3a9a221b6a267191ab5ecb446f8fc614", @typed={0x8, 0x10, 0x0, 0x0, @pid=r2}, @nested={0x1135, 0x39, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r0}, @generic="0f7c9a9247c2d94ada3f76be0c5b5b836dbcfce9ca18589e1a701a12131bf068e5ee13a0f2d80763c8addbd4eb1cf25367f4b957b6", @generic="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", @typed={0x7, 0x2c, 0x0, 0x0, @str='--\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @uid}, @generic="e43a8e438df22eeae1efbe43f9403fd40589c451827e4236d0f3343b190553a67969bb9dfb4a0677b776bc8030a014aa1e4045081348334332a0eacafc0d325fdd9833c02ff3275f398e2d138446f3303be63551b25923e04f2e18c9198898900d792144d94fbaa5c8684c684914dcb1008b653455cb75369a4cbe91562abc7fc395fc04a948746428954b04128e52b57d520a462f62cefece47c7ac285a2296703f5e6e0daf93c0d9b17d9c487a6a32f44d294c2a4fa9e1472af50b6a84adff1a1e151a917cd36d13983724117b5db1e917f99f618476bd02e7b80e"]}, @nested={0x113, 0xd, 0x0, 0x1, [@generic="a362ae52186121675c69788825c64dfe9995eb9fe5f206312d8fe61eccc7f61cb2ead13fe8facbf379dac550103317a9169010c53b87b837bddeb9c441414b7f03cbce7f9082e3e8b040c8e87d6a986fccc6587bf0999684062a9d9335e27e248178f8566114454c3fe5df04999e28de070de4162772f009d4c4e5303d9614e72939e795d947a6a6344b86a881c49c05a783aedff601a606261694adf0c6ec10efab1fe2c8d01eec4248e0123905cbbb6dce08463a1d062651c9329abebe8249176e24d487dea0662c92237631f99965602482a8", @typed={0x8, 0x24, 0x0, 0x0, @binary="7cbd0bea"}, @generic="6f7d60715dd57076ba465831396e96bdc1c1bc43b76c6053333c1ae380b1908034b15e9c267a0c37ccc1d0", @typed={0x8, 0x39, 0x0, 0x0, @u32=0x422}]}, @nested={0x11a0, 0x6a, 0x0, 0x1, [@generic="bf55df0f3714cd2b31cc0a73e3e40cd337e756c9ea59c1382b00bc7110bc8a7a9ed420267eec9fdacd2ad0dd131a62f94f88fca3247de5a99ea1f7069e445e5d33e5a5a2377b29c7cec3dc97681edc126dda", @typed={0x4, 0x2}, @generic="43f0adac03fd6402f43c1951a2ee25fe15ee396a483598bac2fa434e89b71589001113a1816f404c8a12ae9d0aef7b8cd05f4a311960b388d80be1a77c9df5ccb8f021d25a8cc39943ad4212240d0d7b6f108b31287809185ba6798aaedb31c26d01a0d4a5f6bc61e7fec96fc3ab3c809df88bbf90030b", @generic="75c9ac5a41efbe4013f58b101ac2c286a1feb51ecc40984fc65d698041c77032084cf8c8fc42d4ef0353e5bcfd21d5aeb67dfd6ab8f54193aed2cf12eadba38761614a02d880dfa608f76644c34e9115726bdc93fff58782e86427ff9477cf76a80601df428e2dd0b4640475659714b889159e462eb1981b12407ad702da86aef92ea24df593b0b24d05cfd61ab0f7b3e5084f43d33360f33175948067fc71c10272cd9288bb831b19d7fd7e1816df44733ca5ebcc5bd53ff6f3", @generic="682b911f93b332626b95a52430", @generic="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", @typed={0x4, 0x4d}, @typed={0x4, 0x2}]}]}, 0x24b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 01:54:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4fd000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000280)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9517c04c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 770.879848][ T3982] PM: suspend entry (deep) 01:54:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x40, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xf9, 0x4, 0x2, 0x2c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0xb51, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x5, 0x4c0ae8de, 0x41, @loopback, @loopback, 0x10, 0x7800, 0xc3b, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x10000, 0x4, {{0x2c, 0x4, 0x3, 0x23, 0xb0, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0x3d, 0x1, 0x6, [{@rand_addr=0x64010101, 0x1000}, {@loopback}, {@remote}, {@multicast2, 0x5}]}, @cipso={0x86, 0x43, 0x1, [{0x7, 0x5, "3bf013"}, {0x0, 0x2}, {0x1, 0x12, "459cb9f9839267b02212ea056ccea28d"}, {0x6, 0xb, "99d5038db2568db612"}, {0x2, 0xb, "7d946fff125f0d1aec"}, {0x2, 0xe, "aad5630dc0ba66c857af38d4"}]}, @ssrr={0x89, 0xf, 0xd2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x7, 0x98, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0x7f, 0x0, 0x1, [0x7f800, 0xb46d, 0x1]}, @rr={0x7, 0xf, 0xe4, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x1, 0xa8, 0x6, 0xfff, {{0x33, 0x4, 0x0, 0x1, 0xcc, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x82, 0x1, 0x3, [{@multicast1, 0x10000}, {@multicast1, 0x200}, {@loopback, 0x10001}, {@broadcast, 0xfffffff7}, {@multicast1, 0x81}]}, @cipso={0x86, 0x5e, 0x0, [{0x7, 0x12, "7683df2fc30e080b3068908bbef37f7a"}, {0x7, 0xd, "78f3e1dc9fe4f9959448c6"}, {0x0, 0xd, "7a0f72cc300509f6bdcfa1"}, {0x7, 0x12, "4139a406498ef76d32982c6854919e16"}, {0x2, 0x6, "64619668"}, {0x5, 0xa, "463f64356cfd6e1d"}, {0x7, 0xa, "358d85977d4ebb05"}]}, @ssrr={0x89, 0x17, 0xad, [@empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0x30, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000780)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000008c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d40)={&(0x7f0000000040), 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3ec, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x3, 0x37, 0x101}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3cf}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) openat(r3, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 770.908213][ T3982] Filesystems sync: 0.026 seconds [ 770.920467][ T3993] loop1: detected capacity change from 0 to 7 [ 770.922609][ T3982] Freezing user space processes ... [ 770.968447][ T3965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 770.971855][ T3965] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 770.983382][ T3965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 770.986026][ T3965] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 770.995805][ T3982] (elapsed 0.073 seconds) done. [ 770.997498][ T3982] OOM killer disabled. [ 770.998384][ T3982] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 771.001664][ T3982] printk: Suspending console(s) (use no_console_suspend to debug) [ 771.197437][ T1781] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 771.717367][ T3982] ACPI: Preparing to enter system sleep state S3 [ 771.717452][ T3982] PM: Saving platform NVS memory [ 771.717456][ T3982] Disabling non-boot CPUs ... [ 771.720774][ T3982] smpboot: CPU 1 is now offline [ 771.723709][ T3982] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 771.723768][ T3982] ACPI: Low-level resume complete [ 771.723844][ T3982] PM: Restoring platform NVS memory [ 771.723854][ T3982] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 771.743191][ T3982] Enabling non-boot CPUs ... [ 771.743412][ T3982] x86: Booting SMP configuration: [ 771.743415][ T3982] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 771.743613][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 771.744899][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 771.746538][ T3982] CPU1 is up [ 771.746950][ T3982] ACPI: Waking up from system sleep state S3 [ 771.798771][ T4003] hwrng: no data available [ 771.873859][ T3982] OOM killer enabled. [ 771.874578][ T3982] Restarting tasks ... done. [ 771.966795][ T3982] PM: suspend exit [ 772.060769][ T3965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.063401][ T3965] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.071952][ T3965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.074592][ T3965] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x541000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) ptrace$setopts(0x4200, r0, 0x0, 0xe) 01:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) r1 = gettid() tkill(r1, 0x7) waitid(0x2, r1, 0x0, 0x1, &(0x7f0000000280)) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x4aef, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x1, 0xfffffffc}, &(0x7f0000002000/0x2000)=nil, &(0x7f000051e000/0x2000)=nil, &(0x7f0000000680)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) fchmodat(r5, &(0x7f0000000200)='./file0/file0\x00', 0x100) r6 = dup3(r1, r4, 0x80000) setxattr$incfs_size(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=0x8, 0x8, 0x3) fstat(r6, &(0x7f00000002c0)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0xfff, 0x20}) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0x3, 0x3, 0x7f, 0x0, 0x7f, 0x71402, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf6f5, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x3030, 0xf5, 0x8000, 0x8, 0x0, 0x2bd, 0x4, 0x0, 0x7fff, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="d8f12cffa90ee949d3f63ddff37909c65f7323244f0cc7cb504ed918fb3fc41f09df1a96d8f78831d111fa2d775a0e7e2ad768c8cf4972f1722735cc94a3229ae991af91c7abcbb05a387c284747e545c2206396c6a90ff453cc48e000ea49c31121343a578aa79af2e5867e97e2a2b7dc4d48003de78978cf1c6da1cad7a6", 0x7f}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="94000000000000000000000007000000865700000003010c7e13f2433c7645be0346070fdf02ea3241a7f96355b7a950bb02039e00100445fd9783c7b9c0334fc504de2e021228cec45899a722ef9f8b41742311f45300111506b56787d928b6f7ec642db61dab441cc9300000c32a0000080000004000000000050000000100000006830feb00000000ac1414bbe00000010000000000001400000000000000000000000100000000000000000000005c00000000000000000000000700000007130264010100ac1e0101ffffffffac1414bb01070d318b2276c569ffa2265629892bfeac141439ac14140be0000001e0000001e0000001ffffffff7f00000164010101ffffffff7f0000010000000011000000000000000000000001000000040000000000000065436d3081636eb0c7037f8be9db04332910bbeb"], 0x128}}], 0x1, 0x20000014) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$setregs(0xf, r1, 0x8000, &(0x7f0000000100)="51ae6b7abf28373436064cee4e6edd0e1ad4fa49fecff9121804db0c85b15c356114b3438489531b36772433537641ab2dc2a30bef7b6bb2b250bebaa4b0a14eda63bfb905597b4abd6e116a340377056c3aa062c67373450852c6259830d58cbceedecc36d97a1f8a289242a6c845c157a6c752b9") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 772.249242][ T4032] loop1: detected capacity change from 0 to 7 01:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x970000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000180), 0x78, 0xd9e, 0x80000001) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x3, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x37}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = openat$incfs(r4, &(0x7f0000000180)='.log\x00', 0x200, 0x61) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x7, 0x4, 0x3, 0x12, @empty, @remote, 0x20, 0x40, 0xd0, 0x1f}}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000340)={@private=0xa010100, @remote, r6}, 0xc) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000001580)={0x3, &(0x7f0000001500)=[{0x8000, 0xdb, &(0x7f00000003c0)="88b09eddbfc44f60132189c68d7412c7751c3144da341a085d08e1516b3e83295c77de9e06ad08fc367ded9c80e66110f3679e264366979164c0addfddafb1ee85b1a386dd0417edb6ad3e451c4b29225d910a961ccc20428885a398571207122ca0ea652b7f72b9566514c7ca974f6fb77b8891c3f897eceef934aa9d7c0a8b869908f3f0b061489c96e27629064ef7b298a76741b007608b28aaec614704a7f66d88e619aa6509f10bbbb788933648d959eec2686f0aa42c0c5c16ebca56663c99f851aba75b56f4532fba8050005ab856530061078db1970502", 0x1, 0x1}, {0x40, 0x3d, &(0x7f00000004c0)="a5ec8de2db1ce4b419c0e5664d1f7d00b661e06e96398ab1ba632086f0d313c5e23d34a413c72d098bc59ea4e6be0c62228b7faf93868fc6038159ac17", 0x1, 0x1}, {0x462a, 0xff3, &(0x7f0000000500)="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", 0x0, 0x1}]}) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) exit_group(0x0) [ 772.352616][ T4035] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.355846][ T4035] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000002a5f5272 [ 772.367159][ T4035] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.368809][ T4035] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.389293][ T4035] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.391112][ T4035] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 772.414117][ T4068] loop1: detected capacity change from 0 to 7 01:54:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = fcntl$dupfd(r4, 0x0, r0) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x81, 0x0, 0x2, 0x6, 0x0, 0x3, 0x21001, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100000001}, 0x50000, 0x7, 0x0, 0x4, 0x10000, 0x4, 0x2, 0x0, 0x81, 0x0, 0x1}, r5, 0xc, r6, 0x5) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1f}, {0xa, 0x4e20, 0x7ca, @rand_addr=' \x01\x00', 0x9}, 0x3a6, [0x0, 0x5, 0x6, 0x6, 0x0, 0xfff, 0x80000001, 0x7]}, 0x5c) socket(0x0, 0x0, 0x0) 01:54:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xc04a01, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x36) wait4(0xffffffffffffffff, &(0x7f00000014c0), 0x1, &(0x7f0000001500)) r0 = gettid() tkill(r0, 0x7) ptrace$setregs(0xd, r0, 0x80000000, &(0x7f00000004c0)="46a2bff063f001cb9f1bfc10562017cd0d91426b1df04a6cb8a6b5766dca4ad403e02e68a9445e3032d38b0bdcd690ec9b529ba0a46bfbdbb11c83554bdc6f9925b04b184ced5a14716c56a4d14eaecbf83cd415f694b3bdea12c38f926f571b469f96c1bf1e9d81b7eb4fa974646e2d737c1822c265b6fae277c1e6ea7adce9c8f231028ec601b204b9ff1b304cb8ba9efb89686301e56fc66a1951d3bbe6d0bad8e1ef22c635412fcef828d046c2cb8c781f1f7c96191dbec2867f44970570f5c7637ea4f3acfc746b82138169cbabad843701085c6866d5340c78a89f18c8ef84f2d4daf96ea5e9ce4efdbfd5d83a463e8507e87c51e9dbf905ed0eef214d326039d74f213ca78bca05b7ba48120a10c22a2b902ebb11ca847dc90f0d83c1e0a704b7160c635f2d4374bcd6c19448a5326fb95732bc52e59d5a8aa4f60ae3c2621c8310af183c097fec0a379fbd22dd5bceabffdfdf69682fa36f4b199db27d4c2c3186073ef050420379ccc88ec172034d54260ff5cad02b683d48199d90c7a80bbf656834d79a6dcd072820ff20fefe8236c89fa3a0a6524d349e5319a291c29c30ef7342a3b45021da65bec87ed3284ab2a7d95ee516f98b72ce25383bca661ab9d70cb2369df851bd212399a5948855b4ee52b899a5fcbf95d34525fc8d9d5ef912315cc7df04368bce46b01f6a4310c4968c7697cf4ef7528415e9c9a6b30422d833ca19fb7040aa6396ec9239c0dc13c7c57cb109716cdb2805fd3125a41727927263d5e87676d5532405d1e4e1cb8a87985b330df644fa2e80d6aea07b621bd46e5db179b398d414534b18f9a3cb6dababfd80539dc37a254ccd04c59c4c319b01ab7e85653ff98f63e6ab44c0b84921d173f69606b87044169d91a1a06cf6988540289d5c374413d90538e36248b02a6044e6f31dc219e497b924d04a17ce2423b3150dfdf71e824c1f11de66d892c4a2312db578e0b34abcda0e1e6aea0ad0455a15d165a2ffd73c52abb7e389dd1f8d0695ae5fde3c38fd0c6298c58be47af004bd52a417efe18b00c3f81606c2fbf7a12331f9560946b5166bf84b33338bcccda566c876c89846e07641c6d280b9f25089db81f085426906e1599c3f810673c2f01d8b84ee45f4b0abb55da52083fbd93909f5ef1f746cedf456d7b6a684f63d45015cf404d006bb1cec25824b97255739aa7fa1a6c435a07e79327a1b8fe853884b59557dc23857dec6f0c8dd6056127503022e4f071324c6524877ce568430a13a0bc28f32d85f43c41159c32954d825c6f8e7db3b1dbcc89b00e65960439d4d65df27fab8a2ba96809ff616ad038d1b44b06c423820ff9c5e0b975e990292826fb8f1ad7bd97e4c126cbf101ac60f2b4139a3eb1974cd1a53c3a2ee465365a1037b66065c371d0b601afc54831e90ab0fa0d9b543fb2d91859446f5363d9b557352d4bbc80e34ea9442fedb0ceab2e39ef23b45eed181abdc5c80aa8d6c28ee812d3f11a8db0e9b6aaf512ed3bf0c67eddd2157336bf03d481456b852dfc2b83e3f80be65258b5738679c4d32fa8d0d94f9af7819b9d061d0f0485a7e613f53aaeb2a043db0c7d93f564541e00c9a5dfab7357e83bf697d82de175a50c32cfaec7ad782730ce409a81ed3ff67b2b83e987e05f1100886ffbe262c2e32870651d85eccfb2e8636b66b676e92055ec3f1eb295a4d4686a67f33ccd092175981128084a9fca51ecb435c1754b92f0df92988282935c3196b20ec7e6358965aefad88787eb7c41eadb07d9c74cc4f8a3a58bec6954b9e165cee5677e9207837339da907bf5c02620c0cf75d270a97676a50cd54051e78a21c53557e4dce206700834941f21282407c398e65399f389402d64d6069770fb53ea660f593cb1ed87c5f0c04cc03e2332ee9544ed651b0f303f3b29449c7747c9183a36b9b2819009ff4d50ac148bff92f1228a370024cceea1ad49a706c6e449221767fd74cb5a3fcb8e87ea67b72346b1fda28ff9a5529fd35efdb994cee61003be15ec457f5a5f7b99a8c82d6f7cb2572254071c4538ac0b1d17a059131ce04b0e8e583fd7b58e60f4b41a71d859e656c6ffbaa31e929cf8515afd3b00fc9e51d8bd4e6ab3e60af33344bb85b0e235c2f3146428cad6e7fb5a56f53b9d580e649b064f6d410ecd8a038e6c04ded58addc8d4c8e97230553784d1649f77c01fe6b178ebcc10d2aeada09bf0181f8f6ee2fbf158f67952f9241bdec2c0b874f5bd0fd305480f39d350652b466c6ae2dc19ec15d4a16e9af838c00e5ba0ffe0fc5b47d9a440c8f4b497645865012d5a86725c6a147a713cce43de61050af1941a40c6fa84dfe6e74bd6c4813ac19487cdffdd0c7adaa0bc10aea950ad5dae66372b33331e1517a18e23b757099ff717ab939a27dabf75183b28bb24a059c8fc82df5636d9bef2692dd6b9cfb7e4342f9a843062e27630915b5e1c780bf2bddef1be74b8656faf51524bbffed3147bcf4d38d3c5fd34d5df69e48b23a3cc86494231a565d747414b3c05814716b823f0b3652b01ef6fb32d4dec3ca923407d493d7e0a95edea5f0a518d3fdf712ef1547455b826c48ebcf0654720332f5c59a6316dbad236e25c184dc1bb93ba4f02934ffd86d71fda30a2df5f4cce70004dc0a1b1716aa7dc24d1d4c2d93bf41bd710b1cbd11a5a5db74f99c17cb4ba5c8b4f2fcbda31470670f13502d7fd823d2f0967a3272a8478592714b0accb18bbbcf862340f26392cc82872117ee620db80e154cc6020a8391457d0b95cfbf370d7c03fe5ca53da6c5f8f17787967492c495bfda5599d46fe7be11adb2050d68ec87d41a1ec3dd7adc0606cd9e5f6dfc315f480ef5104b20ac24f24b1497983920a8bd2fb4eb00b6c9f255af39d4351034948907485bc722c8fed46491d21a039c5144bc1f38331c725419e3290471b0b9a5390046dc538fc7cfbf2a2e83d0a722b9fb65d02f6818864b7f3989bebb8e03e8f6924722efb01b93413a828a0df47971107daf3d64460d90e3ce2edb8c35ed5d89e7a964a541a1c8a0969a43ddb6bebe7076334bce67b2065ed3a5d6cccc9dbfa321bbd2327c0696a2540e1aabe3aa214b667862c6293a22c8779dbf337739e99025e49d3d7a7c7b061322fda9710cc8d3c9ca61471612dd8ef4511c20d10db6e428c5feece5b992dc2f5d98e624ab0639cb4afde6d2de5c7c7df5c6b127b06967d1eae67088869e11f063a83547e395d2fc4227f29d9bc4062dc1843198ab9b62f7d23297f8084ca4e06283dad1a0fcc17f6ab6f6b7485bdc40018d515d4595f988c24e5f97258709faaaaac49d8da8c0214ccd324e84ddf47a291bb51764168c88a12f03b6757ceac7ecc3fa83f2970b11e9a59763c4cf53994ef4f58f3485a8622ece345f78e26fa698c00f930981346a9008424a3146e074939156cccc0603cbf9a094b936b85ad1d6d8cb916601d57fcfdf40573d8a73bd0d49be9b0cdf2024d4e9606a346818bc4385bf38544405a83c8e1bffc79ac734a7e13e66e318e490db6f07228b0b79a6bf9cc1e886ffb2a1cbd96e53f4cce20aae36bbb81441816c3ef3456b644fa88749a7516df6378ca8c44e793c0b0dc029dfc5b6ed55f8e199ff4caa84e218cf9bfd80bc3f14ae99be9c0fd85cf0f9c42c77d6159f6760d717183f26de7659098e450ef53ee51ab0184ba0c83b9e2c55a85918a6f6fcd5b7b63197eede7377280812c254d6c022464074a2e6cca8cb2c239c21d42e187c9f546cb0c75f629933e56b68f792e07941c79a62eaa6b391c698ab0970c83842827b46e4970a1af0710ef864397885c86bd4fb62b81a05b6f2e38f9266cf7a5d941da1be8f5cea7ec5f5481b3e380c1d5cd06138306efb17364697cfbaac95de2bae0ce1cfbcc7683062778498fd25548f18dca9d7ba29e9df1f7c8c685fa72a216e74fd5574ea9721f125591965d960a8f9cf051c808e2cc745467c1f8b56875c704602c8f5b71221e2268936c3b628c2abfb4663bc61710c20b71e52c9f5f8d65ebc88f592eecd2822c55dfac0a5a12c2115ff11043af2d6ff54f735a6a74ceb9bfebc284edab01cb8518f5f8a8bcfd1f9dd233489a379a5e98d435aff71221918730b9bee194dac8ea776f3752bd9fb0a0a63680fbb3ed93572bcc63c28da010315f9f9102ebd8c704270a6fe71f963ce4979331ce70e6b9b29ad7b9e8e12500d04ff182e96ef7ddea78a165967866f7dc23822542b3e1814ea3eaa73bdb47f8b9f9598a8506abecf07a663c32eca48bcb74f2c0003a8ddc4f3cd506503292088b870630e7384bbb6f8481dcf607da9f04eb55593ff5e542e3ae4f52645fa857ce32f6f50e9a6e90acb05b473cf5b2f99fe6101908f7f46c8c365ef1adb9ab99e1b0269eec8db17ccbc7906d8c9a89aa2382bdcea5fd1d7d75880160f01260d6a145a6b7654e27920a6a5642cdd33f5b0e977f8335c9ad9fc7d077db5836d68d14687a817a27315a3694a826eae0ae1b5284b688be8dd7a2364bd165ad503f114493141df68c4cc1f4368faab56d8f24da4de35983c8365e689e966a3d329b095663758a6940f177d5d7e833cc0d452c5b0ebccc0f9c21319007cb92ed506dadb2d8a9885ed5f23837de1d08aecfe7c19ed893c4b3a170369d8786f9c06b0458fa04e5946f174b7d5282d45d62d6ffe1bea718a68c465684a485f17982cf49a4bafdd124012c4549c49791c0143a1cbe7b5139e6b6720ed80da86b24a52fb0a3c7ace1ec9f9c0e1bd4c5c62156e6ab39547f3bc92d8a7fb945825d9ae03ea170ea08ea0c78180c3fd3072e6ef6faa20dd6f31dbf9a31b28c09dc630bbb33aa43bb2b26db0457d7cff85b4cb33de45196317a9440988ae93cdc1bc13786784699e3e1dde575911ff3f805f7dbbfb012406135b357cd13fc32116790ea2f84273f109cc2d1048593cb675e874f173a5238db99bc0fb2039f8a5c0b77df55fd9edc5d14bd9e50ea551bb90f3f1e408d011e53f969953c3c7949540431ef865ee029213e7996a08c68845da7f76e196697f8e08d36b40555c0fe183a4cbd4e87e7c021a029f215841440fd55eb87e1e9c725d84d2323d7e2ad93edbf4ecd9b6c32d6a7d4dbbeed525eff4273e4ae1149bb8c18ba7ce2172d684d58b9cc1653e8ef26c06ab012f16945df3dc76f43a2cacdb65c4f521a025d5affee125982beaf426030cde81c4a08c26f4c5513a0017e3d4a39cb442fd2f8b46406475cfa6ce97e3346580980ce5a07b5047c894dd210126a1c91b083d2931e858bf966e7fe2096b39617fd18a5f4b5f6ac67ba5ecd6edf35d69010089aa2155babef29df75edb76691561b2626e35dc62ef43262b00408f151139d6c1c388c8b678a64ec6e8f9e55b168075021890e6d8fd3bef74d1573ba6704880d5ed6eac112f40234a0a46ffe5c6607a00506dda6d5f07e18ca93a432ceee6c399e46c5b448c8e8c8d85f8789fe71c58209da1ae5620ab7fd9d732dc1bf3b999f606d98fc86c96da5091592a5910e4eebf9629acac02d172efd53daadddd9113c5957edea553f40e212fc6f88b42d63634657972f977fd27dccdb5dbdc17ab4ae8e48d0d017a789c8cfc221f4e71ba7e3bbd1049929dc78b3e10822d2b28221271b3e034d375207697c83810c6306ae289bdec2e18caa686de2902e6da6a3c7975a6880bfc30f73758267a29a60fd6b145072721db6e89267b3c773e8e13596a3a1102039d1e03bc8eb069dece32f09030d3c3c74915f56249c80cfff9b6") r1 = clone3(&(0x7f0000000340)={0x3001000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x40}, &(0x7f0000000280)=""/68, 0x44, &(0x7f0000000140)=""/45, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) ptrace$cont(0x20, r1, 0x2, 0x2) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000080)) exit_group(0x0) wait4(r2, &(0x7f00000003c0), 0x8, &(0x7f0000000400)) 01:54:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 772.518427][ T4035] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.521653][ T4035] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000005d525001 [ 772.532929][ T4035] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.535000][ T4035] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.545036][ T4035] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.546902][ T4035] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.553719][ T4102] loop1: detected capacity change from 0 to 7 01:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) r1 = getpgrp(r0) ptrace$setregs(0xd, r1, 0x9, &(0x7f0000000280)="ddb73681701ce73237ee993ea4e4c7d9c5f0028d23a2bc8e1f6947e27770ba11e8322d7c25431ca60a2f51cea65b6d5140c5e07db26c07d98eb4040b732cbda1237c5e7514b45f3eb84ded64d7dd9ffa1f582ad399200ed381343fc459b027b4e4aaf640dcf01241e6d42f5e2dcacd03ee33d62952280510d4114a695ba244a39dd4bc510a075f6dea0f3e63d270d25006f3b9ec0119") 01:54:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x60, 0xab, 0x59, 0x3, 0x0, 0x6, 0x4000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x100000001, 0x0, 0x2, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbe}, 0xffffffffffffffff, 0xc, r0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) fcntl$dupfd(r5, 0x0, r4) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xd04f00, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 772.649990][ T4131] loop1: detected capacity change from 0 to 7 01:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x0, &(0x7f0000000080)}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x116, &(0x7f0000000540)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x3, 0xfe, 0x80, 0x0, 0x1, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x1, 0x4}, 0x1040, 0x3631a8db, 0x2, 0x5, 0xf855, 0x3c8c, 0x101, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 772.783349][ T4128] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.786814][ T4128] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.811678][ T4128] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.813239][ T4128] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.817965][ T4161] loop1: detected capacity change from 0 to 7 01:54:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$cont(0x7, r0, 0x1f, 0xff) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 01:54:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r5 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) fcntl$dupfd(r4, 0x0, r5) socket(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000000)=0x81, 0x0, 0x4) 01:54:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xf04a00, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 772.924168][ T4128] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.926764][ T4128] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 772.942035][ T4128] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 772.944813][ T4128] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:28 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6a483bfaa97750b6}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x60, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x804) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x4080001) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() tkill(r2, 0x7) wait4(r1, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000040)='9', 0x1}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e9734141", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) clone(0x40100480, &(0x7f0000000480)="c98e40fa0ed4de1bf85ae1b95ba046f718fb9b54144804ccc23e9b322c3fb0a352d2d00651c7", &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="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") tkill(r1, 0x36) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 772.999062][ T4191] loop1: detected capacity change from 0 to 7 01:54:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001940)={0x0, @private, @multicast2}, &(0x7f0000001980)=0xc) sendmmsg$inet(r4, &(0x7f000000b340)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="d358a6fcfd31326e5a6e7af0a9ff0b1f6d3cae216cbde9c109194e0d3b5f2d327fb4bd2e1f089ef496a9fb8be64620f334ee28c2747601f23a6df47edbb8f9b8d140abcc5bf2ff5dc7847c1c", 0x4c}], 0x1, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xc8}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000003c0)="afcf16ec2efff0781e8dcc47068ee1ed8dfae4a1ca1f29ed3e751b7c578d893c15dbe04fd92d4368717d6cb4e8e3face814a7ea2872e90aa3cc842fdf7fe8ffd296cf4a96a2170ec7d28dd9ddc729732fd9fd83d289ffa58883b85e169657271bfcfa87bfc63a7b1a919e877ada48f93cc6ea567bc394dc143af9ded64463553d10bac4ac1e492cbe92d51780507359d6a2b4a74cbaa990b52012a829bfd02e32d14ba76", 0xa4}, {&(0x7f0000000200)="52c015608e1e433fadd071d21d09c5e2522f93deeba9386055b65eed40d5229359ee6ca95654b39241dc68185e71bb0e", 0x30}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="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", 0x1000}], 0x4, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3948}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @remote}}}], 0x38}}, {{&(0x7f0000001540)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001800)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000001580)="8314629a776b87eda1f672c886b25cb5b8ea9f0fd200b242b274049385d8ea2bbd425243172ce7dd72d684821aaf3e0101ff69a0e2befa8f4aa0b98787f03733cc09c8d7f4b6f0906a6d458be6019cf5f0f55feb6fd4f4fa7916b9de1244e2cf337f8cf1ab2ccfc5cfeb0753cd15363b3b0e9770b1c15204d809d04f81b98a2e3aac06344cbb6c9962ce84dd5f7e4ab6943c71084029767318d3b0c33d9a41cb833116c12f86575349e58ad76fde06f96cec660fc1ba9d525434ebddfd3b7d00bd8e7f463ee03408ff5757992eb09cc7272d6ba8a973aa1f", 