0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:02 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x8000000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x1ee}, 0x0) 19:06:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x300}, 0x0) [ 111.445332][ T7679] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 111.453726][ T7679] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 111.488687][ T7681] FAULT_INJECTION: forcing a failure. [ 111.488687][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 111.501586][ T7681] CPU: 1 PID: 7681 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 111.510314][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.520447][ T7681] Call Trace: [ 111.523728][ T7681] dump_stack_lvl+0xb7/0x103 [ 111.528429][ T7681] dump_stack+0x11/0x1a [ 111.532857][ T7681] should_fail+0x23c/0x250 [ 111.538345][ T7681] __should_failslab+0x81/0x90 [ 111.543234][ T7681] ? register_for_each_vma+0x372/0x890 [ 111.548686][ T7681] should_failslab+0x5/0x20 [ 111.553224][ T7681] kmem_cache_alloc_trace+0x49/0x310 [ 111.558775][ T7681] ? register_for_each_vma+0x372/0x890 [ 111.564765][ T7681] ? vma_interval_tree_iter_next+0x24c/0x280 [ 111.571042][ T7681] register_for_each_vma+0x372/0x890 [ 111.576331][ T7681] uprobe_apply+0x8b/0x260 [ 111.580821][ T7681] ? __uprobe_trace_func+0x430/0x430 [ 111.586179][ T7681] trace_uprobe_register+0x2b6/0x410 [ 111.591527][ T7681] perf_trace_event_init+0xf8/0x790 [ 111.596719][ T7681] perf_uprobe_init+0xf5/0x140 [ 111.601474][ T7681] perf_uprobe_event_init+0xde/0x140 [ 111.606838][ T7681] perf_try_init_event+0x21a/0x400 [ 111.611990][ T7681] perf_event_alloc+0xa60/0x1790 [ 111.616988][ T7681] __se_sys_perf_event_open+0x5c7/0x2740 [ 111.622696][ T7681] ? vfs_write+0x50c/0x770 [ 111.627197][ T7681] __x64_sys_perf_event_open+0x63/0x70 [ 111.632742][ T7681] do_syscall_64+0x3d/0x90 [ 111.637429][ T7681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 111.643454][ T7681] RIP: 0033:0x4665e9 [ 111.647340][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 111.667325][ T7681] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 111.675729][ T7681] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 111.683803][ T7681] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 111.691869][ T7681] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 111.699917][ T7681] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 111.707879][ T7681] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 111.717063][ T7681] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 111.725577][ T7681] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 111.747566][ T7692] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 111.756051][ T7692] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:03 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x10000000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xec0}, 0x0) 19:06:03 executing program 3 (fault-call:1 fault-nth:53): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xf00}, 0x0) [ 111.895359][ T7713] FAULT_INJECTION: forcing a failure. [ 111.895359][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 111.908105][ T7713] CPU: 0 PID: 7713 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 111.916883][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.927422][ T7713] Call Trace: [ 111.930782][ T7713] dump_stack_lvl+0xb7/0x103 [ 111.935743][ T7713] dump_stack+0x11/0x1a [ 111.940081][ T7713] should_fail+0x23c/0x250 [ 111.944625][ T7713] __should_failslab+0x81/0x90 [ 111.949429][ T7713] ? register_for_each_vma+0x372/0x890 [ 111.954892][ T7713] should_failslab+0x5/0x20 [ 111.959414][ T7713] kmem_cache_alloc_trace+0x49/0x310 [ 111.965310][ T7713] ? register_for_each_vma+0x372/0x890 [ 111.970800][ T7713] ? vma_interval_tree_iter_next+0x24c/0x280 [ 111.976956][ T7713] register_for_each_vma+0x372/0x890 [ 111.982232][ T7713] uprobe_apply+0x8b/0x260 [ 111.986636][ T7713] ? __uprobe_trace_func+0x430/0x430 [ 111.992160][ T7713] trace_uprobe_register+0x2b6/0x410 [ 111.997544][ T7713] perf_trace_event_init+0xf8/0x790 [ 112.002759][ T7713] perf_uprobe_init+0xf5/0x140 [ 112.008519][ T7713] perf_uprobe_event_init+0xde/0x140 [ 112.013849][ T7713] perf_try_init_event+0x21a/0x400 [ 112.019203][ T7713] perf_event_alloc+0xa60/0x1790 [ 112.024194][ T7713] __se_sys_perf_event_open+0x5c7/0x2740 [ 112.029871][ T7713] ? vfs_write+0x50c/0x770 [ 112.034323][ T7713] __x64_sys_perf_event_open+0x63/0x70 [ 112.039781][ T7713] do_syscall_64+0x3d/0x90 [ 112.044419][ T7713] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.050321][ T7713] RIP: 0033:0x4665e9 [ 112.054220][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.074192][ T7713] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 112.082805][ T7713] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 112.090779][ T7713] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 112.099396][ T7713] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 112.107449][ T7713] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 112.115628][ T7713] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 112.141740][ T7713] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 112.150481][ T7713] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 112.168769][ T7715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 112.177192][ T7715] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 112.188967][ T7730] netlink: 1236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.217452][ T7724] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 112.226041][ T7724] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:03 executing program 3 (fault-call:1 fault-nth:54): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:03 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x1d655000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x9500}, 0x0) 19:06:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:03 executing program 0: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) r1 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setregs(0xf, r2, 0x0, &(0x7f00000001c0)="2080fbc470555f8472c9fdf8e43f18725e7a42f38cec31bed50cbdb904176958543f36156af9b6cd78205e8f9af5eaca1127536d3732f9a6a336c7470cde695ea8b02f49bac860") tkill(r1, 0x34) r3 = io_uring_setup(0x26ce, &(0x7f0000000040)={0x0, 0xbe19, 0x8, 0x1, 0xc7}) fcntl$setown(r3, 0x8, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xd, 0x8, 0x5, 0x2, 0x0, 0x7, 0x8890, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x204, 0x6, 0x0, 0x5, 0x3, 0x3, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, r1, 0x0, r4, 0x12) 19:06:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xc000}, 0x0) [ 112.314677][ T7745] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 112.323121][ T7745] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 112.365970][ T7747] FAULT_INJECTION: forcing a failure. [ 112.365970][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 112.378758][ T7747] CPU: 1 PID: 7747 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 112.387526][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.397587][ T7747] Call Trace: [ 112.400872][ T7747] dump_stack_lvl+0xb7/0x103 [ 112.405463][ T7747] dump_stack+0x11/0x1a [ 112.409624][ T7747] should_fail+0x23c/0x250 [ 112.414053][ T7747] __should_failslab+0x81/0x90 [ 112.419002][ T7747] ? register_for_each_vma+0x372/0x890 [ 112.424514][ T7747] should_failslab+0x5/0x20 [ 112.429005][ T7747] kmem_cache_alloc_trace+0x49/0x310 [ 112.434374][ T7747] ? register_for_each_vma+0x372/0x890 [ 112.439862][ T7747] ? vma_interval_tree_iter_next+0x263/0x280 [ 112.445934][ T7747] register_for_each_vma+0x372/0x890 [ 112.451422][ T7747] uprobe_apply+0x8b/0x260 [ 112.455980][ T7747] ? __uprobe_trace_func+0x430/0x430 [ 112.461302][ T7747] trace_uprobe_register+0x2b6/0x410 [ 112.466611][ T7747] perf_trace_event_init+0xf8/0x790 [ 112.471849][ T7747] perf_uprobe_init+0xf5/0x140 [ 112.476890][ T7747] perf_uprobe_event_init+0xde/0x140 [ 112.482188][ T7747] perf_try_init_event+0x21a/0x400 [ 112.487300][ T7747] perf_event_alloc+0xa60/0x1790 [ 112.492240][ T7747] __se_sys_perf_event_open+0x5c7/0x2740 [ 112.497890][ T7747] ? vfs_write+0x50c/0x770 [ 112.502610][ T7747] __x64_sys_perf_event_open+0x63/0x70 [ 112.508057][ T7747] do_syscall_64+0x3d/0x90 [ 112.512520][ T7747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.518475][ T7747] RIP: 0033:0x4665e9 [ 112.522368][ T7747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.541979][ T7747] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 112.550605][ T7747] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 112.558598][ T7747] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 112.566587][ T7747] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 112.574561][ T7747] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 112.582736][ T7747] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 112.599062][ T7747] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 112.607434][ T7747] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 112.620365][ T7762] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 112.628854][ T7762] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:04 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x20ffa000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xc00e}, 0x0) 19:06:04 executing program 3 (fault-call:1 fault-nth:55): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:userio_device_t:s0\x00', 0x25) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2={0xff, 0x5}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f00000038c0)=ANY=[@ANYBLOB="8c4b764c00000000010200f6c2040000000261ea00000000000001000080960029589770b989aeec1198f6e27378a87b18f88e34ed22569e57df0eed16fe323b5206223d752057c641b512ade4211a771f74f46dbc4642650c58c046e2cb8623d1278e0e7a9a77a52d8014592a2ea16119f75db8cae56e744210b92d1040c2494b303ea342b77d79258a62735f7b4028af12a4256b8d687c0c5ab4369c24f892f9181e9f7c9e514fe0cf2a7807fefd038581cdbb1ccede8c23bcbc66f778b54ef677c22f8b0fc9b065e083612490c480f2d297eb1967f74f5a657508efbdddaf0a819d050aed7a3cf7350b3ba2d0250f524f197f4b1b"], 0x20) getpeername$packet(r8, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000023c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@mcast1, @mcast2, @local, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa2c303e2, r9}) sendmmsg$inet(r1, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="49bf28a45fe1f55d939002c8e9643f33c1b65a765820f7e64c49b9a162a4a2899c6b50f31e39171789dc604d51beb730cdeb09", 0x33}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="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", 0xfe}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x88}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000400)="b5d8aa9563bee151eb0204b4706b33dc5ca35eb6c2662fdee6cde80c5372d7c6a777564f5fc4a4c595ccf1bc82f3b5884d277233b94c0d940c3e848eb9376a0dc5b611ebf9c9a4e60c9f9a13b3f9a9b73ab6906bd427555627a73d4bacf2adf90e06b799d0f522cfa70ec2c1564d1f4295553c03835ce7801a6c8316bef6cef578d73d33a0172ff856e3bf66a067dad8424ffa19f289e46fe0d097071a022f", 0x9f}, {&(0x7f00000004c0)="35f22eabe7ed52ff3c62c8c43846b586ab4236e9981eaa3d240c120c6f65b73e72239d6ddf2ac226436fc87c7f3f888246c75a", 0x33}, {&(0x7f0000000500)="86ba905e42e5d48b87c5b9c2dda569ba46d1d5ccdbc91bb3ed9768a9bcb1e4707fe1eb5711c95ea1e133ca5034bfce4648b1caf7823c4b45d3768e050bbcdfd937384bbd55d30fd665f80eafaae19f47f56fa94959a4318ff774636057be6a8dc9ed1e5bec", 0x65}, {&(0x7f0000000580)="ee032513b9ffb547d55a11cc778556818b6d8cd8ed95bf46c7d045ff0f58b348040f5a6bde47a0f4217d8e8d8eb8462a8359d13ea5983104516413834a", 0x3d}, {&(0x7f0000000600)="35dde7dd143cd2b90e3f0c17996294f17c9f8e150589b509817207d81682d6fc28193ca0fba7cade2b4f9dad1424d46328f51fd2d9844519e6465ff2b3de7b5980d1c3ffc505a112be28e7e5e5513fcd411b51f80ff5b8aaa093d06c29cf02da33c29b2ac5e28fd767753dff18b9ff5659a53f8e2db9aca5b3a40a3a0b138e3530723b44ce601023d62b6b5a21d1e513f2", 0x91}], 0x5}}, {{&(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000780)="ab454bf0ebe08cf3a6562d110310ac8a1b5f677770aca1d9b48fe63455154e58169385ff0ae9d3", 0x27}, {&(0x7f00000007c0)="63b37d250cec36af3965759b4fa32005060cb25d", 0x14}], 0x2, &(0x7f00000008c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xa5, 0x0, 0xa, [0x80000000, 0x1, 0x1f, 0x7, 0x5, 0x20]}, @generic={0x82, 0x4, '\vL'}, @timestamp={0x44, 0x1c, 0xca, 0x0, 0xc, [0x20000, 0x7, 0x1, 0x5be, 0x8001, 0x2]}, @rr={0x7, 0x1f, 0x3b, [@private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @multicast2}}}], 0xc8}}, {{&(0x7f00000009c0)={0x2, 0x4e31, @private=0xa010101}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="ed9b6ba1b619c2d8c9ba70c19668224282d416437b9f4c1596b9b80b1d8fa974a6dc7628bfab385234df6599b01d12e6ea1613c6a016498cc770cabcd6bb863bbe2a47d713c0d13ae24fb9362233739643d975b981b01a3fa8b79fa61cf5a0a25c99924842595d292706fb07f334224ff5ccc614c6c49c401a3b2bb22a060a303911afe37cf5c77104c4b06eaa65834efe63cce2542c626b9340ee6ea2f7404d1016947d6d6f", 0xa6}], 0x1, &(0x7f0000000b00)=[@ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x94, 0x3, 0xa, [{@empty, 0x5}, {@private=0xa010101, 0x8}, {@loopback, 0x70}]}, @end, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x3, [0xe5, 0x1, 0x2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbf}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="aed7667a3ed1d575773a9af785b316eeb38cc7307135052b0e938a4d2939aab913db6bc9c9da3f7fa96ba7c645f15559dc4cb516676ba65579c50d79d97650debb3c0a35a341f318a35d662edd820a25ec6a72d4efd6ca376f4759091e27f3a0db6aeb012afe74650bcb77b17a0a7d570b75e0b4ff943aafbeac286643746471864a7e41c816e789e0892ac4633ce777a97a0255cdb5e7eb688ccf8c5c8a0339a39dfae1004554562544614e92f284c55635b5daaf43062027b5ba79a736209cf1ba", 0xc2}], 0x1, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000000000000002000000fdffffff00000000110000000000000000000000010000007f0000000000000014000000000000000000000001000000020000000000000088000000000000000000000007000000443457d3ffffff030000fffcffffffff00001f6c640101007fffffffe0000001ffffffe1ac1414aa00000001e00000080000000094040000070fd5e0000001ffffffffffffffff070721ac1e00acba0c885ee27a230100000006ffffffff00000002ffffffff000000010000000994040000000000000000"], 