0xd8}, {&(0x7f0000001680)="24de0359dcf0cc33269ac4253c5b98d74f62c0d60b5607ee5daf52515ce0b36dc5c51db6349816d83b543f9bd41b7c9bd0a3f64b1c696ef067923231b36a127c13fe643392eb97773da6e8ee3c46cf663d06903d28b0a935c89c78c9bd37aad28da26017738d8b998329d4f60af1e68045b5009fdc06250fa465e5ca66", 0x7d}, {&(0x7f0000001700)="658c37ac1ffe74c1717738f1102dc8a75f6a2225808263d10a9e67155b8fb4ff79533488f71841ab1253fb2b47a2ffaaa36b7c9de190d04f08a4a2e44fc7673d313c6558532526fbadab51a4214c5ce6251bfea8acb373d97180a075ea7ffe8c9782b1b347212b6b2021e794fd3c8e5a9bf61ad9ac562a48518ce7712a9d7f80daf2ae2bfee98fd39b40d48d943d5b9ac98c4eb383fc65e5b4b1492d1d0e3cd53124728493aa3e6d73128b464227269cfee3495f3b310fdf557acd9b61801b68a726543e9050121f38cbdecfa192b5e6c33779f6ab08019cf7821b2729a02cfe315a513810f2d0812bd28253f5ee07d3990e0ab011", 0xf5}], 0x4, &(0x7f00000019c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xcc, [@broadcast, @rand_addr=0x64010102, @multicast2, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xd8}}, {{&(0x7f0000001ac0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001b00)="adb9edee55b89b1de273ec6d060cdddc55814913585c5f950cf880d3f9215ddf583c65bf3a5b9714c5b648a668ee1fd763cd1a37b51327143b099c76029913440f2b6bf07f104d2e2eb0dd9a761204993961491ccab0551e36", 0x59}, {&(0x7f0000001b80)}, {0xfffffffffffffffc}, {&(0x7f0000001bc0)="c21b66bebbbbc9ab76fd130c0fd9c4c69056e6783b2737bca85783c2787c61f2315c8e17e12e317d24df33a85ccd99b7c53f4828ee294a4762b2ba910c9b451932b44291e1d053b942a03d7fd93d50e14b7bd8fc80da2a", 0x57}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000001c40)="e94d29295d29348eefc7d8da64f04e5f20731c72f5e365e3c3b537e26d66f981f6d4202fe5acd6f893c52b0cd41d6f0ea06d41f40fb34182a07a4244a72d0dbe82cb727057e086c8e5ac2930f3f94e8ba972ed28307c1d2af2b2856770a9b5b6e98e1e4236cec0df7e157c4bb9138c489a83260429e754c09acb", 0x7a}, {&(0x7f0000001cc0)="3f574326983467048dcebcad4c0cb18cc7fd5d78b213cba09358", 0x1a}, {&(0x7f0000001d00)="157b7efa1e6cc1b425195bb39e8f6855226f92b7edfc3ddde581ca3d1ee65b5ef33cbdf7a518bd83cdb13440c097b00760d5676eb388587b2e28d0051274e35dd08342a284751209329d8a903fc906bc608ab6e72c2ede4c3fde555be6e23faf8fd7096840a525df3908ba298ddd30d04c812d28896b1e62148c8b", 0x7b}], 0x8}}, {{&(0x7f0000001e00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000052c0)=[{&(0x7f0000001e40)="04779bc5169c7064d6060967020c21b57c6932321308502330d63a6415c608b4d6aaa615d7928238a141f4ff572c010cd9ad51e8a770045ae104e83261e389a44a9a152f0607b9cf5a9909d9302420f58925fe85ee7b28dba48573c6643bd42373815d78778b4d27a3bf7ec9961343e58a1352315ec3bf2d0d2f8d4d12e86309b92c8119b7c2b2d77a521450141859acdd36a6939d6b2da9b5189673e5cbf80992f4e94e06775079e7aeb62495366c7a345389475d4ab8c310b073251c9a2e1842fd15171a9158460d82ac33ec3de8509d8559434afab2b8febd5c500a93a0d211140d1568871cb0cfbe57110672284da524af87e32878", 0xf7}, {&(0x7f0000004080)="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", 0x1000}, {&(0x7f0000001f40)="9ad12c2e966b000da8c547f817959635b85bf80a32c825c43165822d37eb39ef2a83c8484e352578f2f4bb4e96f1ca999b16e4964e1bc882c856511c3a61845fc3e79ff2f1754d9ead5f393e101244f443915296f24be390a0bad5da558376bbfaf7c7124230b2ee8d361876dfe87864f30f2c2cda47fef553376163de7b75e552d36703579080fa5af18b4dfec903bfb255737b72a7f1804a4925000916a62f85119f979e9439288129936a010b4d477e318196927eda6dae843a77ce658a36ef055b3d4d6f7b41cfc074f2ae2883c1076eb8f100dcdb494f6b1a7272794e1716d56a", 0xe3}, {&(0x7f0000005080)="4766e0f754f352d7522a5c5effc31309e825bc445dc87b97a082cec328359694a121c2d8233ce6e2779ce2bd01fa27abd43893ad174a6d56c30cd10c6bd3f16b1ca8eae497d52f890042f5ea257ebe9de2ca2fab85b1567166675327d26fc97c3b558af5e1d74a08da0c7f838e7fd0e987aacbc94ab51923a3c4678dbdb9002e5a653613fd97ed49", 0x88}, {&(0x7f0000005140)="d5db831923f97216cbf437707d12ab7b6d69842f15c695b8ab95e4d580e1dd84d798355cd6aca0606572b4cf6267c8d0396ffa961dcb9bd8ae586cd357bfdda7d292b878e39bc07e624e2277877911c4f31a46ad98c3ef4800efd8a7c9a18222cc3566ce38b4682beebe6d0a5c945edc516975a1ab814474b3f54f1c4e277da0e7dcec981af901216a63a392c97d769cc47067dd9d80f6f40816d2eaa82e83bb306d300413fd3d12317a61d20f8223369311e7d4c1a7e478dbcc34f93665445b12af06d36abee64ea60f76e985d1eb674f02397bbc", 0xd5}, {&(0x7f0000005240)="01bcf2043934d527ebd4d878b99262f334f96db2d6ec75ddacb225ebd0f7", 0x1e}, {&(0x7f0000005280)="c1614ab0585c206098ef8226f28bcbb84034", 0x12}], 0x7, &(0x7f0000005340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3b}}], 0x18}}, {{&(0x7f0000005380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000005b00)=[{&(0x7f00000053c0)="dfa4c423ca89abaa7559ff99a382c61457ab5a23d061467aad6b56ae88adef4a12bad46fe5d5e92bd228f796d82d0af0eb6c21f01ff48eac8e1726aa64ce531daff3558acf8cf64f320e5ab73bbd360e1c46b350ccdc1c922ccb", 0x5a}, {&(0x7f0000005440)="ff65c37dad8f3f7f7b81d2437b2ab4d464afdf10fba71d5a02e5b80b2e7a2e80e53875df1d88176ebba07f55ccfd8723288956d08991ee8511c3b00af650924e3fae474e7c1ac6454b8e1ad19edea39a614d3caf2e4a6712164263e207037bc9388aa4bc039950206b6c19db553b1670df4f2a73ce32dfa7d9d1bf088add875d2eb80ebd2a698b33895a9ecedd70628e6fbd83692eb1371bdcc69b08cb96ec8470fc90a26ad694cecd34da4d2283cde113d82067", 0xb4}, {&(0x7f0000005500)="a39a72325540234a4fbda66ad9bf3817dcd08fa0e0e47f534576f78cd9e78faff3fef9e29ee8f4ecce49ab1c9c67da8b744e0a544146c3bb8f3a4e34fa33cbedbf2c63a3ef9274cd6b0b1f9ed7ec80224a63f9", 0x53}, {&(0x7f0000005580)="7ae50688", 0x4}, {&(0x7f00000055c0)="257f22f8f85e1c93c2de78d74cec28f0d4efc164089ba9a7532f6a0627afd9f802e9bd7d3df354e881bbbbf52d851db5addafb6426bd45f47faa46e26b8dd5c5ee63f7b2de66881cf20841472c2bcbb24cf2bbceefb3c25ad610194db4e1b82777340680247e6a56ee86b57743efd24eaa6244c67c9a78a48166aabc57651e53183c189207f418851d8380d878f48f6fd07db3719799115a27cc53de88aa3065", 0xa0}, {&(0x7f0000005680)="6d4787c73d40567d3a94eac496450bda788e6a6962c553e4ac996efec7f920d0065ef6822cab9dbf87c89d3052eb85aed9ac3d94ce05bb0e77f784c2cb5ec6df431446a2e22d508b8bd5942dd8be5695776ad7d8fcef2c184f322077493110508491dda75384b30392f6d269df749465f8e22330458a59b6a6e23dd79512c50eb6f2b42ac0cdfe93385a445ecd4d8cb94a748c26634238f7782b3ca16369fea7d780b9e91181195e4548", 0xaa}, {&(0x7f0000005740)="552ee37233b0a90447a7dda6f60c3bc75a6a4dbeb4a7bff1d40590ff8629c0d6b08fa3c121a4d4375476a9dd0099c05cdf99e7558a2ca56ef514b4e96a9fb39a6dde82632121c5b664c01ee226b4a4bdba3890cab3fb7b185da2968c682d6633fe197515da60631c7857c75d8abe5e93c824b2b3494d73f4404db11365a72b29308553", 0x83}, {&(0x7f0000005800)="c55f9d0e2b2e454c065e0423a08aa048466065f13f7e7388262da1f395ac77ee93c466fa329f64f6fc8c0012f930ea9d2c1920397bd5f69cf9378248ec201331be8bd2d7f87a8982ac516f248763f1c5c1193977270051ffd93f6f9d3a5cc047f57083888ecd868e3f92993b4ce6ad177cb8d70fa30298c9138ee38b480ad168e8ee8b661fe79c6dcf30037827dbd050436be2bf7e2a921efd10b61ccf565a5e4e12203e0cb7ae5f21c3bf6e0de0b5758c55f20f6bd7631d4e6d37dbfd0e13cf2024183bf620774065a2fe649160c9aa3db8bfa6084a0df166f0b07507807e7655522876f04a6d2155dd68059a9a9444b751a22ecf0a4c5c0c08f50deb", 0xfd}, {&(0x7f0000005900)="f2f45bea0a097883fb436648185a4e7a83e2e31de7a323d4bcd7dcb7943823b2a26d2db9cfc828a4edf0824b60dc343e2cd41be334c78a298c4198da8a889a5400f26c04e61543f564f357534f4b17955e6928925fc117bad497d61efe34a18693c6d448ef1f8413ca38054fe04ea3622922c10f146362b367fde92fb3b6bd86146be4ef5fd6221013449e3310dae878bc6ca28ff915ba064d44c5687009ff0195cec4996660676ab30fd6c4d2c20a841e1c11b47766fc0c2d6f5079b9816ddbd9", 0xc1}, {&(0x7f0000005a00)="8896130481b76bdeb37ec8fde0a13e77803e4f82c4bad1e2d6c51073ae845f9c4cfe5649b8c05bfe34bc283d672a58b97576742ef7066d0bc7bb3e697c0bc84c0ccfa40db9eca1dd63755bf330e8080fd475a82c1e6822e8ac3a7c1431e8a301000d58c791760f6c8247339fcaff10c34538f58fd8ec0af8613a3d985ba52be240be85e8bc55664b8ed4d50e4840401e174bbd6f1e9479aaaeb049dcf5fb7854c0a40e1e18d8ba76a89e7ce7e6f8b814c662a7ab416b2b9bfc583d3627901cf4ae78595e40680fe25f9d54ea9f34a560c555721c47958d8b54230ca6048f449b0983976657bd694dcc", 0xe9}], 0xa, &(0x7f0000005bc0)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xf8, 0x1, 0x7, [{@multicast2, 0xff}, {@loopback, 0x81}, {@rand_addr=0x64010101, 0xfffffffd}, {@remote, 0x6}, {@broadcast, 0x7ff}, {@private=0xa010101, 0x8}, {@loopback}, {@loopback, 0x20}]}, @lsrr={0x83, 0x1f, 0xac, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0xf, 0xa6, [@empty, @multicast2, @multicast2]}, @timestamp={0x44, 0x2c, 0xd7, 0x0, 0x8, [0x4, 0x4, 0x80000001, 0x7, 0x20, 0x1, 0x2, 0x6, 0x1, 0x6]}, @lsrr={0x83, 0x1f, 0xbb, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @loopback, @broadcast, @private=0xa010101, @multicast1]}, @generic={0x83, 0x8, "a0d9439a6af9"}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x86, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x10001}, {@rand_addr=0x64010101, 0x7f}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3}, {@multicast2, 0x8df}, {@multicast2, 0x7fffffff}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x148}}, {{&(0x7f0000005d40)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000080c0)=[{&(0x7f0000005d80)="22a32aab3e2e48d0633033afec5f123893613de0cb6d30030542302efb59570a9a4c58a3ca37746faae6ce7c1db474261d56c0a43e7fce7ac99fffa47a59e9933f2b8ddaaaa356b87f134020d3153d26b34aacec7882e15150da4bb961d15ffb01b24ae0ca919ad47f938fc5c7d5d0c6b00bb3ffbfd0bced20d56d8acc82115bb562d9196c50ac0a4105611397e26c1b1f65d6f7c0d17edf82a5bd18c6b6c8f20f3725b41041215e3b0624", 0xab}, {&(0x7f0000005e40)="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", 0x1000}, {&(0x7f0000006e40)="1670e7603390168b4dc5824ee89cd850227594c3d320e6b9ede458dd7c24d535ffdad870f225f742557b6461b211371d082f612764e05b0b0051847acdf7ace70b1fb270cb3dbc31731455fd082525f59927fd9ee59aaaa209541d45631b95191af2cd755bfeb2a0ea42af2e33bc916340e4dfa8d18dcbf927441ffabd6d2902446077750157bea0b5bd9002d6fb880ffc7201de9d4ec030054c2dc209d9c926", 0xa0}, {&(0x7f0000006f00)="643d05a2cab1ee4445174ad8f1a02f48ac2622d01fb8da7c79a334b27c0426462874c9a6807e9543965c626baa9ae923a6dff7ba2e7826b34dd31e766078c4", 0x3f}, {&(0x7f0000006f40)="a9ec49571ef0abe09718d1b62a43b1ff140d7d9d56f4b4cf27a14ecf93f6ad42fe4fca346b523cdb34da2a15d657a2a444966d50b30d2aa7d1713c636daa59a6a6dd944f0ba88b3a7506804fd67c344c11e2d6ef73e2d55090ad21e208fcf7de57066f0ef069532295c6bcf64fbb185eeb2a9f2bf7b163b9a3a058f8a82e3a6ad324d83d57e8336ed4e2ceae3b79871524b0d82c77b6c4a63411a05d8577632a4aa1a09641e7442c30c4001aa7426c60d3a4925ba1c29ae0d5fea1988a5724aab10838ea", 0xc4}, {&(0x7f0000007040)="8b3c5161bb525101c14daadf4c66b6a58abb51bc051f3358ea6e82739aeb3eebac2bdb476fdee49fd75ee187db29be8eb4152f0c9eb7271406af", 0x3a}, {&(0x7f0000007080)="b7a1b0d34cef5d2875cc418b84667d43909a68030652a2ce61bef5fbefa9aa1b5b2dfcadae725ff87c38b6a2647d7a5dfa334a97d6", 0x35}, {&(0x7f00000070c0)="a21a9471a8485451d5d9f0f874fbc2ae33c429188c15524731978ef9b0c2d6b19c31dd2e15a67a8e97ae55e0a70f4f1372c04603341a396c9ef7ae4db635dc2cdeafeea975767865ad459aff92f4c2ce8d6c015b518c12bc963465584409e2a987ab6bad0c66055390d868d5de511ad0bfacdb448556a1f11abbb43bd818cf20cc170eaa1d0517a6b19fcbbf05cb98c996293dbe5554128d0846165521566b5389c8ac0073ed9421fb95e9621c1e92a0e4c805e6b568a9b7bae5fc59d52d1fa7e754e6f795ff97446b2b948a3d252c7e9f95c563c6e01647637aab8a9c72ac8e68da09462e4e176b88d6b2b3dbf8f2d2170de417cc0f618498d4d131602b77863fa5ac8049e4fc10a09090ad02812ba07d49f98b2cd7c07a0523ac0f6fd47387834788d205d56c7137dc782511817801f44e30f23b9243d0824b7e7c81f6dee20920024552ff4ea4bedbd3e328e04ab3848054333fe2c72b72d8ec6c71cf583079e612a839e5dc1d65216fda5ec458b826bcf77d90e35679366629f983ff3422cdb78b324af564925a6edd4902950e1edbe575f9d5bc300f5714596f605ec340f7d09310e32d9269763bb4ea38f004a6cc11ddd1b14b1a0cd8bf3b1e74bd7c171848f24f8756feeb9ffe122d1ed648c7ea53b4ba9b275a3906060c6a89debdb6d6c340766bffcb17f99e05e7dcfe2efee06a9b56f00d9a7e222d616d0498fe12066ff853993fa94dc38481fc0ca79a556adf7c0b62d0c025ce2f44a6dc0f1fe2c7924fa99c270c771cb5f6f9ffccfde953c5d30d388218fd0c9fdf7f77b450dabfea4a1f9ce5ae9efd7ef92cefe1ef5b1ac0c267c3cd5d48d80972a973de3bedcd19f2fc7b94349c0563d16167347d8bf4a2ff9fbe8c2c0eb5f31b1f9d3576f5e903ea0d230a71ee278b47d109d213a6e314babf4d8361038a09bc947fdfc2ecceca8eea704d22de54f114ec63232d50acf92ce49df5ea289edb93f8f31a998c5238bfea37b69fabe540951a6f8e8d3bc4f38d78a5294818a7533aeb45eef615def8fed2c0b2cd0cd9d2c6113521a754df138295cb7e8cd35d10f4273e4751b8c68d6b0e44852f96130c907d8b9739e3da0b56aebb43f76332bfdd572a2c4e82a951d6110bf9152b5063ba82cb098dbf788cf5168ab36f70f2c840936bab5b65c35c0b015b50eea0d3be53bb776a8768e8a401162efd6a4673cfb0595866672e00c7400c4cbfddfed968b7752b9e7fb836c7a41ed33b0f39bfb2734036dbbb00d27c7504752afd64ea2e182ca016366b4419f6259f66dbf33aa508c8c7e8b51cc7e6590dbe9c2820df5dece475ca92476d22fdcecd377994b6415d86bbbb53a637bfa166ca7a134f490db5f2bd4bd3bf484ab650cd8e2fd6110e3a191aa4b15bf24f26d86d0abba387849d3c80540cd2fa54f1d38ef0c1252032412770f8629e25732466c35de7020f12fa2c1742ee1ecaa35e1c5a5e9107554f2a043a07af522ccd5bdd04b92f966145edfc2d72f339d65e0b713965331c325ccd436089bf6483b803611555ca680ff7b01c919aa93bd05eb3fc0ff6ce10ce342b5854767c8dd8e0f79b55d84b2dcbf4cbbd01f2bbd10d7cd2a2dd0ce4ac2d1e0e94844b81464b86714145e0b32befb5ab720c33c40ec5a689ad868e280904caad90e1f1f0f6558e39920b4e05d97233d2f7aab643cfdd894e1dda1be5002a510760c2b0b860605f1f796201d37ef888a3c5ba38464749375f5ff2f788c942652c53273441bdc33257d95b3e7d576258e043ec2d4b956fad0f745bcf0e45ac43191d1c4240db9d883f6121b1cf1617351fa54a9e490e985158c15cad8586dda20aed47b1cf4157898d96d3fa097648eb699a93c8437345b94501064dd2d6ea9c3033ea2488d231d430cb2407720ceef96e026508dd9f78064ecedfa2282879031fee64e35270c83b6df7823e8de21c5fb2b6ef8d5957982e8eb2df4d3b7deda84bf5e94f746522e38edd9cf238350fe8a0da9d120afad3409cfbf5b451a5f33049171d6798886ad1a7e5fe752efbc7578525fa6859d89a57a46790769478a8228d2a5e11e443961d969adcb81abe68e1c732ff4169ef28047df3b4713b92316bc8d9a1753919c4be3bd48aef5b72f75b91cd695e9f85d6b958f7403631b7fd6b21a72ba149127bc9bace1084efeda399278ee8af8aadfd9b570c989a45865875bbda609d4580ce39b7223b6ffccf939395c8391b71178b0dd95a2503d01a858204843e442435c36c91b30cc2f0595b87d9b087f6f6822623a8bfbce62c933f3020dffbc7a702129c6c112bc7a5373a7330363153021d132757c7551445e2324663edbe9edf8524f30b926c0ee39dc2dba47968dc894ac42e55c743cf0e6b92dc2b00635c778eb3d6a1b250c01d609da34cdab1c7a269e61dceb7dccc85fd30f3afda9b76f531b892f2fa3fdba35f6c73df8e1d1ae3f2bf69c073a7c16447dc77754c7d8188b4759a46c3d4689d2b48dcded40c6684ffbf4e6cc262b2f85f3da5eb73be5954f513104b6345450fa4eacf63cb5e6e71269cc9e795eaf584193faafaea3ea010ea0c1d14b90e6c193e0efc3a7612a7e58eb72d99aa19c3393f34c0e6bcfc7ad83549e2e73599a25a337365c5f0b189d994e3d3e1ed821a079d9d74a5f5f3c7d2940b6584c9708cfd44c85ed56b7d44d63f546a5dc8beb04d83da456178e8009459a6a0bd2ac25e8b8ece9be0f7b60112253f6af412e03ee4ce39f30e8e9df0aeba1ff5fa79ceb5dbfc6400df910941fbef9401a4815579e89664bc91b1be04376ba4541551f56aafa15ce3a99f67f5cd8d5f4644d1487b599108b869c9de928005d64d475c65dff6742f7c51125e887b5bf412953b77250d915b92f4fc3ca5eeefd067346a3791aec0b7c3cae5db1832ef4cb877dbd9dabeb7c778fac1dc43b108443264c44e04b3edfa06ddf92ca78f39ef8a10c92b49ff4aaad6d5dbec4cc1a94df30124997536309ac68e501b9cffafeea1da286bca59579e940df092fb9b555e9da1f1717208ab37c4028da47d75d02f62711d63b61256b984383608c3c5a4790c8c9938bb80e117700e9a935a171f6780fbe32d93791110d2201f3cda37d592d11e00d4d098405512a395859473d5ddc7b5b660fb481a2d84e0db58b0440e8b0113d048fab1230a95f3c304c0214b93fc1c6a663b4ce1e8c0d0683d477bf1816ad9b0e02b181c6dad31d1a667dd44342b158b2b734a88505b7db56fd6162e3196c5e6fb9586ab34a86ca6c4df0ed50d9f1f1137bd8fdfb3669d665bd149eb823eb3b7b77d3a2b2ba60617dbbf35717204a50b85b34c906470525a7bb45c05d3354de431c875472789abe241704b81f8bab664d692d474d686394da9709213bf3a051f6d7b6f4427015f6c5f0322381f45338ce6f68c475531af412db56782ed431c80897cf52152f4fa4bdeee517dd212b6a65d71fab4a2fd2c0b146c8f60024fb5948588c6ec77d6c3d1a8156e1aa873bea11bdc6e35b4fa08975d58287e3a629026425d3f117803f05e202fef9978e9cad281967e8c686b0ddcc39819c8eb5126dec9f1c91b7dc8b7866a4f6dbb5c767db9efc4f9520f7b3ccfc25522fc3a2ea5e3400770af8930ed86f76bc5aa30d6171b60e32beb67c6592baafb4ab32922f1147be65eebc25d05055c295fa932c610fb33100f43e39570e5aa5bc50cbfb9610beb7c277c0cb682b1e2f61051186870c40a3f59d0d91b85e787305f1be92c25eef585528c37a16b1565dc60decb3716dff92b3336bc21c23caf110b666a830982909ae3874e322bdbe9bdee560cfd0d47c988c79ff727d0e7979f989f70d436501b94a2957a304d48a7141b7d02dc77215fdedf648184c656cc446bcdb84a6430132487a5fab787ad14d22858e1ac80f3dd55b3f896b139f921e5d468a50483038d017895fc7605a136dab88149e73454714202daee9de8f461a125ff8c7a77518a87044f65b210c263352affc4f0e505de89219e346a0b45373b7951ac43a66015110735805b895debcc46deaf458d5750c8c846ac92c6434dd71ae0140b77f0274c2c7cf01567164c87a0fa37d4448c7f360578d88a6bf187f92541e7dd4f6c5a90ea8e7946c149c696056dbb083d5cab846506f2d407c7e6afc7e21d7fefcd5c34565eddc3399efce5827d6b108f8f35dd2a47f7a08da69045c2c18c59e23e0f3fd0ee28a3091257e221905927380de2f008791bb37ef7b83a27dab808fce59cce230766e0f12559ee7c8a12ecd64b26a06bddd7a9f8b5627c54159cfd2c0a70d27605ec91fc18e77363a67b5cabe17488b51a9329821a0dc53bbad0fe7cb9dd372f7ab0b16e900ad0bccd734a1b922df9bdb94a6d4a6e1a8cb46562541727621e9b9aa124c82b7526d4f13a761527f7949d6fa08d374df60595322fd524564819e3450f64193093ba92775691c567b5219f3bf82de4296b6e84db28ddb88594f0e58fa8c511625d4ca35618fff8af50857b5255d3716c4511492f8fac1cb9430a702763f8da63f04558f9a82d7a22dd6c773af44da8e4fac1f14237cc1b7a0c5c5937fe7a516f9da096da2afc1eec7d6910aa09ae8b9142b7fe0abd7e152d93357c3f1a86c9e3d31818f312cee7f610d004df29281da0376555e70e1c6e67e50928b90f0285e17250d36113a945f69337726e2dbc7894b77f12d37ab1acc775171d2f4be0712a2e29433e974820db98bd9cb0ff77073bd5759d7517d87b2fb6b49eb870d21b5e4043e49512e248f47c1616314bdb1dea11498f7af6be79a3286f299ae6a62f6e27ae86de1a632a95984bf4d1e2f7587ad2b8ba1ef1cde250efba7004ee09f0475f966e48cb0de2970fb58e19f9b40b489ed69e509abe600ec157bbfcaddf305d398ceff8741c036c810b501dba293c273b0b266c04201ea26e09e9674f5b63f56b9bbb29177b599bb011d432c16a6cd969c3e27db87969787d68f789f1cbf852284724ba12fbdbc0b1f83b6f14214eaf929afa3572019b442a672ee2a363c71986b9e3c1f79daba34410511f5a9ca9152635125fbbf5e7543563259b1137cecf76d8106cfab2bf8fb87e9038e3cad82a645504fb46932dbdaabbc40291f09d612a52ffaf61ee23a1cf2292756269877ddb955880933fecb8c7f31c03c348f3045d74ef0ad7a29fee2bde8abcc368c03d33636857dd961d08cdc8c5a4835188624a8e862d690c600f49ac73bb7238770ad414fbd19de23545b5ab502f3dc2e0806f73c8d9c6b0e657a25fc65c89e52c2662cebf1fce99724c8664516081d359cfe1ce827dfdca88d4c30d45e1953385cf64f076e406cf01ed8b95a17cf7d3cdc9260c19fa7db129b9fef9ba4c5c63373e637177b4662fb41fca221f9f68ee853ef5eb93a363ed2379b1a1a1232f4b47c1db77fc1a8d1317b7ff9e474f9aac0c46b6bd103c5cdae265be450e2f499dc8118775e3ceeb10df52c534beabbfacadab427c4916ca2e893e8daf9bed2bae90d4c77f390dcccf5609abf7dca178e74bfaceaef66c29d8367ff0396149c03bdcab84704869bc84691506480dd59d3593ee6677a1ff9ffd71b6c56978c41c8b8c5ed8e7039e06e43c17c4e865e48d8d96b74db8a90eb3e5d7b25cccdc9b0b5aacf1c9feedbe9740530fc6ccf9ad02b95354d5e8add983f92e0b987b363458da4d2c879bed744bdf1b778e331233ea857be565d23842f2e96710a319ae9b31031b6ba0c45db4b9ddbfeb10baf5672c8dc071ca536aecd16a9c352a1b3fdac8a415c14a1c5798", 0x1000}], 0x8, &(0x7f0000008140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbdb}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xc2, [@local, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1b, 0x93, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @remote, @broadcast, @remote]}, @ssrr={0x89, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}]}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x10, "d897658c2a860b3a565ec74e150b"}, {0x1, 0xd, "9e9ea578cfa0e4fe5f0a66"}, {0x0, 0xf, "ed5089bd16c2f687b73d408a6f"}, {0x2, 0xd, "85e03d98bb0dc95781abef"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3fe0000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x160}}, {{&(0x7f00000082c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000085c0)=[{&(0x7f0000008300)="9a7b7cc1ad2273f790cc9954634c5652a0c87b9e240463a4a3d37ba8e398d5395d6b", 0x22}, {&(0x7f0000008340)="86d0ac822493b879e07e515888022c64327f5362d06096247de69bb36a9f0dc1524c522cdae116a93bdf235547dfc08998b4a38e8ac5ce44c2307239614cb2e34b68b32f401d698c4477ebb1f2461e1049a092c96763c953fcced8565142419e4d21a2748d813c161c0b48cb0d7797b9458eb436ebe66334e233310316f8d7ae9910d9204412621683208ed806c18fdbc0a9e47aae22c548c94c35c7fb2626f2a9b15cfe593ddf88e157c6664c233c45123f157fbeacd03cbdc3b44d89e77c120219de08a26f57bbfdda8be8989054460a024d88cb263564b7affb2f", 0xdc}, {&(0x7f0000008440)="38a0ac890ced63f632b44f4f9ed0afd49bfb4ffb937d41e4", 0x18}, {&(0x7f0000008480)="e486b2fb6524a0e9c877db166d924aa979530c0682cbf7f27070e0d84d9639cb8f0c4df02eb925a34aa7ccbc3101c0b311b7f24568b1d714966e8372a59838ce62bd5e385e54ca4b113b2f9d5cb6f28af9460a6b06b869c1724b6a08d32fdfa445a181f3415fff39f93ef85c2c90248d19d9fb240f4ffb8e68e026499aa289d0b0045c4bc889815c1c5f771c91dba77d4e2e1b4d37f8ab0b40ba2ef6747443ef04a5ad79421ee6142e7958f23f415cebe0cd49edc69c51a1f5c87042d0ac43fdc850d157", 0xc4}, {&(0x7f0000008580)="c9f0ed172438fac2c8fd0bac5035921e74668441e0bdf7599b7f04b7397453a61568069190876c94369d4cb8019bdb2e2864", 0x32}], 0x5}}, {{&(0x7f0000008640)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000009b80)=[{&(0x7f0000008680)="5cd5c29023e4e8e775", 0x9}, {&(0x7f00000086c0)="b4f0e22a1bb13c95c166656d9df864934f82d0d80e043ceecb9b156722cd3d876d48e3d41a054175b8e34d8d33b3f28b25cea46307d8d6f2ee8a6e2b39fd5d62b76feee5b6d780f58b2ce76597d3478c89154496df2382b3ae31fdcea4ad5773df539cc99f8f81aa77bf41847808e6629b4dba42c13df2d581ac25f8e31dd5603d25eba6244661530b1ab7af7acd3183615e3a80d79882b9ec2fa1f7ebcb898bbf79dd95dc21453b103541320f8b8b14bdf4158249ad58edb88bc9d5c869101e84e600dbd47a58", 0xc7}, {&(0x7f00000087c0)="cc140383ffcea2f895ab97a4f64118e87486c5471435fc8a90172957d951b8c9fd9872def3458c8b26be052c00b5eefa1670d0facf48f4ee13c9b52c117f53d73172cef24a6ae192f8859a726d396f4d4ffefdf13f6f959c0a9cff4369f49dc6cb59ec3b05de34f754d1381137f5c507811e3d074feeda206122a4ec0c54b6d31121279f21fd4c80e7cafb2469cb9e047ff46b199f3f7ff985246f2db9bb7e3d3d4abed3677c172afa6985d090415e887734cae1b9bd7732bc3eb567d52aa4e46a84304171a0ab4f601a4481fc54de0560c21a80859a44d3aaa588abc7625d31d123ea2c2b89c5b8b8d6f209b26ac82a0e3c56", 0xf3}, {&(0x7f00000088c0)="a226d43bcbe450e1be688f252190f2917aa04577f8655600997c22e7623b7cabd9e2b2c3a10c183a311c8d21ff0766fb492b03e8096899353c98974785397b45e681539700d5d943b3b74ae8c7a9f00211e4dc2aedee27d34851e2ddc3038468de48173965576ac7d5ee5107377144e584fea39c2d87affd2a3b12835b8817330698bea0490ba96ba6e9b540a872bc2882e42abef7667c30389fba86588e66d5ee2eaa027c38b92b3103711ceccfaceec14fd29329ab1b855794a56018fc5ad5c4fbff156ec7464825ab15aae7bc6cdf8c1b95c3168b59c4b5120fa3818ea4290f9a3417f2c5768880c66af895620d0faf896a8ac80b5f76935a0075d041a00adc6182576574b4292a09af87443d8176d45d689578beb9d18ee4617343f6f130b766476abe59b9621a502c9cb493bedd0914628a5c23c60569d21478ec8992257427c1e0094fa3aa6a7ecaa6d2114d3839fb049d4559c391cf7c8d1251d7c775e811c0b1a5450955c71466e661c2d2266074f3afdd5c9983af4974174e4ba741701416ccf406d867c728d485624ecea3be2d57c3cd49c19865bd59863a78bab11795addfeb09e6d0076a118979a3f84768e6b44575e971297980016f0e2c3e428bccecd2d692a0b84b22ee929c1dda8ecc19cd3727a6bd0b50a7ca52b237ab46ffed3e39b022e00f97c6343742a28cf0a9f664303b5c90158c00bad61234a18c0934aedab782c6deb4d1a5be4838beb835d7ca0828f5b612b1a13d7968fefbf8a8909b1dfc4ee85eb6f96891b5b4979c7f17818cecbaad97687b12461d3a2d03b1b4b9eb36238523373af5fea4171358de2cfdb3eabcb96bd578bb21c6ac98f05f0d37d081953b82fa5ea1aea3446942152e89b816fb46a3d1e9fcc821dd6dab09133894bbf696caa03c6a741fb546f16c73fc20348d3b14005e6f5abedd94b52512c55799a68d7450b0a5212f2b7acc95f4bf9ace12dd2e21ea48d48cfd0bd78f8020199cdfb04617cb8739e15312c3412f691a59868fcaf45ea6491bb350e1278bb91643d01263f406e772c46f602d2b2aac36a02c5219af524d8cc5a9787a1f54f9e068f587c218fe1da7a5bf2362dcdbc8d786d2071e725931bdbaa30d83b334ed39cf6e3edbbec64b2536d5dd87143d54b2a855129e71c69cea205adea637b42e735163432e5ed273a8a92a49dc8c1c3e81f6959a197e37b0c6404422efb9618462279ee5e3758500ff5f48226c4dc7a3b08e3b67c9665bd2e4a5947420a85d994711d05e60f3fd86b15be0ba77bf6c9e94b881fb009cb4b557fdb2dbbb182d54066fd838a693cb05426b0b16ceb02aaf0ab15d375cf0ddc3f7f9f6a163de56a564e0d867a44387d1a9975e246c4c822ffd7636635f8f8ce2d684889582d858fb5d2031ee56f2c8e40898e9570f0e7e4f865f046977204e8c21eb7f2077c2d809973f86fc5a83c0dbc630bef0e160d3996ec9d91e01431a6d2cd4e401af2ec9ae9f69268b534060ebceda9431da9c806b14df8c7a8f828819fd5de21cdd74537704d48865aa64a5fddf8dac4a889d9be56ad0e278cf2f19a985dc4ab753113bf6f504bd734eea24f5f9fefefc58c78469ac58deb19684b3fe69fe5a40cbfce9e59ffe77991dc2cfed87993c31f43829e98602bf68c6db0644a3eb89e36b2b7857d4b83da5323a92b25a6f100abae715e13fc229440d1f4eedcbef03fb75dbe8fa319fecdf31ba928c663b6338b792670ebc60267b398e4050f287050a2e7f8417eaf40c00039cfa01028ccb7901f6d57830eb5c46eeb56222a2e52c9e7d22d3d6e92dec78b928c670bb4d664cb66c8272d8aa1cb51e45cc9568c43b96806180ed364e7a2036cccb534f7fe6a843de97e30726f9f07fb2e6aa06812b7659665597afe5f2f06e9569fbde6cbd0f47072189183127a114fdb232c38805276adc977b4d6057a490ce4dc04f4400ac932fda127cc80bdbe6a71ce2af9c0c81b08cb4bd391b97b96f5dd0d9353edbe15508519b8ef511150ae45fb90de178e368a9679d3be945eec6994faeedcd356670886afa4e6952572469eb59f39f9200c31b6b7809dea80db9921f4e4c131270493d7f98896c06b6468d8c7732fbb084e1142baf208cbe876e3715f1abd2427cca9a1d18cf6cf00d9db75252ffb46787912f4bdbe8082303dababaa58daefbfa4fa7d1de874764496997ebbe69b2eec92a0c12e753b012c1f9a616762cc7e9a7e203907e636cb1dab0c2afa1d8d71469809cdaf503391450e34796ef42f0d83b85d7b5dcf6b34f6911bd228be65d8d35d21f11b9c99f2d8225d5d979628179e6883d750645277e59e8ab3c79953446b0db5cdd7a7ca2535f1c4793eabd44cee61d31f8c99dc695273cf877ce36175ab956a8805570175bbc79b0e13f47ba2c0081038ed26d1d61151ddf42d48b38848878ab7e60fe0cdda041485fe458f19beac8488418d1e78f3f926d91884ca654dd6c33221f9700052479157a14116f2da4bc0afdb2b2dff48463757bb8dd35b6aea843f2f1d00d1222472f6aacc110bf216ea7118a9e114d312228a7859491aa70d637a2027d74269603fb2352f9cdeaa55c921ace487a2b4b5039f609fd31d21727661a7b73706cb477abc3b12ea451166055140be060800305466a39d46f8e555d59ae9f09e32c0892d72dddd94daa43a15492e963e6544cc7f16a423e9d18fa47092aac54c047b425b3fe8bf97bdc8a8e7340e5a07693d31103f19a6ce8bb274c73c8a7ae8fb604bca5f3553af327a1c07732998698b870ba2ce2a5c74ce196dc197fdb32c5c2f2e46aa091198ce518b752bdfa280ae7c4485e2a0e8064734c767c05bd3368a1ff9d6246c7c72887aae6becfb014a9151008d8cf87f58953954e24a7399bf8cdbb1eb2236986129b2636123d415b2364368c32895d4b5410833cda1f1b68471f07c44276f399a701f4ad56d02b6f842a6c249072564eaa51cbba88423a5b06019a82652aa2dc3fae9cb2447fe9e8637d096cc9fdc365952be346ab31fd1404635abdbfebf8e8d06adefd2f3736e66e2c959f7d95978fc817d44fb33ce59975a84ef2dd6897092745fafdd8888d18069af877d455d7630ee55c266968441eb4c6771ba8f2338a452440fe0250bf5bfdf9c7c1de31dab3c828f9c1d130fc38b41ade4694a5442741336ad3521fc503b01eaa9d20e435c5603cc07595cd3a9d7c6a040bdb49e7534e4b917e6f46a383c88fddf814307ddf21e1de5367133fc770668fc0ea1716422189d499dcf61456fd0eeb9a6087afa10b9b13d1b4733c4d39c3a67feb17e14fe73ed9cbc1f2f103f886b17456cbc29aed846e27d075682c75a8a4829ea583c57b4e0dd6b83af41a508b640ffe1e07d792ed56dfa43650f6fa86c539d676bfd325b69a8a5836d00f6136868265458089924140169f32b4aa0d053091c3d08f647a6d73666a828460c4c1f987e9e665c8db3f6c611753fbfe85bb12a33b85837bb42446b23b7449a49fb7ccbd85e2c6a3199b8299ada159a288068b9fefbc0a275d0bca4e53bb94e28d01e1d0b0d6e3e23f3b7b73fdff74864b65435e9cacddb1a1eacb34b57a6db0304f7c07fc76b5d00e7597044617f5333acc4c83eb696b7006c3a15585009ad780e020bba390df6323b866ee19b828d919eff2553bf1a03b862453668faf9b4735fd0c04a9fa9746c234b555d17f2659a4f72314bb1d92eb22976b2cf68089124185b17c51269b0d19119d317df1d5ede80ba9173368a51a73b823691ce592735a3113f8c333c113e3a8f374aa739f172e68fac8f959de278b86ef96e7cba139d57929c1031a1f39b54628fba8a5de8b615e445fb18bc3a57778f1b1e0013b5f7b8f27dba0feeb19a6976bf2e338884e08f9758ba97dca960df798b1d0e388c8cf1ea60935864cd33f315b7e8a39540a8adbf3bf3848e00b28393953fb8b177b2143dc18b4730feb97fe11349df9992277a86a24f93000faf44f749a550673f22c028e2bb5c61c34990084738681384ff25f27b561e7b721968d8bb90ddfbbd9f8c48c133a70b701774799e834c94c18b13908e84e914ee69154b2249b7402eee982ef374538fdb4cc00ead2403648fa79d1469c946768bc96eeab79289247d2fbd3a60a9ee209b0b58789d8dc5932cb3701b0ff0fa482a951bc73b4679b76979ddfdd5094bcf3cbacf9aebf0c50f716e179fcc86687df9a88c31ce0359dbf2f16c66e437db9635593cd5796e730f836e540c9fe5260d110d04022c328b447e9848e7cdad02a075dd74e0e37e3858d95cdffaf6adac5ebc741b298c5000e9918cb8462dca69e11bc4a949b51a7f78a9d3633e6179e38eec410ddb14ca9e79e38da4365f007bfd31a9577e8213caea8fbf9b8a27ee8c0ee793f634ed72e1a64c650d32fd78b44caf65d120189b88165073e3b2229bf172158eb427b4f63a17a7d672e40055e03615d5b2958f93c90a73dbb3605dba0b1a903776e5670d2db0ec8db9a8de92c74cb8c75fddcc431516c61c1ee28e1fc3f1d90d409ee198778a167c943065afaa6eb45dd071244338df51a8fc0f4986e26a715631726a5409562399c93f64dee0194f9ab25f59ad10a8aa73bc0dda1ab22d3d60db636747b79a35367f9398c311473b5b9c3b5cc37c7cb75527e577533af5292e4c6e4f50285be630ff7c1b384f9fea00e69ad416bdf99fb7710e31468694488343c467b52e256052d5e0f87168951955b7ccf95853235a7314fce0f6ed156e0122e28b904c477781aa0c1d70534932dab9ae1d8118324efa1449368206b4ff2309666fc15d0fc864a1a54d79ccf03b857fd771949fcc3f125d25339355efe56add0c3aeffaf83d43f4a61baa2bde54303fbe1ddf10b2a0028024feed1e495621a00b6e9a4ed2a64254e016252b34095d76ef222e2d39053a1d12b54eb498c7c998f2baeb9367cdf9c7ff839d16bda73164eea66dc8890dc0ae22f8ab556be2be7579e1d2d19dd867be2cb7b83b5d3895e978f13cdae45db5417f84831b4bdc5722c781d68ad5f69552fcfeb31277aff8c9286f045fa9ba0dc0bbf273a649387642b49e2de2b0eb0c1e55360cdcbbed7558bd22dac4a183c46f65c61e7e79a21d67e3ff849cc1bb935ae2a9f39752e2e2e20660c3f92594578c90a9c9df0fcd4df4460e2e7ab9cf0730421390731289a87cbe70df39f6d33b93132f20f8b93149608492000e7349e348bc25af9097994ce95f2ff5ca7ab7d8ce1c8497a913624a652d310f855d17ad457dada329bdaf3741b8a6f6b0af468a04878c07a740c2cd753bd55c35d51f881e1d689584da6e8a6f288673f61743815a25b98ea7b6f51e16dbebc41eb516b7697cc5cff80e23328c31bd06e997a9f74a3c3c7bba145a7924cb1168b6f160e1e5a71f3ef1cf99bcc8471acab5dc8ee2a49c73d12d93dde17b338c686a8333833d258ad29ce5d3fad59c51aed69d349719f87ff83a1a2cc8e8cff4ea74f9d80357f828e755b9c53e48b4a76bf14426e388d235d4e8c0812f513156891fef5683c397d8e959c910a3d8d85cbc181a61300561889a24bb95cd6cd473af04aa59b92c8b8487b6020ef90659ecf52358e66ed039a302b50e98bc2f64ff7c3d420c51d4eb9cd7e0dbfe2bf882be4931c4472be67c0fa46828e0b89db189f3f67903e83f41f148f7d2c64294f6c0651874e76cad41b0ce856a453b969a08717c335b382775dfd56cfbe734dc34ab0c86cec796dc5869d4094e2fd34dfacc0bd98fe9fee7506167afb361d16846e94", 0x1000}, {&(0x7f00000098c0)="b7e049ae5d3c7c99922af8332be3283c656d228399a9ec4c532c0119144e17843d1b635d0e04e8fa44964b76f334cbef4e2b3c1b0ab4562a01641da0cdfded2af1972ec8b44232200e805da9b2241e7e989d08795584c98b95a57b045b622d9ed273fc61b7f22923f535867064f7d03268f954b7e65561230fe8a9fbf3840986eb91ee2aa0301681f66dcf5de79c6eefc41417a3d4a65a7e18ab28038f8a1d19988f27ea56be7ae29f27206a128f2f0db877dfa1c72b6e1d15d671e90c3ead9b4a70", 0xc2}, {&(0x7f00000099c0)="9f2392c26d736f6cee862683018d2e141561ea72e9ac69fd2fc241c2954bc1d78f8df465c520d3420699e7c0d148", 0x2e}, {&(0x7f0000009a00)="1b885718be4e18cab1019fe76636818a86280d70d3da32f13b144399b7d306aae2653f85b360738c57605207c8bb6d14183e2ec1eabe5b00a0", 0x39}, {&(0x7f0000009a40)="e7c05c8fe71b2207b21ce58dae6a63f2ef03d6acfafebd4d15342c3d13fc494c0921b7d03ccded93f2095410ec0da8e265468b2ec1a7a248de418b039665d2a5ccaa8a864f69d04efba15ecdca1aa30880533a87f82eb19ce8f8a3422289bc6b147d9ffbcc6a6682b7461dfcdedc28513875f261af6d732cc191948d7f8556d10cb580f24f841f2caceb2c9336430e0e90694313e4caf4e21dacda56e3482d1329fe628ec01222280b42c2a27cec13879cbe5a65ffedad6939a32dd150875e114f193fe54e6fb4edf005665f4a0ca6289142e63bc7", 0xd5}, {&(0x7f0000009b40)="305d8d7f5bf08593067bc6feb7ea515dddda2bba40b1de18b4c3bc5d4f361ea8253b7736c20be3c964c6113dd38b8bf10b9a86", 0x33}], 0x9, &(0x7f0000009c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}}, {{&(0x7f0000009c80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f000000b200)=[{&(0x7f0000009cc0)="bca91e48ffcbdc93fa665d3369cff8e5c71dec7d4c517aca65feef787b15d4a462f390a288d3803502daae728093001cc5eed529bd1846df238b0891b1f992cf3cb6", 0x42}, {&(0x7f0000009d40)="1421ea34c8bfd21cdbebc32c6a6a3c7a777a30cb8dfabcec4412ee301cf4c22b52f95333c4a7aa1644baa69c10e2fdc69f3c62c577bea536f4b39edd1030e4dccfda1c3dc92f7910b77ff285f2de319141002b2b7164b4e31798d56cc82d4aebe81786fca5d7bac7ed96d45803", 0x6d}, {&(0x7f0000009dc0)="028385c9596d5459dcfd831c3c9c3b1ba5613b7a351ae9917a57c5cd4ac8b1e0c4b36c46c9d91e47c120ca12236b3a7785a02e8a3c559e323851acc54ea01fafadeb386014be1c79c9fd0e4fcc3d8b7f2a35bf10799005faf088e81cee9b595c4364936601114099a954ac463a", 0x6d}, {&(0x7f0000009e40)="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", 0x1000}, {&(0x7f000000ae40)="22c885bd1c87aae8c59fb72e3b5a755677ae151e3d263b6dde8c95cfa77c559e089cc20a714581e4ab70c46f75adb393bc508671f35c28ff1bbe0510003f3e57ad0e23c60963b58d87e0c399dfe875db1d1a3bf59a7f1200a0bd72b508c45677317ae6c7c11a9a3dd57a9679f2a26bb9091227f27f691c932968d8fd2ff0da3bcd1aef44c8aec1c687c0f52f3d8e52b9494e21a984de5036a15888f058730b2349b5d2614f359c0091d0460cfcd3150f715582604f52", 0xb6}, {&(0x7f000000af00)="3a9270bc6c808554d99c9d4b0237c5c9aa1f55bc6443aa5bfa494a7a408ec7a83fa44a3a0bcd5f8924775a3b827c97b061af9eabffcdb84dfd9dc4ed3b3bfaf2acb4b5cd1cfa075d467817f6b3c30a31ef0582eebcadcf98d93a16c51bbd42e517ff584a8ad60921949f3203c2ca31a2659431dbc51c40f209bdcb8069d758795ad4b3b8ac71b89f6e79ad47d4904e4f245381967ee8be119fec03a32910c72b110693842e4859cc4940a96fad55c1e56d4bfe7b7c3a8c5126bd1d6c1489f5c5d19161373e6cb2a7b6", 0xc9}, {&(0x7f000000b000)="04d2646711402b86e626615560d3b8d77b1e3d2b5fed902b6cbc4e4256fc7c17952e7ef2065cd5ba2dbb68c86d713ce9c3b8aa2500e8919f0df93ccabe78f3f20484f4fc1a6f8dcedc2b12a94bb69516d7be3b5f7e29f530c276036e762d63fa1881048d382d9edad36646cad7d0ebfb109a938b65c08a95ba5c655bea0dc070882a6afead3ad0dd741ef3e0e6802a43e5d792cb3262b37ffb10d9efae71a9035b0672a4eb2f7dfd4cd951d6add5302b85886a1aa41c539d7860f4a73439a3ad5b2b87d514a46fc1ad6f0841ec3bbc152fd7a1207cb0c79fb634", 0xda}, {&(0x7f000000b100)="5d088b4d12d667e23f42edfa84bf08e1687dd0ab1a344d7a3df37ad11a422814302f63edf935658940060febd229032e27d7090204ee236d22416bc53ed3707827dc1c8d08a51deef9cc79a147d9687d4b97fb2a96cf3b65bc659910a5ede3ae34325784008d24bb7adb330bc6024ef2b1f85c0f97ae5dd4189f7da917f92c98907e44d89e45fc54ae6783827bbf519020b2424b4f22", 0x96}, {&(0x7f000000b1c0)="8512e5f6affc9c381f2197112b63d272bc5eaacacebade4a5c126433f4a4911ef63c5df972cc7d84", 0x28}], 0x9, &(0x7f000000b2c0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xc9, [@private=0xa010102, @multicast1, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @remote, @private=0xa010100]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private=0xa010102}}}], 0x58}}], 0xa, 0x1) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) 01:54:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x1000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) tkill(r0, 0x2c) vmsplice(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000000)="c94bdb7dd210fd446c99de56185f56de6ff7f8b31414f1c7436dbf0ac12528eaa335940e6e311ed0f6aa296d40e84d3de975d975952bd0fff01997bc3cdcee3f7bd9328ad894d6a022e1a865157152bba69910f3254efa194cfc7d135aa01369c16b5aa3a289c396f14914dab4c325a71b0acf7668878f0d0c35eb9e3c5e03ac4861bbe47ca66d45b86ea292"}, {&(0x7f00000000c0)="db3f8629d19506d6d636e18eeece8e09ea6ecfb19e8103837df224a12f1a6d770a3edc280641616706dafc46f3741b528557f37c3341270b923287380e7eccf13850c093038976f19ab9f4dd9c5a9dbb3c81be31b1c5e33340deee9d6ec7979e8095a803ac1292cf450a69a2d7a6d729acd4a00b6c081499225a7845b045ed2f08ff0b903c63c6159078ad2bdaeaddfdb7a56f6e687c2f32ad03b5d8403315ca26999bde696a14400f9c59d31ef934b5d2474c516970b858e03e2dc89f727111cab5d32e70faf67171d74ddf882494ebcc55cd4e4c78f1098f2c85cf863b7523946d4d"}, {&(0x7f00000001c0)="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"}, {&(0x7f00000011c0)="4bc2a965fd36830c2f694445958571359a07ffb06349d4be1ab1489cdc975bbe502e1cb37e5078f4f09a5b866d5d354f51d140"}, {&(0x7f0000001200)="2efd16f4311c14ed4491cde559cf89f9eacb30c080f5dfc156f5a3c8b61b50b070852349"}, {&(0x7f0000001240)="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"}, {&(0x7f0000002240)="2dde22df9abd10029519064a94786a3e70bd25284df4e9f819619f298262961122d263af566f1ccb13f2c21a8bae"}, {&(0x7f0000002280)="a2d1a5cc321170626a117d8ebd733c04406f94dd4a316fc0fb57b2dc692112246f3d57a6102e858e12dcfceea152a3587aaa79f3984048c4680460185167debebeaff2bb8d7d46a9c06ef76ee5b17391dc5194c9a57f6357dd0bfb6e500a8797f228"}, {&(0x7f0000002300)="f98aa1b5e31df3ed81a337adee27edd532583939c0ff0069824a5a4e7a8f3af7644d97f61b683d1f9a4f004f7e6476e0266b11ecd75f43600e25145836f007ceedc0ab7a368cd8ce2dd99a4c185323d658d27102550282de39646f252c2129a9ec9cb90a7e094d1e7a09561d3c2ddbc53ef63c32a985854ffaef33138540023049ff0be281c222e7c963783168fc574803b6fa66ca353e4e65d355da6fde036fade2dfccecb716b7d160c37e15cbf433178fd45175a3a3b079dd47369081376e8dc0f945706441f315e955ed6f3dc9acb97c19793a14c006cac43e473f70da9c87c8bf8584131d048266d505a565a721bb2577bf42c7354bb6"}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 773.111175][ T4187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 773.114104][ T4187] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 773.138434][ T4187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 773.140605][ T4187] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:28 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 773.172097][ T4222] loop1: detected capacity change from 0 to 7 [ 773.270141][ T4187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 773.274050][ T4187] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000001263e5cd [ 773.276451][ T4248] PM: suspend entry (deep) [ 773.286056][ T4248] Filesystems sync: 0.008 seconds [ 773.287680][ T4248] Freezing user space processes ... [ 773.365476][ T4187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 773.369863][ T4187] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 773.375040][ T4187] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 773.376494][ T4187] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 773.385212][ T4248] (elapsed 0.097 seconds) done. [ 773.386644][ T4248] OOM killer disabled. [ 773.387374][ T4248] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 773.390790][ T4248] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x14ac000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 773.440307][ T1781] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 782.157802][ T4248] ACPI: Preparing to enter system sleep state S3 [ 782.157956][ T4248] PM: Saving platform NVS memory [ 782.157961][ T4248] Disabling non-boot CPUs ... [ 782.161557][ T4248] smpboot: CPU 1 is now offline [ 782.164497][ T4248] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 782.164556][ T4248] ACPI: Low-level resume complete [ 782.164634][ T4248] PM: Restoring platform NVS memory [ 782.164648][ T4248] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 782.179248][ T4248] Enabling non-boot CPUs ... [ 782.179415][ T4248] x86: Booting SMP configuration: [ 782.179419][ T4248] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 782.179601][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 782.180603][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 782.182173][ T4248] CPU1 is up [ 782.182678][ T4248] ACPI: Waking up from system sleep state S3 [ 782.315692][ T4248] OOM killer enabled. [ 782.316619][ T4248] Restarting tasks ... done. [ 782.330528][ T4248] PM: suspend exit 01:54:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x2000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x47}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x58, 0xbe, "9f8bfd2f74ffc09eff9f85a40a6c59005168f96215c9a5e9e4dad33fd0be164e0c384771c94129baebe3b3cd4ebe1c6dd921e2d942362c4c6412ca58e6958c33d13d6197592f0e141eedd2676fa2be82129aa3eb"}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8801) r3 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 782.384096][ T4264] loop1: detected capacity change from 0 to 7 01:54:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 782.439525][ T4255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 782.441577][ T4255] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000477defa5 [ 782.527633][ T4255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 782.529626][ T4255] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:37 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5037, &(0x7f0000000000)={0x0, 0x55fd, 0x2, 0x1, 0x23b, 0x0, r3}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x4}, 0x1) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x22, 0x0, 0x0) [ 782.548993][ T4277] loop1: detected capacity change from 0 to 7 [ 782.554350][ T4255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 782.556824][ T4255] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 782.658875][ T4255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 782.660858][ T4255] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 782.696505][ T4302] loop1: detected capacity change from 0 to 7 [ 782.717444][ T4255] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 782.719107][ T4255] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 782.728587][ T4297] PM: suspend entry (deep) [ 782.738377][ T4297] Filesystems sync: 0.008 seconds [ 782.740054][ T4297] Freezing user space processes ... (elapsed 0.012 seconds) done. [ 782.755210][ T4297] OOM killer disabled. [ 782.755964][ T4297] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 782.759374][ T4297] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x3000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 782.802910][ T1787] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 783.325063][ T4297] ACPI: Preparing to enter system sleep state S3 [ 783.325131][ T4297] PM: Saving platform NVS memory [ 783.325139][ T4297] Disabling non-boot CPUs ... [ 783.329036][ T4297] smpboot: CPU 1 is now offline [ 783.331890][ T4297] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 783.331949][ T4297] ACPI: Low-level resume complete [ 783.332028][ T4297] PM: Restoring platform NVS memory [ 783.332082][ T4297] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 783.345211][ T4297] Enabling non-boot CPUs ... [ 783.345359][ T4297] x86: Booting SMP configuration: [ 783.345387][ T4297] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 783.345582][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 783.346750][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 783.348537][ T4297] CPU1 is up [ 783.349001][ T4297] ACPI: Waking up from system sleep state S3 [ 783.493133][ T4297] OOM killer enabled. 01:54:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x8000d9f, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x6, 0x9, 0x81, 0x0, 0x0, 0x7, 0x40039, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xf6}, 0x4d660, 0x7c, 0x1, 0x5, 0x400, 0x2, 0x9, 0x0, 0x9, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x6, r0, 0x0) close(r1) r2 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) vmsplice(r1, &(0x7f0000001580)=[{&(0x7f0000000380)="25fab6f331cb4e89c79424506b76329ec273c8f04ad0f1cff4b31764f17386331c37c1373e45c43ab542df0a88707bfcb3a93747c4282d39db05746c6cad50bb54a66faff9bd12b3df7a66f564b99f6580bc7deb59dd38bfc27a3818b5a811ebb95a7281f0591e96d0438fbd36447082fb2f2ab08d156b0c0a1a721d5f9d2c1d155b077d7813d6552a65bb81b4d9cc6fab7aef540f7cd70a36c9935b65fd9490ca284f9fb6931af199dec22e026a439d82a8ae", 0xb3}, {&(0x7f0000000440)="aedbc505a3d00b2d3ab89ba1dbaa3067d5b3eff34842801afa3a47635cb48ff2460ff377db70f42a120a1490c1c905544c26e9f09dee2cca57b079d13e9549460a", 0x41}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="fbd8d920ae8b44121e5e0b49bad6668392f14297c273612fa8b0ed549195cc809d2699dd237e50a34b7f81f3dd5deec4a603e482be45694afd03eaa9e097a96d380f1a736fb6116c04", 0x49}, {&(0x7f0000001540)="bfb34b61775417f43ffdea7583a533dd9c3d5b5383db9ef5626488129bf3a918e30b2b0b3f95bbd3de8928c433c2f56c1265311f2504c0e33df0fdb4aecf71", 0x3f}], 0x5, 0x8) r6 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x311000) r7 = gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x81, 0x7, 0xff, 0x6, 0x0, 0x400000000001, 0x502, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @perf_bp, 0x8100, 0x5, 0x0, 0x5, 0x7, 0xf560, 0x100, 0x0, 0x5, 0x0, 0x7}, r7, 0x4, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r8, 0x532f, 0x93c4, 0x1, &(0x7f00000002c0)={[0x5]}, 0x8) socket(0x0, 0x0, 0x0) 01:54:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x47}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x58, 0xbe, "9f8bfd2f74ffc09eff9f85a40a6c59005168f96215c9a5e9e4dad33fd0be164e0c384771c94129baebe3b3cd4ebe1c6dd921e2d942362c4c6412ca58e6958c33d13d6197592f0e141eedd2676fa2be82129aa3eb"}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8801) r3 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 783.493975][ T4297] Restarting tasks ... [ 783.525633][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 783.528130][ T7182] block loop1: uevent: failed to send synthetic uevent [ 783.537728][ T4297] done. [ 783.538990][ T4297] PM: suspend exit [ 783.558499][ T4326] loop1: detected capacity change from 0 to 7 01:54:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x4000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1d, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x403}, 0x0, 0x0, 0x0, 0x2, 0x649, 0xfffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = dup(0xffffffffffffffff) syz_io_uring_setup(0x60f3, &(0x7f0000000000)={0x0, 0x1e73, 0x2, 0x2, 0x17f, 0x0, r4}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = gettid() tkill(r5, 0x7) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x8, 0x0, 0x24, 0x0, 0x1ee, 0x4, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x1000, 0x0, 0x4, 0x1f, 0x800, 0x0, 0x9, 0x0, 0x4}, r5, 0xffffffffffffffff, r0, 0x2) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0xf1086000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @multicast1, @multicast2}, 0xc) [ 783.642693][ T4340] PM: suspend entry (deep) [ 783.652773][ T4340] Filesystems sync: 0.008 seconds [ 783.654426][ T4340] Freezing user space processes ... [ 783.666926][ T4319] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 783.671957][ T4319] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 783.685852][ T4319] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 783.688097][ T4319] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 783.692883][ T4340] (elapsed 0.038 seconds) done. [ 783.694531][ T4340] OOM killer disabled. [ 783.695374][ T4340] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 783.698835][ T4340] printk: Suspending console(s) (use no_console_suspend to debug) [ 783.928091][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 784.458733][ T4340] ACPI: Preparing to enter system sleep state S3 [ 784.458892][ T4340] PM: Saving platform NVS memory [ 784.458899][ T4340] Disabling non-boot CPUs ... [ 784.462305][ T4340] smpboot: CPU 1 is now offline [ 784.464817][ T4340] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 784.464883][ T4340] ACPI: Low-level resume complete [ 784.464977][ T4340] PM: Restoring platform NVS memory [ 784.464987][ T4340] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 784.478634][ T4340] Enabling non-boot CPUs ... [ 784.478921][ T4340] x86: Booting SMP configuration: [ 784.478926][ T4340] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 784.479188][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 784.480339][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 784.481942][ T4340] CPU1 is up [ 784.482492][ T4340] ACPI: Waking up from system sleep state S3 [ 784.609730][ T4340] OOM killer enabled. 01:54:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x8000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000900)=""/82, 0x52}, {&(0x7f0000000980)=""/22, 0x16}], 0x3, 0xd9f, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7f, 0x200080) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x80]}, 0x8) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="d51ef2f168d61ce55eaf5f41b0a042db3d3b2d6106afa24fdc4a240d8efc6f5af1c9a70d92a856e12b493c985fc46402857c1c6ab72e4818facec3b6f2efffbff0fbaedd7c0cbfe18e551b082ab226136f9e3b8b56ebf28e6304f4d35d4dc877301c5279774bd5cedb39249b802aa0b719d494e75ce62dad767ab36c3b9e7c6182a5114e855000ca948a5ad25556011d1aab0da1acac33a209572b67e6552511aaeae021849b66499fb20098d36fd4f18aa993e6f3971a5f8f42", 0xba, 0x4, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f00000000c0)="fe1fdd9223df407d43a5460b0121a38e2136e71d650a3af93223821175e79c72d2209d14b0d87804c2db0f1d7dca2376", 0x30, 0x7, 0x0, 0x747856d9260719d6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0xf800, 0xffffffffffffffff, &(0x7f0000000380)="427648eb038c7d3a1674c79073f63fdbbde21d7c6f05058d311d938a00697b2282ba7f195371086e5b6c63c1f89338edde571e586d31e54ffecf404c01ddc1ed46136db5d8c311a46d56546791f06c819e12f0f3d48629e5175978a974072c26b698a79cb8a86f3f", 0x68, 0x5, 0x0, 0x1, r2}]) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000150000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(r6, &(0x7f0000000440)='./file0/file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) sendfile(r7, r6, &(0x7f00000004c0)=0x2, 0x5) socket(0x0, 0x0, 0x0) [ 784.610407][ T4340] Restarting tasks ... [ 784.631999][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 784.634943][ T7182] block loop1: uevent: failed to send synthetic uevent [ 784.637975][ T4340] done. [ 784.647004][ T4352] loop1: detected capacity change from 0 to 7 [ 784.659760][ T4340] PM: suspend exit 01:54:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 784.772036][ T4373] loop1: detected capacity change from 0 to 7 01:54:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3977, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r5 = syz_io_uring_setup(0x5417, &(0x7f00000001c0)={0x0, 0x2000000, 0x10, 0x0, 0x800000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000800), &(0x7f0000000840)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x2, 0xc04a01, r6) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3004}, 0x0, {0x0, r6}}, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x62) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x80000) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'veth0_to_hsr\x00'}) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x20, 0xbb, 0x0, 0x94, 0x0, 0x0, 0x200, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x800, 0x25fd, 0x401, 0x3, 0x101, 0x8, 0x2, 0x0, 0x4, 0x0, 0xffffffffffff0001}, 0x0, 0x8, 0xffffffffffffffff, 0xa) io_uring_enter(r0, 0x6c01, 0x6823, 0x1, &(0x7f0000000040)={[0xffffffffffff7fff]}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={0x3bc, 0x14, 0x1, 0x70bd29, 0x25dfdbff, {0x1, 0x54}, [@INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "f44a10f62d6f61a3713ccba28cbb67f1728da2448c75651abb9c91722f8d27433de9507f2c667de9dd9ec4a6bae73f33e65b40797ddee1958236ef975bebffce793a49a394f13e845b326629244b7c93e07d2593ad11eadf332323055c70ff46ea74cf6847f5a6fd261ac7d9ba7ddaedc3c2ade6c49122385fe6ec41dd28617665f110a13363b817bdc81a0f25ec439bda2b11b6f82c3447c9866caa74dc2d92a4d468681236e8a596e6139c29cc5d2d2774c641393590620559c0a15fa6a58792763a8a0d3785b53705c91c98e657f6ef559c4f0a5419cc1c6b685222f4f3b54d6e067ad75deb16c4c48609"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "8749b3bd42570c9ea6282ab405a0c768ed59caf1ab43c23d1ff4b1462029c5fa9ab911f373db15a1e0b659abacdbbe1ad7bff97f36f0c7684d33b06414c99ea8556c462a7fc38ffbcec568ad51d07687631f4558547915106985b4de11f1f04d83e444bbe8170fc815cf3a66c8a740eaf4cfac93d1154bf6bd870a5ebd6fa7953e4f9bf0fb9984df4c6fbc5448ce2edbae515623884ab4908e172bd0e6b24cdfd34c49893f17dc28fc"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "b5711d54c5aaca23038f5584cad6fed21db9b1ee1aab430119606790e41a618f6ab50c84ad17f09a91b1ebdca35bc1333120a9be7eb6e806923a05caa6b09c0e2cbdc92747d319a27a52198bb3c2b0df1d9ae5496e7d3dcdfaa8e606960da117fd116476ef3153373b4f836b6031293d340e53c00b7cb69fde013b2db5643e7dd21c7a7ed7fd5a97d06e4189ec3b0ac4e87fd762fa01b966dac0c1ada851d3fb0970350d5fe718a069bc0e2119972e895dbd"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "ccc1761554cb053c0144b154a55f5a54db6ba18ba1573a35e22f804411ad8db1dc68ec1532a2fa59f7146ab518d9d83849850657fb882e296f542b3037b90a81a328e9022a9f5fed9683673e870d9b494252216bcb151d4fd7481e2e3fa4dded4609ebc58411c073a18600a79418d15ec8f21be56bd2de243d507a9ea7e577d686d28e133e1ac0b244d3530c779573b121a15ff20d428ac720e2b5f55b8f9c9f0e25c7f6b94566854786ad1b31141424e096d1b363c43515dd3e4a99075236adf7ddaf2a10e8c39f77be1b8b45c1b3bc68fb9a2185ac5394192126ce97a31ac6ff2290357da18878ca6357354e11c57dede41591"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "23f250b6f3b74691e6c227b95e9777b6882148e010e614c172bd367e9000d6ba55a4c78074fb3491c44d377d15550ca229007b0275f5ff0f195129fc41a2ae645a9535dc69d4060eedb4a9cbfeb58d8e9a8485"}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 01:54:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xf000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x10000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:40 executing program 1: r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 784.894993][ T4399] loop1: detected capacity change from 0 to 7 [ 784.957611][ T4381] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 784.959387][ T4381] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x0000000091b536ab 01:54:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x401) [ 785.012604][ T4414] PM: suspend entry (deep) [ 785.023304][ T4414] Filesystems sync: 0.009 seconds [ 785.024484][ T4414] Freezing user space processes ... [ 785.080194][ T4381] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 785.083604][ T4381] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 785.096799][ T4381] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 785.099545][ T4381] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 785.104966][ T4414] (elapsed 0.080 seconds) done. [ 785.106996][ T4414] OOM killer disabled. [ 785.107659][ T4414] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 785.110289][ T4414] printk: Suspending console(s) (use no_console_suspend