0xd0}}, {{&(0x7f00000011c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002800)="200b06d67dea02a66b21cdc1cd5d73d12de3a06d09866f3f9448eba32b0f9f28881fb9bc266fbf7752f418d99f65f49575a21b5c25d300a90883ac3af6946fbd1b529bf64d775ef4c9d21dbbb75e30769825e25609a42b91d62ce6335ee47f3e507df7286f235ed004421ef3e2d3f8be4169180fa06a5d125ce5619098970efed0ea2f8e9fcf3f2fae8c326cc19a7de6baf06b155b3fc382b1640cefd25400e02d69babe3d3304f1187e2de3201e750dfd0432a5c0aaf936a93bcaa7dca6d938a54d28eba80df42e49554cb8eb53e42af16653c3a34597cb8e6fd703154813224b1cae733af16dbf9f084124669113c3c149711057f3d331a99474a8ad5280e778fd0e0875470eddc76b3ee8216efab6576dc11d3ee991571f312e479b44ae518c69edd5104b7a88e2f2ae1a80ae1ac415f2918eabfc39f6e69a4e21f8c7589471e08d1d87244865b5d3fb5eb40011c6c991324ff5e1b20eb376fa84fe2bc3a2fde3a4241e1f8bb5725f57ab969acbf6e7ca804cf5250a4a389011aa506dd63262df64fa10e6beb437a046af228a1cd454059f093ee2d660566447ab13f8ba1ad7749d8c0ce17c6cf1683b91d31754fba073533511b08619c78c8c6b39275d79d52be38aa7c55ba662f57f74722c604ee8879d7d4d39998ed149272682b4f08c64c1d8a2d5a640ddbb563a3e85d81da4e6af5acb882093eddede80f1c5da16a069989a8c4cd57b0c2521019d9cd54aa658b416addee06865ec94081669255c0c3c6542887617252a1ffb16dcb2fbe2f39985650e6d5a73482f0ed38d1655bbd76ff4d8505cb1973ae0411e66f7252c7936af8bfaece54248fcd7af7703117b32d1cf68af3af7871d2f8137c8e272fdf0859d50aeab8e5e20fd5d0283bb35c35315a186a6bcb49c5d3e516ab10f44024cd47e3b89cd108fc638e4db3d4392473726effbec819cd79f32741ffe09436e5340bacba63137725299d89c9a755255a479989cc3586f808a5be57f6e3e32e69fe2ed3b84f504d8b78bc385170c812a303918163c4c8d69481a03b5e9c0009baa7cd0d733e19829f141c7450c9386b84a0ea16d97fe8c11ab6c0bc2a0103ae713a59c3d5b37450c2548f0c9dd44760eeff480a0bebad30fb2ba394cf3694d504d739029e6cd0de2b399f6ff2b25c51e2d1048f8a0ffda1a13517133391e29187c20e00530442fe340cf54eaccb9780da57644b70041fbc209b43bc0d1e5fdc7d39f92eca699cc4fa74e5ec9d30c90c38a5a737361f925164113ac788331d5fad846a72f32a3f6ab83f78c72627967d8742c629bc3ad157644993342903d555810c9583ff0ce33ab8b152cf81e2acce56c36e4dee9c6bcece4b2f084333441493d6ff9e491e862bab91b6d8fcfdc1564487e46e74b6ab3b81058d273a8a128557e35d821541f23eebfad62aec9e17b1b721f1a5ce3145e051a5a7d591924e78258be61d67e4785a6d937f876fbc86db3bc3f8827e42192ec6f1ac7643b0aa4c5f77791feedf85461e0fce25fcfa85ad9b40f4b32fe8d0dea9e09d4358503426904dc6b1380c093c7f8f1d162f81334ca8214bb6d5105bf3c0962d0f187a2031e66598df296e1aa60af9ebc5229f7410a0338e21a62bdbef66ea3653a7bcfee835d0fc081e0bb6d6e464fe6398ed8edac69cd1ff78ce33a318bc416f26a88a6e00e23b75d88a8ef5e731c49ab45a1b9872adf31087ae85651da0c4df4da9027bd6b0a8692897725dcea42b5733f68f8945fdef6a0a14685c0f80a861f9e13de6139c6b9d0b55bfa7af1f4340fb73be8607b6e31c5a3f1f6c22033cc61b80c50ce5b2ceac08d1b87b09ef3f717cf6b7a8bfbf05a242eeec70f02beb767b52eae0c96aa7a0c1ce9f94a7732a0de71bd34d4fe0f8dcd4a7b619d7ce3b1cb1fd043045684e77f1497b6ff2c654fe1c80cbb8c77a64a02120dd13e3304b3727232fa48701e5216a49712e584f92cae35feb1f213e7f94bad69f05c1be8eab0bc77478f7d9462c8e870a0729064a2906041ed1c94a5076081bad680bfb7821f57b8f16acd4ad24f3cbcc77b00dfafe3abe2964b5753dbb89e836bf912afdd1b9143688d27bcccd7a14637fda039d521016a54b118df7de78caf8e66f096ba38a51563d0da060e284397f108b7847de89906eb528d9c617d7dcbd23e142437c44d936f70aa4a1bd1cf0c93f929d4ad2293d69c82d84d2ceb8b85f2bd04400bd3864a086b628f772a4c10b5b7fbf5d5ec0d91a8802b704e8643cb93f68add91c577d0a209a34aa649809912b30ad731e2ec6d69214ade927bad9aebb52370e19cd05aa9bf6805af8e134bd97cc94a97b3aa762c7baf3ae0e6b787f8453638378381ff4c5e68b9dac3a869a4e5e74401cad059fd47ba581650fc9fc8c66056f65b3f7c649a2793a2aaf2f9ffb988201582cf72911a7b338c83747f88b72355fcf9d0ded1d13786af01fca5e446719949e31a97cf010713d24d6cc60ad72f95603da6a1057451f0f0eeb2c0d8605da3f91dd4b6d6d0491092c1cd9dfafe9b0c7dc87ccdce77e7713fe7fa7645f9ea266d29455b5ecf7d660794bdd95add280aea28778e2642077cb3425ec78bd3944bac27f3ae1702b79344a41496f19576329351a18bb18fed9a212ccdbd44ad4721714b93fed75a5d8469f98e223b9dd4d3e3308a55173f4a88fe6947e20e316fe61b233bc351c08ed47f3b8a04a5feaab711a7b5692d9330dde9ed7d61010562203281fab49f2bcf25edaec2b8f7723063a69e46b40bc9678a9c1ba7818648dbf70cf687a5cb4562334e2f22984302cc95f253b6d325048dae2ed4f392d19f5cba67e17ec90a7f073537a215e49f30f3db8aa5ff03827fbe7e5a62cb0128d3c09f36d2cd0b4395d492de0c8358c838e2187a7add8c39f6280102fc8e1770493b57d3f9c85c7db123ca078a3e4e51fd986d91673cf4387a60c0cf95bc7aa5327e6e42e8c8b064474471d1645b3d44736043d91217896850a8ccf7147f1ba419d80d249b0925089a29f38674ba691fc22b12f3b05fb7359ca76a17622362cf5d30ab706509d78102cbcf7abb6e88ede1b8b9ef8786cb3b7c0d9e8936367fd9920c3c6092d225b7b4d6fb71df785af3c67c32c23b25455ae8ab6838a1b899e9d95f9eccc7e8254686770276523e176251dc4e94dd503164344a11c2627afc150c4c63499dcae24ed53f6d94e55bebd807d8933ee8e0ca277238e1f9e00cbac98775f5a55bfffc4b3cd7d4cf570294c88829b6fa754e31a56b29763cd10683115159f79b49ec6fa6b429b484767b17cf949e3750a3d79a2db437d3cc04302394c397e151acff0bf6408d330e3c5bc652d4c7dface989ce24b53834608325339ea2175a61adc8ed5ab1693a8dc4b27a1a402556d6a169d79def0b68da80ebff6309e8993c380bbe87b302afffd53b7d3ff8681bd3e7f42f1a887f7e12d983f95c822c64e1e2359dcdf20f51439ecc281450c59f8d011d84b5a54ef8283e9cbd083be7ee7d553afc9fb86d1462c6c3f437bead43cf571c0065910e756bbe344c49d238f771cfa1a2f1f309c94d4c6720fac0c45e0bff07f7767eb3285b11475cf13a270a15399c80f5f6982690bc98032cfaea1b94ec0f0ac6b2c773ef76d888dca38035ac821a1a76079e78a65f6a4985dde74c4b521c12733462578877094db62b4f0618ce6de21935ea6f75e1e8cf54889e218750b0818ab4bee896d93d839a1274feb179f4cc64f9471740e3dbee6c81bb91d43f3a01e482b363371cdb23c35597f94f9ffde689c1ba13f219cf3dfdfc767a00782d4438e874d244bb4fe1afbe66aa039c9859775efa50e36e16c86dbcc60676f86c9eee76be0666c3b97142ed5ee93b9627261ede98d46de2a8bb7f334dda9edd0d7099472284778528935167691ea9d82e9e0230608831d946222e018c287ff79bdc1fff91930084cb41b207fc24f1de25bfab4c7a2408d36c3b236e6dea463a7ef769a15fd0c8485682dd8c98b7e27d1256903db53dc62e8e3bdab8f21412fcb37f4fc11961db205c7f56d24131e915346ae7b3a2f73de463e1548fbf8deff99895555216e34f819bb256c97d447d864dfbbe62898e3f986e050cc3c86f73ffab99378d7084e94666ed40c57857dac1aee1b50d3638d9b334abb7628ce79c27392b9bc0948618223c630095ddc827ff842384c51c820e9f82a1b6779d13938c6abd0eaf925ad309a1b56a841627b33ee6c64f4fb04ccb193dd3b16843348aa46ec5162947735558e20bc568cd8a13a99b95239bf6215ab303688bb9823c069e08492782af7362b4d3a2a45b656d0ab49568ce2e50d531cdace09177a68a260f62db64fa45a262a59074760b5ceb3f80371dafd6b5c1968c3d8d408bcf670eff7d77e79eb221fbfa7bd70d13b063e4b39fa572588b66ad424157401b314d30f10dabe99bdbfd098441551c7c99d4c68c798e8ced79a69fe885c8ad40e411318c9013ae85d6780418214aa98cf974f18e1a22a1d60516e45390eccb2712c4a9f6d422151865bfb0e200ebd60668a5b6090953618530096801f291ec9fb66518d7810ed743adb35c4b231cb42b754f8c8858cfb656c7d33daef70e362615eb67ee40ca4803b2e869a63c0129496193d3888bf786d03d398c2495e0073be2cd0240eed37e976e3bdda995b326f26485d99ef77fa721d292e1797c405e6a61db66765283df8d35b799ea3fefcdef61e2204e3580bafcceb2850a6110a7c4e5fac94df0d065d15b2d47bf208ef4aaa978403d9d80a84827e3fa421caad89a3b2f5b7f90bea404eb8bea7983f45e3c3f222b56b0b9f764bfe3d175c064c38a67df0f4583e32febbd42eff56b635445f8c78f43e3205063c39ca79353fb039ba10c71a50e69e3ba38e13740d3e7be0c58fcdade61bcd5b710a2a414c4557a9594589e4f9e5ea677697f8b04b3485a69e334eb66d23f7160d1ed4bca5130e07c9ae94e3821905c26dab01aa49c37d4ae7df0ac15cff6d87f3b8c9b9d52f463b531fdba0cb426b81a57555cc9889675e50409cd866373999b1a7cda604b4b2ac405f712445c052e3a7ba59b832ee7c47592151a4c3da2d38fda01d0d6bef1571123eb878f134baa0170230a67162678754ef9a464e3146c5bf3b5e04a27ab4877e6af164886c40257bc8998cee5c0063e0745e4f1e85fedf5da1c599759146c05c666328d3114b33c06228861e936702076a760476233bae5ad53ce2c83abee24ad06c60cbbcbbf0385bf97236b610eb4ff85c0114a80c16e20e52379981302f05a89ede7894b57b1b41927e569e1d2136a5ae418dd2a4c1f1e096810cc61893f7b15c07c7a81c547d9d6056c15fabdd9f18c78695ac367623dbf04ab90675fe67326e78037e40e3d3fec6f9c8828fbcc5be707c45f15ace824c0564f5a74352c4b1ce14f953bb6474e77c8fe7cff77a01392806a13125cf60eb9549391640dda60f9035b1686a6857844a80dd8e73ab8a4f7741386991ce73bfc48a0471e615a425139923861abda96d15f75fe4e9eacfdc04e0ec72ee6d4e99d02140f442b671a6dbc3675c7ed23ac730798862703cde7e7b4670eec1182ef8c2ce97291fa551a3ff45117c8041512f412efbb7756989ced43638c6313e6e77f02b3cd44fb49e35a0550cfef85adfa0b5ea66df650421385df9da080af1694868fe74a2d6c39f27a9f68fc0d1609620dffd37421a681060a59a49dcbe589e4816a596818955ee5633186d23e7d9f4375ffd7924f74b7e24d05483c0d9c1ee0e30033f102f90e63a46d72935d2b9f3b9c704bfec2b59de091d2d0ec28dfbfa7e4fe5dad21fdc3d6ac4265075a0a18106821d5a4d9cba0cc05b87020f5fad5fae242cc30a4778242b6ea4b2f7219b5c0b0efeaf5446b8c41a7aae30e5b8e3cd75353206dd60f43aa53d7c7ef139681fd08a28a710e22e87988b81fa334b212a3f96588", 0x1083}, {&(0x7f0000002200)="f937a623058c1667afc40a97b4de19603783b48e069c883499421a2e5d7c118a62cba1fb", 0x24}], 0x2, &(0x7f00000039c0)=ANY=[@ANYBLOB="14000000000000000000000001000000000030000000000014000000000000000000000002000000042000000000000034000000000002000000000007000000862100000002071128393eb4743d97c5d036bc04666410010a7131abc12813a4a400000000000000140000000000000000000000020000007f0000000000000020000000000000000000000007000000070fe70a0101027f0000010a01010000140000000000000000000000020000000010000000251e0000004500"/209], 0xd0}}, {{&(0x7f0000002380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000023c0)}}, {{&(0x7f0000002400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000002440)="5fc954a2b8bbdafc16a8451311b254bdb6381de8781eba4de2e053c1029bb6f2c35d313a827f62455488cc17146f5cce6a497ba4d5ba76cc94e4a5747c0794ac9e8567ee97eb9440ce41cf358e9494be513807c86915c31628ea091214d16f25ab20d0c0916b21f35a2e21b3fd35544e765f3a065714eb366e9e03cb256463d277f6aad4ee582a4c86b1b18e46b75f2c45ce80af6a22fd08f853be23633de626d83494e61f456be94f82455f6dd8bc184b3d2070aeab38c92636247b17bc70ec771ccf18b29508ae1ab68190d1807fcecf0ccc8b22adc496dd1e2d82fc62d0a0287eee99", 0xe4}, {&(0x7f0000000bc0)="64f6e09272152c1e3f80de0b328039cf6a7c9d1ef87d98d43a10133ee72f204bec5de004088f139a9895d9e6e4678a414a23c98b559cce54892255fda70cb0bf6734c23e2a448a5b059b81e4bf38cf", 0x4f}, {&(0x7f0000000c40)="4aaf057fe7232df4120c77577b968d3fad20334e5f42e5c891d4fcc543c69df5e05f19b2b689a02e163409aa6bac74d66f4d6479e0666be5d41b06c926739ccf6deb9b2bea5cc52a1c5b5153d442991475b93f0cb699150774ed94988622dc5137ae8c101c2fc85ee72908f2cee28bde76998e832e", 0x75}, {&(0x7f0000000cc0)="72a35796ddf61153946bed82c8dcd8c6e3269a22f798934a2e038e6ba30ed5124c3b8b41098d35f6e1137ae4ab7423a2514f5a1caa9d81f1a3596c1d90c54348ad", 0x41}, {&(0x7f0000003ac0)="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", 0x1000}], 0x5}}], 0xa, 0x80c0) sendto$inet6(r2, &(0x7f0000001200)="a16de08d2df28a654769cafd8e88f99f7ed42385498606f9ee7475444de57f3a9f0b274a548902c67686f6a793a07ac0e318a8937927c454e1c08661e0e3eec68d5e4a304d3c2256bc3b1744dec043bed0f865d7aa5a712556ad36d7b72cfbd52a669cdd53fd013fd6f46271dd298ea38f31e45cb9d12b45d80b0d65050f1d96760618e76153752661daeb457ca636a8174411605f27c5ad095eee9897f8f8aabbf8ea124296789759333252b2353932a3459bb94f783cd8a50150eb0afb4c9cc9358a52809867321f2acdf9e370bf3f0dcde363dd5b648d0cc415acd6baf2a22397f7672cc67c9c34ad978527ae9b9f4ee63d3f2ec0454b91321081877cda8d6efb7e9a23fe09458e5f12a5b614f138ca6583097736049f36b68f751d5e488a0ba0c87db36a39032f42c3eba487ebd74f8b4195e85755272bd9596d9d3e7468180d642e452bb60b0c41eccb2f619359e98b6643830c608693a361ef7972a763033be1b45aefbadffe13c58114d79daa806230c314787818fc46e0d98dac42413898e0ff133a62fcc657d9dd71d19a3f433b9df5068ed57289317b13c36a40720a898a5bfae878a1e71abda962c2613633f4a7d80fd85876906896d6c024c9965d4381382a9b77fe8e42e1e1bedbe8757c89dd6e51de46882fe3017a3c4878194a26de4c85b3ff3d58ad901a6547dae79cf992daa9f8f62014b7f04d7072de0db904a6ee2e18b689b71d73b82b6b8a361caad2d1ee436bdf54d20a657c7d0404ce4c628cac01a813c11f30172e3c027d3d1d43c1e23c2f8acc4a20f6e26e1b5a47f9d55d67b7e1f38b0ddc6f5a93c0dba7e4ef9302fc26815f61c0f8f4fe1634c7c91893350e71a7ef5ea0f0787312263727c02b3a61e9a8537358136693123cb5a8ac844c163eef9ff3ed7379076c255ae02b5927d78f43bc4cb9b9c06098289d8d6bea3228e492ada07659d40629106b706134b66c0dcf4e1ef174d65e978b9dd0d1fbd610172e6af2d974004fc859c842a03a0a55e14f099ba7e6f1db715f7c94703ec2c604a7631a287d2073f18f5e5c873d734a61099b474528135df295e0870bd470218f5053470aa283a9a4815355bdf6676af05b8b07097eb37708546ca7fd536a55768a0a22ccedd63bbd11d2b2b040e8108fb5d7d7cb06d220df2515358470885ed8643864d047a57e0e6a408538041dac0372269b8e64eb34212fd6257e12910b41b4e17206760de636e0994ad38fca3aada85d7fd4bd4ec1fd1dc6ffa47495746519eb165ffc9b526b62c7f73e94dba23d69c9f8618bb2ee708433be0f7185dde39c85a818e81a54b981b304d0eff692ae78350f8ff0cc7c692d4c4d24bc24704b0ce2149f054c730818edcd93e5734e2814744bcc6621429000f1a841b3746c51a7a7e37819b88b1bb49a198a76cd97388dd9de2eebe860e5fc19e8b88125ebeb482359f0a8ea7594268a875f1bacc89820b8ea1ecac74d4002c5d48de792de697f9e6de9c8599ced84de49154e31b0dea56d0b9c08364f550838b1fe35f3e84ee76268f2304eac087c1fa70f2e687f7fed1c28b241ba838cc76ee773671cd436ba909954b9d0766b3dd9a9f76c56fdeb9686ebd882f411eb052cfcd77f91724d6fc78d9702f9513e3b3a0ac186b0c5ff32630c0d416bb6adb25b9d54a54cbd95c977a667bb1e72c917692252126dab5f43fd45a10de73088804bcb9806fd67399ed7d5ff0863dea2a1540d785f1d0d199f803a2706995fafbec19a51dffbb13ec80762be456d8e68eae11d01698b04b00df4609c397950b4b8420604bc9fb22ae52d4f3803f21271516c7a1d6eee33bb3a6615cec707820031f65b83352bc4f60212915f1e198fa60845660e983c732e731a4553daa3cafb69184e88d815365741c09689bc7c27deb364bfee728055f1e92ea890068e4042e8032a7c7f50f8cfd33426ca36ea5e05df1d2bdedad20d2fc1c299170731d8cbd7e5d7fd62c1cc88f5b853d8aebeb123bdb7dc3cbf902027254792946923d9775470bf7a49e5892a37963454b2bf7a20ee3894a17252502fbb64050b53f040a2a03de734e31dae5f40b503bbaef31d1122cb1e5b6240ab10971eab924ec961fb69a1f9810ed4822604b5df37c25904c177b6002f2d81391b08c069ee7134dd139ba9f08e86466fa035b60d49b78d33d167bd13f5fa4e4e2b5ff5bd40057f5c40bd9e913641df39409e4e061a1a3a0f9beefe8941f78454d86b4ddef78061aa8f98b0871983048e1bd556935f0c66bf7f9583a2c556704ec33120ef82721d6223f89c1d40145d6b9e15431f507b7b2266cc7063462947e81887be53f191842a61cab4ab1370b93b8cce2eab6170a41f5da920fb262e129f72f600545c0efd14b95b6eb61230a7de078a8d39c3e3152c5596fc7feee3c86576465f49750e354b428fd6acfcbe46890abf55b8bfdcca5b7e7c4a35548be00944e62c8d86afbfde223d1ea29eecd58d1bd725b5ae8c9f089c3674628032d4d3b58a11c220a37907b71d140ba67cea170292ae28240ce4fdf57cbdfb02fb32a6b29e7a571b30e816b41c335519f36288ed0234f4c5a3e321fe95ca16f1544ff9d8c0d9750db47aeace5c8950683da8c31de0ce0c24650ec99471b5b2f0a588b49b1035f2ccd85c1a77c29b875f65089a34f18058f274858eb39072b98c2f4719a5042a11e658fd7b535c28f49872ed3eeb2a181d710a212b33a630c3434fe4e8aea7138286053b9f8975f8a9d33b646ae1338c8a10d836dcc81e1a5d28928599c836321e3f5123581558c178ff3edb9838ab6c297f606d3a2b5fbab487cecc764bcd596cc0f1b5953263534797155768fefc3a053c4561e39cda1a5b622e0dfdb2626aba1ed165175c0df6efac66bcfe0a4bbf6575e01d9af5efb2b57ef8cc1ad36798b97b154d869e3363f2df20aa91e767a136060e4df938803b8fb7599f721f0baec7428e05df8b9f8f4c25c5d775fd8e9f103866b83c61845db87eea77c4cbdd49bc7d584322643e614439371428ea521e7faa590c2e8235d59182adb333f929afc15e72d1c54c5121a9fb6c6888b7f40b452c2167986952e569eb1dc6c6aa3809109dd3b4b1c3e32d4a4648dd00bd043a738fecc4bb340c18bdff4389289b01220efc2e3a5ad4653c5b7286fd23af0c568399ba738a2585bb07a14726f41ff7fe5dbb038bce04df0acd25400a59447a79bbdd6511123e535e7975aab5c95fff5196143a591b3e0b902c8c0a0d1587409c2d9d34fdbaad588de4d275cb33446a943573aa2c5f29cc9bae74c482d7d9282057954570cb02e868b87dbf29ef7813f428e6c6ed70375722d97c8de7ba4a44c05c53e297a216ff010f7ff9998c000f51c0b4b16d7059759003356802795679056ec96156389e223964406bddc6c665aa39af926fc04bb58aee84e436a0362e1d75644293cf5b166812fe4a654148906a18f9a60b36f5f3a34ea794e0e3a779452e75ac9d492279951defcffd7910f3f7064beb063c7dd094782208ddbd1a1c5a158382bdeeeb471ec88aba9fa328d91d3ddb9736c7e64d7a54798f86121f37147068dc2ebe7535a24d1d0929b80058fcffc119049a8836fc31b5da1597fceb8a616e4a16223a5969b9be11a3d64bb95fdc7fc08d13136ed18c22ae0d04deb1941396e1e457bee480237d403bcda43395e1494adba32e562f00cdd52828ebb218316d47a98a4a51b38508898a9a1db4fedf2eb9f9f3b00ceead753bf7a3d8c074c6a1d14b63600c2b0efc0182d5e1ee33818316e8f46c02141884eafdc42e689bb148fd8ca84086444248235755abe4f560036a221f6eea638ed8d5c063cfe8a1a27fb2e26cbb52ab21391e58abc1f135c287b8ce018783bdce5503f7e7cc2f72a260581a897253611626d63bd7e6c9ddb987544809400cf11a34f3425798341f495e432fa01accb765714056304a2848b2441d8ef1a2a27fe996fb09e6bd3bcb8bec86d439a7a1f4fc743f03b0991ffa8790a9a5eb8776b4db3fbc3552e2a23df997f24ab298cf7672d449a22cfbdd0f4f1721afe937c9b2a563879980471dee72465a5d19f68cd0a5aa839f87283c482c6bc762e895db7e3f8f169e12dabae29c142c73a74b3df1c123416e3c0e6cf5e870cd31742ffbbaa0d37ed85cfe0246c9c6f4e1eadcd5ba92d8aed976d823918177356dc400635fc0cf30dea29a6c4148439b0c381e6ffae2877162c07220a95553ed233ce24b55e0893b97ae25c75fff24ddf16d23c1e7fd3a32cabe4c76692235cf19653efc42e6fb5c767205043e42fb1b23a320a91fef6499348ae8024d18f069792593bd1a5ef95124fea98f56bd5ee166b06b37c06fb893751adab5421777f3c2520a3b19170452fc1dcdf3347d094d979033a63f3f95df605e2c00df1890cdba31001223ef025a5bc1640f4e782c45e0241fd917cfaf8d409ad8441db08b4bf5e550f3be8580c01a9c73b29eb77782e99c41ff943d5133edeacc3996615da13f87161cca136f30454deda2808bc95525f058b01e38e00e4b7d9093e38f14a19710400cd5886701d7c528f154ffc921c0b716b3e9684a5acafc57994b6f013d8ebc450d1d6f1d7e153a81e7e74a279f5183480e5951e20c10799d5848e3160cd25d7038d96ce837f7f827e827b11fc17859eb833e8a0a52b12257fa6542ad1d3a918e8337f7c424fc03738aa4cccbd3d635773fde537c52fde5efdf52dd752de3ee3428061573b07a41494d58a26f917c34a56b513fed4029e3e6abacbcd15156d79d24c07332d737f8924b493d5bc06dd4fdb7789530598aa6eaacc19295ba3782c79ec3adcbb874fed5a4d0093660849c8645ef33c48370b3bb6d3a2e601d6e7113f6dad3f98786cf8c09322e54a853d7568c8f9e5d125c402afdf297ad793f5cb90a5682bf7a8e939b7e062aea71bb8e9d11b2800c0788ff02711ebfc72c09569394f2797ee86ca4b739355f9b75e5dafa36ce40b18bbb23a776d058185913817f03ae2dcfbb690f7be3220fd7f8f7af322acbb21ac1add01bb8699fe78c8678bd4b440ebbe9f54c8e9843a9ddb95559018865be6827e56f241ce0f8baee0fb980cd20688e140022ad4fdf76bb679a07af1b2640483e6fc7b8b36f8d7288f7ba31e7524c9b64b22ee825eda8d7f5f57680bc14240d66621ffae0643aa7d5e50191181672e754583436416a2074fc6ba2ba880e7c4040d34eb317bb47fcf9b28ed79f5cf485c1a13ea7f0ea437cf8ada117523570b35ae5b3cf6b21c3fb0fd953ea797c92f8b9d4c15078751fdd8e9e5e36d0da050f001567d7b82f9275e0560c815b96324026a3fcb2a1299541b0c94b5527d143ac6bd338de4e9b9200dafdfbf7c44a3e71f6d8a8c5270299ae3d496c319d3b8e3b1b38f9a35f7336b16e0838bb07b333b3f187d6c16fb733c0a7449c2ba7b38e6885e54ce5da0745e66c769a661ff8833d7e6166560c6707970b7158c7da1f02749f8e9e7bf532f5838dc40a3f89880f773f3696afe0648e4feae2e23e70725c9f4d8609284e679ac5118783fab7b4d9480a6ad5a99fad300d7d0a5d40706b92c4e43a4714881fdf4d57ea9fcbc19d812cbb821d9c0bba2bd9792e57fa29df4a34aea587e954acbc95d2cf4bc6d7c66747ea5378fe19a97c8369e3d70a630eacec8360bf6e120b0ad9151165fdf97ea5bd83feea0ca7c265f2fa7cdd52718e5bb6b1da5f69ecd089b2af22dc4130fbcbca333b5f41107cf03b54b253888762a851ce3703a6b7bfb013ed9a037787", 0x1000, 0x44, &(0x7f0000000080)={0xa, 0x4e21, 0x3c7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3d6}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890c, &(0x7f00000002c0)={@mcast2={0xff, 0x5}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) [ 112.761392][ T25] audit: type=1400 audit(1627239964.268:14): avc: denied { create } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=udp_socket permissive=1 [ 112.783160][ T7785] FAULT_INJECTION: forcing a failure. [ 112.783160][ T7785] name failslab, interval 1, probability 0, space 0, times 0 [ 112.789404][ T25] audit: type=1400 audit(1627239964.288:15): avc: denied { ioctl } for pid=7774 comm="syz-executor.0" path="socket:[22534]" dev="sockfs" ino=22534 ioctlcmd=0x8933 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=udp_socket permissive=1 [ 112.795795][ T7785] CPU: 0 PID: 7785 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 112.795817][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.823233][ T25] audit: type=1400 audit(1627239964.288:16): avc: denied { create } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=rawip_socket permissive=1 [ 112.831214][ T7785] Call Trace: [ 112.831223][ T7785] dump_stack_lvl+0xb7/0x103 [ 112.831244][ T7785] dump_stack+0x11/0x1a [ 112.841579][ T25] audit: type=1400 audit(1627239964.288:17): avc: denied { connect } for pid=7774 comm="syz-executor.0" lport=6 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=rawip_socket permissive=1 [ 112.862873][ T7785] should_fail+0x23c/0x250 [ 112.862904][ T7785] __should_failslab+0x81/0x90 [ 112.866581][ T25] audit: type=1400 audit(1627239964.288:18): avc: denied { create } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=unix_stream_socket permissive=1 [ 112.870831][ T7785] ? register_for_each_vma+0x372/0x890 [ 112.875226][ T25] audit: type=1400 audit(1627239964.288:19): avc: denied { setopt } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=unix_stream_socket permissive=1 [ 112.897264][ T7785] should_failslab+0x5/0x20 19:06:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xee01}, 0x0) [ 112.901993][ T25] audit: type=1400 audit(1627239964.288:20): avc: denied { getattr } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=unix_stream_socket permissive=1 [ 112.906510][ T7785] kmem_cache_alloc_trace+0x49/0x310 [ 112.906537][ T7785] ? register_for_each_vma+0x372/0x890 [ 112.906556][ T7785] ? vma_interval_tree_iter_next+0x24c/0x280 [ 112.929040][ T25] audit: type=1400 audit(1627239964.288:21): avc: denied { ioctl } for pid=7774 comm="syz-executor.0" path="socket:[22536]" dev="sockfs" ino=22536 ioctlcmd=0x890b scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=rawip_socket permissive=1 [ 112.934176][ T7785] register_for_each_vma+0x372/0x890 [ 112.934217][ T7785] uprobe_apply+0x8b/0x260 [ 112.934274][ T7785] ? __uprobe_trace_func+0x430/0x430 [ 112.956598][ T25] audit: type=1400 audit(1627239964.288:22): avc: denied { write } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:userio_device_t:s0 tclass=udp_socket permissive=1 [ 112.960787][ T7785] trace_uprobe_register+0x2b6/0x410 [ 112.960815][ T7785] perf_trace_event_init+0xf8/0x790 [ 112.960835][ T7785] perf_uprobe_init+0xf5/0x140 [ 113.078463][ T7785] perf_uprobe_event_init+0xde/0x140 [ 113.083744][ T7785] perf_try_init_event+0x21a/0x400 [ 113.088869][ T7785] perf_event_alloc+0xa60/0x1790 [ 113.093790][ T7785] __se_sys_perf_event_open+0x5c7/0x2740 [ 113.099526][ T7785] ? vfs_write+0x50c/0x770 [ 113.103926][ T7785] __x64_sys_perf_event_open+0x63/0x70 [ 113.109368][ T7785] do_syscall_64+0x3d/0x90 [ 113.113840][ T7785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.119721][ T7785] RIP: 0033:0x4665e9 [ 113.123597][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.143188][ T7785] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 113.151614][ T7785] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 19:06:04 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x20ffc000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 113.159575][ T7785] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 113.167709][ T7785] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 113.175668][ T7785] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 113.183683][ T7785] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x100000003, 0x3c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/234, 0xea}, {&(0x7f0000000600)=""/106, 0x6a}], 0x5, 0x3, 0x8) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xa53) splice(r2, 0x0, r1, 0x0, 0x10000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r8, r9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000700)={0x45c, 0x2f, 0x201, 0x70bd28, 0x25dfdbfc, "", [@generic="87de8f2844045d5ee05b495c1edbb1f5ab0be8e3a9f3a181f19012a206b7afb6bdb3a69b1b086c19211987b40542ac95f9d64cadf2c55344f63e6fcc42fbb635646304b7cccc31f0637f690629a1f57daf82a416932e812cbc5d4a2c4f0f8463d80978aa9777a765f9c36ceedd4cef0e0de79dde859e11d991e230c07bddfcc19357f70f5ecb24b053e4f4e1a1873c6455adfd3b717316fba58a5167821187d311266a69cf06d86d073301040abd3cf1a17ed377cb5e9c3e820a2405200ccefb260c4da96307227452647a065701ce83f5c2259c454f77805296ff16683518babf897b23944edb2a4b2db79d60b781a066", @nested={0x291, 0x29, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0xffff}, @typed={0x8, 0x5d, 0x0, 0x0, @pid}, @generic="b5fbc26aee89fff16fc1e961447227a568abf364a697d1ff5615cf29e56a63926e614d3ba9c67da5edcdd5dc320b7b44a0c688bc5bc32710790e1a17e10ac30879f5acd541dccf6b6e957e3aa58dbbc5f2cab692d69eaca0c45f97b4252f7704641929653558b2f03c896ee8ceb4a170dd578fde393bb2d36e7e1cde54d21def0deccca7649026f62304c4c3293e2ce49e87466e4bd00471290964aba9b288fd6b64b776ffcc522528b8b1a7cafdd54dc5556fc6a747b3b75ea158e61edbc447544b43e8f18214cdcb6df751a8", @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="8eeda0025663a3a0983015713ae754842043d149df5db735a94f0bbc5fceee6e7efadf266dc3f3ce673b6b60c1e8f3375598a04cfa7f837fa7dffdfac45c937d4cb5d6ccd7e5657084870702a9fd43a6645d48a3bfc5c764119ba489a423e69db70c842e55c00fc3ec", @typed={0x8, 0x84, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @generic="296d6e5c74c87e32383fa34d31b8593ca9887f42b9a5b9fc10739a8ed67633833b6ef864c1db53463388279c32b7d67c162fab680e3df34f76f973b8914f678309769108e2fc13a105b5733a22f4e4ac90791f1a8c3c9458e5ddbc3cccd900b9c7623e8d7bd37b4fdcf4cb62cf78cd7050ec800c115039f05844a1827c2fb01f0299059473b3f2c10e255fc9ace6d978785d5ba7e89a49284aaee1acf7cfec510bd74f40047d10475c857eb257e25effaf9c123e640c3501037b20ea3cb99cf55a351ad6063cd8571cc566972881c730f7f3c8d3b66bc9c8bdbfae9cdd2270ff034aefa803e15c7434fff34097b9a9a273d885b6c6c35e", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="66e4436ac91fc7172755a451dff0282f11b0d4332c49e9c46d2eb457f8a9a032a9054a14af0152e72a1ea33096b480ad6eabeabad2399c0fee8428dc93d13b3b6fb35bcc60aa1275c4318e59bbe6ed856fc6cfb471f78013a01e098eb31655b6bf3750118279435403ee540b7a9a14d67999d2e799dbab73b5f05c9efaab2fe83e04a35aa0f9ea8031cdbc713f243894f4c8d155d2497d3eae2d8b16f82b7212b57a61744aa83eb1e5797c23905d99bc6c9ea9c4a73e2ebbbf65ffc83ef202174c77e816"]}, 0x45c}, {&(0x7f0000000b80)={0xb8, 0x17, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0x8c, 0xf, 0x0, 0x1, [@typed={0xc, 0x41, 0x0, 0x0, @u64=0x7ff}, @typed={0x7c, 0x6e, 0x0, 0x0, @binary="834a6cfffd43ab039b50eef8748826ea4198f8905ebf5cd782c3a59e6f2ef96487e8afd8a5d7015df4707556085e14d81a1f558ddeed1bca20b2390572dcb33bb5e035cf7bc4bbb16d01865dba860f5208058c3e225b7ed488aa07b72a093b3c51c165302d846227468e05d2f03cc8bc7fa472fda48b6781"}]}, @generic="5082a63ba9085891dfeef8dfc73d6d999672", @typed={0x8, 0x8a, 0x0, 0x0, @uid}]}, 0xb8}, {&(0x7f0000000c40)={0x360, 0x12, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x34e, 0x75, 0x0, 0x1, [@generic="27d93aeaa71d32bdecb22a644eb6da263cda01ca069ea674e7846813d3d3c843ea221253967a3ee366f4b3d71ac173c9f7e74988884c5dc2e55cea7b34c06c56a5ba6c03483353077cac632c737b6681fb419b043744129d4521d9f9f7b7a0848585b2ad04b568e2e3eeeacc384face9a80bdcd3430450a43a67850d874e62032c395594e2a8ff1c37204e74e2dbb4a4e7f6b56d330c5307b5f3f17c9837f094496a0562d789ac3cf69058b91a5a6bec1558f3ab1337513b4d08974bcee50fcca622bee2ab5d6425f18a016ea3f9ccc7557d5f7e5b62a236b59c5136c691139fb01b39203b96e3d40d2bf08f", @generic="736f46e886d8cc94e8ac3862dc034476270d90d19fa964174e007c4a312f25c2922c4b11cfde6fef888f353069127c42f11f684c147f80001abe8fc219f84d50ecd447bccebf3524028ba5236e9780c13c07e9e961d5ff35744a9a060ff029185940838a3af501a1f5e984769c5442d6e18415ab276b471f610455798cd7fee726a07ee61214e1df853e9f4345a8d8c4cb02399f605d4f7fe3c6f7dc96ddffd1ac702b379840e5", @generic="2f94d69acd1c4d9c7854", @generic="8e16ad53631f75fcbed844", @generic="64347e1db14d98b7cdf2748b42a336e1c7de570475537a74fe099af002759e829e5dca65ac4f45877ef601d254939fbbfd2fea4c3e6dc75a7103e2d504e048bd8262dd71d9df1b2d57c0f14be56deb73ee5a4763e3e719c3c4f457c7aab4cc7aa802f5f73df95b126f9dbf59042537aca260b39459b25ba373237946d588e4aba6410cb1c7f890466d6042fbbf84a7ef90c14881b9f4f277892093a6ddbe5449d5c960b8d4fb985e1511153f327a6d325828be8ea814e9c5532f6913bc85dfb1c511bb06e56c694d60a041d249b3d17d8c52c54579f1775d071ca2bcb3", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}, @generic="edc0fc6e5c0852014f178e387c8cb9dda8d438864d5bd61580435ef6cf1492cd17620b9c19d10679dc1d961e7779e51882916bfa6001c2600dc72a570a802a9d790186fac42762339ae9c80901d2c750379f402fea5f9161982c3f0a431f462f9fd40132993687c3ad06a4d819feab4096956c7a32e8a9d3c0feea689777d70c28e7813f68ff0b3b6414d664a4930f44966931", @generic="3487c32a610ea91f42891519ddb88894b814d3b242a80b80bb25aaf4ba1cd1f6bc00", @typed={0x4, 0x35}]}]}, 0x360}, {&(0x7f0000000fc0)={0x1114, 0x24, 0x100, 0x70bd29, 0x25dfdbfd, "", [@typed={0xee, 0x52, 0x0, 0x0, @binary="9c600edec958a9a59cac9727e12e5cff46c063396fa396faf11724816e89d745720ab04b28e3d32d395fe8d3d93fad29b1132559be3c21c14409e4f5715255014fe2c2a9cb45de56367fd4c964fb498947903e01940d7df361ef4a666eed84301bd05ef47f8037611d7eccdd5666e4f3a34e5f5c503adc4f4fe7a754c54d50219ae96628fc4fefaadabae0dc02440be8e6ee30f244c3c37388ea35d5a172d436c7c6e6f60c0db9a77520a1c2f990d4d7f9045a26175cc80aaacb2c8220faeff9f9e5df55a960b91f2d1cf9da03888ddbd4e095ea14c7f15504290700a2e3565a91319b654331a967c2f1"}, @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @typed={0x1004, 