to debug) [ 785.154917][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 785.684707][ T4414] ACPI: Preparing to enter system sleep state S3 [ 785.684770][ T4414] PM: Saving platform NVS memory [ 785.684774][ T4414] Disabling non-boot CPUs ... [ 785.688133][ T4414] smpboot: CPU 1 is now offline [ 785.690727][ T4414] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 785.690785][ T4414] ACPI: Low-level resume complete [ 785.690887][ T4414] PM: Restoring platform NVS memory [ 785.690896][ T4414] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 785.703607][ T4414] Enabling non-boot CPUs ... [ 785.703822][ T4414] x86: Booting SMP configuration: [ 785.703826][ T4414] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 785.704036][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 785.705132][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 785.706420][ T4414] CPU1 is up [ 785.706818][ T4414] ACPI: Waking up from system sleep state S3 [ 785.841756][ T4414] OOM killer enabled. [ 785.842752][ T4414] Restarting tasks ... [ 785.849273][ T7182] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 785.852922][ T7182] block loop3: uevent: failed to send synthetic uevent [ 785.859149][ T4414] done. [ 785.871827][ T4425] loop1: detected capacity change from 0 to 7 [ 785.874670][ T4414] PM: suspend exit 01:54:41 executing program 1: r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x18020000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 786.011378][ T4381] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.013591][ T4381] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 786.024005][ T4381] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.025911][ T4381] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 786.060588][ T4450] loop1: detected capacity change from 0 to 7 01:54:41 executing program 1: r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x20000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 786.141792][ T4452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.143576][ T4452] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 786.157328][ T4452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.159040][ T4452] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 786.173517][ T4468] PM: suspend entry (deep) [ 786.187190][ T4467] loop1: detected capacity change from 0 to 7 01:54:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x24000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 786.194202][ T4468] Filesystems sync: 0.019 seconds [ 786.220228][ T4468] Freezing user space processes ... [ 786.248684][ T4452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.252325][ T4452] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x0000000073f9e27a [ 786.338746][ T4452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.340642][ T4452] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 786.347846][ T4452] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 786.350407][ T4452] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 786.356898][ T4468] (elapsed 0.136 seconds) done. [ 786.358517][ T4468] OOM killer disabled. [ 786.359361][ T4468] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 786.362429][ T4468] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() tkill(r0, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xff, 0x4, 0x5, 0x0, 0x2, 0x8304, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp, 0x940, 0x7fffffff, 0x8b19, 0x8, 0x9400000000000000, 0x800, 0x7, 0x0, 0x3ff}, r0, 0x7, r1, 0xa) r2 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5, 0x7, 0xcb, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x25a, 0x2, @perf_bp={&(0x7f0000000040)}, 0x24, 0x856, 0xf67, 0x5, 0x0, 0x800, 0x9, 0x0, 0x6, 0x0, 0x5}) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x21, 0x4, 0x0) 01:54:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 786.410486][T30293] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 786.923378][ T4468] ACPI: Preparing to enter system sleep state S3 [ 786.923505][ T4468] PM: Saving platform NVS memory [ 786.923509][ T4468] Disabling non-boot CPUs ... [ 786.926844][ T4468] smpboot: CPU 1 is now offline [ 786.929478][ T4468] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 786.929537][ T4468] ACPI: Low-level resume complete [ 786.929614][ T4468] PM: Restoring platform NVS memory [ 786.929623][ T4468] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 786.943249][ T4468] Enabling non-boot CPUs ... [ 786.943560][ T4468] x86: Booting SMP configuration: [ 786.943564][ T4468] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 786.943804][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 786.944825][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 786.946237][ T4468] CPU1 is up [ 786.946626][ T4468] ACPI: Waking up from system sleep state S3 [ 787.069317][ T4468] OOM killer enabled. 01:54:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:42 executing program 4: r0 = syz_open_dev$char_raw(&(0x7f0000000000), 0x0, 0x8000) poll(&(0x7f0000000040)=[{r0, 0x8400}], 0x1, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 787.070022][ T4468] Restarting tasks ... done. [ 787.125378][ T4468] PM: suspend exit [ 787.153929][ T4496] loop1: detected capacity change from 0 to 7 01:54:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x41020000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r6 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r6, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x10004af3, &(0x7f0000000000)={0x0, 0x2, 0x20, 0x20000, 0x4}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 01:54:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 787.287190][ T4489] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.289218][ T4489] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 787.312319][ T4525] loop1: detected capacity change from 0 to 7 [ 787.325241][ T4489] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.327519][ T4489] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) r4 = dup2(r3, r3) io_uring_enter(r4, 0x4843, 0xc433, 0x1, &(0x7f0000000000)={[0x9]}, 0x8) 01:54:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x50000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 787.422318][ T4489] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.424700][ T4489] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 787.438530][ T4489] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.441165][ T4489] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 787.453863][ T4552] loop1: detected capacity change from 0 to 7 01:54:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) syz_io_uring_setup(0x5f99, &(0x7f0000000140)={0x0, 0xbb04, 0x0, 0x1, 0x1a1, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 01:54:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x57b5e67b, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4004af3, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = fork() fork() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x2, 0x40, 0x2c, 0x0, 0x80, 0x100, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x6}, 0x200, 0x8, 0x948, 0x0, 0xfffffffffffff801, 0xfb, 0x8, 0x0, 0x2, 0x0, 0xd18}, r4, 0x3, r0, 0x8) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 787.572317][ T4576] loop1: detected capacity change from 0 to 7 01:54:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 787.635439][ T4558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.637885][ T4558] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 787.656520][ T4558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.658040][ T4558] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 787.687058][ T4599] loop1: detected capacity change from 0 to 7 [ 787.750042][ T4558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.751892][ T4558] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000001263e5cd [ 787.835355][ T4558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.837264][ T4558] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 787.850751][ T4558] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 787.852474][ T4558] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r6 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r6, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x58000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="a1bbe18349bd6ec6b4bb928418d54fe76e031783f7ff30875b1966a55853fa597d753adcb06ac33a0bc0abd5935fdf308d82a0bde2166ea19f4681e645b6bc26c60e338df91c722b49cb7e7a199a8f9411e87dcbd6092503bd0400d8672ecff2e34bb5fdbb097cd7bbffab90fec238982e5a7efb9f02d9f303634de7fcd6e8e4d82e1ea2448d5e885a22bda30dbbed85dd7b8a939ded65d5132b9d73c6fc744118362e41cfd788ed1486bc56f0845a9ef2", 0xb1, 0x0, &(0x7f0000000200)={0x2, 0x4e24, @broadcast}, 0x10) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000004c0)="acb567bfb65d6e56193486016eb7323ec733fd95c0c030efc6f942a905beaeaa42a2e063902e83db41cf9d1dd177640dd9e37fe23f589db122b6aaf2db5db0beb5f4a7ae30aa6084b7ee721b086aab9497b39f8b5da838c743a8aad646f1981b38e0df0accf5b908ba4680ef", 0x6c, 0x805, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) socket(0x0, 0x0, 0x0) io_setup(0x18f, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)) io_pgetevents(r4, 0x5, 0x7, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f0000000180)={&(0x7f0000000480)={[0x800]}, 0x8}) 01:54:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 788.196905][ T4630] loop1: detected capacity change from 0 to 7 01:54:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000900)=""/82, 0x52}, {&(0x7f0000000980)=""/22, 0x16}], 0x3, 0xd9f, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7f, 0x200080) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x80]}, 0x8) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="d51ef2f168d61ce55eaf5f41b0a042db3d3b2d6106afa24fdc4a240d8efc6f5af1c9a70d92a856e12b493c985fc46402857c1c6ab72e4818facec3b6f2efffbff0fbaedd7c0cbfe18e551b082ab226136f9e3b8b56ebf28e6304f4d35d4dc877301c5279774bd5cedb39249b802aa0b719d494e75ce62dad767ab36c3b9e7c6182a5114e855000ca948a5ad25556011d1aab0da1acac33a209572b67e6552511aaeae021849b66499fb20098d36fd4f18aa993e6f3971a5f8f42", 0xba, 0x4, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f00000000c0)="fe1fdd9223df407d43a5460b0121a38e2136e71d650a3af93223821175e79c72d2209d14b0d87804c2db0f1d7dca2376", 0x30, 0x7, 0x0, 0x747856d9260719d6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0xf800, 0xffffffffffffffff, &(0x7f0000000380)="427648eb038c7d3a1674c79073f63fdbbde21d7c6f05058d311d938a00697b2282ba7f195371086e5b6c63c1f89338edde571e586d31e54ffecf404c01ddc1ed46136db5d8c311a46d56546791f06c819e12f0f3d48629e5175978a974072c26b698a79cb8a86f3f", 0x68, 0x5, 0x0, 0x1, r2}]) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000150000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(r6, &(0x7f0000000440)='./file0/file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d7", 0x1}, {&(0x7f0000000280)="4328a2dce97e2a8db795aeb77774725fa74b5e34957bb575c3f2b150d832f0a8681a3c831ed0a9ec56f973888d4d775aea982c547e9596413f3bab357aa5f449db670a55bcd7e6f328cec559d3c6e07732ac47c215642b164ce49d5a2fa550cf10a9519d54146e680a9a072928e8a27bad7d441411f4216c61eecccea6ba704bab1ff7f2172ec1df97da32eb70945b87b31a6c987d484a349ca311169adeda44058052533d16e5e143b2a85a29b078afc01a52abd178b2964697e5b99461a9deabf2b727925119d900ce1774923e7e", 0xcf}, {&(0x7f0000000380)="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", 0x495}], 0x3}}], 0x1, 0x400c078) sendfile(r7, r6, &(0x7f00000004c0)=0x2, 0x5) socket(0x0, 0x0, 0x0) 01:54:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x5b5892de, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 788.386905][ T4625] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 788.389296][ T4625] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x7be6b557, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 788.409530][ T4653] loop1: detected capacity change from 0 to 7 [ 788.414515][ T4625] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 788.416446][ T4625] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r6 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r6, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:44 executing program 4 (fault-call:5 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x364, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x91ffffff, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 789.037309][ T4685] FAULT_INJECTION: forcing a failure. [ 789.037309][ T4685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.040087][ T4685] CPU: 0 PID: 4685 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 789.042451][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.045861][ T4685] Call Trace: [ 789.047116][ T4685] dump_stack+0x137/0x19d [ 789.048020][ T4685] should_fail+0x23c/0x250 [ 789.048994][ T4685] should_fail_usercopy+0x16/0x20 [ 789.050198][ T4685] _copy_from_user+0x1c/0xd0 [ 789.051194][ T4685] __copy_msghdr_from_user+0x44/0x350 [ 789.052660][ T4685] ? __fget_light+0x21b/0x260 [ 789.053621][ T4685] __sys_sendmsg+0x135/0x270 [ 789.054688][ T4685] ? kstrtouint_from_user+0x104/0x130 [ 789.055309][ T4684] loop1: detected capacity change from 0 to 7 [ 789.055586][ T4685] ? do_anonymous_page+0x411/0x8b0 [ 789.058611][ T4685] ? fsnotify_perm+0x59/0x2e0 [ 789.059395][ T4685] ? __fsnotify_parent+0x32f/0x430 [ 789.061012][ T4685] ? get_pid_task+0x8b/0xc0 [ 789.062094][ T4685] ? vfs_write+0x50c/0x770 [ 789.063120][ T4685] ? __fget_light+0x21b/0x260 [ 789.064579][ T4685] ? __cond_resched+0x11/0x40 [ 789.065576][ T4685] ? fput+0x2d/0x130 [ 789.067267][ T4685] ? ksys_write+0x157/0x180 [ 789.068523][ T4685] __x64_sys_sendmsg+0x42/0x50 [ 789.069680][ T4685] do_syscall_64+0x4a/0x90 [ 789.070739][ T4685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.071870][ T4685] RIP: 0033:0x4665d9 [ 789.072578][ T4685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.079713][ T4685] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.081814][ T4685] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 789.084170][ T4685] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 789.085740][ T4685] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 01:54:44 executing program 4 (fault-call:5 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x3) syz_io_uring_complete(0x0) [ 789.087147][ T4685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.089138][ T4685] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 01:54:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x95000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 789.164394][ T4680] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 789.166388][ T4680] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 789.189315][ T4680] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 789.191149][ T4680] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 789.204722][ T4706] FAULT_INJECTION: forcing a failure. [ 789.204722][ T4706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.207512][ T4706] CPU: 1 PID: 4706 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 789.209467][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.212335][ T4706] Call Trace: [ 789.213279][ T4706] dump_stack+0x137/0x19d 01:54:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xb8040000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:44 executing program 4 (fault-call:5 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 789.214167][ T4706] should_fail+0x23c/0x250 [ 789.215104][ T4706] should_fail_usercopy+0x16/0x20 [ 789.217185][ T4706] _copy_from_user+0x1c/0xd0 [ 789.218210][ T4706] iovec_from_user+0xc4/0x2d0 [ 789.218227][ T4711] loop1: detected capacity change from 0 to 7 [ 789.220577][ T4706] ? should_fail+0xd6/0x250 [ 789.221355][ T4706] __import_iovec+0x49/0x270 [ 789.222072][ T4706] ? __copy_msghdr_from_user+0x232/0x350 [ 789.223609][ T4706] import_iovec+0x69/0x80 [ 789.225094][ T4706] __sys_sendmsg+0x1ab/0x270 [ 789.225968][ T4706] ? do_anonymous_page+0x411/0x8b0 [ 789.227165][ T4706] ? fsnotify_perm+0x59/0x2e0 [ 789.228280][ T4706] ? __fsnotify_parent+0x32f/0x430 [ 789.229709][ T4706] ? get_pid_task+0x8b/0xc0 [ 789.231160][ T4706] ? vfs_write+0x50c/0x770 [ 789.231955][ T4706] ? __fget_light+0x21b/0x260 [ 789.232939][ T4706] ? __cond_resched+0x11/0x40 [ 789.233927][ T4706] ? fput+0x2d/0x130 [ 789.234762][ T4706] ? ksys_write+0x157/0x180 [ 789.235568][ T4706] __x64_sys_sendmsg+0x42/0x50 [ 789.236272][ T4706] do_syscall_64+0x4a/0x90 [ 789.237152][ T4706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.238885][ T4706] RIP: 0033:0x4665d9 [ 789.239650][ T4706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.244127][ T4706] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.245884][ T4706] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 789.247385][ T4706] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 789.249566][ T4706] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.251247][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.252537][ T4706] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 [ 789.346214][ T4720] FAULT_INJECTION: forcing a failure. [ 789.346214][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 789.349108][ T4720] CPU: 0 PID: 4720 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 789.350602][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.352178][ T4720] Call Trace: [ 789.352704][ T4720] dump_stack+0x137/0x19d [ 789.353509][ T4720] should_fail+0x23c/0x250 [ 789.354336][ T4720] __should_failslab+0x81/0x90 [ 789.355381][ T4720] should_failslab+0x5/0x20 [ 789.356314][ T4720] kmem_cache_alloc_node+0x58/0x2b0 [ 789.357155][ T4720] ? __alloc_skb+0xed/0x420 [ 789.357988][ T4720] __alloc_skb+0xed/0x420 [ 789.358821][ T4720] netlink_sendmsg+0x4c7/0x7c0 [ 789.359670][ T4720] ? netlink_getsockopt+0x720/0x720 [ 789.360705][ T4720] ____sys_sendmsg+0x360/0x4d0 [ 789.361506][ T4720] ? import_iovec+0x69/0x80 [ 789.362259][ T4720] __sys_sendmsg+0x1ed/0x270 [ 789.363180][ T4720] ? __fsnotify_parent+0x32f/0x430 [ 789.363987][ T4720] ? get_pid_task+0x8b/0xc0 [ 789.364875][ T4720] ? vfs_write+0x50c/0x770 [ 789.365676][ T4720] ? __fget_light+0x21b/0x260 [ 789.366514][ T4720] ? __cond_resched+0x11/0x40 [ 789.367377][ T4720] ? fput+0x2d/0x130 [ 789.368164][ T4720] ? ksys_write+0x157/0x180 [ 789.369002][ T4720] __x64_sys_sendmsg+0x42/0x50 [ 789.369981][ T4720] do_syscall_64+0x4a/0x90 [ 789.370796][ T4720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.371831][ T4720] RIP: 0033:0x4665d9 [ 789.372446][ T4720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.375502][ T4720] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.377050][ T4720] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 789.378494][ T4720] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 789.380104][ T4720] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.381599][ T4720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.383059][ T4720] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 01:54:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x3) syz_io_uring_complete(0x0) 01:54:44 executing program 4 (fault-call:5 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xc4ff0000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 789.925970][ T4738] FAULT_INJECTION: forcing a failure. [ 789.925970][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 789.929308][ T4738] CPU: 1 PID: 4738 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 789.931098][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.932849][ T4738] Call Trace: [ 789.933911][ T4738] dump_stack+0x137/0x19d [ 789.935129][ T4738] should_fail+0x23c/0x250 [ 789.936196][ T4738] __should_failslab+0x81/0x90 [ 789.937428][ T4738] should_failslab+0x5/0x20 [ 789.938516][ T4738] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 789.939902][ T4738] ? __kmalloc_node_track_caller+0x30/0x40 [ 789.940969][ T4738] ? kmem_cache_alloc_node+0x1da/0x2b0 [ 789.942285][ T4738] __kmalloc_node_track_caller+0x30/0x40 [ 789.943662][ T4738] ? netlink_sendmsg+0x4c7/0x7c0 [ 789.944607][ T4738] __alloc_skb+0x187/0x420 [ 789.945501][ T4738] netlink_sendmsg+0x4c7/0x7c0 [ 789.946982][ T4738] ? netlink_getsockopt+0x720/0x720 [ 789.948121][ T4738] ____sys_sendmsg+0x360/0x4d0 [ 789.949327][ T4738] ? import_iovec+0x69/0x80 [ 789.950409][ T4738] __sys_sendmsg+0x1ed/0x270 [ 789.951351][ T4738] ? __fsnotify_parent+0x32f/0x430 [ 789.952421][ T4738] ? get_pid_task+0x8b/0xc0 [ 789.953527][ T4738] ? vfs_write+0x50c/0x770 [ 789.954464][ T4738] ? __fget_light+0x21b/0x260 [ 789.955226][ T4738] ? __cond_resched+0x11/0x40 [ 789.955960][ T4738] ? fput+0x2d/0x130 [ 789.957168][ T4738] ? ksys_write+0x157/0x180 [ 789.957955][ T4738] __x64_sys_sendmsg+0x42/0x50 [ 789.959076][ T4738] do_syscall_64+0x4a/0x90 [ 789.960299][ T4738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.961761][ T4738] RIP: 0033:0x4665d9 [ 789.963122][ T4738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.967871][ T4738] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.969715][ T4738] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 789.972055][ T4738] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 789.973500][ T4738] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 01:54:45 executing program 4 (fault-call:5 fault-nth:4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xc4ffffff, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 789.975013][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.976845][ T4738] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 [ 789.978831][ T4739] loop1: detected capacity change from 0 to 7 01:54:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xde92585b, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r8 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x6, 0x3f, 0x6, 0x0, 0x7, 0x1001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x4320, 0x2, 0x2, 0x7, 0x8, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xe, r8, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 790.055097][ T4759] FAULT_INJECTION: forcing a failure. [ 790.055097][ T4759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.059072][ T4759] CPU: 1 PID: 4759 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 790.060889][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.062932][ T4759] Call Trace: [ 790.063965][ T4759] dump_stack+0x137/0x19d [ 790.065195][ T4759] should_fail+0x23c/0x250 [ 790.065988][ T4759] should_fail_usercopy+0x16/0x20 [ 790.067099][ T4759] _copy_from_iter_full+0x148/0xa10 [ 790.068050][ T4759] ? check_stack_object+0x61/0x70 [ 790.069108][ T4759] ? __virt_addr_valid+0x15a/0x1a0 [ 790.070131][ T4759] ? __check_object_size+0x253/0x310 [ 790.071583][ T4759] netlink_sendmsg+0x579/0x7c0 [ 790.072385][ T4759] ? netlink_getsockopt+0x720/0x720 [ 790.073669][ T4759] ____sys_sendmsg+0x360/0x4d0 [ 790.074826][ T4759] ? import_iovec+0x69/0x80 [ 790.076070][ T4759] __sys_sendmsg+0x1ed/0x270 [ 790.077010][ T4759] ? __fsnotify_parent+0x32f/0x430 [ 790.077867][ T4759] ? get_pid_task+0x8b/0xc0 [ 790.079643][ T4759] ? vfs_write+0x50c/0x770 [ 790.081026][ T4759] ? __fget_light+0x21b/0x260 [ 790.082097][ T4759] ? __cond_resched+0x11/0x40 [ 790.082973][ T4759] ? fput+0x2d/0x130 [ 790.083835][ T4759] ? ksys_write+0x157/0x180 [ 790.085358][ T4759] __x64_sys_sendmsg+0x42/0x50 [ 790.086605][ T4759] do_syscall_64+0x4a/0x90 [ 790.087303][ T4759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.088725][ T4759] RIP: 0033:0x4665d9 [ 790.089720][ T4759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.094585][ T4759] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.095922][ T4759] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 790.097199][ T4759] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 790.098802][ T4759] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.100096][ T4759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.101737][ T4759] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 01:54:45 executing program 4 (fault-call:5 fault-nth:5): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 790.109332][ T4767] loop1: detected capacity change from 0 to 7 01:54:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 790.130728][ T4731] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.132692][ T4731] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000eceeac87 [ 790.225774][ T4731] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.228879][ T4731] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 790.247014][ T4731] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.249647][ T4731] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 790.276566][ T4783] FAULT_INJECTION: forcing a failure. [ 790.276566][ T4783] name failslab, interval 1, probability 0, space 0, times 0 [ 790.281281][ T4783] CPU: 1 PID: 4783 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 790.283096][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.285405][ T4783] Call Trace: [ 790.286067][ T4783] dump_stack+0x137/0x19d [ 790.287296][ T4783] should_fail+0x23c/0x250 [ 790.288346][ T4783] __should_failslab+0x81/0x90 [ 790.290637][ T4783] should_failslab+0x5/0x20 [ 790.293304][ T4783] kmem_cache_alloc_node+0x58/0x2b0 [ 790.295162][ T4783] ? __perf_event_task_sched_out+0xce0/0xd30 [ 790.297828][ T4783] ? __alloc_skb+0xed/0x420 [ 790.299213][ T4783] ? __perf_event_task_sched_in+0x471/0x4c0 [ 790.300450][ T4783] __alloc_skb+0xed/0x420 [ 790.301782][ T4783] netlink_dump+0x15f/0x860 [ 790.303618][ T4783] ? finish_task_switch+0xce/0x290 [ 790.304652][ T4783] __netlink_dump_start+0x3e3/0x4d0 [ 790.305769][ T4783] rtnetlink_rcv_msg+0x69c/0x7a0 [ 790.307305][ T4783] ? tc_get_qdisc+0x690/0x690 [ 790.308328][ T4783] ? tc_get_qdisc+0x690/0x690 [ 790.309445][ T4783] ? __wake_up+0x8d/0xc0 [ 790.310472][ T4783] ? __d_rehash+0x125/0x180 [ 790.311530][ T4783] ? __d_add+0x3bf/0x490 [ 790.313633][ T4783] ? avc_has_perm_noaudit+0x19a/0x240 [ 790.314155][ T4785] loop1: detected capacity change from 0 to 7 [ 790.315646][ T4783] ? rhashtable_jhash2+0x13a/0x1a0 [ 790.319561][ T4783] ? jhash+0x2b0/0x2b0 [ 790.321209][ T4783] netlink_rcv_skb+0x13e/0x240 [ 790.322673][ T4783] ? rtnetlink_bind+0x60/0x60 [ 790.324187][ T4783] rtnetlink_rcv+0x18/0x20 [ 790.325690][ T4783] netlink_unicast+0x5ec/0x6b0 [ 790.326891][ T4783] netlink_sendmsg+0x6f8/0x7c0 [ 790.328251][ T4783] ? netlink_getsockopt+0x720/0x720 [ 790.330809][ T4783] ____sys_sendmsg+0x360/0x4d0 [ 790.332716][ T4783] ? import_iovec+0x69/0x80 [ 790.334511][ T4783] __sys_sendmsg+0x1ed/0x270 [ 790.337169][ T4783] ? __fsnotify_parent+0x32f/0x430 [ 790.338644][ T4783] ? get_pid_task+0x8b/0xc0 [ 790.340307][ T4783] ? vfs_write+0x50c/0x770 [ 790.341785][ T4783] ? __fget_light+0x21b/0x260 [ 790.343377][ T4783] ? __cond_resched+0x11/0x40 [ 790.344974][ T4783] ? fput+0x2d/0x130 [ 790.346237][ T4783] ? ksys_write+0x157/0x180 [ 790.348219][ T4783] __x64_sys_sendmsg+0x42/0x50 [ 790.349553][ T4783] do_syscall_64+0x4a/0x90 [ 790.350737][ T4783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.352225][ T4783] RIP: 0033:0x4665d9 [ 790.354229][ T4783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.362115][ T4783] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.365390][ T4783] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 790.367190][ T4783] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 790.369474][ T4783] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.374769][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.377528][ T4783] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 [ 790.380516][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xe8030000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x3) syz_io_uring_complete(0x0) 01:54:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x96d, 0xef09, 0x3, &(0x7f00000000c0)={[0x1]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:45 executing program 4 (fault-call:5 fault-nth:6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x7, 0xf4, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe465, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x9, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 790.494048][ T4803] FAULT_INJECTION: forcing a failure. [ 790.494048][ T4803] name failslab, interval 1, probability 0, space 0, times 0 [ 790.495667][ T4806] loop1: detected capacity change from 0 to 7 [ 790.500575][ T4803] CPU: 1 PID: 4803 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 790.503586][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.506114][ T4803] Call Trace: [ 790.506815][ T4803] dump_stack+0x137/0x19d [ 790.508036][ T4803] should_fail+0x23c/0x250 [ 790.509411][ T4803] __should_failslab+0x81/0x90 [ 790.510778][ T4803] should_failslab+0x5/0x20 [ 790.512340][ T4803] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 790.513463][ T4803] ? __kmalloc_node_track_caller+0x30/0x40 [ 790.514420][ T4803] ? kmem_cache_alloc_node+0x1da/0x2b0 [ 790.515323][ T4803] __kmalloc_node_track_caller+0x30/0x40 [ 790.517005][ T4803] ? netlink_dump+0x15f/0x860 [ 790.518180][ T4803] __alloc_skb+0x187/0x420 [ 790.519026][ T4803] netlink_dump+0x15f/0x860 [ 790.520005][ T4803] ? __netlink_lookup+0x8c/0x250 [ 790.521674][ T4803] ? __netlink_lookup+0x21c/0x250 [ 790.523429][ T4803] __netlink_dump_start+0x3e3/0x4d0 [ 790.524807][ T4803] rtnetlink_rcv_msg+0x69c/0x7a0 [ 790.526163][ T4803] ? tc_get_qdisc+0x690/0x690 [ 790.527059][ T4803] ? tc_get_qdisc+0x690/0x690 [ 790.527901][ T4803] ? __wake_up+0x8d/0xc0 [ 790.528967][ T4803] ? __d_rehash+0x125/0x180 [ 790.529903][ T4803] ? __d_add+0x3bf/0x490 [ 790.530912][ T4803] ? avc_has_perm_noaudit+0x19a/0x240 [ 790.532608][ T4803] ? rhashtable_jhash2+0x13a/0x1a0 [ 790.533792][ T4803] ? jhash+0x2b0/0x2b0 [ 790.534780][ T4803] netlink_rcv_skb+0x13e/0x240 [ 790.535699][ T4803] ? rtnetlink_bind+0x60/0x60 [ 790.536947][ T4803] rtnetlink_rcv+0x18/0x20 [ 790.537968][ T4803] netlink_unicast+0x5ec/0x6b0 [ 790.539242][ T4803] netlink_sendmsg+0x6f8/0x7c0 [ 790.540179][ T4803] ? netlink_getsockopt+0x720/0x720 [ 790.541024][ T4803] ____sys_sendmsg+0x360/0x4d0 [ 790.542272][ T4803] ? import_iovec+0x69/0x80 01:54:45 executing program 4 (fault-call:5 fault-nth:7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 790.543616][ T4803] __sys_sendmsg+0x1ed/0x270 [ 790.544919][ T4803] ? __fsnotify_parent+0x32f/0x430 [ 790.546054][ T4803] ? get_pid_task+0x8b/0xc0 [ 790.547733][ T4803] ? vfs_write+0x50c/0x770 [ 790.549415][ T4803] ? __fget_light+0x21b/0x260 [ 790.550623][ T4803] ? __cond_resched+0x11/0x40 [ 790.553462][ T4803] ? fput+0x2d/0x130 [ 790.554940][ T4803] ? ksys_write+0x157/0x180 [ 790.555875][ T4803] __x64_sys_sendmsg+0x42/0x50 [ 790.556643][ T4803] do_syscall_64+0x4a/0x90 [ 790.557642][ T4803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.558911][ T4803] RIP: 0033:0x4665d9 [ 790.559662][ T4803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.563608][ T4803] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.565230][ T4803] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 790.566673][ T4803] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 790.568228][ T4803] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.569922][ T4803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.571709][ T4803] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 [ 790.585079][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) r5 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xf4010000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 790.696051][ T4799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.699908][ T4799] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 790.714427][ T4799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.716320][ T4799] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 790.726410][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 790.728993][ T4833] FAULT_INJECTION: forcing a failure. [ 790.728993][ T4833] name failslab, interval 1, probability 0, space 0, times 0 [ 790.732722][ T4833] CPU: 1 PID: 4833 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 790.733549][ T4834] loop1: detected capacity change from 0 to 7 [ 790.734670][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.734684][ T4833] Call Trace: [ 790.739991][ T4833] dump_stack+0x137/0x19d [ 790.740763][ T4833] should_fail+0x23c/0x250 [ 790.741514][ T4833] __should_failslab+0x81/0x90 [ 790.742836][ T4833] should_failslab+0x5/0x20 [ 790.744476][ T4833] kmem_cache_alloc_node+0x58/0x2b0 01:54:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x3) syz_io_uring_complete(0x0) [ 790.746230][ T4833] ? __alloc_skb+0xed/0x420 [ 790.747399][ T4833] __alloc_skb+0xed/0x420 [ 790.748470][ T4833] netlink_ack+0x292/0x690 [ 790.749319][ T4833] netlink_rcv_skb+0x1b7/0x240 [ 790.750558][ T4833] ? rtnetlink_bind+0x60/0x60 [ 790.751675][ T4833] rtnetlink_rcv+0x18/0x20 [ 790.752856][ T4833] netlink_unicast+0x5ec/0x6b0 [ 790.754070][ T4833] netlink_sendmsg+0x6f8/0x7c0 [ 790.755164][ T4833] ? netlink_getsockopt+0x720/0x720 [ 790.756415][ T4833] ____sys_sendmsg+0x360/0x4d0 [ 790.757960][ T4833] ? import_iovec+0x69/0x80 [ 790.759121][ T4833] __sys_sendmsg+0x1ed/0x270 [ 790.760109][ T4833] ? __fsnotify_parent+0x32f/0x430 [ 790.761246][ T4833] ? get_pid_task+0x8b/0xc0 [ 790.762906][ T4833] ? vfs_write+0x50c/0x770 [ 790.764463][ T4833] ? __fget_light+0x21b/0x260 [ 790.765243][ T4833] ? __cond_resched+0x11/0x40 [ 790.766046][ T4833] ? fput+0x2d/0x130 [ 790.766771][ T4833] ? ksys_write+0x157/0x180 [ 790.767728][ T4833] __x64_sys_sendmsg+0x42/0x50 [ 790.768537][ T4833] do_syscall_64+0x4a/0x90 [ 790.769744][ T4833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.772477][ T4833] RIP: 0033:0x4665d9 [ 790.773717][ T4833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.779511][ T4833] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.781864][ T4833] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 790.783108][ T4833] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 790.784846][ T4833] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.787586][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.789047][ T4833] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 01:54:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:46 executing program 4 (fault-call:5 fault-nth:8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xff000000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 790.878301][ T4799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.881545][ T4799] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 790.889355][ T4799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 790.891812][ T4799] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xff0f0000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x3) syz_io_uring_complete(0x0) [ 790.943444][ T4863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 790.948010][ T4863] FAULT_INJECTION: forcing a failure. [ 790.948010][ T4863] name failslab, interval 1, probability 0, space 0, times 0 [ 790.951632][ T4863] CPU: 1 PID: 4863 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 790.953984][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.956573][ T4863] Call Trace: [ 790.957329][ T4863] dump_stack+0x137/0x19d [ 790.958844][ T4863] should_fail+0x23c/0x250 [ 790.959708][ T4863] __should_failslab+0x81/0x90 [ 790.960902][ T4863] should_failslab+0x5/0x20 [ 790.962117][ T4863] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 790.963299][ T4863] ? __kmalloc_node_track_caller+0x30/0x40 [ 790.964427][ T4863] ? kmem_cache_alloc_node+0x1da/0x2b0 [ 790.965605][ T4863] __kmalloc_node_track_caller+0x30/0x40 [ 790.966674][ T4863] ? netlink_ack+0x292/0x690 [ 790.967543][ T4863] __alloc_skb+0x187/0x420 [ 790.968572][ T4863] netlink_ack+0x292/0x690 [ 790.970209][ T4863] netlink_rcv_skb+0x1b7/0x240 [ 790.971584][ T4863] ? rtnetlink_bind+0x60/0x60 [ 790.973048][ T4863] rtnetlink_rcv+0x18/0x20 [ 790.973782][ T4863] netlink_unicast+0x5ec/0x6b0 [ 790.974959][ T4863] netlink_sendmsg+0x6f8/0x7c0 [ 790.976076][ T4863] ? netlink_getsockopt+0x720/0x720 [ 790.977503][ T4863] ____sys_sendmsg+0x360/0x4d0 [ 790.978937][ T4863] ? import_iovec+0x69/0x80 [ 790.980022][ T4863] __sys_sendmsg+0x1ed/0x270 [ 790.981311][ T4863] ? __fsnotify_parent+0x32f/0x430 [ 790.983375][ T4863] ? get_pid_task+0x8b/0xc0 [ 790.984314][ T4863] ? vfs_write+0x50c/0x770 [ 790.985781][ T4863] ? __fget_light+0x21b/0x260 [ 790.986733][ T4863] ? __cond_resched+0x11/0x40 [ 790.987764][ T4863] ? fput+0x2d/0x130 [ 790.988751][ T4863] ? ksys_write+0x157/0x180 [ 790.990030][ T4863] __x64_sys_sendmsg+0x42/0x50 [ 790.991157][ T4863] do_syscall_64+0x4a/0x90 01:54:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:46 executing program 4 (fault-call:5 fault-nth:9): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 790.992579][ T4863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.993048][ T4865] loop1: detected capacity change from 0 to 7 [ 790.994188][ T4863] RIP: 0033:0x4665d9 [ 790.994205][ T4863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.999445][ T4863] RSP: 002b:00007fc804678188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.001724][ T4863] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 791.003732][ T4863] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 791.005609][ T4863] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.008047][ T4863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.009903][ T4863] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xff600000, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0ce9050002000000000000000c0003000000030000000c002380080006006872ee4b943111cd6323810bb715afb8de82f4ea70e452f71ce6a6e5f6a2cd853754ff6a3e493d3229d0ead941827a31b56139d94e2515381cd33606b7bc71371e0e357763c693c78bd8fbb139e950b755a11ec7bcd22e43a78ae939dbe4e0c89f33be1fcc61e39e9c938fba3bdc5f6dac81cf2d7d6de3c38d687549cfec828a742567b4f15f53258282f9befe66b2129a4edd79bbaf0b0d4f1dfd31cde3513a9bb8bbf30e6dfecff3f59341e311b5626c036254dd1c9abbc7ada7dad2aa086d9efa66503ae789c0ed2e115c99338b4387a723ea21d243ac4ae745f9952131ff046d4ff8829225b1e05682687e6ad3", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe0, 0xb, 0x42, 0x80, 0x0, 0x46, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, @perf_config_ext={0x800, 0xff}, 0x3008, 0x8, 0x10001, 0x9, 0x6, 0x80000001, 0x200, 0x0, 0xffffff05, 0x0, 0x7}, 0x0, 0x9, r4, 0xa) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 791.121017][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 791.125861][ T4887] FAULT_INJECTION: forcing a failure. [ 791.125861][ T4887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.128198][ T4887] CPU: 0 PID: 4887 Comm: syz-executor.4 Not tainted 5.13.0-rc3-syzkaller #0 [ 791.129558][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.131269][ T4887] Call Trace: [ 791.131905][ T4887] dump_stack+0x137/0x19d [ 791.133186][ T4887] should_fail+0x23c/0x250 [ 791.133895][ T4887] should_fail_usercopy+0x16/0x20 [ 791.134997][ T4887] _copy_to_user+0x1c/0x90 [ 791.135706][ T4887] simple_read_from_buffer+0xab/0x120 [ 791.136640][ T4887] proc_fail_nth_read+0xf6/0x140 [ 791.138614][ T4887] ? rw_verify_area+0x136/0x250 [ 791.139447][ T4887] ? proc_fault_inject_write+0x200/0x200 [ 791.140719][ T4887] vfs_read+0x154/0x5d0 [ 791.141556][ T4887] ? __fget_light+0x21b/0x260 [ 791.142767][ T4887] ? __cond_resched+0x11/0x40 [ 791.144127][ T4887] ksys_read+0xce/0x180 [ 791.145306][ T4887] __x64_sys_read+0x3e/0x50 [ 791.146241][ T4887] do_syscall_64+0x4a/0x90 [ 791.147082][ T4887] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 791.148437][ T4887] RIP: 0033:0x41935c [ 791.149691][ T4887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 791.155126][ T4887] RSP: 002b:00007fc804678170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 791.156593][ T4887] RAX: ffffffffffffffda RBX: 000000000000004c RCX: 000000000041935c [ 791.158070][ T4887] RDX: 000000000000000f RSI: 00007fc8046781e0 RDI: 0000000000000005 [ 791.160208][ T4887] RBP: 00007fc8046781d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.161740][ T4887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 791.163198][ T4887] R13: 00007fffe52e1f9f R14: 00007fc804678300 R15: 0000000000022000 [ 791.169287][ T4888] loop1: detected capacity change from 0 to 7 [ 791.182112][ T4854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.184081][ T4854] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000002a5f5272 [ 791.287725][ T4854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.290291][ T4854] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 791.301757][ T4854] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.304591][ T4854] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x3) syz_io_uring_complete(0x0) 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xffffff91, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xffffffc4, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 791.451202][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44891) r4 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 791.487308][ T4924] loop1: detected capacity change from 0 to 7 [ 791.621485][ T4916] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.624044][ T4916] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 791.642665][ T4916] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.644441][ T4916] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0xffffffff, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 791.664959][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 791.681702][ T4943] loop1: detected capacity change from 0 to 7 [ 791.743137][ T4916] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.745084][ T4916] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000005609ac2d 01:54:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf251a00000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004880) r3 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x0) syz_io_uring_complete(0x0) 01:54:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 791.841552][ T4916] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.844078][ T4916] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 791.856093][ T4916] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 791.858149][ T4916] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 791.865229][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) [ 791.933571][ T4971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 791.937488][ T4973] loop1: detected capacity change from 0 to 7 01:54:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan1\x00'}) r2 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x0) syz_io_uring_complete(0x0) 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 792.046341][ T4970] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.048962][ T4970] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 792.061479][ T4970] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.063246][ T4970] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 792.074053][ T4995] loop1: detected capacity change from 0 to 7 [ 792.090209][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) r2 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 792.230313][ T5025] loop1: detected capacity change from 0 to 7 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 792.375735][ T5022] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.377488][ T5022] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000003ac545a6 01:54:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x0) syz_io_uring_complete(0x0) 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) r1 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 792.468863][ T5022] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.471804][ T5022] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 792.491227][ T5054] loop1: detected capacity change from 0 to 7 [ 792.491374][ T5022] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.495055][ T5022] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 792.586577][ T5022] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.588633][ T5022] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 792.601197][ T5022] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.603462][ T5022] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:47 executing program 0 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 792.662267][ T5081] loop1: detected capacity change from 0 to 7 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x5, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 792.760867][ T5099] FAULT_INJECTION: forcing a failure. [ 792.760867][ T5099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.763563][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 792.765501][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.767294][ T5099] Call Trace: [ 792.768058][ T5099] dump_stack+0x137/0x19d [ 792.769105][ T5099] should_fail+0x23c/0x250 [ 792.770131][ T5099] should_fail_usercopy+0x16/0x20 [ 792.771464][ T5099] _copy_from_user+0x1c/0xd0 [ 792.772304][ T5099] __x64_sys_sendfile64+0x77/0x130 [ 792.773508][ T5099] do_syscall_64+0x4a/0x90 [ 792.774332][ T5099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 792.776045][ T5099] RIP: 0033:0x4665d9 [ 792.776691][ T5099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.781314][ T5099] RSP: 002b:00007f204b85d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 792.782982][ T5099] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 792.784879][ T5099] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 792.786215][ T5099] RBP: 00007f204b85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.788240][ T5099] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 792.789601][ T5099] R13: 00007ffc8e41cecf R14: 00007f204b85d300 R15: 0000000000022000 [ 792.803978][ T5079] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.805981][ T5079] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 792.830055][ T5079] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.832067][ T5079] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 792.861482][ T5105] loop1: detected capacity change from 0 to 7 [ 792.926418][ T5079] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 792.928847][ T5079] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000007e745313 01:54:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:48 executing program 3: r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:48 executing program 0 (fault-call:7 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 793.030380][ T5079] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.033533][ T5079] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.051744][ T5079] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.054405][ T5079] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:48 executing program 3: r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 793.132758][ T5135] loop1: detected capacity change from 0 to 7 01:54:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xf, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:48 executing program 3: r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 793.192895][ T5142] FAULT_INJECTION: forcing a failure. [ 793.192895][ T5142] name failslab, interval 1, probability 0, space 0, times 0 [ 793.200540][ T5142] CPU: 1 PID: 5142 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 793.202729][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.204995][ T5142] Call Trace: [ 793.205760][ T5142] dump_stack+0x137/0x19d [ 793.207057][ T5142] should_fail+0x23c/0x250 [ 793.208544][ T5142] __should_failslab+0x81/0x90 [ 793.209422][ T5142] ? alloc_pipe_info+0xac/0x350 [ 793.210747][ T5142] should_failslab+0x5/0x20 [ 793.212301][ T5142] kmem_cache_alloc_trace+0x49/0x310 [ 793.213986][ T5142] alloc_pipe_info+0xac/0x350 [ 793.215181][ T5142] splice_direct_to_actor+0x5f7/0x650 [ 793.216386][ T5142] ? do_splice_direct+0x170/0x170 [ 793.217423][ T5142] ? security_file_permission+0x87/0xa0 [ 793.218468][ T5142] ? rw_verify_area+0x136/0x250 [ 793.219511][ T5142] do_splice_direct+0xf5/0x170 [ 793.220308][ T5142] do_sendfile+0x773/0xda0 [ 793.221583][ T5142] __x64_sys_sendfile64+0xa9/0x130 [ 793.222488][ T5142] do_syscall_64+0x4a/0x90 [ 793.223579][ T5142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.224828][ T5142] RIP: 0033:0x4665d9 [ 793.225598][ T5142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.229993][ T5142] RSP: 002b:00007f204b87e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.231571][ T5142] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 793.233515][ T5142] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 793.235147][ T5142] RBP: 00007f204b87e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.237211][ T5142] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 793.238671][ T5142] R13: 00007ffc8e41cecf R14: 00007f204b87e300 R15: 0000000000022000 [ 793.267251][ T5131] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.269492][ T5131] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 793.291442][ T5131] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.293535][ T5131] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.331136][ T5162] loop1: detected capacity change from 0 to 7 01:54:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:48 executing program 0 (fault-call:7 fault-nth:2): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x10, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 793.395183][ T5131] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.397205][ T5131] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.413138][ T5131] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.415813][ T5131] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.484600][ T5187] loop1: detected capacity change from 0 to 7 01:54:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 793.509638][ T5196] FAULT_INJECTION: forcing a failure. [ 793.509638][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 793.512855][ T5196] CPU: 0 PID: 5196 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 793.514443][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.516007][ T5196] Call Trace: [ 793.516521][ T5196] dump_stack+0x137/0x19d [ 793.517188][ T5196] should_fail+0x23c/0x250 [ 793.518214][ T5196] ? kcalloc+0x32/0x40 [ 793.518995][ T5196] __should_failslab+0x81/0x90 [ 793.519728][ T5196] should_failslab+0x5/0x20 [ 793.520416][ T5196] __kmalloc+0x66/0x340 [ 793.521271][ T5196] ? kmem_cache_alloc_trace+0x215/0x310 [ 793.522349][ T5196] ? alloc_pipe_info+0xac/0x350 [ 793.523376][ T5196] kcalloc+0x32/0x40 [ 793.524013][ T5196] alloc_pipe_info+0x1be/0x350 [ 793.524747][ T5196] splice_direct_to_actor+0x5f7/0x650 [ 793.525669][ T5196] ? do_splice_direct+0x170/0x170 [ 793.526617][ T5196] ? security_file_permission+0x87/0xa0 [ 793.527892][ T5196] ? rw_verify_area+0x136/0x250 [ 793.528847][ T5196] do_splice_direct+0xf5/0x170 [ 793.529927][ T5196] do_sendfile+0x773/0xda0 [ 793.531030][ T5196] __x64_sys_sendfile64+0xa9/0x130 [ 793.531967][ T5196] do_syscall_64+0x4a/0x90 [ 793.532812][ T5196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.534964][ T5196] RIP: 0033:0x4665d9 [ 793.535578][ T5196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.538555][ T5196] RSP: 002b:00007f204b87e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.540791][ T5196] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 793.542491][ T5196] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 793.543814][ T5196] RBP: 00007f204b87e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.545094][ T5196] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 793.546432][ T5196] R13: 00007ffc8e41cecf R14: 00007f204b87e300 R15: 0000000000022000 01:54:48 executing program 0 (fault-call:7 fault-nth:3): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 793.567262][ T5183] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.569343][ T5183] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.574710][ T5183] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.576633][ T5183] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x24, 0x1, 0x0, r0, 0x0, 0x2}]) [ 793.658670][ T5183] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.660609][ T5183] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.680979][ T5183] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.681434][ T5202] FAULT_INJECTION: forcing a failure. [ 793.681434][ T5202] name failslab, interval 1, probability 0, space 0, times 0 [ 793.682997][ T5183] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.685723][ T5202] CPU: 0 PID: 5202 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 793.689372][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.692211][ T5202] Call Trace: [ 793.693569][ T5202] dump_stack+0x137/0x19d [ 793.694741][ T5202] should_fail+0x23c/0x250 [ 793.695930][ T5202] __should_failslab+0x81/0x90 [ 793.697145][ T5202] should_failslab+0x5/0x20 [ 793.698166][ T5202] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 793.700023][ T5202] ? __kmalloc_node+0x30/0x40 [ 793.701007][ T5202] __kmalloc_node+0x30/0x40 [ 793.701844][ T5202] kvmalloc_node+0x81/0xf0 [ 793.703073][ T5202] traverse+0x9c/0x380 [ 793.704217][ T5202] seq_read_iter+0x859/0x910 [ 793.705236][ T5202] kernfs_fop_read_iter+0xd9/0x320 [ 793.706446][ T5202] ? selinux_file_permission+0x22e/0x530 [ 793.707857][ T5202] ? iov_iter_pipe+0xc3/0xf0 [ 793.708709][ T5202] generic_file_splice_read+0x22a/0x310 [ 793.710033][ T5202] ? splice_shrink_spd+0x60/0x60 [ 793.711642][ T5202] splice_direct_to_actor+0x2aa/0x650 [ 793.712719][ T5202] ? do_splice_direct+0x170/0x170 [ 793.713839][ T5202] do_splice_direct+0xf5/0x170 [ 793.714910][ T5202] do_sendfile+0x773/0xda0 [ 793.715844][ T5202] __x64_sys_sendfile64+0xa9/0x130 [ 793.716879][ T5202] do_syscall_64+0x4a/0x90 [ 793.717693][ T5202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.719666][ T5202] RIP: 0033:0x4665d9 [ 793.720421][ T5202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.724875][ T5202] RSP: 002b:00007f204b85d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.727475][ T5202] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x28, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:48 executing program 0 (fault-call:7 fault-nth:4): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 793.730672][ T5202] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 793.732534][ T5202] RBP: 00007f204b85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.733821][ T5202] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 793.736226][ T5202] R13: 00007ffc8e41cecf R14: 00007f204b85d300 R15: 0000000000022000 [ 793.748752][ T5214] loop1: detected capacity change from 0 to 7 [ 793.796302][ T5226] FAULT_INJECTION: forcing a failure. [ 793.796302][ T5226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.800911][ T5226] CPU: 0 PID: 5226 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 793.803122][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.805393][ T5226] Call Trace: [ 793.806598][ T5226] dump_stack+0x137/0x19d [ 793.807978][ T5226] should_fail+0x23c/0x250 [ 793.809027][ T5226] __alloc_pages+0x102/0x320 [ 793.810028][ T5226] alloc_pages+0x21d/0x310 [ 793.811066][ T5226] push_pipe+0x267/0x370 [ 793.812135][ T5226] _copy_to_iter+0x35d/0xdd0 [ 793.813498][ T5226] ? kernfs_seq_stop+0x8e/0xa0 [ 793.814996][ T5226] ? __virt_addr_valid+0x15a/0x1a0 [ 793.816263][ T5226] seq_read_iter+0x1dc/0x910 [ 793.817657][ T5226] kernfs_fop_read_iter+0xd9/0x320 [ 793.818822][ T5226] ? selinux_file_permission+0x22e/0x530 [ 793.820645][ T5226] ? iov_iter_pipe+0xc3/0xf0 [ 793.822094][ T5226] generic_file_splice_read+0x22a/0x310 [ 793.823063][ T5226] ? splice_shrink_spd+0x60/0x60 [ 793.823908][ T5226] splice_direct_to_actor+0x2aa/0x650 [ 793.825031][ T5226] ? do_splice_direct+0x170/0x170 [ 793.826215][ T5226] do_splice_direct+0xf5/0x170 [ 793.827528][ T5226] do_sendfile+0x773/0xda0 [ 793.828341][ T5226] __x64_sys_sendfile64+0xa9/0x130 [ 793.829419][ T5226] do_syscall_64+0x4a/0x90 [ 793.830697][ T5226] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.831954][ T5226] RIP: 0033:0x4665d9 [ 793.832902][ T5226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.838537][ T5226] RSP: 002b:00007f204b87e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.840845][ T5226] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 793.843415][ T5226] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 01:54:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x50, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:48 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 793.845559][ T5226] RBP: 00007f204b87e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.848016][ T5226] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 793.849560][ T5226] R13: 00007ffc8e41cecf R14: 00007f204b87e300 R15: 0000000000022000 [ 793.881748][ T5236] loop1: detected capacity change from 0 to 7 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x58, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:49 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 793.955053][ T5225] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.958750][ T5225] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 793.981035][ T5225] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 793.983311][ T5225] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.047486][ T5256] loop1: detected capacity change from 0 to 7 01:54:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:49 executing program 0 (fault-call:7 fault-nth:5): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) 01:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 794.170940][ T5225] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.174505][ T5225] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.190356][ T5225] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.192851][ T5225] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:49 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x95, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 794.305252][ T5284] loop1: detected capacity change from 0 to 7 [ 794.315372][ T5293] FAULT_INJECTION: forcing a failure. [ 794.315372][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 794.318601][ T5293] CPU: 1 PID: 5293 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 794.320550][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.322375][ T5293] Call Trace: [ 794.323550][ T5293] dump_stack+0x137/0x19d [ 794.324759][ T5293] should_fail+0x23c/0x250 [ 794.325556][ T5293] ? kmalloc_array+0x2d/0x40 [ 794.326551][ T5293] __should_failslab+0x81/0x90 [ 794.328626][ T5293] should_failslab+0x5/0x20 [ 794.329719][ T5293] __kmalloc+0x66/0x340 [ 794.330667][ T5293] ? splice_from_pipe+0xc0/0xc0 [ 794.332006][ T5293] kmalloc_array+0x2d/0x40 [ 794.333553][ T5293] iter_file_splice_write+0xc1/0x750 [ 794.335497][ T5293] ? atime_needs_update+0x2ba/0x390 [ 794.336834][ T5293] ? generic_file_splice_read+0x284/0x310 [ 794.338010][ T5293] ? splice_from_pipe+0xc0/0xc0 [ 794.338956][ T5293] direct_splice_actor+0x80/0xa0 [ 794.340437][ T5293] splice_direct_to_actor+0x345/0x650 [ 794.341277][ T5293] ? do_splice_direct+0x170/0x170 [ 794.342141][ T5293] do_splice_direct+0xf5/0x170 [ 794.343396][ T5293] do_sendfile+0x773/0xda0 [ 794.344744][ T5293] __x64_sys_sendfile64+0xa9/0x130 [ 794.345731][ T5293] do_syscall_64+0x4a/0x90 [ 794.346693][ T5293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.347849][ T5293] RIP: 0033:0x4665d9 [ 794.348641][ T5293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.351950][ T5293] RSP: 002b:00007f204b87e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 794.353545][ T5293] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 01:54:49 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 794.354957][ T5293] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 794.356379][ T5293] RBP: 00007f204b87e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.357880][ T5293] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 794.359311][ T5293] R13: 00007ffc8e41cecf R14: 00007f204b87e300 R15: 0000000000022000 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x1f4, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:49 executing program 0 (fault-call:7 fault-nth:6): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 794.432995][ T5278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.436527][ T5278] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.457075][ T5278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.459994][ T5278] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.480645][ T5316] loop1: detected capacity change from 0 to 7 [ 794.573490][ T5278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.576299][ T5278] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.598367][ T5278] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.600825][ T5278] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.609819][ T5332] FAULT_INJECTION: forcing a failure. [ 794.609819][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 794.613175][ T5332] CPU: 1 PID: 5332 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 794.615614][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.619026][ T5332] Call Trace: [ 794.619584][ T5332] dump_stack+0x137/0x19d [ 794.620363][ T5332] should_fail+0x23c/0x250 [ 794.621645][ T5332] ? kernfs_fop_write_iter+0xf0/0x2d0 01:54:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:49 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x218, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 794.622818][ T5332] __should_failslab+0x81/0x90 [ 794.624147][ T5332] should_failslab+0x5/0x20 [ 794.625664][ T5332] __kmalloc+0x66/0x340 [ 794.627246][ T5332] ? avc_policy_seqno+0x22/0x30 [ 794.628795][ T5332] kernfs_fop_write_iter+0xf0/0x2d0 [ 794.630117][ T5332] do_iter_readv_writev+0x2cb/0x360 [ 794.631714][ T5332] do_iter_write+0x112/0x4c0 [ 794.632702][ T5332] ? kmalloc_array+0x2d/0x40 [ 794.633532][ T5332] vfs_iter_write+0x4c/0x70 [ 794.634279][ T5332] iter_file_splice_write+0x40a/0x750 [ 794.635420][ T5332] ? splice_from_pipe+0xc0/0xc0 [ 794.636574][ T5332] direct_splice_actor+0x80/0xa0 [ 794.637520][ T5332] splice_direct_to_actor+0x345/0x650 [ 794.638459][ T5332] ? do_splice_direct+0x170/0x170 [ 794.639487][ T5332] do_splice_direct+0xf5/0x170 [ 794.640321][ T5332] do_sendfile+0x773/0xda0 [ 794.641188][ T5332] __x64_sys_sendfile64+0xa9/0x130 [ 794.642091][ T5332] do_syscall_64+0x4a/0x90 [ 794.642934][ T5332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.644047][ T5332] RIP: 0033:0x4665d9 [ 794.644765][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.649551][ T5332] RSP: 002b:00007f204b87e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 794.651340][ T5332] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 794.653755][ T5332] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 794.656277][ T5332] RBP: 00007f204b87e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.658953][ T5332] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 794.660965][ T5332] R13: 00007ffc8e41cecf R14: 00007f204b87e300 R15: 0000000000022000 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x241, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:49 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, 0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 794.705756][ T5342] loop1: detected capacity change from 0 to 7 [ 794.765668][ T5335] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.767858][ T5335] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000002a57dcce 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x300, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 794.862736][ T5335] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.866496][ T5335] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 794.892240][ T5335] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 794.894439][ T5335] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:50 executing program 0 (fault-call:7 fault-nth:7): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 794.931556][ T5364] loop1: detected capacity change from 0 to 7 01:54:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, 0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 795.027066][ T5381] PM: suspend entry (deep) 01:54:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 795.049005][ T5381] FAULT_INJECTION: forcing a failure. [ 795.049005][ T5381] name failslab, interval 1, probability 0, space 0, times 0 [ 795.052827][ T5381] CPU: 1 PID: 5381 Comm: syz-executor.0 Not tainted 5.13.0-rc3-syzkaller #0 [ 795.056128][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.059502][ T5381] Call Trace: [ 795.060350][ T5381] dump_stack+0x137/0x19d [ 795.062027][ T5381] should_fail+0x23c/0x250 [ 795.063249][ T5381] __should_failslab+0x81/0x90 [ 795.064190][ T5381] should_failslab+0x5/0x20 [ 795.064984][ T5381] kmem_cache_alloc_node+0x58/0x2b0 [ 795.066093][ T5381] ? create_task_io_context+0x36/0x210 [ 795.068376][ T5381] create_task_io_context+0x36/0x210 [ 795.070168][ T5381] submit_bio_checks+0x778/0x800 [ 795.071531][ T5381] ? ctx_sched_in+0x1db/0x200 [ 795.073215][ T5381] submit_bio_noacct+0x33/0x7e0 [ 795.075126][ T5381] ? __perf_event_task_sched_in+0x471/0x4c0 [ 795.076952][ T5381] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 795.078392][ T5381] submit_bio+0x16d/0x2b0 [ 795.079638][ T5381] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 795.080324][ T5386] loop1: detected capacity change from 0 to 7 [ 795.081282][ T5381] ? flush_workqueue_prep_pwqs+0x294/0x2c0 [ 795.084011][ T5381] submit_bio_wait+0x86/0xc0 [ 795.085038][ T5381] blkdev_issue_flush+0x6c/0x90 [ 795.086734][ T5381] ? submit_bio_wait+0xc0/0xc0 [ 795.087749][ T5381] ext4_sync_fs+0x240/0x310 [ 795.088989][ T5381] ? ext4_put_super+0x8e0/0x8e0 [ 795.089905][ T5381] sync_fs_one_sb+0x94/0xc0 [ 795.091359][ T5381] iterate_supers+0x137/0x1f0 [ 795.093577][ T5381] ? sync_inodes_one_sb+0x50/0x50 [ 795.095659][ T5381] ? state_show+0x120/0x120 [ 795.097442][ T5381] ksys_sync+0x77/0xe0 01:54:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 795.098872][ T5381] ksys_sync_helper+0x13/0xa0 [ 795.100091][ T5381] enter_state+0x153/0x530 [ 795.101853][ T5381] pm_suspend+0x4b/0x130 [ 795.102917][ T5381] state_store+0x1f2/0x210 [ 795.104240][ T5381] kobj_attr_store+0x40/0x60 [ 795.106297][ T5381] ? kobj_attr_show+0x50/0x50 [ 795.108236][ T5381] sysfs_kf_write+0xa6/0xc0 [ 795.109747][ T5381] ? sysfs_kf_read+0x140/0x140 [ 795.112087][ T5381] kernfs_fop_write_iter+0x1d3/0x2d0 [ 795.113643][ T5381] do_iter_readv_writev+0x2cb/0x360 [ 795.114814][ T5381] do_iter_write+0x112/0x4c0 [ 795.116017][ T5381] ? kmalloc_array+0x2d/0x40 [ 795.117638][ T5381] vfs_iter_write+0x4c/0x70 [ 795.119167][ T5381] iter_file_splice_write+0x40a/0x750 [ 795.120527][ T5381] ? splice_from_pipe+0xc0/0xc0 [ 795.122205][ T5381] direct_splice_actor+0x80/0xa0 [ 795.123371][ T5381] splice_direct_to_actor+0x345/0x650 [ 795.125292][ T5381] ? do_splice_direct+0x170/0x170 [ 795.126821][ T5381] do_splice_direct+0xf5/0x170 [ 795.127818][ T5381] do_sendfile+0x773/0xda0 [ 795.128719][ T5381] __x64_sys_sendfile64+0xa9/0x130 [ 795.129836][ T5381] do_syscall_64+0x4a/0x90 [ 795.131809][ T5381] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 795.133996][ T5381] RIP: 0033:0x4665d9 [ 795.134972][ T5381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.140278][ T5381] RSP: 002b:00007f204b87e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 795.142620][ T5381] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 795.144817][ T5381] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 795.146559][ T5381] RBP: 00007f204b87e1d0 R08: 0000000000000000 R09: 0000000000000000 01:54:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, 0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 795.148379][ T5381] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 795.150009][ T5381] R13: 00007ffc8e41cecf R14: 00007f204b87e300 R15: 0000000000022000 [ 795.171905][ T5381] Filesystems sync: 0.143 seconds [ 795.174379][ T5381] Freezing user space processes ... (elapsed 0.007 seconds) done. [ 795.185955][ T5381] OOM killer disabled. [ 795.187943][ T5381] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 795.191806][ T5381] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x3e8, 0x1, 0x0, r0, 0x0, 0x2}]) [ 795.207700][ T9342] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 795.724379][ T5381] ACPI: Preparing to enter system sleep state S3 [ 795.724447][ T5381] PM: Saving platform NVS memory [ 795.724452][ T5381] Disabling non-boot CPUs ... [ 795.727904][ T5381] smpboot: CPU 1 is now offline [ 795.734808][ T5381] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 795.734925][ T5381] ACPI: Low-level resume complete [ 795.735006][ T5381] PM: Restoring platform NVS memory [ 795.735015][ T5381] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 795.747650][ T5381] Enabling non-boot CPUs ... [ 795.747969][ T5381] x86: Booting SMP configuration: [ 795.747973][ T5381] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 795.748174][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 795.749473][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 795.750908][ T5381] CPU1 is up [ 795.751249][ T5381] ACPI: Waking up from system sleep state S3 [ 795.867301][ T5381] OOM killer enabled. [ 795.867923][ T5381] Restarting tasks ... [ 795.880807][ T7182] synth uevent: /devices/virtual/block/loop1: failed to send uevent [ 795.883735][ T7182] block loop1: uevent: failed to send synthetic uevent [ 795.886878][ T5381] done. [ 795.893896][ T5405] __nla_validate_parse: 25 callbacks suppressed [ 795.893909][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:51 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 795.899766][ T5381] PM: suspend exit 01:54:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4b8, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) syz_io_uring_complete(0x0) [ 795.932169][ T5408] loop1: detected capacity change from 0 to 7 [ 796.005474][ T5385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 796.008853][ T5385] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x0000000073f9e27a [ 796.090278][ T5385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 796.093724][ T5385] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 796.115885][ T5385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 796.118301][ T5385] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 796.122956][ T5422] PM: suspend entry (deep) [ 796.131953][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 796.149582][ T5422] Filesystems sync: 0.025 seconds [ 796.150893][ T5422] Freezing user space processes ... [ 796.198711][ T5385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 796.201798][ T5385] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 796.206351][ T5385] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 796.207807][ T5385] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 796.232496][ T5422] (elapsed 0.081 seconds) done. [ 796.233968][ T5422] OOM killer disabled. [ 796.234658][ T5422] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 796.237294][ T5422] printk: Suspending console(s) (use no_console_suspend to debug) 01:54:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xb00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x500, 0x1, 0x0, r0, 0x0, 0x2}]) [ 796.472534][T10364] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 797.024855][ T5422] ACPI: Preparing to enter system sleep state S3 [ 797.025006][ T5422] PM: Saving platform NVS memory [ 797.025010][ T5422] Disabling non-boot CPUs ... [ 797.028754][ T5422] smpboot: CPU 1 is now offline [ 797.031599][ T5422] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 797.031672][ T5422] ACPI: Low-level resume complete [ 797.031752][ T5422] PM: Restoring platform NVS memory [ 797.031824][ T5422] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 797.045235][ T5422] Enabling non-boot CPUs ... [ 797.045378][ T5422] x86: Booting SMP configuration: [ 797.045461][ T5422] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 797.045644][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 797.046667][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 797.047921][ T5422] CPU1 is up [ 797.048386][ T5422] ACPI: Waking up from system sleep state S3 [ 797.169690][ T5422] OOM killer enabled. [ 797.170600][ T5422] Restarting tasks ... [ 797.186079][ T7182] synth uevent: /devices/virtual/block/loop5: failed to send uevent [ 797.189161][ T7182] block loop5: uevent: failed to send synthetic uevent [ 797.190169][ T5422] done. [ 797.191393][ T5422] PM: suspend exit 01:54:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x4, 0x3) syz_io_uring_complete(0x0) 01:54:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 797.228465][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 797.236094][ T5443] loop1: detected capacity change from 0 to 7 [ 797.323851][ T5434] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.325537][ T5434] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xf00, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xd00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 797.359229][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 797.370495][ T5462] loop1: detected capacity change from 0 to 7 [ 797.375034][ T5434] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.376553][ T5434] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 797.434254][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xded, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x1802, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x6, 0x3) syz_io_uring_complete(0x0) [ 797.496069][ T5434] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.498427][ T5434] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 797.504976][ T5434] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.507346][ T5434] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 797.552083][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 797.559756][ T5497] loop1: detected capacity change from 0 to 7 01:54:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 797.600516][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xec0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x2400, 0x1, 0x0, r0, 0x0, 0x2}]) [ 797.676175][ T5487] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.678505][ T5487] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 797.697736][ T5487] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.699281][ T5487] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 797.719998][ T5523] loop1: detected capacity change from 0 to 7 [ 797.722259][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0x3) syz_io_uring_complete(0x0) 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x1100, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 797.801205][ T5487] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.803788][ T5487] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 797.813484][ T5487] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.815330][ T5487] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x1200, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 797.853309][ T5543] loop1: detected capacity change from 0 to 7 [ 797.857971][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4102, 0x1, 0x0, r0, 0x0, 0x2}]) [ 797.960261][ T5539] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.968305][ T5539] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 797.989541][ T5539] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 797.997950][ T5539] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 798.010149][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 798.010294][ T5562] loop1: detected capacity change from 0 to 7 [ 798.103561][ T5539] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 798.112217][ T5539] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 798.134061][ T5539] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 798.142303][ T5539] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:53 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x9, 0x3) syz_io_uring_complete(0x0) 01:54:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x5000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x2500, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 798.579960][ T5585] loop1: detected capacity change from 0 to 7 01:54:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x5800, 0x1, 0x0, r0, 0x0, 0x2}]) [ 798.673985][ T5582] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 798.683111][ T5582] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x2800, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 798.714861][ T5582] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 798.723003][ T5582] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 798.742164][ T5604] loop1: detected capacity change from 0 to 7 01:54:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 798.858161][ T5582] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 798.866611][ T5582] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 798.889496][ T5582] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 798.897811][ T5582] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 798.922827][ T5627] loop1: detected capacity change from 0 to 7 01:54:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0xa, 0x3) syz_io_uring_complete(0x0) 01:54:54 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0xfff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x60ff, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6800, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x9500, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0xf, 0x3) syz_io_uring_complete(0x0) [ 799.456174][ T5649] loop1: detected capacity change from 0 to 7 01:54:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1fd8614df00e2c6512e46d4f6a46792d5e19", 0x12, 0x7}], 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x9700, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6c00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) [ 799.654148][ T5644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 799.663014][ T5644] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000f01a4231 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xb804, 0x1, 0x0, r0, 0x0, 0x2}]) [ 799.757202][ T5644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 799.765681][ T5644] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 799.866977][ T5644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 799.875606][ T5644] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 799.957331][ T5644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 799.965656][ T5644] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000003ac545a6 [ 800.051356][ T5644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.059647][ T5644] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 800.074965][ T5644] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.083106][ T5644] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:55 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x7400, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x10, 0x3) syz_io_uring_complete(0x0) 01:54:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xc4ff, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xe803, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xc00e, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x402, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xf401, 0x1, 0x0, r0, 0x0, 0x2}]) [ 800.498877][ T5709] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.508118][ T5709] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000276de68e [ 800.609097][ T5709] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.617587][ T5709] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 800.641876][ T5709] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.649973][ T5709] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 800.737552][ T5709] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.745881][ T5709] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 