0x47, 0x0, 0x0, @binary="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"}]}, 0x1114}, {&(0x7f0000000100)={0x10, 0x38, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f00000001c0)={0x18, 0x39, 0x20, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000002c0)={0x20, 0x1c, 0x400, 0x70bd25, 0x25dfdbfb, "", [@typed={0x4, 0x1b}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x20}, {&(0x7f0000002100)={0x154c, 0x19, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x1004, 0xd, 0x0, 0x1, [@generic="c78d5d130f819c41f1c2ebaa71e9902097929d58574a2fd1c09c2bc7e710fca69274467d8d2e3c979890f8004f7d86d226e1782145e9bbefe0ffcaa7a4b1f4a1704c2df5c141410f3a93ebfe7fdf4bcca0e87b67aaf4e4117f34bc41ce2f6d5fd3aaa7f4059053321fb991a505ebb83bb4b057e6e4be46d7e10ec0e36cb679abd615046e289d09a4ad65466eb0188487f90f8a7e4b4b160304a3a67ac25a0a01f56046ca8d96a894869e9fd1cba07f6277b9f9c3ea11656acf5c2a2ee29b765754784dfae08444998d81bc34f23e47c8f8f26cf4e80be90d147c1ad4677c9715d5533f63fc870412aa2674138b1feb9f0f071ee4b3ee2c9051e578cf0bca6ec0afbc9c1b3f7f82c8984414155e57c4c81e86edd9de136e06833de0453b030d2710f906ed18362457308323d069031123b99e2ab91d628ceb3cf3a6f57ceb488ee69855ea1fee67d2c997f241322b81a3b92e12cdac51adb58e80c225088d5f85566c2c437b4ef523efb9a635b23e90093cbe4646c70b3b73e154d249b11d9fd275158f9f1c4a9d7d6d9f154dc8959662ce7bd672704eba0cc1d3bc1e74d44ca0cd15e766e9e5e07a83b3cbd0e297c3ca2b7b528c45fc925ccdaaa00f8901876ce2dce7a8c1a2926d22232f77295202be1b4eb28d87558a8f640939d93b7373cb8c9faecf485bc29dd179a93026a492cb25a4f2a60529fa3574d01b543b798333ea94a317a732c4dca47055ad57405d4c10582714520a312812aacb03c79624d7f56c168eb7fcc4236675bd33bb434750fb2b8989b806d06da1f521108292f04966e9b744d7cc531000c463a775cb4417627562d50f45ae2c8dd2a5c262e89848311741214f48929f78792a330f98adf718f4c4838daa20b5c01a808e45aee5237e833bd47503a2d404d95422c738f0c6b3ee36d489d83a7d7c3747b9ffbc3607aefc7098b4b15df59fadd13cfdc0a0ed89487c915acdf65fae40f49a004ff79774d270571c992eb1165e50a6fa413d3b1d39c2cc660779747be3069c2ea2fdd8d41fbcda2a91fa38f4aa77eaf1bffb6dda161dfa1b5e5fc74177f46c8a30a6882c6c6f803dadbe80d414a1e7f5bbdcfaece3578d290d9c9339ce9e3848cd98b2c55e52079997a3bea9cedebd420f5e1cca6261ff9aa009d89f804a25af53591da33a8f8611bd187a931608ad306d32005084ce6a32035ca5f578936f72e48bf4d4fe90a155910d4670a1e8031a26b1b6cf1ef02035be4e16dd58bf66371dbfbef01ee1dcbab1025039e4ebea9156d29ec1a93c583601efdec7aaced10d0fc6d75e09d855c3f0ab03146f7879e48060f036c1ca1de96266ec7562d2d9c95d45f659b58bf8df4ff1e5195575a7d891593455bb193763570c1005e8a801c49a13b350add8df170484e6139031ce31c505cc54ab922c29e59dbb0bb1c9ecbe3e60c883c17d06dffcd8e27b0c48d7034efbd1037ef9b47ccf0a8b2b74232ae87c27bed6d48c1930bc7abeb66946c88a4a8cb30078ebd95d232707c8e2a71a31b6daebbb7832a95b5c3eda5248b070ca421e7fc296e195b00cf28d4aaf6a4426b3a01c94f49c759cf7e000154a25ebb0d0319c4cfb12e3ac86b91ff13ba4af9a3efea723e6ada71df9e1b58c9b8b7baa7f6dbbea7aa89ae28a1ea4455af46e7d82a0388879ee14258911efa22b52449c5226284cc0dee89b721c38d6ba32da627dc9910778e219657c01df66a095e27277545deb1e3919a20005b2009ae3ba55bdb4d8b7918f8e3a052c10e95a0a7039b560c6a1868161b75182011e5a4a308b67ccb4c9c54346de87db3d68ddedc6ad5f2cea100053d8d4d65c87226fa64926fae66fa473d6154eab8120ea7b1a1e6c25b845f899a1f320a930f5a2bd05746b882260d3bd53166b575c1cb240cc99d92c23b502d8734e08ba237f5247b43ba170ca4bec31161f436e8cc7a1ec9660ff03ae8d00ec82c682398b19cfb4836eb84982f6fa9e03ab7b4f4563eed0f9e6bef85bc80984e5474826d28035d6c03bce039c11f67901b957fb05b2ba4e0725dcaf82f1bd56e42118822e0768369ac5292846fa26dd623479a8b98dd9bfbd4c01143498b0f89818d7b492df372607ccff3235457ccdfaf3caa5503e96ec847511285c7581f4eac69029e4f3bbb82b1780008cbed079dc45526255967097d42fb1eb58027593e22da84574519f3ab6b723f355869f9cf83327c5bc75dd98177fdb802f3c2abdab3a6d5bbb8609937ddfb87fd808f2d078b8f7a5904386d38c37397055770b65ea7dfb081267cd7b2d8bd73af5a6777fdf534ae09d9f8c9b1eb88a9d42cec9e5e692ee4dfab83bc5177edd27c185628c05b282fcf84282157d0eb844fc836fe67861cfa3570d4596ea2a9c99e416413c2e41a3860125c9e6478b7ded835fa7d70eb1c64a88506125922ed97dcb17e55acb8118f88244528d214b955ac493f639c10ebb33c8aac97d6e578a00bc577e5da0b511b8691f7ac3a2b14c6ded1fc02467dd7ee94996988b5b01f7b160e4ee6f080f50a219861e0efcc86aa628d97eae6177b76e9a2b50a27237ac7a7d5f7b58ac47a9aa24dbf1351d292e785041a4d9b59b332d78bd0fc0526c3c8f58e6cdba4ce53f996ba4e11303b79418467a8f7432300a79a7ae9ed003189f06251e3c4facc905d7457b44bb42daea042405a6ca57b329a668c00e32e545b2700ce642a0fb343d6f6ee43456e383a4956cb91e0380265bb3f29aff878ae997dba5cf41c2fce3b92cbf0a4e122fc457c04fe6efb48a36fbc706546d7d22e9fc47386f90bdf6511f53112a3cf7859231870bcc0367204ebaa31152f9d5fcda941851bf31fae53d5d0097b77ac2642d50e6c8c5db64a5e8dce4399ff53bfe71b5e87ee399c1debfd8839b04e4a0b037b17aa21e3ad39021927fa981bdb9d425f0b0a14fb7e0e3db2071fc73eb0eee734ce0122e57137084fc3c895c02f9021c5c63becd0e9fcc8040836b0ea9943563959905d9dab880dc0f238c275c0c2b83b720d716f36cba84925f10174573ffb404f7099ab21e7c540e7a28e5b6fb7266cd408ac4a29ffd7f79e61c455825b2c0c5e2ac37a4edda688ff8f67778b1359b037d9d5f8a97bc77ccebf7786d8cbec45aec52b0352b40f8ebcc938c867b9d07fe4c67c666ce08d417986692ef8b35ac863e1602547750e59f190b4def537663b9f20d6d590919a34bb2e5946877e3b51f919bc0a5aa5cb5e0b40edd4d65ed01c635fc0a0209a5486fdd0a02863dc67b5e394826bba872a40961d3fc2977ce89b47d9188780654a91915c4fc0fdf046980b543988878ee9e0fe91bc5f1596679730838908bf7c9823d655c031fa4aa4e8949837ef1757c4a698a19049904962d15f57df449e3c8d17f29aaab3659d4952ae0fa56c555e372f32d8b61bab7abab2e825684f25f6626ff3355191ad325a0df1e812f9e573a30acf1a32c06aa92ef501ec87af1f0d31a02fb9dd78b7b69c9b44af72dd3bcc7c7f1739a954971a55dcb7f0b8effe1f445cf3147d848c856870b23520e91bd82317b7f5875c5d5d1e81c932558a350ac8d550dfe3fa3d2d61af826ac2c71d93075563d4ce51cf3607a91c461dc83a28d15e19fbf5cef7c2945c2151becbe8c40a11075317780a826c2c397a8d9e4b2f992f71b8b0ff4af09ff11bf4995f098540e4c2b67bed10bb99982d17575936eb54c9ea7a096885686b75f3cce14f530e0a6667605513e1d156037082d1c3fd03555ce058efea44a3c47a7b813b7c7d9045a5028aa67640a7fc546cc2fb137a83104e3efa17670a92bf78c41b0ae9862e36262899057121cef81049dec8fce6ad77bb418004cc13c0e288855f7a23272cde23d8f23fae4b6ff20ea8c61eb998e415a26018be0094825a955d419bead7b3603bff716fdd4ba2e24c896e8f4ad8f3dfc1798c5b19b779696cac9caca457eb93c864b8476f1d96eda98968537c32e50fd614db6b972dab7bb67e3749608c49b79e1752c45d88d83289129dc81bbc761573a77072103b655ac01d999fd50349898ac03687b636a12c2f21e2da39f093c9fc032bfd035b5c0d82b1e921a1fef239601ad84edfb75584dec5c46d01e9a794f8371798b8e059973997f2ee9c4b2743fb7a102b77572d3f0c438408cbd1b831d6f1425b9476974007b8a65b82a254741edffb593d0d6239f00c4d13ba662e420c8bf8daffbbd6a79cb871cdd054bb54105cd1c99515769241d054a4185fa434c0ce83a5954b94c2a01e5e226417d003487b2634698b4f4542bab590c1d13a13537151130d1fa5a0e4349c5864ce7bfe9eebbc5cb5b2e66e6b49343bcbb1898bb3723230ff25ba3222490c459f48bf54271fbe3ff2a1738823a73727477fd096bab294e740e2e158f4be4376d3f3ef8ddd793edcdf7d49f713f27323c4dfcc2eda6aa430c4d3a850ae89e4b9e7cd07e92dd0c18dcc3962f519c8cfa16bdad040535c00a746a24bb1a630848055c5e3b8ac4b5e8fa34b4c85d0a4258139cbe446c5a42b1f6667e71e4b00ece31241229d049d6d2f6c50003f6d1f000f827e072e6e88d953de9568d83dbced9c76c86084b97cd10cccd111ea281f9a45cae3aa0834693cbc0e38d9f11dc31bd111b89549475b6509f64d37f93f6319619cf7281e3242928d3efc3ac8195db5af16f017504bec76c244dc17b5eab2fd893f023627302ee0786076a56ef3bac35752f88fbd64b5b1d07c6f17c8daf857b5de735e61c43fddced4850c18d57543120efad00c962c127222f3c53dd2533d9e5fc7c3a10759c4488448d6b6a3b0af178bb063848382a2135e5bc141ea16dd60ecdcdcde0e094c68bb77b519735112203da5827e67b6205e201ed4d4d433f8904ccbdb57501ccd7ecb08961ca36a43fa9473457f16fc2be146179416403deb16d3a61b1ea0209a608ab85d82e14640b20e74b7673936c7b91b342a47ae0229ef761e6d68cbd11589fd16685b721b0e3690e23795725494b4032b77e644a1dbd7b2c9ea7c3a99a709708d8d3fa1d5ce9c03f16b46fe3d9bcf8a91363ac466717005454213dc34b7668e2b73a47e6c80ddedea66468411e8759de708e74f485eebb7072d507be86b471c0131b7d7291acbcdbe76a6ecea64374a13ca5ed39b0604f3391e338de74f2f81c894a9626eab925cdbc6628cb3a679fb7ab7320fd7ec6ac9053c2706c5b3a149088de38ae65c7ca9ac20f3edbc493f1a2effd8c0aa8859a00e4c3d20fc9d71311177d98317badc942c59a8c09ef99cfc150fba1f169e18da60a21fd9cb3cf0b4ee78429034e7c2e3db9f38ff61be56a9fdbd775ba0f7bc8cdec50ac349de0e5b66e5c07822927fb559d709b42a50b8d549ac390fa7ac37f27538fd39ad63fb2bfa49c2f72184ee28d566ef09a7c9136970bcfa5ea1d5411a1b1fc9cfc7817a64f37963e7a1f2e84875c9fb90bd418447a005abc408a24bb187f2aabfb0dde6be77d826ba6b2970945c4074bbe0f2518453fa612ae09ab7b2f5ccb8e97f77933384ebe3bc993a2cf50a996a2ff4b993fb998e8f6c6ff7eaa4930306816d3c16e0a0e9aafcd33f4f5358c2a0dcb896301060c168ebe29c3aeff80df533cb8b1dc41647d55e03cc8754701ad269437ec065064f4a3cc0b60a9467cd610294d78de5c2cba36abe3e19c94de525928bde8b4c763052597d95d4afb0a99d423bda69ce5f1720c86dc135520f5d3cb0e3a7fe2d203bba0460c2df4b90b1372671a92bc16b564fa3439230bb37e44ff9658eba12b00089f0d248589"]}, @nested={0x184, 0x9, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @uid=0xee00}, @generic="e95dca6474e9aaffb87c6d24f433de92d74ff4474e112265e1cc89632dc4a7ed87b0e62fa62ef1193ac46e98caea92e3ccae6853f023469bfa04a2e194f62372e75aee76b47bf7f4dfcfbed3de5d51ad9871869e2d9fdf99828f35bbef", @generic="94e99380fb24152189891f", @generic="9669efadfa7f2c5319e751b705408bfc072b398c9b862f09909bfb1b8e86302e66ada5a14b90ed2f8ad04db8b5729072f0564fbeb562d2783da69bb38b5ea3f80c0a497598b7ae498ce37d7db50b761339e4c8e394e54e91f9509ced1bf3d56fb954981c6101e9530c1157566416c6c915d57ce1b365643988af2a0bee8a52c34337cf378cdfab241893e5f4f385bd0b29acc3592dea5cc03844fa33a089", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r1}, @generic="3b8f5b7303a2a98c79c43a7792f59bd8fcaf70684aa615f27dba2c85d053672e8d8cd8876fb79e1703d636f8ee6498b2a84d213e3ce731524efc7a47dbf3a025867a966926c79e1e02bc7e3fbfd2d6e0ab763e09aa85"]}, @nested={0xe5, 0x81, 0x0, 0x1, [@generic="b38534cd50935d59de91df08f9fff229600aa02f3b106fdb50696d2bddebdb1fb79919d05d5e951f67d12be6566441d38ced97432ad35b7a0b64de28669788fe3faf9745c1ab810e2111381bb5d9fa8c8148ac98d8184fb23ef3bf5fe182b5cefb2676461731a0fb37af782a0a13ce2d7b351efe3a6c771e6f668c52fbf000312e8cb371a5bc661331ce0c7af3350e3ab83013fd1b2470aa33d0ea5068af5190ba72f385e93e2cfe53d4819c0c7b2585405a4c11153c8f170a18336df0c111fd42b3e8007a098bbd23db31e7b5dfd73267c8e91bc1217231478e8919709e9e086e"]}, @nested={0x18, 0x74, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0xc, 0x65, 0x0, 0x0, @u64=0x6}]}, @nested={0x1b9, 0x39, 0x0, 0x1, [@generic="de5717aeb2259988c3678211be11c6307be494ff1cbefd4ad802193945e23a05be90f1f9b2f8191a17819d4d0ab69265e5d8deec2202d6a1a8adfe30e70deca8eeaf717f42edba4f2447a7f7167a78436b7527b8eedb161c7dacb706ade3b6fe4caf94d79a25b368e0f4bef1217e092a6c0ee75edda0a634fb14e8608afb5645316ba13154c98d45d2c0e1ba55f97ab4f9e7b6689875fd808b73490984c49fb411", @typed={0x8, 0x5b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xeb, 0x71, 0x0, 0x0, @binary="ba20cf87c915e4055f9b2b983b9eb119e0d4a9989b1372ab32c6293b335a8067e5facebd494c608c2f8c7aad61d1b834da59e2cf8f861f10eb6d662a7f4d0761ea60ac3d79903d9939a18f41830ab57dd1f83c342cbb02af8a06a1137a9005ef4dba74ab92fc07f55dd66348a500b958e8e306c78240172af9352282d70725c33fb770cc2afcd694d20d08d11748fc18c9ffdaed6dcba52a44ff4011e6d7d7d98bdcf9e3d4317a5d5138a49ef00e895ac6baf8b6c38c4bf1de336e88673fb4ab7b2ff997f855802f8896310c22d46e94e3a994f0b4ab0ffaa1bb07309c10ab55f41e66e0c28010"}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r6}]}, @generic="783c616954dfe45f1fd7b654ead6f215dc4a87bbaaeeabc6a8adc58cbd80b29fbd4e2d3202eaa14b1164302a57045743ea49fad3ca49af9d7e6d9b21a2810a0250a07b7f2d5b99b47e1e45612d395e0341132412a3fb6993da41407e25d34aee185337ffde356fd82a11fefabe4145a6d665f6ee6cc75247d7d6424404a077c016c599083e4c3f8a9095959549ade036be1ce6a3e40b8e199d3657eac96d867f91c9c74a214e0a54d08f205f1c0278f33d94b4ba1b6eeb33a28ac0e603442b86f0ac4697142bb596e3d2ec7aad52eeee834e82695f4c206b8bd2b2f66eebf423a6b4627f3d1adcd57012643ada62a434c335e82d3b"]}, 0x154c}, {&(0x7f0000003680)={0x664, 0x16, 0x400, 0x70bd2a, 0x25dfdbff, "", [@typed={0xaf, 0x68, 0x0, 0x0, @binary="8ae85648151d9b1da5bd67f34ab5c3da9f6cf37ec205a71cffcf7f2eafdf3f6e7864324b602a1f3bdafc55f0e3c8c7459f35f90889fbc600ef8259bf1f337e787410315b23c1211cc6247db174bdacb7c0e46ccaf7c3de4428f0b5fb974daf550a804271cf6a1c7826fe69619a95e1af377f3e38016ee2024567d00cd19287c179dcc65a90e897a7a15293bd9724731991c8fc47592511597043dbb1646e1f597501e1daaa9625a3bf8f63"}, @generic="8ccda9caf1002634108546fb82c24839c5952438d9b4d5cec0b5c763834d6c97bce67b95be8cd8d3ad3a2105e5be5006e3642ea1d5d9792476aff4e54cf87fd10759641456eb38de1fe42171e55aaf7d0e57dd35dfebbeb354a925159c3287d2197aa8903b7d2c5fdf0e461153ea49fa024d28cb37eea1eb8c6a1cc37624d575f191f642ca3408db5256877d720f243b18725b71dddaaa600f590f130a09708e515bb816ceb0cce26fd2433d323e5e577d339afdfaad7f903a54e526ef520798f5ca3c449ab4cc16a46b04823d17ebb18820b9b82ec97cb7c485156dfecbe6c5baefeb", @generic="013b7c93d43bbdf7bd08aa1b3446385a80329a54d9ac23af65ff4b66d7c9175e78eb9666a50fff863473fa5266b2093d3fb1c4a51adc4430a37ef8e17cc81ce443ee6cf70db12df0d3eb2985aec5b60c962ca43d5b8122e73643447818e8bc43c5adc7016fdae9912406c2b4a0fc2982a0cfc2f2d09c1f37489d005dd947942b0c293f265c1c838727ab78cedc28ce565902cff27381ebb58f7dbe3735550620b32f8f44fd5db101b69e759c982d0424e3ffa02850772324266a9ce8d4d3a2127ef3915c18959fb69459e59970d5b2eb568a4a621cf8000dddca4afcf59fa516ac4f1069", @generic="5dca6ccb402a6764d58ec86b954fcd4a83b621ab90a9b47e2fb9fe1083a548ec7740f6f71613ad8e4fab25b82d0891e874b7a2747413f7247c8370e795ec275c78bae642bc3642e690847654f8013bf0aebdb3b13353d4950b83a781d076ac6306a97f4552", @generic="c4869582298e312547829ce870dfd4d70f7cd90756a1caa07b5c38251f23af0e6003541092fc55969b74b0d36b7f92fc4fb6b15408ed535e67710d322595b2fc69faccdf068adf69ef1ee392f4639bb5a62a073cf1f7583f3cbc72e2edd80a", @nested={0x2ac, 0x1f, 0x0, 0x1, [@generic="bef8d9b1ef183d0203e3c19a35d2d2a135c27a1db4bf61c6d29db671b4c82788aed48d2aac52df4a3699907370e34a07df1872c72d8e460138ba2c2c7ae83bd2bcfdc182f59b6db1e11ff213c1dc6ebecf940601868f288fc8582096af525c059151af2de15d5b321af8fc6b3acf46cc35d50f710da4a40dbdc5ccbbdb7a6411afb07e01d0f6b2a629e1597a3e52dc5f45d36beb829e11c2472c963e757849cc646f30bfa54960ff022957654b28e24f2cb71cb6172e5742172ee102c479057ba89ffce83a0e874b99bbb6a2fbdbca0f6f0339", @generic="3c007b576fe4328302e669efafedb2963f5866c4ecb8b8cf3ddb476940ba1aa74bd3ce449772193f768000ebfbd6954ef42c0c2b4e5e12db7a36957399d5da71b90dc4f6b45db96d1a6fa2929bc1b2dfcb8b05f9f9d3f53befd2017cb0b6f802ace21a280c115f2572c8c6174ec8cd4e4175917cb78add7c9fd9475896ee86197f6c510a6f6a36e602d95ab768daa4990e1c212570b53565e6b6ea2bc285dfccb4e57c7c15f46c48ad111631cbaf172451f31d26ca91213845d0ddefdbe666a6857b12bf3126c5c109fd0ad57d206ab1", @typed={0xc, 0x94, 0x0, 0x0, @str='*&}%@{/\x00'}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x6}, @generic="92a9997ec0a2560eb39453e3824bce1b48392c812bbc61144d761cd5db8f521ddd0052d9c4b84815912a2425da24e66112959caea5200eaae5f651493d9e27a3f5ae502b0a01f22bd22a276b61cde407bc20de28a2c7284ebd1bda986a0c84d83ce559d364f5e04c6b9f2cb41e0b1f65519be1e5aab3ef58f74d946b5415a601e00e505ed2210a8507c31c825012a4a53c0987389bd4d41d990560e1b9d897247e5dee948a78556ed8bf17ea7e0df085d7b64f8d2a88f8f93d5d268aad4a53447a5c0b01ce9e72d081d357679b05d3f2023480d89211d704b092412068f361813187f24b9272a7643ba8270f7eb49b6db8"]}, @nested={0x6c, 0x72, 0x0, 0x1, [@generic="f683c34fe49c3c67a7368170bddff90cfb436f09df522c8ed9acc4579b10198a4394920590f05b7b065dae751fff33f49e46c04f7e91e06f6043e86c3c53bc27aadb1810454ea20948b86c42eb04f440237fc0bdbf2e44207bfb0e2ba2c2d0b2168bbe06481751b5"]}]}, 0x664}], 0x9, &(0x7f0000003dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r9}}}], 0x20, 0x8004}, 0x4000) timer_settime(r4, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 19:06:04 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x20ffd000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:04 executing program 3 (fault-call:1 fault-nth:56): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x33fe0}, 0x0) [ 113.210604][ T7785] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 113.219441][ T7785] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 113.240196][ T7788] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 113.248622][ T7788] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 113.307112][ T7818] FAULT_INJECTION: forcing a failure. [ 113.307112][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 113.319789][ T7818] CPU: 0 PID: 7818 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 113.328460][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.338699][ T7818] Call Trace: [ 113.343318][ T7818] dump_stack_lvl+0xb7/0x103 [ 113.347907][ T7818] dump_stack+0x11/0x1a [ 113.352067][ T7818] should_fail+0x23c/0x250 [ 113.356724][ T7818] __should_failslab+0x81/0x90 [ 113.361499][ T7818] ? register_for_each_vma+0x372/0x890 [ 113.367164][ T7818] should_failslab+0x5/0x20 [ 113.372176][ T7818] kmem_cache_alloc_trace+0x49/0x310 [ 113.377466][ T7818] ? register_for_each_vma+0x372/0x890 [ 113.382925][ T7818] ? vma_interval_tree_iter_next+0x24c/0x280 [ 113.389016][ T7818] register_for_each_vma+0x372/0x890 [ 113.394291][ T7818] uprobe_apply+0x8b/0x260 [ 113.398806][ T7818] ? __uprobe_trace_func+0x430/0x430 [ 113.404341][ T7818] trace_uprobe_register+0x2b6/0x410 [ 113.409637][ T7818] perf_trace_event_init+0xf8/0x790 [ 113.414842][ T7818] perf_uprobe_init+0xf5/0x140 [ 113.420515][ T7818] perf_uprobe_event_init+0xde/0x140 [ 113.425875][ T7818] perf_try_init_event+0x21a/0x400 [ 113.431158][ T7818] perf_event_alloc+0xa60/0x1790 [ 113.436079][ T7818] __se_sys_perf_event_open+0x5c7/0x2740 [ 113.441861][ T7818] ? vfs_write+0x50c/0x770 [ 113.446371][ T7818] __x64_sys_perf_event_open+0x63/0x70 [ 113.451837][ T7818] do_syscall_64+0x3d/0x90 [ 113.456248][ T7818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.462135][ T7818] RIP: 0033:0x4665e9 [ 113.466126][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.485803][ T7818] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 113.494235][ T7818] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 113.502197][ T7818] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 113.510170][ T7818] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 113.518292][ T7818] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 113.526284][ T7818] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 113.535191][ T7818] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 113.543564][ T7818] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x40000}, 0x0) 19:06:05 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x40000000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:05 executing program 3 (fault-call:1 fault-nth:57): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x1000000}, 0x0) [ 113.632342][ T7846] FAULT_INJECTION: forcing a failure. [ 113.632342][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 113.645014][ T7846] CPU: 0 PID: 7846 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 113.653781][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.663860][ T7846] Call Trace: [ 113.667156][ T7846] dump_stack_lvl+0xb7/0x103 [ 113.671927][ T7846] dump_stack+0x11/0x1a [ 113.676087][ T7846] should_fail+0x23c/0x250 [ 113.681223][ T7846] __should_failslab+0x81/0x90 [ 113.686089][ T7846] ? register_for_each_vma+0x372/0x890 [ 113.691625][ T7846] should_failslab+0x5/0x20 [ 113.696317][ T7846] kmem_cache_alloc_trace+0x49/0x310 [ 113.701706][ T7846] ? register_for_each_vma+0x372/0x890 [ 113.707265][ T7846] ? vma_interval_tree_iter_next+0x263/0x280 [ 113.713397][ T7846] register_for_each_vma+0x372/0x890 [ 113.718669][ T7846] uprobe_apply+0x8b/0x260 [ 113.723183][ T7846] ? __uprobe_trace_func+0x430/0x430 [ 113.728809][ T7846] trace_uprobe_register+0x2b6/0x410 [ 113.734353][ T7846] perf_trace_event_init+0xf8/0x790 [ 113.739579][ T7846] perf_uprobe_init+0xf5/0x140 [ 113.744397][ T7846] perf_uprobe_event_init+0xde/0x140 [ 113.750116][ T7846] perf_try_init_event+0x21a/0x400 [ 113.755463][ T7846] perf_event_alloc+0xa60/0x1790 [ 113.760495][ T7846] __se_sys_perf_event_open+0x5c7/0x2740 [ 113.766341][ T7846] ? vfs_write+0x50c/0x770 [ 113.770777][ T7846] __x64_sys_perf_event_open+0x63/0x70 [ 113.776234][ T7846] do_syscall_64+0x3d/0x90 [ 113.780872][ T7846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.786781][ T7846] RIP: 0033:0x4665e9 [ 113.790659][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.810452][ T7846] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 113.819478][ T7846] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 19:06:05 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x42000000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 113.828728][ T7846] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 113.836699][ T7846] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 113.844809][ T7846] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 113.853036][ T7846] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 113.883534][ T7846] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 113.892183][ T7846] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 113.915410][ T7845] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:05 executing program 3 (fault-call:1 fault-nth:58): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 113.923854][ T7845] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 113.972247][ T7871] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 113.980628][ T7871] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 114.000446][ T7872] FAULT_INJECTION: forcing a failure. [ 114.000446][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 114.013107][ T7872] CPU: 1 PID: 7872 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 114.021850][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.031889][ T7872] Call Trace: [ 114.035241][ T7872] dump_stack_lvl+0xb7/0x103 [ 114.039814][ T7872] dump_stack+0x11/0x1a [ 114.044087][ T7872] should_fail+0x23c/0x250 [ 114.048621][ T7872] __should_failslab+0x81/0x90 [ 114.053514][ T7872] ? register_for_each_vma+0x372/0x890 [ 114.058974][ T7872] should_failslab+0x5/0x20 [ 114.063468][ T7872] kmem_cache_alloc_trace+0x49/0x310 [ 114.068751][ T7872] ? register_for_each_vma+0x372/0x890 [ 114.074241][ T7872] ? vma_interval_tree_iter_next+0x263/0x280 [ 114.080348][ T7872] register_for_each_vma+0x372/0x890 [ 114.085618][ T7872] uprobe_apply+0x8b/0x260 [ 114.090026][ T7872] ? __uprobe_trace_func+0x430/0x430 [ 114.095313][ T7872] trace_uprobe_register+0x2b6/0x410 [ 114.100736][ T7872] perf_trace_event_init+0xf8/0x790 [ 114.106005][ T7872] perf_uprobe_init+0xf5/0x140 [ 114.110793][ T7872] perf_uprobe_event_init+0xde/0x140 [ 114.116162][ T7872] perf_try_init_event+0x21a/0x400 [ 114.121263][ T7872] perf_event_alloc+0xa60/0x1790 [ 114.126185][ T7872] __se_sys_perf_event_open+0x5c7/0x2740 [ 114.131800][ T7872] ? vfs_write+0x50c/0x770 [ 114.136229][ T7872] __x64_sys_perf_event_open+0x63/0x70 [ 114.141730][ T7872] do_syscall_64+0x3d/0x90 [ 114.146245][ T7872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 114.152175][ T7872] RIP: 0033:0x4665e9 [ 114.156067][ T7872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.175890][ T7872] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 114.184340][ T7872] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 114.192326][ T7872] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 114.200300][ T7872] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 114.208341][ T7872] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 114.216296][ T7872] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 114.224519][ T7872] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 114.232885][ T7872] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:07 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x100000003, 0x3c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/234, 0xea}, {&(0x7f0000000600)=""/106, 0x6a}], 0x5, 0x3, 0x8) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xa53) splice(r2, 0x0, r1, 0x0, 0x10000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r8, r9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000700)={0x45c, 0x2f, 0x201, 0x70bd28, 0x25dfdbfc, "", [@generic="87de8f2844045d5ee05b495c1edbb1f5ab0be8e3a9f3a181f19012a206b7afb6bdb3a69b1b086c19211987b40542ac95f9d64cadf2c55344f63e6fcc42fbb635646304b7cccc31f0637f690629a1f57daf82a416932e812cbc5d4a2c4f0f8463d80978aa9777a765f9c36ceedd4cef0e0de79dde859e11d991e230c07bddfcc19357f70f5ecb24b053e4f4e1a1873c6455adfd3b717316fba58a5167821187d311266a69cf06d86d073301040abd3cf1a17ed377cb5e9c3e820a2405200ccefb260c4da96307227452647a065701ce83f5c2259c454f77805296ff16683518babf897b23944edb2a4b2db79d60b781a066", @nested={0x291, 0x29, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0xffff}, @typed={0x8, 0x5d, 0x0, 0x0, @pid}, @generic="b5fbc26aee89fff16fc1e961447227a568abf364a697d1ff5615cf29e56a63926e614d3ba9c67da5edcdd5dc320b7b44a0c688bc5bc32710790e1a17e10ac30879f5acd541dccf6b6e957e3aa58dbbc5f2cab692d69eaca0c45f97b4252f7704641929653558b2f03c896ee8ceb4a170dd578fde393bb2d36e7e1cde54d21def0deccca7649026f62304c4c3293e2ce49e87466e4bd00471290964aba9b288fd6b64b776ffcc522528b8b1a7cafdd54dc5556fc6a747b3b75ea158e61edbc447544b43e8f18214cdcb6df751a8", @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="8eeda0025663a3a0983015713ae754842043d149df5db735a94f0bbc5fceee6e7efadf266dc3f3ce673b6b60c1e8f3375598a04cfa7f837fa7dffdfac45c937d4cb5d6ccd7e5657084870702a9fd43a6645d48a3bfc5c764119ba489a423e69db70c842e55c00fc3ec", @typed={0x8, 0x84, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @generic="296d6e5c74c87e32383fa34d31b8593ca9887f42b9a5b9fc10739a8ed67633833b6ef864c1db53463388279c32b7d67c162fab680e3df34f76f973b8914f678309769108e2fc13a105b5733a22f4e4ac90791f1a8c3c9458e5ddbc3cccd900b9c7623e8d7bd37b4fdcf4cb62cf78cd7050ec800c115039f05844a1827c2fb01f0299059473b3f2c10e255fc9ace6d978785d5ba7e89a49284aaee1acf7cfec510bd74f40047d10475c857eb257e25effaf9c123e640c3501037b20ea3cb99cf55a351ad6063cd8571cc566972881c730f7f3c8d3b66bc9c8bdbfae9cdd2270ff034aefa803e15c7434fff34097b9a9a273d885b6c6c35e", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="66e4436ac91fc7172755a451dff0282f11b0d4332c49e9c46d2eb457f8a9a032a9054a14af0152e72a1ea33096b480ad6eabeabad2399c0fee8428dc93d13b3b6fb35bcc60aa1275c4318e59bbe6ed856fc6cfb471f78013a01e098eb31655b6bf3750118279435403ee540b7a9a14d67999d2e799dbab73b5f05c9efaab2fe83e04a35aa0f9ea8031cdbc713f243894f4c8d155d2497d3eae2d8b16f82b7212b57a61744aa83eb1e5797c23905d99bc6c9ea9c4a73e2ebbbf65ffc83ef202174c77e816"]}, 0x45c}, {&(0x7f0000000b80)={0xb8, 0x17, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0x8c, 0xf, 0x0, 0x1, [@typed={0xc, 0x41, 0x0, 0x0, @u64=0x7ff}, @typed={0x7c, 0x6e, 0x0, 0x0, @binary="834a6cfffd43ab039b50eef8748826ea4198f8905ebf5cd782c3a59e6f2ef96487e8afd8a5d7015df4707556085e14d81a1f558ddeed1bca20b2390572dcb33bb5e035cf7bc4bbb16d01865dba860f5208058c3e225b7ed488aa07b72a093b3c51c165302d846227468e05d2f03cc8bc7fa472fda48b6781"}]}, @generic="5082a63ba9085891dfeef8dfc73d6d999672", @typed={0x8, 0x8a, 0x0, 0x0, @uid}]}, 0xb8}, {&(0x7f0000000c40)={0x360, 0x12, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x34e, 0x75, 0x0, 0x1, [@generic="27d93aeaa71d32bdecb22a644eb6da263cda01ca069ea674e7846813d3d3c843ea221253967a3ee366f4b3d71ac173c9f7e74988884c5dc2e55cea7b34c06c56a5ba6c03483353077cac632c737b6681fb419b043744129d4521d9f9f7b7a0848585b2ad04b568e2e3eeeacc384face9a80bdcd3430450a43a67850d874e62032c395594e2a8ff1c37204e74e2dbb4a4e7f6b56d330c5307b5f3f17c9837f094496a0562d789ac3cf69058b91a5a6bec1558f3ab1337513b4d08974bcee50fcca622bee2ab5d6425f18a016ea3f9ccc7557d5f7e5b62a236b59c5136c691139fb01b39203b96e3d40d2bf08f", @generic="736f46e886d8cc94e8ac3862dc034476270d90d19fa964174e007c4a312f25c2922c4b11cfde6fef888f353069127c42f11f684c147f80001abe8fc219f84d50ecd447bccebf3524028ba5236e9780c13c07e9e961d5ff35744a9a060ff029185940838a3af501a1f5e984769c5442d6e18415ab276b471f610455798cd7fee726a07ee61214e1df853e9f4345a8d8c4cb02399f605d4f7fe3c6f7dc96ddffd1ac702b379840e5", @generic="2f94d69acd1c4d9c7854", @generic="8e16ad53631f75fcbed844", @generic="64347e1db14d98b7cdf2748b42a336e1c7de570475537a74fe099af002759e829e5dca65ac4f45877ef601d254939fbbfd2fea4c3e6dc75a7103e2d504e048bd8262dd71d9df1b2d57c0f14be56deb73ee5a4763e3e719c3c4f457c7aab4cc7aa802f5f73df95b126f9dbf59042537aca260b39459b25ba373237946d588e4aba6410cb1c7f890466d6042fbbf84a7ef90c14881b9f4f277892093a6ddbe5449d5c960b8d4fb985e1511153f327a6d325828be8ea814e9c5532f6913bc85dfb1c511bb06e56c694d60a041d249b3d17d8c52c54579f1775d071ca2bcb3", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}, @generic="edc0fc6e5c0852014f178e387c8cb9dda8d438864d5bd61580435ef6cf1492cd17620b9c19d10679dc1d961e7779e51882916bfa6001c2600dc72a570a802a9d790186fac42762339ae9c80901d2c750379f402fea5f9161982c3f0a431f462f9fd40132993687c3ad06a4d819feab4096956c7a32e8a9d3c0feea689777d70c28e7813f68ff0b3b6414d664a4930f44966931", @generic="3487c32a610ea91f42891519ddb88894b814d3b242a80b80bb25aaf4ba1cd1f6bc00", @typed={0x4, 