800.760690][ T5709] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 800.768818][ T5709] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:56 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x5e, 0x3) syz_io_uring_complete(0x0) 01:54:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:54:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xff00, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xed0d, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xff0f, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 801.228133][ T5769] __nla_validate_parse: 10 callbacks suppressed [ 801.228148][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:54:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x400300, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xffc4, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 801.359063][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 801.432858][ T5759] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.441915][ T5759] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000005d525001 [ 801.541134][ T5759] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.550628][ T5759] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.571837][ T5759] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.580069][ T5759] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.596611][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 801.702047][ T5759] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.710789][ T5759] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.725535][ T5759] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.734780][ T5759] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.834048][ T5820] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.843206][ T5820] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.858268][ T5820] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.867698][ T5820] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.936630][ T5820] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.945154][ T5820] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 801.959809][ T5820] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 801.968575][ T5820] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x64, 0x3) syz_io_uring_complete(0x0) 01:54:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:57 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:54:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x50000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}], [{@fowner_eq}]}) 01:54:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 802.083906][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.188255][ T5828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.197497][ T5828] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 802.217111][ T5828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.225403][ T5828] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x104000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x105400, 0x1, 0x0, r0, 0x0, 0x2}]) [ 802.230244][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}], [{@fowner_eq}]}) [ 802.324555][ T5828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.333044][ T5828] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000002a57dcce [ 802.421884][ T5828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.430143][ T5828] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 802.454780][ T5828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 01:54:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7ffffffffffff, 0x3) syz_io_uring_complete(0x0) 01:54:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xbe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 802.463186][ T5828] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 802.486905][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.621277][ T5882] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.630184][ T5882] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 802.646264][ T5882] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.654597][ T5882] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 802.723381][ T5882] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.732314][ T5882] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 802.747373][ T5882] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 802.755696][ T5882] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:58 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0xffffffffffffffff, 0x3) syz_io_uring_complete(0x0) 01:54:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}], [{@fowner_eq}]}) 01:54:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x400000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 802.951179][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:54:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x401000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}], [{@fowner_eq}]}) [ 803.033782][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.098928][ T5895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 803.107329][ T5895] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 803.138183][ T5895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 803.146489][ T5895] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 803.167820][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.178765][ T5925] ================================================================== [ 803.187015][ T5925] BUG: KCSAN: data-race in __io_cqring_fill_event / io_req_defer [ 803.195732][ T5925] [ 803.198045][ T5925] write to 0xffff88813e414c80 of 4 bytes by task 5928 on cpu 1: [ 803.205863][ T5925] __io_cqring_fill_event+0xfd/0x350 [ 803.211175][ T5925] io_req_complete_post+0x58/0x540 [ 803.216607][ T5925] __io_complete_rw+0x3b5/0x470 [ 803.221473][ T5925] io_complete_rw+0x1b/0x20 [ 803.228927][ T5925] kiocb_done+0x1b0/0x420 [ 803.233257][ T5925] io_issue_sqe+0x36c5/0x6750 [ 803.237945][ T5925] io_wq_submit_work+0x113/0x270 [ 803.243072][ T5925] io_worker_handle_work+0x8cb/0xaf0 [ 803.248678][ T5925] io_wqe_worker+0x1c5/0x550 [ 803.253537][ T5925] ret_from_fork+0x1f/0x30 [ 803.258048][ T5925] [ 803.260368][ T5925] read to 0xffff88813e414c80 of 4 bytes by task 5925 on cpu 0: [ 803.267913][ T5925] io_req_defer+0x358/0x4a0 [ 803.272433][ T5925] io_submit_sqe+0x154d/0x3360 [ 803.277203][ T5925] io_submit_sqes+0x5bd/0xbd0 [ 803.281877][ T5925] __se_sys_io_uring_enter+0x1e1/0xa80 [ 803.287532][ T5925] __x64_sys_io_uring_enter+0x74/0x80 [ 803.293518][ T5925] do_syscall_64+0x4a/0x90 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x7000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4af000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 803.297946][ T5925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.303860][ T5925] [ 803.306199][ T5925] value changed: 0x00000000 -> 0x00000001 [ 803.312099][ T5925] [ 803.314520][ T5925] Reported by Kernel Concurrency Sanitizer on: [ 803.320677][ T5925] CPU: 0 PID: 5925 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 803.329457][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.339703][ T5925] ================================================================== [ 803.425366][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.469229][ T5895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 803.477553][ T5895] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000003ac545a6 [ 803.583224][ T5895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 803.592123][ T5895] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 803.608317][ T5895] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 803.616632][ T5895] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:58 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x2) syz_io_uring_complete(0x0) 01:54:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}], [{@fowner_eq}]}) 01:54:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4fd000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x15180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x9000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xa000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x541000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[], [{@fowner_eq}]}) [ 803.980284][ T5953] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 803.988460][ T5953] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xb000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x970000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 804.022736][ T5953] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 804.031250][ T5953] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 804.131669][ T5953] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 804.140321][ T5953] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x00000000eb8592d3 [ 804.243944][ T5953] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 804.252718][ T5953] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 804.273210][ T5953] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 804.281554][ T5953] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:54:59 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:54:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) syz_io_uring_complete(0x0) 01:54:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xc000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:54:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:54:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xc04a01, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xd000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:54:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xd04f00, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 804.806377][ T6011] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 804.814498][ T6011] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 804.843597][ T6011] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 01:54:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xf04a00, 0x1, 0x0, r0, 0x0, 0x2}]) 01:54:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xe000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 804.851785][ T6011] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}], [{@fowner_eq}]}) 01:55:00 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x5) syz_io_uring_complete(0x0) 01:55:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)={[{'\x93;d\xbcF\xc8\x18\xefu)\xc1\xab\x8br \x1c\f\xe9\xd3v\x84B\xbe&vu\x1bM\xb8\xe6\b\x1a\x8b\x17\xde`\xe5\xfa\xbc\xc6\x15-\x95\xa8\x19\xe0}\x1f<8\v\xc9\xc7\xdb\a&\x9b\xc7[\xb1\xec\xe5\xed\b\xdf\"~\xbd\xc4J\xa5\x9d\xc1'}, {'\x00'}, {'\x00'}, {'{\\*{,[::+%'}, {'\x00'}], [{@fowner_eq}]}) 01:55:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x1000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x14ac000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x11000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:00 executing program 1 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 805.712176][ T6072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 805.720533][ T6072] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x0000000091b536ab [ 805.809225][ T6072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 805.817924][ T6072] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x12000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 805.852607][ T6072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 805.860908][ T6072] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 805.877781][ T6105] FAULT_INJECTION: forcing a failure. [ 805.877781][ T6105] name failslab, interval 1, probability 0, space 0, times 0 [ 805.891544][ T6105] CPU: 0 PID: 6105 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 01:55:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x20000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 805.901975][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.912601][ T6105] Call Trace: [ 805.915997][ T6105] dump_stack+0x137/0x19d [ 805.920335][ T6105] should_fail+0x23c/0x250 [ 805.924767][ T6105] ? __se_sys_memfd_create+0xfb/0x390 [ 805.930236][ T6105] __should_failslab+0x81/0x90 [ 805.935028][ T6105] should_failslab+0x5/0x20 [ 805.939685][ T6105] __kmalloc+0x66/0x340 [ 805.944136][ T6105] ? strnlen_user+0x137/0x1c0 01:55:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x25000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 805.949323][ T6105] __se_sys_memfd_create+0xfb/0x390 [ 805.954746][ T6105] __x64_sys_memfd_create+0x2d/0x40 [ 805.960167][ T6105] do_syscall_64+0x4a/0x90 [ 805.964725][ T6105] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.971084][ T6105] RIP: 0033:0x4665d9 [ 805.975305][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.995678][ T6105] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 806.004390][ T6105] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 806.012466][ T6105] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 806.020462][ T6105] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff [ 806.028463][ T6105] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 [ 806.037655][ T6105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 [ 806.130180][ T6072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 806.138471][ T6072] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 806.154550][ T6072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 806.162828][ T6072] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:01 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x28000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:01 executing program 1 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x2000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x6) syz_io_uring_complete(0x0) 01:55:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x48000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 806.509052][ T6140] __nla_validate_parse: 12 callbacks suppressed [ 806.509067][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 806.534087][ T6143] FAULT_INJECTION: forcing a failure. [ 806.534087][ T6143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.548297][ T6143] CPU: 0 PID: 6143 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 806.557211][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.568150][ T6143] Call Trace: [ 806.571450][ T6143] dump_stack+0x137/0x19d [ 806.575787][ T6143] should_fail+0x23c/0x250 [ 806.580278][ T6143] should_fail_usercopy+0x16/0x20 [ 806.585310][ T6143] _copy_from_user+0x1c/0xd0 [ 806.590066][ T6143] __se_sys_memfd_create+0x137/0x390 [ 806.595364][ T6143] __x64_sys_memfd_create+0x2d/0x40 [ 806.600619][ T6143] do_syscall_64+0x4a/0x90 [ 806.605200][ T6143] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.611307][ T6143] RIP: 0033:0x4665d9 [ 806.615371][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 806.635125][ T6143] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 806.643666][ T6143] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 806.651795][ T6143] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 01:55:01 executing program 1 (fault-call:5 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x4c000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x3000000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 806.660051][ T6143] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff [ 806.668163][ T6143] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 [ 806.676139][ T6143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 [ 806.695538][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 806.780007][ T6131] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 806.788137][ T6131] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 806.813198][ T6131] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 806.821401][ T6131] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 806.824483][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 806.861985][ T6161] FAULT_INJECTION: forcing a failure. [ 806.861985][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 806.875057][ T6161] CPU: 0 PID: 6161 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 806.883973][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.894299][ T6161] Call Trace: [ 806.897588][ T6161] dump_stack+0x137/0x19d [ 806.902508][ T6161] should_fail+0x23c/0x250 [ 806.907255][ T6161] ? shmem_alloc_inode+0x22/0x30 [ 806.912391][ T6161] __should_failslab+0x81/0x90 [ 806.917387][ T6161] ? shmem_match+0xa0/0xa0 [ 806.921931][ T6161] should_failslab+0x5/0x20 [ 806.926617][ T6161] kmem_cache_alloc+0x46/0x2f0 [ 806.931674][ T6161] ? do_anonymous_page+0x411/0x8b0 [ 806.936801][ T6161] ? fsnotify_perm+0x59/0x2e0 [ 806.941484][ T6161] ? shmem_match+0xa0/0xa0 [ 806.945930][ T6161] shmem_alloc_inode+0x22/0x30 [ 806.950749][ T6161] new_inode_pseudo+0x38/0x1c0 [ 806.955613][ T6161] new_inode+0x21/0x120 [ 806.959994][ T6161] shmem_get_inode+0xa1/0x480 [ 806.964842][ T6161] __shmem_file_setup+0xf1/0x1d0 [ 806.969801][ T6161] shmem_file_setup+0x37/0x40 [ 806.974512][ T6161] __se_sys_memfd_create+0x1eb/0x390 [ 806.979980][ T6161] __x64_sys_memfd_create+0x2d/0x40 [ 806.985324][ T6161] do_syscall_64+0x4a/0x90 [ 806.989800][ T6161] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.995720][ T6161] RIP: 0033:0x4665d9 [ 806.999616][ T6161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.019546][ T6161] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 01:55:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x68000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:02 executing program 1 (fault-call:5 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 807.027984][ T6161] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 807.036232][ T6161] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 807.044219][ T6161] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff [ 807.052435][ T6161] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 [ 807.060793][ T6161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 [ 807.127478][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.178667][ T6135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 807.186971][ T6135] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 807.206190][ T6135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 807.214476][ T6135] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 807.238810][ T6181] FAULT_INJECTION: forcing a failure. [ 807.238810][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 807.252436][ T6181] CPU: 1 PID: 6181 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 807.262124][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.272714][ T6181] Call Trace: [ 807.276032][ T6181] dump_stack+0x137/0x19d [ 807.280991][ T6181] should_fail+0x23c/0x250 [ 807.285467][ T6181] ? security_inode_alloc+0x30/0x180 [ 807.291021][ T6181] __should_failslab+0x81/0x90 [ 807.295784][ T6181] should_failslab+0x5/0x20 [ 807.300279][ T6181] kmem_cache_alloc+0x46/0x2f0 [ 807.305581][ T6181] security_inode_alloc+0x30/0x180 [ 807.310800][ T6181] inode_init_always+0x20b/0x420 [ 807.315958][ T6181] ? shmem_match+0xa0/0xa0 [ 807.320493][ T6181] new_inode_pseudo+0x73/0x1c0 [ 807.325541][ T6181] new_inode+0x21/0x120 [ 807.329702][ T6181] shmem_get_inode+0xa1/0x480 [ 807.334438][ T6181] __shmem_file_setup+0xf1/0x1d0 [ 807.339412][ T6181] shmem_file_setup+0x37/0x40 [ 807.344166][ T6181] __se_sys_memfd_create+0x1eb/0x390 [ 807.349527][ T6181] __x64_sys_memfd_create+0x2d/0x40 [ 807.354738][ T6181] do_syscall_64+0x4a/0x90 [ 807.359176][ T6181] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.365136][ T6181] RIP: 0033:0x4665d9 [ 807.369273][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:55:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x4000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6c000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x7) syz_io_uring_complete(0x0) 01:55:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 807.388893][ T6181] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 807.397314][ T6181] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 807.405311][ T6181] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 807.413290][ T6181] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff [ 807.421357][ T6181] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 [ 807.429339][ T6181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 01:55:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x74000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x8000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:02 executing program 1 (fault-call:5 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 807.472787][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.544126][ T6194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 807.552243][ T6194] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 807.575259][ T6194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 807.583413][ T6194] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 807.623426][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.638887][ T6212] FAULT_INJECTION: forcing a failure. [ 807.638887][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 807.652233][ T6212] CPU: 0 PID: 6212 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 807.661140][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.671283][ T6212] Call Trace: [ 807.674587][ T6212] dump_stack+0x137/0x19d [ 807.678951][ T6212] should_fail+0x23c/0x250 [ 807.683484][ T6212] ? __d_alloc+0x36/0x370 [ 807.688970][ T6212] __should_failslab+0x81/0x90 [ 807.693776][ T6212] should_failslab+0x5/0x20 [ 807.698479][ T6212] kmem_cache_alloc+0x46/0x2f0 [ 807.703316][ T6212] ? __init_rwsem+0x59/0x70 [ 807.708112][ T6212] __d_alloc+0x36/0x370 [ 807.712375][ T6212] ? current_time+0xdb/0x190 [ 807.717019][ T6212] d_alloc_pseudo+0x1a/0x50 [ 807.721785][ T6212] alloc_file_pseudo+0x63/0x130 [ 807.726791][ T6212] __shmem_file_setup+0x14c/0x1d0 [ 807.732318][ T6212] shmem_file_setup+0x37/0x40 [ 807.737352][ T6212] __se_sys_memfd_create+0x1eb/0x390 [ 807.742773][ T6212] __x64_sys_memfd_create+0x2d/0x40 [ 807.748172][ T6212] do_syscall_64+0x4a/0x90 [ 807.752631][ T6212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.758743][ T6212] RIP: 0033:0x4665d9 [ 807.762650][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.782452][ T6212] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 807.791146][ T6212] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 807.799127][ T6212] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 807.807120][ T6212] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff [ 807.815339][ T6212] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 01:55:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x7a000000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0xf000000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 807.823320][ T6212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 [ 807.837490][ T6194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 807.845657][ T6194] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:02 executing program 1 (fault-call:5 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x8) syz_io_uring_complete(0x0) [ 807.882899][ T6194] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 807.891196][ T6194] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 807.916579][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.957238][ T6228] FAULT_INJECTION: forcing a failure. [ 807.957238][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 807.970309][ T6228] CPU: 0 PID: 6228 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 807.979159][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.989221][ T6228] Call Trace: [ 807.992607][ T6228] dump_stack+0x137/0x19d [ 807.997036][ T6228] should_fail+0x23c/0x250 [ 808.001471][ T6228] ? __alloc_file+0x2e/0x1a0 [ 808.006369][ T6228] __should_failslab+0x81/0x90 [ 808.011320][ T6228] should_failslab+0x5/0x20 [ 808.015881][ T6228] kmem_cache_alloc+0x46/0x2f0 [ 808.020799][ T6228] ? inode_doinit_with_dentry+0x382/0x950 [ 808.026542][ T6228] __alloc_file+0x2e/0x1a0 [ 808.031168][ T6228] alloc_empty_file+0xcd/0x1c0 [ 808.036043][ T6228] alloc_file+0x3a/0x280 [ 808.040307][ T6228] alloc_file_pseudo+0xe2/0x130 [ 808.045165][ T6228] __shmem_file_setup+0x14c/0x1d0 [ 808.050208][ T6228] shmem_file_setup+0x37/0x40 [ 808.054913][ T6228] __se_sys_memfd_create+0x1eb/0x390 [ 808.060204][ T6228] __x64_sys_memfd_create+0x2d/0x40 [ 808.065453][ T6228] do_syscall_64+0x4a/0x90 [ 808.070389][ T6228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.076334][ T6228] RIP: 0033:0x4665d9 [ 808.080230][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.100208][ T6228] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 808.108725][ T6228] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 808.116744][ T6228] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 808.124771][ T6228] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff [ 808.133524][ T6228] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 [ 808.141932][ T6228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 01:55:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x9effffff, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x9) syz_io_uring_complete(0x0) 01:55:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x10000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:03 executing program 1 (fault-call:5 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 808.337653][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 808.356153][ T6250] FAULT_INJECTION: forcing a failure. [ 808.356153][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 808.369473][ T6250] CPU: 0 PID: 6250 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 808.378801][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.389197][ T6250] Call Trace: [ 808.392494][ T6250] dump_stack+0x137/0x19d [ 808.396964][ T6250] should_fail+0x23c/0x250 [ 808.401541][ T6250] ? security_file_alloc+0x30/0x190 [ 808.406771][ T6250] __should_failslab+0x81/0x90 [ 808.411574][ T6250] should_failslab+0x5/0x20 [ 808.416244][ T6250] kmem_cache_alloc+0x46/0x2f0 [ 808.421216][ T6250] ? __alloc_file+0x2e/0x1a0 [ 808.425815][ T6250] security_file_alloc+0x30/0x190 [ 808.430905][ T6250] __alloc_file+0x83/0x1a0 [ 808.435349][ T6250] alloc_empty_file+0xcd/0x1c0 [ 808.440130][ T6250] alloc_file+0x3a/0x280 [ 808.444372][ T6250] alloc_file_pseudo+0xe2/0x130 [ 808.449230][ T6250] __shmem_file_setup+0x14c/0x1d0 [ 808.454262][ T6250] shmem_file_setup+0x37/0x40 [ 808.459027][ T6250] __se_sys_memfd_create+0x1eb/0x390 [ 808.464315][ T6250] __x64_sys_memfd_create+0x2d/0x40 [ 808.469636][ T6250] do_syscall_64+0x4a/0x90 [ 808.474253][ T6250] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.480155][ T6250] RIP: 0033:0x4665d9 [ 808.484048][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.504126][ T6250] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 808.512851][ T6250] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000004665d9 [ 808.521125][ T6250] RDX: 00007f462bdc3000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 808.529099][ T6250] RBP: 0000000000000000 R08: 00007f462bdc2ff8 R09: ffffffffffffffff 01:55:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xc00e0000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:03 executing program 1 (fault-call:5 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 808.537329][ T6250] R10: 00007f462bdc2ffc R11: 0000000000000246 R12: 0000000020000000 [ 808.545482][ T6250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000020000340 01:55:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x18020000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 808.626644][ T6242] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 808.635022][ T6242] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 808.659718][ T6242] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 808.667942][ T6242] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 808.684749][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 808.690635][ T6267] FAULT_INJECTION: forcing a failure. [ 808.690635][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 808.706801][ T6267] CPU: 1 PID: 6267 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 808.715559][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 01:55:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xeaffffff, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 808.725625][ T6267] Call Trace: [ 808.728908][ T6267] dump_stack+0x137/0x19d [ 808.733250][ T6267] should_fail+0x23c/0x250 [ 808.737680][ T6267] ? getname_flags+0x84/0x3d0 [ 808.742471][ T6267] __should_failslab+0x81/0x90 [ 808.747249][ T6267] should_failslab+0x5/0x20 [ 808.751392][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 808.751762][ T6267] kmem_cache_alloc+0x46/0x2f0 [ 808.765994][ T6267] ? notify_change+0xa59/0xa80 [ 808.770794][ T6267] getname_flags+0x84/0x3d0 01:55:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xed0d0000, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 808.775307][ T6267] ? fput+0x2d/0x130 [ 808.779212][ T6267] getname+0x15/0x20 [ 808.783201][ T6267] do_sys_openat2+0x5b/0x250 [ 808.788092][ T6267] __x64_sys_openat+0xef/0x110 [ 808.793327][ T6267] do_syscall_64+0x4a/0x90 [ 808.798361][ T6267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.804285][ T6267] RIP: 0033:0x4196c4 01:55:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xefffffff, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 808.808332][ T6267] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 808.828869][ T6267] RSP: 002b:00007f462bdc2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 808.838164][ T6267] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 808.846283][ T6267] RDX: 0000000000000002 RSI: 00007f462bdc3000 RDI: 00000000ffffff9c [ 808.854453][ T6267] RBP: 00007f462bdc3000 R08: 0000000000000000 R09: ffffffffffffffff [ 808.862575][ T6267] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 808.870944][ T6267] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 01:55:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:04 executing program 1 (fault-call:5 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 808.971386][ T6242] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 808.979882][ T6242] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 808.996259][ T6242] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 809.004555][ T6242] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 809.050745][ T6298] FAULT_INJECTION: forcing a failure. [ 809.050745][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.063970][ T6298] CPU: 1 PID: 6298 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 809.072763][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.083001][ T6298] Call Trace: [ 809.086279][ T6298] dump_stack+0x137/0x19d [ 809.090614][ T6298] should_fail+0x23c/0x250 [ 809.095130][ T6298] should_fail_usercopy+0x16/0x20 [ 809.100155][ T6298] strncpy_from_user+0x21/0x250 [ 809.105082][ T6298] getname_flags+0xb8/0x3d0 [ 809.109598][ T6298] getname+0x15/0x20 [ 809.113667][ T6298] do_sys_openat2+0x5b/0x250 [ 809.118492][ T6298] __x64_sys_openat+0xef/0x110 [ 809.123591][ T6298] do_syscall_64+0x4a/0x90 [ 809.128096][ T6298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.134112][ T6298] RIP: 0033:0x4196c4 [ 809.138022][ T6298] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 809.158164][ T6298] RSP: 002b:00007f462bdc2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 809.166591][ T6298] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 809.174571][ T6298] RDX: 0000000000000002 RSI: 00007f462bdc3000 RDI: 00000000ffffff9c [ 809.182756][ T6298] RBP: 00007f462bdc3000 R08: 0000000000000000 R09: ffffffffffffffff [ 809.190923][ T6298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 01:55:04 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xf0ffffff, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x20000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0xa) syz_io_uring_complete(0x0) 01:55:04 executing program 1 (fault-call:5 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 809.198997][ T6298] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 [ 809.229159][ T6295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 809.237522][ T6295] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 809.268222][ T6295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 809.276385][ T6295] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 809.301311][ T6312] FAULT_INJECTION: forcing a failure. [ 809.301311][ T6312] name failslab, interval 1, probability 0, space 0, times 0 01:55:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xfeffffff, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 809.314281][ T6312] CPU: 1 PID: 6312 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 809.323069][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.333338][ T6312] Call Trace: [ 809.336678][ T6312] dump_stack+0x137/0x19d [ 809.341067][ T6312] should_fail+0x23c/0x250 [ 809.345583][ T6312] ? __alloc_file+0x2e/0x1a0 [ 809.350226][ T6312] __should_failslab+0x81/0x90 [ 809.355037][ T6312] should_failslab+0x5/0x20 [ 809.359631][ T6312] kmem_cache_alloc+0x46/0x2f0 [ 809.364650][ T6312] __alloc_file+0x2e/0x1a0 [ 809.369177][ T6312] alloc_empty_file+0xcd/0x1c0 [ 809.374149][ T6312] path_openat+0x6a/0x20b0 [ 809.378664][ T6312] ? avc_has_perm_noaudit+0x19a/0x240 [ 809.384081][ T6312] ? avc_has_perm+0x59/0x150 [ 809.388680][ T6312] ? avc_has_perm+0xc8/0x150 [ 809.393495][ T6312] ? fsnotify+0x1167/0x1190 [ 809.398011][ T6312] do_filp_open+0xd9/0x1f0 [ 809.402561][ T6312] ? __virt_addr_valid+0x15a/0x1a0 [ 809.407682][ T6312] ? __check_object_size+0x253/0x310 [ 809.413323][ T6312] ? _find_next_bit+0x16a/0x190 [ 809.418531][ T6312] ? alloc_fd+0x388/0x3e0 [ 809.423035][ T6312] do_sys_openat2+0xa3/0x250 [ 809.427697][ T6312] __x64_sys_openat+0xef/0x110 [ 809.432571][ T6312] do_syscall_64+0x4a/0x90 [ 809.437014][ T6312] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.443164][ T6312] RIP: 0033:0x4196c4 [ 809.447109][ T6312] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 809.467351][ T6312] RSP: 002b:00007f462bdc2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 809.475850][ T6312] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 809.483910][ T6312] RDX: 0000000000000002 RSI: 00007f462bdc3000 RDI: 00000000ffffff9c [ 809.491868][ T6312] RBP: 00007f462bdc3000 R08: 0000000000000000 R09: ffffffffffffffff [ 809.499927][ T6312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 809.507887][ T6312] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 01:55:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffff9e, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:04 executing program 1 (fault-call:5 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x24000000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 809.603565][ T6295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 809.612237][ T6295] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 809.643290][ T6295] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 809.651540][ T6295] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 809.675813][ T6337] FAULT_INJECTION: forcing a failure. [ 809.675813][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 809.689056][ T6337] CPU: 1 PID: 6337 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 809.697874][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.708092][ T6337] Call Trace: [ 809.711492][ T6337] dump_stack+0x137/0x19d [ 809.715880][ T6337] should_fail+0x23c/0x250 [ 809.720297][ T6337] ? security_file_alloc+0x30/0x190 [ 809.725703][ T6337] __should_failslab+0x81/0x90 [ 809.730501][ T6337] should_failslab+0x5/0x20 [ 809.735009][ T6337] kmem_cache_alloc+0x46/0x2f0 [ 809.739803][ T6337] ? __alloc_file+0x2e/0x1a0 [ 809.744433][ T6337] security_file_alloc+0x30/0x190 [ 809.749678][ T6337] __alloc_file+0x83/0x1a0 [ 809.758534][ T6337] alloc_empty_file+0xcd/0x1c0 [ 809.763410][ T6337] path_openat+0x6a/0x20b0 [ 809.767858][ T6337] ? avc_has_perm_noaudit+0x19a/0x240 [ 809.773279][ T6337] ? default_send_IPI_single+0x42/0x50 [ 809.778748][ T6337] ? avc_has_perm+0x59/0x150 [ 809.783596][ T6337] ? avc_has_perm+0xc8/0x150 [ 809.788387][ T6337] ? fsnotify+0x1167/0x1190 [ 809.793040][ T6337] do_filp_open+0xd9/0x1f0 [ 809.797513][ T6337] ? __virt_addr_valid+0x15a/0x1a0 [ 809.802637][ T6337] ? __check_object_size+0x253/0x310 [ 809.808026][ T6337] ? _find_next_bit+0x16a/0x190 [ 809.813086][ T6337] ? alloc_fd+0x388/0x3e0 [ 809.817891][ T6337] do_sys_openat2+0xa3/0x250 [ 809.822793][ T6337] __x64_sys_openat+0xef/0x110 [ 809.828111][ T6337] do_syscall_64+0x4a/0x90 [ 809.832658][ T6337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.838833][ T6337] RIP: 0033:0x4196c4 [ 809.842736][ T6337] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 809.862726][ T6337] RSP: 002b:00007f462bdc2ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 809.871253][ T6337] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 809.879246][ T6337] RDX: 0000000000000002 RSI: 00007f462bdc3000 RDI: 00000000ffffff9c [ 809.887353][ T6337] RBP: 00007f462bdc3000 R08: 0000000000000000 R09: ffffffffffffffff [ 809.895451][ T6337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 01:55:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffffea, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 809.903904][ T6337] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 [ 810.031132][ T6346] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.039781][ T6346] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 810.055869][ T6346] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.064054][ T6346] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:05 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:05 executing program 1 (fault-call:5 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffffef, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0xb) syz_io_uring_complete(0x0) 01:55:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x41020000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 810.134179][ T6346] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.142591][ T6346] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 810.182520][ T6346] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.188525][ T6364] FAULT_INJECTION: forcing a failure. [ 810.188525][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 810.190580][ T6346] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 810.203287][ T6364] CPU: 1 PID: 6364 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xfffffff0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 810.223384][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.234696][ T6364] Call Trace: [ 810.238016][ T6364] dump_stack+0x137/0x19d [ 810.242426][ T6364] should_fail+0x23c/0x250 [ 810.246999][ T6364] ? loop_set_status_from_info+0x3a0/0x3a0 [ 810.252858][ T6364] __should_failslab+0x81/0x90 [ 810.257640][ T6364] ? __kthread_create_on_node+0x7a/0x290 [ 810.263324][ T6364] should_failslab+0x5/0x20 [ 810.267838][ T6364] kmem_cache_alloc_trace+0x49/0x310 [ 810.273151][ T6364] ? loop_set_status_from_info+0x3a0/0x3a0 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffe, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 810.279239][ T6364] __kthread_create_on_node+0x7a/0x290 [ 810.284727][ T6364] ? __blkdev_get+0xc1/0x6d0 [ 810.289590][ T6364] ? loop_set_status_from_info+0x3a0/0x3a0 [ 810.295475][ T6364] kthread_create_on_node+0x72/0xa0 [ 810.300689][ T6364] loop_configure+0x597/0xcb0 [ 810.305398][ T6364] ? mntput+0x45/0x70 [ 810.309433][ T6364] lo_ioctl+0x555/0x11f0 [ 810.313683][ T6364] ? path_openat+0x19ab/0x20b0 [ 810.318453][ T6364] ? putname+0xa5/0xc0 [ 810.322540][ T6364] ? ___cache_free+0x3c/0x300 [ 810.327420][ T6364] ? blkdev_common_ioctl+0x9c3/0x1040 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="10000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 810.333177][ T6364] ? selinux_file_ioctl+0x8e0/0x970 [ 810.338410][ T6364] ? lo_release+0x120/0x120 [ 810.343152][ T6364] blkdev_ioctl+0x1d0/0x3c0 [ 810.347679][ T6364] block_ioctl+0x6d/0x80 [ 810.351992][ T6364] ? blkdev_iopoll+0x70/0x70 [ 810.356588][ T6364] __se_sys_ioctl+0xcb/0x140 [ 810.361734][ T6364] __x64_sys_ioctl+0x3f/0x50 [ 810.366424][ T6364] do_syscall_64+0x4a/0x90 [ 810.371052][ T6364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 810.377013][ T6364] RIP: 0033:0x466397 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="26000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="4c000000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 810.380941][ T6364] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 810.400684][ T6364] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.409312][ T6364] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 810.417483][ T6364] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 810.425679][ T6364] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff 01:55:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 810.433779][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 810.441813][ T6364] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 01:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="c00e0000260007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 810.592238][ T6400] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.600551][ T6400] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 810.616892][ T6400] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.624924][ T6400] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 810.695542][ T6400] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.704001][ T6400] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 810.718111][ T6400] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 810.726217][ T6400] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:06 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:06 executing program 1 (fault-call:5 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x50000000, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0xc) syz_io_uring_complete(0x0) 01:55:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000100007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x57b5e67b, 0x1, 0x0, r0, 0x0, 0x2}]) 01:55:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:06 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) [ 811.081564][ T6426] FAULT_INJECTION: forcing a failure. [ 811.081564][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 811.094924][ T6426] CPU: 1 PID: 6426 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 811.104053][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.114954][ T6426] Call Trace: [ 811.118247][ T6426] dump_stack+0x137/0x19d [ 811.123078][ T6426] should_fail+0x23c/0x250 [ 811.127791][ T6426] ? __kernfs_new_node+0x6a/0x330 [ 811.132976][ T6426] __should_failslab+0x81/0x90 [ 811.137807][ T6426] should_failslab+0x5/0x20 [ 811.142645][ T6426] kmem_cache_alloc+0x46/0x2f0 [ 811.147430][ T6426] ? kvm_sched_clock_read+0xd/0x20 [ 811.152585][ T6426] __kernfs_new_node+0x6a/0x330 [ 811.157553][ T6426] ? select_task_rq_fair+0x186/0xc00 [ 811.162881][ T6426] ? rb_insert_color+0x2fa/0x310 [ 811.167838][ T6426] kernfs_create_dir_ns+0x5e/0x140 [ 811.173204][ T6426] internal_create_group+0x138/0x850 [ 811.178589][ T6426] ? check_preempt_wakeup+0x22f/0x360 [ 811.184269][ T6426] sysfs_create_group+0x1b/0x20 [ 811.189590][ T6426] loop_configure+0xa21/0xcb0 [ 811.194548][ T6426] lo_ioctl+0x555/0x11f0 [ 811.199105][ T6426] ? path_openat+0x19ab/0x20b0 [ 811.203992][ T6426] ? putname+0xa5/0xc0 [ 811.208068][ T6426] ? ___cache_free+0x3c/0x300 [ 811.212778][ T6426] ? blkdev_common_ioctl+0x9c3/0x1040 [ 811.218353][ T6426] ? selinux_file_ioctl+0x8e0/0x970 [ 811.223625][ T6426] ? lo_release+0x120/0x120 [ 811.228246][ T6426] blkdev_ioctl+0x1d0/0x3c0 [ 811.232844][ T6426] block_ioctl+0x6d/0x80 [ 811.237243][ T6426] ? blkdev_iopoll+0x70/0x70 [ 811.242111][ T6426] __se_sys_ioctl+0xcb/0x140 [ 811.246713][ T6426] __x64_sys_ioctl+0x3f/0x50 [ 811.251312][ T6426] do_syscall_64+0x4a/0x90 [ 811.255869][ T6426] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 811.262361][ T6426] RIP: 0033:0x466397 [ 811.266268][ T6426] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 811.286431][ T6426] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.294857][ T6426] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 811.303159][ T6426] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 811.312106][ T6426] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff [ 811.320153][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 811.328320][ T6426] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 01:55:06 executing program 1 (fault-call:5 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000120007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 811.474670][ T6446] FAULT_INJECTION: forcing a failure. [ 811.474670][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 811.487819][ T6446] CPU: 1 PID: 6446 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 811.496657][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.506821][ T6446] Call Trace: [ 811.510134][ T6446] dump_stack+0x137/0x19d [ 811.514524][ T6446] should_fail+0x23c/0x250 [ 811.519155][ T6446] ? radix_tree_node_alloc+0x154/0x1f0 [ 811.524799][ T6446] __should_failslab+0x81/0x90 [ 811.530460][ T6446] should_failslab+0x5/0x20 [ 811.534997][ T6446] kmem_cache_alloc+0x46/0x2f0 [ 811.539881][ T6446] ? ctx_sched_in+0x1db/0x200 [ 811.544623][ T6446] radix_tree_node_alloc+0x154/0x1f0 [ 811.549989][ T6446] idr_get_free+0x22a/0x5d0 [ 811.554598][ T6446] idr_alloc_cyclic+0xe3/0x2d0 [ 811.559710][ T6446] ? __radix_tree_preload+0x16f/0x190 [ 811.565108][ T6446] __kernfs_new_node+0xb4/0x330 [ 811.570058][ T6446] ? select_task_rq_fair+0x186/0xc00 [ 811.577301][ T6446] ? rb_insert_color+0x7e/0x310 [ 811.582194][ T6446] kernfs_create_dir_ns+0x5e/0x140 [ 811.587363][ T6446] internal_create_group+0x138/0x850 [ 811.592736][ T6446] ? check_preempt_wakeup+0x1bb/0x360 [ 811.598291][ T6446] sysfs_create_group+0x1b/0x20 [ 811.603254][ T6446] loop_configure+0xa21/0xcb0 [ 811.608386][ T6446] lo_ioctl+0x555/0x11f0 [ 811.612644][ T6446] ? enqueue_entity+0x47b/0x650 [ 811.617560][ T6446] ? io_wq_enqueue+0x3a/0x40 [ 811.622283][ T6446] ? io_queue_async_work+0x18d/0x230 [ 811.627586][ T6446] ? blkdev_common_ioctl+0x9c3/0x1040 [ 811.633084][ T6446] ? selinux_file_ioctl+0x8e0/0x970 [ 811.638402][ T6446] ? lo_release+0x120/0x120 [ 811.642918][ T6446] blkdev_ioctl+0x1d0/0x3c0 [ 811.648230][ T6446] block_ioctl+0x6d/0x80 [ 811.652483][ T6446] ? blkdev_iopoll+0x70/0x70 [ 811.657081][ T6446] __se_sys_ioctl+0xcb/0x140 [ 811.661776][ T6446] __x64_sys_ioctl+0x3f/0x50 [ 811.666482][ T6446] do_syscall_64+0x4a/0x90 [ 811.670907][ T6446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 811.676813][ T6446] RIP: 0033:0x466397 [ 811.680715][ T6446] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 811.700341][ T6446] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.708983][ T6446] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 811.716977][ T6446] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 01:55:06 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x58000000, 0x1, 0x0, r0, 0x0, 0x2}]) [ 811.724968][ T6446] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff [ 811.732966][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 811.740962][ T6446] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 [ 811.764404][ T6417] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 01:55:06 executing program 1 (fault-call:5 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) [ 811.772700][ T6417] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x0000000076112261 [ 811.854768][ T6417] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 811.863102][ T6417] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 811.889250][ T6417] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 811.897704][ T6417] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 811.920495][ T6464] __nla_validate_parse: 13 callbacks suppressed [ 811.920510][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 811.937126][ T6467] FAULT_INJECTION: forcing a failure. [ 811.937126][ T6467] name failslab, interval 1, probability 0, space 0, times 0 01:55:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000130007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 811.949954][ T6467] CPU: 0 PID: 6467 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 811.958767][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.968981][ T6467] Call Trace: [ 811.972288][ T6467] dump_stack+0x137/0x19d [ 811.976814][ T6467] should_fail+0x23c/0x250 [ 811.981242][ T6467] ? __kernfs_new_node+0x6a/0x330 [ 811.986273][ T6467] __should_failslab+0x81/0x90 [ 811.991277][ T6467] should_failslab+0x5/0x20 [ 811.996055][ T6467] kmem_cache_alloc+0x46/0x2f0 [ 812.000833][ T6467] ? __cond_resched+0x11/0x40 [ 812.005769][ T6467] __kernfs_new_node+0x6a/0x330 [ 812.010644][ T6467] ? idr_alloc_cyclic+0x249/0x2d0 [ 812.015765][ T6467] ? rb_insert_color+0x7e/0x310 [ 812.020637][ T6467] kernfs_new_node+0x5b/0xd0 [ 812.025234][ T6467] __kernfs_create_file+0x45/0x1a0 [ 812.030581][ T6467] sysfs_add_file_mode_ns+0x1c1/0x250 [ 812.035981][ T6467] internal_create_group+0x2e4/0x850 [ 812.041312][ T6467] sysfs_create_group+0x1b/0x20 [ 812.046179][ T6467] loop_configure+0xa21/0xcb0 [ 812.050973][ T6467] lo_ioctl+0x555/0x11f0 [ 812.055217][ T6467] ? path_openat+0x19ab/0x20b0 [ 812.059980][ T6467] ? putname+0xa5/0xc0 [ 812.064066][ T6467] ? ___cache_free+0x3c/0x300 [ 812.068764][ T6467] ? blkdev_common_ioctl+0x9c3/0x1040 [ 812.074248][ T6467] ? selinux_file_ioctl+0x8e0/0x970 [ 812.079457][ T6467] ? lo_release+0x120/0x120 [ 812.084326][ T6467] blkdev_ioctl+0x1d0/0x3c0 [ 812.088917][ T6467] block_ioctl+0x6d/0x80 [ 812.093164][ T6467] ? blkdev_iopoll+0x70/0x70 [ 812.097766][ T6467] __se_sys_ioctl+0xcb/0x140 [ 812.102711][ T6467] __x64_sys_ioctl+0x3f/0x50 [ 812.107312][ T6467] do_syscall_64+0x4a/0x90 [ 812.111757][ T6467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 812.117676][ T6467] RIP: 0033:0x466397 [ 812.121769][ T6467] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.141923][ T6467] RSP: 002b:00007f462bdc2f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.150369][ T6467] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 812.158356][ T6467] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 812.166466][ T6467] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff [ 812.174629][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 812.182982][ T6467] R13: 0000000000000006 R14: 0000000020000140 R15: 0000000000000000 [ 812.228147][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:55:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001080)={{}, 0x0, 0x0, @unused=[0x2, 0x8, 0x8a0b, 0x9], @subvolid=0xea40}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0xd) syz_io_uring_complete(0x0) 01:55:07 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2463, &(0x7f00000003c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0) 01:55:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:55:07 executing program 1 (fault-call:5 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4af3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)) 01:55:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000140007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) 01:55:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x1802, 0x0, 0x5b5892de, 0x1, 0x0, r0, 0x0, 0x2}]) [ 812.305433][ T6425] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 812.313847][ T6425] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e [ 812.332704][ T6425] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 812.340947][ T6425] ref_ctr decrement failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x4 of mm: 0x000000006231251e 01:55:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="24000000150007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001c00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x4c}], 0x1}, 0x0) [ 812.388831][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 812.410688][ T6495] FAULT_INJECTION: forcing a failure. [ 812.410688][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 812.423551][ T6495] CPU: 0 PID: 6495 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 [ 812.432256][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.443010][ T6495] Call Trace: [ 812.446294][ T6495] dump_stack+0x137/0x19d [ 812.450631][ T6495] should_fail+0x23c/0x250 [ 812.455238][ T6495] ? __kernfs_new_node+0x6a/0x330 [ 812.460278][ T6495] __should_failslab+0x81/0x90 [ 812.465055][ T6495] should_failslab+0x5/0x20 [ 812.469726][ T6495] kmem_cache_alloc+0x46/0x2f0 [ 812.475187][ T6495] __kernfs_new_node+0x6a/0x330 [ 812.480192][ T6495] ? __mutex_lock_slowpath+0xa/0x10 [ 812.485465][ T6495] ? mutex_lock+0x23/0x30 [ 812.490086][ T6495] kernfs_new_node+0x5b/0xd0 [ 812.494779][ T6495] __kernfs_create_file+0x45/0x1a0 [ 812.500194][ T6495] sysfs_add_file_mode_ns+0x1c1/0x250 [ 812.505852][ T6495] internal_create_group+0x2e4/0x850 [ 812.511285][ T6495] sysfs_create_group+0x1b/0x20 [ 812.516249][ T6495] loop_configure+0xa21/0xcb0 [ 812.520944][ T6495]