0x35}]}]}, 0x360}, {&(0x7f0000000fc0)={0x1114, 0x24, 0x100, 0x70bd29, 0x25dfdbfd, "", [@typed={0xee, 0x52, 0x0, 0x0, @binary="9c600edec958a9a59cac9727e12e5cff46c063396fa396faf11724816e89d745720ab04b28e3d32d395fe8d3d93fad29b1132559be3c21c14409e4f5715255014fe2c2a9cb45de56367fd4c964fb498947903e01940d7df361ef4a666eed84301bd05ef47f8037611d7eccdd5666e4f3a34e5f5c503adc4f4fe7a754c54d50219ae96628fc4fefaadabae0dc02440be8e6ee30f244c3c37388ea35d5a172d436c7c6e6f60c0db9a77520a1c2f990d4d7f9045a26175cc80aaacb2c8220faeff9f9e5df55a960b91f2d1cf9da03888ddbd4e095ea14c7f15504290700a2e3565a91319b654331a967c2f1"}, @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @typed={0x1004, 0x47, 0x0, 0x0, @binary="3c6127e6d86c19ad74c6227176281645214173703ec61b681d42af2ec9754fef58f8df648a1f481a3acb16282c819cc2b0143629b1faac9e29dc79c12d34048fd2eb15fcf42349ca481c81eb0261725b597c71fcdfc774048a4d8b5991ab5137d9e50e2d659ea80d0f99e307b0452112777d544fa9bc26e18fe9b68fe0c134929c8dda710e070883829376b85d8749665397cf5bd2c098beed778afcd0ccccc346d54d7a3665bad5d80835f25b01ba2a9e4a389648070150d5d3a0a9f8cbf359da0b151c607f0e628e2fec3ed345a1027480248325ed57e7813fef8ee78d7a342f16d124666c35ef885887cfd3011371c62ee1667b5ccb2c9848354bd4e2ab413b002744ed2e2a9a6bf80cf89cd8174e049cc61307a6a141ac1b0ef93d98dfa9d0cebee9f78b69802d777e63bb7440bfd241a78af07a3324f1fa73b32163d78860cdd6a9a56524f431b160a7607d00b4daa30fe1a697f3f7ca3c0cfdd82f1386964d2a0fe691e7dba84a9d08a888af9ce11c8cbe5d5719b18b76f7521a6c4792fe0f0c0437247b306984cc82e8e6c9ad6f703e09302e104ffa54aea22ad175b27b22bacb81a36e4401fa8b16a572aa9e24929c829e8d45f296fa9a4de66580c7b969cc7e8c8fc69adaede89f0203f3e262a9704861e1a02d54669623a5be1ba9a2fd55f1f27804508a28861c3697b7001ff097baad3c28f82daa98245430ca098ce7e7133d2f79ccbfb38acc4fa8ba9c58d52a11bd3c9b98544919b42154ba53a7261768466410bd8742c79d8655838f1e6165d72145c5ea068df39e8a4b0db7a30afb0f5de2ea7663c58c01fe8c113d0f1360999bfa461aa971b137450c593d160189e84ec04568bdedae8326ee7434c809be69d601fa051e5878677df8770795c18017dea672537ca29f23d4b72ef7a73439bdfee3c3a40de345f9b6ed759b98856d322d7af8586c7b3fb0039d2dcf2eec1e9a92f5a8f8918d541cc2f7aa848332bf0120479b548b79024b920878f8440db8763ab2715684917cc8603796906f3d1a7e50696522c0cb1ff4abef256f40715927b28a36f2c7152557e8025bfed66c6bce2068110000629cf4250e5a6853c47d301a3e804fa0605d8397430295a76df18a90cb9e29c74087ecf9c2562ed3cca93c569d4b92fc76d0ae2b0189b2a6ef86cb4356354d428e5dc79f9ebcd4e68471766b290f82bf991061e4a9cd4c3e37574dc7c594b213b66a4d105d5a5edadc14908ff001f283cce6eb1b0698440386f3b5f53f82277c9cbb34dbbeb74a493c4b719212ca634df056c087ac3f8fc47ddedf2222d8f4566d8aa677b6a14f3fa86613ca2072c395787918e01623c31c59fc052c79d151422f95fca571938ca010f11d5939f827ca82cc1cb8da9a77085012f09ab5e2dada501465ae2ae40600ad474bad60b85f776f6d4ac520a1a092fb3cdacb21ce37ed532ccac993a1809073ef095c655aa7fb9baf8359a6d514d220420abfe0d95b3d88ff5f868b25653e18b6536c31f9f3905e642dab156cf82c28be9bb45beed6bb83930746e202a8a23ea934076c4f62f8dab2b1f869a748bbcd97aea6e5f5cf364965600a9f46252168481489635de9fb2d6a8ca2cab00184f1455bf59fae89344a6a6d409e96b7a6685e14fbba2a88b4703b467fe9765a55454ba8547d892d28daf2544c98e94fa2251679d9683d816608a5d0b2d0f4b751c991b5d30f882fb043fba006544bebcddac3d206267fefa9bb9713f51c79284d2128d0c3cb8c74c96aa6a0d3e6d142ac410e11d45e5aefbd2049ca5223c67d8b6ee074c5a5b925dbb62070e7f3efd08db095cfd0741960c5416feec1741724b250740f50f8b9e621fde7428bd19f1a228b967dbc30375decb95060961d1b95a3589606bcd154babeb0520f1cd184ac6a85507025ea4db6ebe0da7b0aa1e1d8150d0dc99c196d50c595ced7c052d2fb0c38fdb1ed2635962f93cdfda30d34ed9313f3d9e0288d25298319644ef8f884ce2e2d9bf94132ab0005f9956fca503ca72d34a16b30086c171138dae43cbd5cdfc6bbb7d2630048c7393bd6fd1ae52786fa72de3e6e1a5138d056b52d0d2fce94655a20a5d5010cfc962f17a69f994e72c08fb812884dfc8c65ef73d2ac67c3659892bae28d2fda651f2b2d4c137696bf8a203034ac53b15d48c7c181f4730626f282aa9537694e9d55ce00870ab60c298ab6c149a2c65c8f5b3d15605500b735a46ece49481f8469ed199f1d2648a76b357b31339f0b11ad001fff8b7a231c43eaa343677531cb292bfa1830be7116a7a7601c92f4223a0918aba40fab21724c0517692ff7c068eb7519287e9667a41b4f43bd92c681721e2ff25489c97272054966600bd91b1e838eb0c479bbf124ac8cc9e2f7e717ee2e930d3f787172f37a50613c0dba930147c9c330448b84792a7674629dc83336922d99457544400690ce0efc429c57167ea25cf87fde0eb4bfd9c14fc0535e365766046fb53c5640b7d0d58b733c11016dc7ac6f5c4807bc08b141e7376bbb57b4577378c6366218bcd603fa99722eb9ba0219799275abc4cfb7a755ba1e67199299f5d554d2f684e7ed5cbce8c8927017276e3231d97e4ed85d74319ad6bde8ef108eed86ef68f4e979464f8f8e8fc931f7cb712351f8af8a245f69e9209b0d82499ce10b208effc73d763190ac54e87b79066d1826d0d4c2c0146761e9dee265d3b8a4fa1db0892fb1cdffeec9236e2c6f908871a55f16cb9c5023325f94daced59dcd96fd675caafdfdefcd449d03cf080f17e1594a8801871afd557b0a599616a18383168791b228286289d25e63c95f2a3c52aa31d31a84a8ef25cfc281999807abf17762dde2ed75ba91f3fe5e3b50fb73390678fe6dec7140bb7ba82813a5a290ab1aa5e682c468134b38b38290ef2d7192ab5de8122eb54268b4c3668a10b74687c143402a29d84d2abb2b63b0c1b09b75ee21684477a56f4535c41ed5079a41df989ce3e66b1857bfc9b022081a3ddb00fc85287f0aaa7bfce340ed11f8b84c6596571ea10dcff5a1536f3862504a23ecc22cb8897dffbfd35608e443b98e66c218de0579308f5eb0816d47d07f72d5cb42c51bbfabe3009ff9dbd06f4b6f1c0394c1a2016fe0b799632abe05c8edce8b07140f030b198fe3ef7fa61c7aad1ec303cb968e19f14af516e3f6ceaf3e1f19eabba2e1f5e6bb280a457d93bcb3b406c51d371d80e4b3c941ed45104a5d8067e29c0f69abcf6ca1a9e22df1498f74e5acfaf34ece297ffb4e7cf0f2d6d6e71c2f93d05cf72606dc7e6e46af2a35a3b5d2b2eeb7212bf7dfc0cb4209e70837259675021aeb7999a189f282cab53166d7cc2ed9381a0218ab563731e68176f68ae655a594285250c27b2165797c920411631441ff830443ed2b9cfaf02a724ac2115a27d649628913096c01d257269ff6e34614a5e63ae78865c6200bb2ecc0404066b763ee6229346d6a5d585e6df8c43437ae9506fb728f2fc20cc73abd926efc444cc760d9c9d83471ad08a2aaf9ee1a07db4c7a3caa3b37d7fb1f22e7c54493d78e57a3805333d3f949c98754383dca74eb54aef5d4844b7971ed2445245965dce9d46ea316135d1bbc1bae17f37ece3e470c669b9cb13eacb136016070ce2f35fc7b69cc7ffa06a71306935a5afea3c145f88559afd93ae238a5da67884ee7a6cc72601051c7a14164da1092f9ae877358ef90a50b8ca0e72ed2c5286a6d50ca9cc6aa5abd94547f4ad7891221112fccd869fd3c9e8876fdb255a7ed25af6f4b2770b4c56df8b192260aa871f90c05528550ae978d453e6c1dc383f39c8d184b8b8b4b557f1d4c849c28a5f3cc59dc234d227b4522f2e490727796396ef44a5cb6b93f81f756cf1dd4057f872228c51ae55996557a1c476cd3fe52c697bb1bd290594c3a1001441c1bb5ad89aade239851bfe60131d4a11bc9c83c5d1f7b02e6349737af94ce601be8bc5c4049b91b08dd58b4253c7a3e1b2184097ca3fb92de425226f57e8c30e4c82ce31f237399c6c3156db4c296defc76c345b37345b946a23adf4081ba1eb875f4598f6d4e6b1fc44d5713d992b4e751ae3791f9dc4b96dc04bffc46b46ecdd977623a0d176744196bef2a550c11447121ad702f51a5ff29cf9003181cf7bdaddc8a4ba3f7625d03499caba52dc3f49b0d12df968f82086c70ca48381637c136d2f4eacb68bcf184a58e6400d6547e6a1e9e9c7db2ae82b87575cc089d13490aee099a4bd1098c5b39bd826f23f2c90eff77ca493483edf02fbc1f698389493f2b24f1bc7a022f78779333c276c76427cda26dc9ea45dafb3f220f359f3ffe732736342253b3b17b3a92aa3ec4916ce3237aeeae45fd68cf3e317efd70ebeb23c32f026abd026e2bbc8fd131b6642c04eb13a864b64b281d6696c0e7958f27c6fd177ef03db9a59a512fb4c5cd348fa5993a7de8d32a54f332f06e2637ad7102ffc52b0fc81b93a3429f5bae85612003dad8d3083d4d64c083376f255bb4254b057c076ed213eaf8ae2940dd53fe2f62884313998a9e2fd06359ed72466f27cfaca00c8e1e02daf8fc16d5d5d9fe6594fcfb5f571c3258b72f004bf955569f55f330c0adad7f86ebb5b213557f9bc69fb1dc2e4aba1d31fd10ff2b7b20b519d4b67071d64e86083e9fc64a64a7f0a70cc21ec07ed4c68dbbc3cc13500efa648ccdc16ec7a60e92fd778544021a2fb2750961a4296cb06a6ababb8a000ee1667263aa9c16745fe3c26593ac9b45ddbfe9758ac7be869093c777f69fd275d27fe1b275be86874f9ce70368c79588b059f0025b37f9f223ee3cd101c48325e91c4c01d9833704db07ada8572de86453cef60b7c6926a2a65de5ca381de8df6a294ce7f9fb47a20311792d37f90503582ae890b8ef4c2818b625d7eeabfafb0b7424bb17b16105aa627c2777337f272dc1d6073e9ae8dab5dedeb7f95d8943a6d7ddf6360976bf604cc3a75956580a9ac7c103645f1252aca9567cb9ca304c3c49a229fd7f26ac18207a99bca5583e155127e69607015857f37908e7ff619c69277900adea293ac64b334927cdeaa58c65822b693e217528c60873448ee1166439a17fa4ac7533f90ca4283d2aadf2d8ef65ea2df3d19a6150137e85fd30258e1deb0e664642c0b6080a5babb8159adafa4d83203ea8cc614bdc09139d66d586248026377d8bada49f28cf7b3f891592cc40c6ef88c8356cab46df27559ed44f7692250de7262811d11a759b69d34c0b6e15608f5db292ca20770fee1e8f952a1f28ff0fa82d06cdb307558bb3792e8bb00d5e3900848c599d956c969d6b2d9830c19c324e63036d58217d13a7e2ea64aab1b5c93f46c32320cffb167eb10c30e5cc3d0bd232253da45780bc961e2f7c9fd1e63d970ac5dbe984d4872febc765e4fdc8f2252503324ff08fdebcd85f02fd23755f04065c937e7a339520224044e259b3ec17eba1fb147cbb87990d7cdc03eb7daeee679365f61ca353b84b620caca6d65b044258a39fefd9c9eaa520cc9ae009cee51b094e71ccd66efcc710fe66c70ef2e7e5b75e5ec2614e16b89687fc2ee2ca61e93c170e59e3597b4e6b7b0430ea6306fc28192e11d98bc29a7c9439ec1cedcc6db6bbd84910146ddea6ccec218a1e16e4022fb224e0d784a740ee1a228337089b51f50a84081a0ed9624bd8b1e7e1710460940646ed9a7e02befb8e3b3d0558f00a615323599bfb864c14b091abb111e149d49d4d06f51c820a361876852d57fa4bdb637c"}]}, 0x1114}, {&(0x7f0000000100)={0x10, 0x38, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f00000001c0)={0x18, 0x39, 0x20, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000002c0)={0x20, 0x1c, 0x400, 0x70bd25, 0x25dfdbfb, "", [@typed={0x4, 0x1b}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x20}, {&(0x7f0000002100)={0x154c, 0x19, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x1004, 0xd, 0x0, 0x1, [@generic="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"]}, @nested={0x184, 0x9, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @uid=0xee00}, @generic="e95dca6474e9aaffb87c6d24f433de92d74ff4474e112265e1cc89632dc4a7ed87b0e62fa62ef1193ac46e98caea92e3ccae6853f023469bfa04a2e194f62372e75aee76b47bf7f4dfcfbed3de5d51ad9871869e2d9fdf99828f35bbef", @generic="94e99380fb24152189891f", @generic="9669efadfa7f2c5319e751b705408bfc072b398c9b862f09909bfb1b8e86302e66ada5a14b90ed2f8ad04db8b5729072f0564fbeb562d2783da69bb38b5ea3f80c0a497598b7ae498ce37d7db50b761339e4c8e394e54e91f9509ced1bf3d56fb954981c6101e9530c1157566416c6c915d57ce1b365643988af2a0bee8a52c34337cf378cdfab241893e5f4f385bd0b29acc3592dea5cc03844fa33a089", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r1}, @generic="3b8f5b7303a2a98c79c43a7792f59bd8fcaf70684aa615f27dba2c85d053672e8d8cd8876fb79e1703d636f8ee6498b2a84d213e3ce731524efc7a47dbf3a025867a966926c79e1e02bc7e3fbfd2d6e0ab763e09aa85"]}, @nested={0xe5, 0x81, 0x0, 0x1, [@generic="b38534cd50935d59de91df08f9fff229600aa02f3b106fdb50696d2bddebdb1fb79919d05d5e951f67d12be6566441d38ced97432ad35b7a0b64de28669788fe3faf9745c1ab810e2111381bb5d9fa8c8148ac98d8184fb23ef3bf5fe182b5cefb2676461731a0fb37af782a0a13ce2d7b351efe3a6c771e6f668c52fbf000312e8cb371a5bc661331ce0c7af3350e3ab83013fd1b2470aa33d0ea5068af5190ba72f385e93e2cfe53d4819c0c7b2585405a4c11153c8f170a18336df0c111fd42b3e8007a098bbd23db31e7b5dfd73267c8e91bc1217231478e8919709e9e086e"]}, @nested={0x18, 0x74, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0xc, 0x65, 0x0, 0x0, @u64=0x6}]}, @nested={0x1b9, 0x39, 0x0, 0x1, [@generic="de5717aeb2259988c3678211be11c6307be494ff1cbefd4ad802193945e23a05be90f1f9b2f8191a17819d4d0ab69265e5d8deec2202d6a1a8adfe30e70deca8eeaf717f42edba4f2447a7f7167a78436b7527b8eedb161c7dacb706ade3b6fe4caf94d79a25b368e0f4bef1217e092a6c0ee75edda0a634fb14e8608afb5645316ba13154c98d45d2c0e1ba55f97ab4f9e7b6689875fd808b73490984c49fb411", @typed={0x8, 0x5b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xeb, 0x71, 0x0, 0x0, @binary="ba20cf87c915e4055f9b2b983b9eb119e0d4a9989b1372ab32c6293b335a8067e5facebd494c608c2f8c7aad61d1b834da59e2cf8f861f10eb6d662a7f4d0761ea60ac3d79903d9939a18f41830ab57dd1f83c342cbb02af8a06a1137a9005ef4dba74ab92fc07f55dd66348a500b958e8e306c78240172af9352282d70725c33fb770cc2afcd694d20d08d11748fc18c9ffdaed6dcba52a44ff4011e6d7d7d98bdcf9e3d4317a5d5138a49ef00e895ac6baf8b6c38c4bf1de336e88673fb4ab7b2ff997f855802f8896310c22d46e94e3a994f0b4ab0ffaa1bb07309c10ab55f41e66e0c28010"}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r6}]}, @generic="783c616954dfe45f1fd7b654ead6f215dc4a87bbaaeeabc6a8adc58cbd80b29fbd4e2d3202eaa14b1164302a57045743ea49fad3ca49af9d7e6d9b21a2810a0250a07b7f2d5b99b47e1e45612d395e0341132412a3fb6993da41407e25d34aee185337ffde356fd82a11fefabe4145a6d665f6ee6cc75247d7d6424404a077c016c599083e4c3f8a9095959549ade036be1ce6a3e40b8e199d3657eac96d867f91c9c74a214e0a54d08f205f1c0278f33d94b4ba1b6eeb33a28ac0e603442b86f0ac4697142bb596e3d2ec7aad52eeee834e82695f4c206b8bd2b2f66eebf423a6b4627f3d1adcd57012643ada62a434c335e82d3b"]}, 0x154c}, {&(0x7f0000003680)={0x664, 0x16, 0x400, 0x70bd2a, 0x25dfdbff, "", [@typed={0xaf, 0x68, 0x0, 0x0, @binary="8ae85648151d9b1da5bd67f34ab5c3da9f6cf37ec205a71cffcf7f2eafdf3f6e7864324b602a1f3bdafc55f0e3c8c7459f35f90889fbc600ef8259bf1f337e787410315b23c1211cc6247db174bdacb7c0e46ccaf7c3de4428f0b5fb974daf550a804271cf6a1c7826fe69619a95e1af377f3e38016ee2024567d00cd19287c179dcc65a90e897a7a15293bd9724731991c8fc47592511597043dbb1646e1f597501e1daaa9625a3bf8f63"}, @generic="8ccda9caf1002634108546fb82c24839c5952438d9b4d5cec0b5c763834d6c97bce67b95be8cd8d3ad3a2105e5be5006e3642ea1d5d9792476aff4e54cf87fd10759641456eb38de1fe42171e55aaf7d0e57dd35dfebbeb354a925159c3287d2197aa8903b7d2c5fdf0e461153ea49fa024d28cb37eea1eb8c6a1cc37624d575f191f642ca3408db5256877d720f243b18725b71dddaaa600f590f130a09708e515bb816ceb0cce26fd2433d323e5e577d339afdfaad7f903a54e526ef520798f5ca3c449ab4cc16a46b04823d17ebb18820b9b82ec97cb7c485156dfecbe6c5baefeb", @generic="013b7c93d43bbdf7bd08aa1b3446385a80329a54d9ac23af65ff4b66d7c9175e78eb9666a50fff863473fa5266b2093d3fb1c4a51adc4430a37ef8e17cc81ce443ee6cf70db12df0d3eb2985aec5b60c962ca43d5b8122e73643447818e8bc43c5adc7016fdae9912406c2b4a0fc2982a0cfc2f2d09c1f37489d005dd947942b0c293f265c1c838727ab78cedc28ce565902cff27381ebb58f7dbe3735550620b32f8f44fd5db101b69e759c982d0424e3ffa02850772324266a9ce8d4d3a2127ef3915c18959fb69459e59970d5b2eb568a4a621cf8000dddca4afcf59fa516ac4f1069", @generic="5dca6ccb402a6764d58ec86b954fcd4a83b621ab90a9b47e2fb9fe1083a548ec7740f6f71613ad8e4fab25b82d0891e874b7a2747413f7247c8370e795ec275c78bae642bc3642e690847654f8013bf0aebdb3b13353d4950b83a781d076ac6306a97f4552", @generic="c4869582298e312547829ce870dfd4d70f7cd90756a1caa07b5c38251f23af0e6003541092fc55969b74b0d36b7f92fc4fb6b15408ed535e67710d322595b2fc69faccdf068adf69ef1ee392f4639bb5a62a073cf1f7583f3cbc72e2edd80a", @nested={0x2ac, 0x1f, 0x0, 0x1, [@generic="bef8d9b1ef183d0203e3c19a35d2d2a135c27a1db4bf61c6d29db671b4c82788aed48d2aac52df4a3699907370e34a07df1872c72d8e460138ba2c2c7ae83bd2bcfdc182f59b6db1e11ff213c1dc6ebecf940601868f288fc8582096af525c059151af2de15d5b321af8fc6b3acf46cc35d50f710da4a40dbdc5ccbbdb7a6411afb07e01d0f6b2a629e1597a3e52dc5f45d36beb829e11c2472c963e757849cc646f30bfa54960ff022957654b28e24f2cb71cb6172e5742172ee102c479057ba89ffce83a0e874b99bbb6a2fbdbca0f6f0339", @generic="3c007b576fe4328302e669efafedb2963f5866c4ecb8b8cf3ddb476940ba1aa74bd3ce449772193f768000ebfbd6954ef42c0c2b4e5e12db7a36957399d5da71b90dc4f6b45db96d1a6fa2929bc1b2dfcb8b05f9f9d3f53befd2017cb0b6f802ace21a280c115f2572c8c6174ec8cd4e4175917cb78add7c9fd9475896ee86197f6c510a6f6a36e602d95ab768daa4990e1c212570b53565e6b6ea2bc285dfccb4e57c7c15f46c48ad111631cbaf172451f31d26ca91213845d0ddefdbe666a6857b12bf3126c5c109fd0ad57d206ab1", @typed={0xc, 0x94, 0x0, 0x0, @str='*&}%@{/\x00'}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x6}, @generic="92a9997ec0a2560eb39453e3824bce1b48392c812bbc61144d761cd5db8f521ddd0052d9c4b84815912a2425da24e66112959caea5200eaae5f651493d9e27a3f5ae502b0a01f22bd22a276b61cde407bc20de28a2c7284ebd1bda986a0c84d83ce559d364f5e04c6b9f2cb41e0b1f65519be1e5aab3ef58f74d946b5415a601e00e505ed2210a8507c31c825012a4a53c0987389bd4d41d990560e1b9d897247e5dee948a78556ed8bf17ea7e0df085d7b64f8d2a88f8f93d5d268aad4a53447a5c0b01ce9e72d081d357679b05d3f2023480d89211d704b092412068f361813187f24b9272a7643ba8270f7eb49b6db8"]}, @nested={0x6c, 0x72, 0x0, 0x1, [@generic="f683c34fe49c3c67a7368170bddff90cfb436f09df522c8ed9acc4579b10198a4394920590f05b7b065dae751fff33f49e46c04f7e91e06f6043e86c3c53bc27aadb1810454ea20948b86c42eb04f440237fc0bdbf2e44207bfb0e2ba2c2d0b2168bbe06481751b5"]}]}, 0x664}], 0x9, &(0x7f0000003dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r9}}}], 0x20, 0x8004}, 0x4000) timer_settime(r4, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 19:06:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x1ee0000}, 0x0) 19:06:07 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x5c020000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x25, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:07 executing program 3 (fault-call:1 fault-nth:59): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) [ 116.270986][ T7888] FAULT_INJECTION: forcing a failure. [ 116.270986][ T7888] name failslab, interval 1, probability 0, space 0, times 0 [ 116.284002][ T7888] CPU: 0 PID: 7888 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 116.292687][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.302870][ T7888] Call Trace: [ 116.306554][ T7888] dump_stack_lvl+0xb7/0x103 [ 116.311137][ T7888] dump_stack+0x11/0x1a [ 116.315413][ T7888] should_fail+0x23c/0x250 [ 116.319924][ T7888] __should_failslab+0x81/0x90 [ 116.324679][ T7888] ? register_for_each_vma+0x372/0x890 [ 116.330304][ T7888] should_failslab+0x5/0x20 [ 116.334937][ T7888] kmem_cache_alloc_trace+0x49/0x310 [ 116.340238][ T7888] ? register_for_each_vma+0x372/0x890 [ 116.345719][ T7888] ? vma_interval_tree_iter_next+0x24c/0x280 [ 116.351810][ T7888] register_for_each_vma+0x372/0x890 [ 116.357122][ T7888] uprobe_apply+0x8b/0x260 [ 116.362051][ T7888] ? __uprobe_trace_func+0x430/0x430 [ 116.367338][ T7888] trace_uprobe_register+0x2b6/0x410 [ 116.372675][ T7888] perf_trace_event_init+0xf8/0x790 [ 116.377876][ T7888] perf_uprobe_init+0xf5/0x140 [ 116.382824][ T7888] perf_uprobe_event_init+0xde/0x140 [ 116.388193][ T7888] perf_try_init_event+0x21a/0x400 [ 116.393453][ T7888] perf_event_alloc+0xa60/0x1790 [ 116.398384][ T7888] __se_sys_perf_event_open+0x5c7/0x2740 [ 116.404006][ T7888] ? vfs_write+0x50c/0x770 [ 116.408776][ T7888] __x64_sys_perf_event_open+0x63/0x70 [ 116.414534][ T7888] do_syscall_64+0x3d/0x90 [ 116.419208][ T7888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.425550][ T7888] RIP: 0033:0x4665e9 [ 116.429454][ T7888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.449059][ T7888] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 116.457688][ T7888] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 19:06:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x3000000}, 0x0) 19:06:08 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x64000000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 116.466421][ T7888] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 116.474484][ T7888] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 116.482444][ T7888] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 116.490800][ T7888] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x4000000}, 0x0) 19:06:08 executing program 3 (fault-call:1 fault-nth:60): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 116.520508][ T7888] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 116.529041][ T7888] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 116.549322][ T7890] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 116.557913][ T7890] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:08 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x68020000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 116.618963][ T7922] FAULT_INJECTION: forcing a failure. [ 116.618963][ T7922] name failslab, interval 1, probability 0, space 0, times 0 [ 116.631963][ T7922] CPU: 1 PID: 7922 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 116.640780][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.650841][ T7922] Call Trace: [ 116.654122][ T7922] dump_stack_lvl+0xb7/0x103 [ 116.658822][ T7922] dump_stack+0x11/0x1a [ 116.663271][ T7922] should_fail+0x23c/0x250 19:06:08 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0xfeffffff, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 116.667726][ T7922] __should_failslab+0x81/0x90 [ 116.672650][ T7922] ? register_for_each_vma+0x372/0x890 [ 116.678274][ T7922] should_failslab+0x5/0x20 [ 116.682806][ T7922] kmem_cache_alloc_trace+0x49/0x310 [ 116.688202][ T7922] ? register_for_each_vma+0x372/0x890 [ 116.693647][ T7922] ? vma_interval_tree_iter_next+0x24c/0x280 [ 116.699823][ T7922] register_for_each_vma+0x372/0x890 [ 116.705121][ T7922] uprobe_apply+0x8b/0x260 [ 116.709650][ T7922] ? __uprobe_trace_func+0x430/0x430 [ 116.715409][ T7922] trace_uprobe_register+0x2b6/0x410 [ 116.720800][ T7922] perf_trace_event_init+0xf8/0x790 [ 116.725995][ T7922] perf_uprobe_init+0xf5/0x140 [ 116.730782][ T7922] perf_uprobe_event_init+0xde/0x140 [ 116.736221][ T7922] perf_try_init_event+0x21a/0x400 [ 116.741467][ T7922] perf_event_alloc+0xa60/0x1790 [ 116.746445][ T7922] __se_sys_perf_event_open+0x5c7/0x2740 [ 116.752138][ T7922] ? vfs_write+0x50c/0x770 [ 116.756548][ T7922] __x64_sys_perf_event_open+0x63/0x70 [ 116.762199][ T7922] do_syscall_64+0x3d/0x90 [ 116.767001][ T7922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.773114][ T7922] RIP: 0033:0x4665e9 [ 116.777094][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.797346][ T7922] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 116.806147][ T7922] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 116.814203][ T7922] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 116.822336][ T7922] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 116.830606][ T7922] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 116.838700][ T7922] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 116.866909][ T7922] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 116.875272][ T7922] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:10 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x100000003, 0x3c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/234, 0xea}, {&(0x7f0000000600)=""/106, 0x6a}], 0x5, 0x3, 0x8) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xa53) splice(r2, 0x0, r1, 0x0, 0x10000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r8, r9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000700)={0x45c, 0x2f, 0x201, 0x70bd28, 0x25dfdbfc, "", [@generic="87de8f2844045d5ee05b495c1edbb1f5ab0be8e3a9f3a181f19012a206b7afb6bdb3a69b1b086c19211987b40542ac95f9d64cadf2c55344f63e6fcc42fbb635646304b7cccc31f0637f690629a1f57daf82a416932e812cbc5d4a2c4f0f8463d80978aa9777a765f9c36ceedd4cef0e0de79dde859e11d991e230c07bddfcc19357f70f5ecb24b053e4f4e1a1873c6455adfd3b717316fba58a5167821187d311266a69cf06d86d073301040abd3cf1a17ed377cb5e9c3e820a2405200ccefb260c4da96307227452647a065701ce83f5c2259c454f77805296ff16683518babf897b23944edb2a4b2db79d60b781a066", @nested={0x291, 0x29, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0xffff}, @typed={0x8, 0x5d, 0x0, 0x0, @pid}, @generic="b5fbc26aee89fff16fc1e961447227a568abf364a697d1ff5615cf29e56a63926e614d3ba9c67da5edcdd5dc320b7b44a0c688bc5bc32710790e1a17e10ac30879f5acd541dccf6b6e957e3aa58dbbc5f2cab692d69eaca0c45f97b4252f7704641929653558b2f03c896ee8ceb4a170dd578fde393bb2d36e7e1cde54d21def0deccca7649026f62304c4c3293e2ce49e87466e4bd00471290964aba9b288fd6b64b776ffcc522528b8b1a7cafdd54dc5556fc6a747b3b75ea158e61edbc447544b43e8f18214cdcb6df751a8", @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="8eeda0025663a3a0983015713ae754842043d149df5db735a94f0bbc5fceee6e7efadf266dc3f3ce673b6b60c1e8f3375598a04cfa7f837fa7dffdfac45c937d4cb5d6ccd7e5657084870702a9fd43a6645d48a3bfc5c764119ba489a423e69db70c842e55c00fc3ec", @typed={0x8, 0x84, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @generic="296d6e5c74c87e32383fa34d31b8593ca9887f42b9a5b9fc10739a8ed67633833b6ef864c1db53463388279c32b7d67c162fab680e3df34f76f973b8914f678309769108e2fc13a105b5733a22f4e4ac90791f1a8c3c9458e5ddbc3cccd900b9c7623e8d7bd37b4fdcf4cb62cf78cd7050ec800c115039f05844a1827c2fb01f0299059473b3f2c10e255fc9ace6d978785d5ba7e89a49284aaee1acf7cfec510bd74f40047d10475c857eb257e25effaf9c123e640c3501037b20ea3cb99cf55a351ad6063cd8571cc566972881c730f7f3c8d3b66bc9c8bdbfae9cdd2270ff034aefa803e15c7434fff34097b9a9a273d885b6c6c35e", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="66e4436ac91fc7172755a451dff0282f11b0d4332c49e9c46d2eb457f8a9a032a9054a14af0152e72a1ea33096b480ad6eabeabad2399c0fee8428dc93d13b3b6fb35bcc60aa1275c4318e59bbe6ed856fc6cfb471f78013a01e098eb31655b6bf3750118279435403ee540b7a9a14d67999d2e799dbab73b5f05c9efaab2fe83e04a35aa0f9ea8031cdbc713f243894f4c8d155d2497d3eae2d8b16f82b7212b57a61744aa83eb1e5797c23905d99bc6c9ea9c4a73e2ebbbf65ffc83ef202174c77e816"]}, 0x45c}, {&(0x7f0000000b80)={0xb8, 0x17, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0x8c, 0xf, 0x0, 0x1, [@typed={0xc, 0x41, 0x0, 0x0, @u64=0x7ff}, @typed={0x7c, 0x6e, 0x0, 0x0, @binary="834a6cfffd43ab039b50eef8748826ea4198f8905ebf5cd782c3a59e6f2ef96487e8afd8a5d7015df4707556085e14d81a1f558ddeed1bca20b2390572dcb33bb5e035cf7bc4bbb16d01865dba860f5208058c3e225b7ed488aa07b72a093b3c51c165302d846227468e05d2f03cc8bc7fa472fda48b6781"}]}, @generic="5082a63ba9085891dfeef8dfc73d6d999672", @typed={0x8, 0x8a, 0x0, 0x0, @uid}]}, 0xb8}, {&(0x7f0000000c40)={0x360, 0x12, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x34e, 0x75, 0x0, 0x1, [@generic="27d93aeaa71d32bdecb22a644eb6da263cda01ca069ea674e7846813d3d3c843ea221253967a3ee366f4b3d71ac173c9f7e74988884c5dc2e55cea7b34c06c56a5ba6c03483353077cac632c737b6681fb419b043744129d4521d9f9f7b7a0848585b2ad04b568e2e3eeeacc384face9a80bdcd3430450a43a67850d874e62032c395594e2a8ff1c37204e74e2dbb4a4e7f6b56d330c5307b5f3f17c9837f094496a0562d789ac3cf69058b91a5a6bec1558f3ab1337513b4d08974bcee50fcca622bee2ab5d6425f18a016ea3f9ccc7557d5f7e5b62a236b59c5136c691139fb01b39203b96e3d40d2bf08f", @generic="736f46e886d8cc94e8ac3862dc034476270d90d19fa964174e007c4a312f25c2922c4b11cfde6fef888f353069127c42f11f684c147f80001abe8fc219f84d50ecd447bccebf3524028ba5236e9780c13c07e9e961d5ff35744a9a060ff029185940838a3af501a1f5e984769c5442d6e18415ab276b471f610455798cd7fee726a07ee61214e1df853e9f4345a8d8c4cb02399f605d4f7fe3c6f7dc96ddffd1ac702b379840e5", @generic="2f94d69acd1c4d9c7854", @generic="8e16ad53631f75fcbed844", @generic="64347e1db14d98b7cdf2748b42a336e1c7de570475537a74fe099af002759e829e5dca65ac4f45877ef601d254939fbbfd2fea4c3e6dc75a7103e2d504e048bd8262dd71d9df1b2d57c0f14be56deb73ee5a4763e3e719c3c4f457c7aab4cc7aa802f5f73df95b126f9dbf59042537aca260b39459b25ba373237946d588e4aba6410cb1c7f890466d6042fbbf84a7ef90c14881b9f4f277892093a6ddbe5449d5c960b8d4fb985e1511153f327a6d325828be8ea814e9c5532f6913bc85dfb1c511bb06e56c694d60a041d249b3d17d8c52c54579f1775d071ca2bcb3", @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}, @generic="edc0fc6e5c0852014f178e387c8cb9dda8d438864d5bd61580435ef6cf1492cd17620b9c19d10679dc1d961e7779e51882916bfa6001c2600dc72a570a802a9d790186fac42762339ae9c80901d2c750379f402fea5f9161982c3f0a431f462f9fd40132993687c3ad06a4d819feab4096956c7a32e8a9d3c0feea689777d70c28e7813f68ff0b3b6414d664a4930f44966931", @generic="3487c32a610ea91f42891519ddb88894b814d3b242a80b80bb25aaf4ba1cd1f6bc00", @typed={0x4, 0x35}]}]}, 0x360}, {&(0x7f0000000fc0)={0x1114, 0x24, 0x100, 0x70bd29, 0x25dfdbfd, "", [@typed={0xee, 0x52, 0x0, 0x0, @binary="9c600edec958a9a59cac9727e12e5cff46c063396fa396faf11724816e89d745720ab04b28e3d32d395fe8d3d93fad29b1132559be3c21c14409e4f5715255014fe2c2a9cb45de56367fd4c964fb498947903e01940d7df361ef4a666eed84301bd05ef47f8037611d7eccdd5666e4f3a34e5f5c503adc4f4fe7a754c54d50219ae96628fc4fefaadabae0dc02440be8e6ee30f244c3c37388ea35d5a172d436c7c6e6f60c0db9a77520a1c2f990d4d7f9045a26175cc80aaacb2c8220faeff9f9e5df55a960b91f2d1cf9da03888ddbd4e095ea14c7f15504290700a2e3565a91319b654331a967c2f1"}, @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @typed={0x1004, 0x47, 0x0, 0x0, @binary="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"}]}, 0x1114}, {&(0x7f0000000100)={0x10, 0x38, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f00000001c0)={0x18, 0x39, 0x20, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000002c0)={0x20, 0x1c, 0x400, 0x70bd25, 0x25dfdbfb, "", [@typed={0x4, 0x1b}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x20}, {&(0x7f0000002100)={0x154c, 0x19, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x1004, 0xd, 0x0, 0x1, [@generic="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"]}, @nested={0x184, 0x9, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @uid=0xee00}, @generic="e95dca6474e9aaffb87c6d24f433de92d74ff4474e112265e1cc89632dc4a7ed87b0e62fa62ef1193ac46e98caea92e3ccae6853f023469bfa04a2e194f62372e75aee76b47bf7f4dfcfbed3de5d51ad9871869e2d9fdf99828f35bbef", @generic="94e99380fb24152189891f", @generic="9669efadfa7f2c5319e751b705408bfc072b398c9b862f09909bfb1b8e86302e66ada5a14b90ed2f8ad04db8b5729072f0564fbeb562d2783da69bb38b5ea3f80c0a497598b7ae498ce37d7db50b761339e4c8e394e54e91f9509ced1bf3d56fb954981c6101e9530c1157566416c6c915d57ce1b365643988af2a0bee8a52c34337cf378cdfab241893e5f4f385bd0b29acc3592dea5cc03844fa33a089", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r1}, @generic="3b8f5b7303a2a98c79c43a7792f59bd8fcaf70684aa615f27dba2c85d053672e8d8cd8876fb79e1703d636f8ee6498b2a84d213e3ce731524efc7a47dbf3a025867a966926c79e1e02bc7e3fbfd2d6e0ab763e09aa85"]}, @nested={0xe5, 0x81, 0x0, 0x1, [@generic="b38534cd50935d59de91df08f9fff229600aa02f3b106fdb50696d2bddebdb1fb79919d05d5e951f67d12be6566441d38ced97432ad35b7a0b64de28669788fe3faf9745c1ab810e2111381bb5d9fa8c8148ac98d8184fb23ef3bf5fe182b5cefb2676461731a0fb37af782a0a13ce2d7b351efe3a6c771e6f668c52fbf000312e8cb371a5bc661331ce0c7af3350e3ab83013fd1b2470aa33d0ea5068af5190ba72f385e93e2cfe53d4819c0c7b2585405a4c11153c8f170a18336df0c111fd42b3e8007a098bbd23db31e7b5dfd73267c8e91bc1217231478e8919709e9e086e"]}, @nested={0x18, 0x74, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0xc, 0x65, 0x0, 0x0, @u64=0x6}]}, @nested={0x1b9, 0x39, 0x0, 0x1, [@generic="de5717aeb2259988c3678211be11c6307be494ff1cbefd4ad802193945e23a05be90f1f9b2f8191a17819d4d0ab69265e5d8deec2202d6a1a8adfe30e70deca8eeaf717f42edba4f2447a7f7167a78436b7527b8eedb161c7dacb706ade3b6fe4caf94d79a25b368e0f4bef1217e092a6c0ee75edda0a634fb14e8608afb5645316ba13154c98d45d2c0e1ba55f97ab4f9e7b6689875fd808b73490984c49fb411", @typed={0x8, 0x5b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xeb, 0x71, 0x0, 0x0, @binary="ba20cf87c915e4055f9b2b983b9eb119e0d4a9989b1372ab32c6293b335a8067e5facebd494c608c2f8c7aad61d1b834da59e2cf8f861f10eb6d662a7f4d0761ea60ac3d79903d9939a18f41830ab57dd1f83c342cbb02af8a06a1137a9005ef4dba74ab92fc07f55dd66348a500b958e8e306c78240172af9352282d70725c33fb770cc2afcd694d20d08d11748fc18c9ffdaed6dcba52a44ff4011e6d7d7d98bdcf9e3d4317a5d5138a49ef00e895ac6baf8b6c38c4bf1de336e88673fb4ab7b2ff997f855802f8896310c22d46e94e3a994f0b4ab0ffaa1bb07309c10ab55f41e66e0c28010"}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r6}]}, @generic="783c616954dfe45f1fd7b654ead6f215dc4a87bbaaeeabc6a8adc58cbd80b29fbd4e2d3202eaa14b1164302a57045743ea49fad3ca49af9d7e6d9b21a2810a0250a07b7f2d5b99b47e1e45612d395e0341132412a3fb6993da41407e25d34aee185337ffde356fd82a11fefabe4145a6d665f6ee6cc75247d7d6424404a077c016c599083e4c3f8a9095959549ade036be1ce6a3e40b8e199d3657eac96d867f91c9c74a214e0a54d08f205f1c0278f33d94b4ba1b6eeb33a28ac0e603442b86f0ac4697142bb596e3d2ec7aad52eeee834e82695f4c206b8bd2b2f66eebf423a6b4627f3d1adcd57012643ada62a434c335e82d3b"]}, 0x154c}, {&(0x7f0000003680)={0x664, 0x16, 0x400, 0x70bd2a, 0x25dfdbff, "", [@typed={0xaf, 0x68, 0x0, 0x0, @binary="8ae85648151d9b1da5bd67f34ab5c3da9f6cf37ec205a71cffcf7f2eafdf3f6e7864324b602a1f3bdafc55f0e3c8c7459f35f90889fbc600ef8259bf1f337e787410315b23c1211cc6247db174bdacb7c0e46ccaf7c3de4428f0b5fb974daf550a804271cf6a1c7826fe69619a95e1af377f3e38016ee2024567d00cd19287c179dcc65a90e897a7a15293bd9724731991c8fc47592511597043dbb1646e1f597501e1daaa9625a3bf8f63"}, @generic="8ccda9caf1002634108546fb82c24839c5952438d9b4d5cec0b5c763834d6c97bce67b95be8cd8d3ad3a2105e5be5006e3642ea1d5d9792476aff4e54cf87fd10759641456eb38de1fe42171e55aaf7d0e57dd35dfebbeb354a925159c3287d2197aa8903b7d2c5fdf0e461153ea49fa024d28cb37eea1eb8c6a1cc37624d575f191f642ca3408db5256877d720f243b18725b71dddaaa600f590f130a09708e515bb816ceb0cce26fd2433d323e5e577d339afdfaad7f903a54e526ef520798f5ca3c449ab4cc16a46b04823d17ebb18820b9b82ec97cb7c485156dfecbe6c5baefeb", @generic="013b7c93d43bbdf7bd08aa1b3446385a80329a54d9ac23af65ff4b66d7c9175e78eb9666a50fff863473fa5266b2093d3fb1c4a51adc4430a37ef8e17cc81ce443ee6cf70db12df0d3eb2985aec5b60c962ca43d5b8122e73643447818e8bc43c5adc7016fdae9912406c2b4a0fc2982a0cfc2f2d09c1f37489d005dd947942b0c293f265c1c838727ab78cedc28ce565902cff27381ebb58f7dbe3735550620b32f8f44fd5db101b69e759c982d0424e3ffa02850772324266a9ce8d4d3a2127ef3915c18959fb69459e59970d5b2eb568a4a621cf8000dddca4afcf59fa516ac4f1069", @generic="5dca6ccb402a6764d58ec86b954fcd4a83b621ab90a9b47e2fb9fe1083a548ec7740f6f71613ad8e4fab25b82d0891e874b7a2747413f7247c8370e795ec275c78bae642bc3642e690847654f8013bf0aebdb3b13353d4950b83a781d076ac6306a97f4552", @generic="c4869582298e312547829ce870dfd4d70f7cd90756a1caa07b5c38251f23af0e6003541092fc55969b74b0d36b7f92fc4fb6b15408ed535e67710d322595b2fc69faccdf068adf69ef1ee392f4639bb5a62a073cf1f7583f3cbc72e2edd80a", @nested={0x2ac, 0x1f, 0x0, 0x1, [@generic="bef8d9b1ef183d0203e3c19a35d2d2a135c27a1db4bf61c6d29db671b4c82788aed48d2aac52df4a3699907370e34a07df1872c72d8e460138ba2c2c7ae83bd2bcfdc182f59b6db1e11ff213c1dc6ebecf940601868f288fc8582096af525c059151af2de15d5b321af8fc6b3acf46cc35d50f710da4a40dbdc5ccbbdb7a6411afb07e01d0f6b2a629e1597a3e52dc5f45d36beb829e11c2472c963e757849cc646f30bfa54960ff022957654b28e24f2cb71cb6172e5742172ee102c479057ba89ffce83a0e874b99bbb6a2fbdbca0f6f0339", @generic="3c007b576fe4328302e669efafedb2963f5866c4ecb8b8cf3ddb476940ba1aa74bd3ce449772193f768000ebfbd6954ef42c0c2b4e5e12db7a36957399d5da71b90dc4f6b45db96d1a6fa2929bc1b2dfcb8b05f9f9d3f53befd2017cb0b6f802ace21a280c115f2572c8c6174ec8cd4e4175917cb78add7c9fd9475896ee86197f6c510a6f6a36e602d95ab768daa4990e1c212570b53565e6b6ea2bc285dfccb4e57c7c15f46c48ad111631cbaf172451f31d26ca91213845d0ddefdbe666a6857b12bf3126c5c109fd0ad57d206ab1", @typed={0xc, 0x94, 0x0, 0x0, @str='*&}%@{/\x00'}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x6}, @generic="92a9997ec0a2560eb39453e3824bce1b48392c812bbc61144d761cd5db8f521ddd0052d9c4b84815912a2425da24e66112959caea5200eaae5f651493d9e27a3f5ae502b0a01f22bd22a276b61cde407bc20de28a2c7284ebd1bda986a0c84d83ce559d364f5e04c6b9f2cb41e0b1f65519be1e5aab3ef58f74d946b5415a601e00e505ed2210a8507c31c825012a4a53c0987389bd4d41d990560e1b9d897247e5dee948a78556ed8bf17ea7e0df085d7b64f8d2a88f8f93d5d268aad4a53447a5c0b01ce9e72d081d357679b05d3f2023480d89211d704b092412068f361813187f24b9272a7643ba8270f7eb49b6db8"]}, @nested={0x6c, 0x72, 0x0, 0x1, [@generic="f683c34fe49c3c67a7368170bddff90cfb436f09df522c8ed9acc4579b10198a4394920590f05b7b065dae751fff33f49e46c04f7e91e06f6043e86c3c53bc27aadb1810454ea20948b86c42eb04f440237fc0bdbf2e44207bfb0e2ba2c2d0b2168bbe06481751b5"]}]}, 0x664}], 0x9, &(0x7f0000003dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r9}}}], 0x20, 0x8004}, 0x4000) timer_settime(r4, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 19:06:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:10 executing program 3 (fault-call:1 fault-nth:61): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xf000000}, 0x0) 19:06:10 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0xffff8000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) [ 119.310247][ T7966] FAULT_INJECTION: forcing a failure. [ 119.310247][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 119.323062][ T7966] CPU: 0 PID: 7966 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 119.331742][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.342403][ T7966] Call Trace: [ 119.345698][ T7966] dump_stack_lvl+0xb7/0x103 [ 119.350299][ T7966] dump_stack+0x11/0x1a [ 119.354437][ T7966] should_fail+0x23c/0x250 [ 119.358840][ T7966] __should_failslab+0x81/0x90 [ 119.363599][ T7966] ? register_for_each_vma+0x372/0x890 [ 119.369106][ T7966] should_failslab+0x5/0x20 [ 119.373718][ T7966] kmem_cache_alloc_trace+0x49/0x310 [ 119.379024][ T7966] ? register_for_each_vma+0x372/0x890 [ 119.384474][ T7966] ? vma_interval_tree_iter_next+0x24c/0x280 [ 119.390469][ T7966] register_for_each_vma+0x372/0x890 [ 119.395755][ T7966] uprobe_apply+0x8b/0x260 [ 119.400156][ T7966] ? __uprobe_trace_func+0x430/0x430 [ 119.405427][ T7966] trace_uprobe_register+0x2b6/0x410 [ 119.410735][ T7966] perf_trace_event_init+0xf8/0x790 [ 119.415953][ T7966] perf_uprobe_init+0xf5/0x140 [ 119.420717][ T7966] perf_uprobe_event_init+0xde/0x140 [ 119.426045][ T7966] perf_try_init_event+0x21a/0x400 [ 119.431146][ T7966] perf_event_alloc+0xa60/0x1790 [ 119.436070][ T7966] __se_sys_perf_event_open+0x5c7/0x2740 [ 119.441692][ T7966] ? vfs_write+0x50c/0x770 [ 119.446107][ T7966] __x64_sys_perf_event_open+0x63/0x70 [ 119.451560][ T7966] do_syscall_64+0x3d/0x90 [ 119.456033][ T7966] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 119.461950][ T7966] RIP: 0033:0x4665e9 [ 119.465823][ T7966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.485584][ T7966] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.494026][ T7966] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 119.502024][ T7966] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:11 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0xffffc000, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x10000000}, 0x0) [ 119.510032][ T7966] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 119.518424][ T7966] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 119.526412][ T7966] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 119.551062][ T7966] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:11 executing program 3 (fault-call:1 fault-nth:62): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x95000000}, 0x0) 19:06:11 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0xfffffffe, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 119.559447][ T7966] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 119.577154][ T7967] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 119.585592][ T7967] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 119.652261][ T7991] FAULT_INJECTION: forcing a failure. [ 119.652261][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 119.664923][ T7991] CPU: 0 PID: 7991 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 119.673604][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.683671][ T7991] Call Trace: [ 119.686943][ T7991] dump_stack_lvl+0xb7/0x103 [ 119.691551][ T7991] dump_stack+0x11/0x1a [ 119.695697][ T7991] should_fail+0x23c/0x250 [ 119.700107][ T7991] __should_failslab+0x81/0x90 [ 119.704894][ T7991] ? register_for_each_vma+0x372/0x890 [ 119.710347][ T7991] should_failslab+0x5/0x20 [ 119.714837][ T7991] kmem_cache_alloc_trace+0x49/0x310 [ 119.720200][ T7991] ? register_for_each_vma+0x372/0x890 [ 119.725737][ T7991] ? vma_interval_tree_iter_next+0x263/0x280 [ 119.731987][ T7991] register_for_each_vma+0x372/0x890 [ 119.737272][ T7991] uprobe_apply+0x8b/0x260 [ 119.741684][ T7991] ? __uprobe_trace_func+0x430/0x430 [ 119.747139][ T7991] trace_uprobe_register+0x2b6/0x410 [ 119.752741][ T7991] perf_trace_event_init+0xf8/0x790 [ 119.757929][ T7991] perf_uprobe_init+0xf5/0x140 [ 119.762678][ T7991] perf_uprobe_event_init+0xde/0x140 [ 119.767988][ T7991] perf_try_init_event+0x21a/0x400 [ 119.773103][ T7991] perf_event_alloc+0xa60/0x1790 [ 119.778039][ T7991] __se_sys_perf_event_open+0x5c7/0x2740 [ 119.783763][ T7991] ? vfs_write+0x50c/0x770 [ 119.788162][ T7991] __x64_sys_perf_event_open+0x63/0x70 [ 119.793664][ T7991] do_syscall_64+0x3d/0x90 [ 119.798087][ T7991] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 119.804079][ T7991] RIP: 0033:0x4665e9 [ 119.807950][ T7991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.828119][ T7991] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.836540][ T7991] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 119.844496][ T7991] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:11 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 119.852460][ T7991] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 119.860504][ T7991] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 119.868578][ T7991] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 119.901614][ T7991] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 119.911000][ T7991] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) move_mount(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x83) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 19:06:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x9effffff}, 0x0) 19:06:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:13 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:13 executing program 3 (fault-call:1 fault-nth:63): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:13 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x4, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xc0000000}, 0x0) [ 122.340242][ T8031] FAULT_INJECTION: forcing a failure. [ 122.340242][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 122.353860][ T8031] CPU: 1 PID: 8031 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 122.362724][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.372978][ T8031] Call Trace: [ 122.376355][ T8031] dump_stack_lvl+0xb7/0x103 [ 122.381310][ T8031] dump_stack+0x11/0x1a [ 122.385493][ T8031] should_fail+0x23c/0x250 [ 122.389934][ T8031] __should_failslab+0x81/0x90 [ 122.394698][ T8031] ? register_for_each_vma+0x372/0x890 [ 122.400672][ T8031] should_failslab+0x5/0x20 [ 122.405222][ T8031] kmem_cache_alloc_trace+0x49/0x310 [ 122.410630][ T8031] ? register_for_each_vma+0x372/0x890 [ 122.416404][ T8031] ? vma_interval_tree_iter_next+0x24c/0x280 [ 122.423095][ T8031] register_for_each_vma+0x372/0x890 [ 122.428386][ T8031] uprobe_apply+0x8b/0x260 [ 122.432810][ T8031] ? __uprobe_trace_func+0x430/0x430 [ 122.438233][ T8031] trace_uprobe_register+0x2b6/0x410 [ 122.443630][ T8031] perf_trace_event_init+0xf8/0x790 [ 122.449896][ T8031] perf_uprobe_init+0xf5/0x140 [ 122.454676][ T8031] perf_uprobe_event_init+0xde/0x140 [ 122.459966][ T8031] perf_try_init_event+0x21a/0x400 [ 122.465096][ T8031] perf_event_alloc+0xa60/0x1790 [ 122.470024][ T8031] __se_sys_perf_event_open+0x5c7/0x2740 [ 122.475873][ T8031] ? vfs_write+0x50c/0x770 [ 122.480379][ T8031] __x64_sys_perf_event_open+0x63/0x70 [ 122.485920][ T8031] do_syscall_64+0x3d/0x90 [ 122.490583][ T8031] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.496582][ T8031] RIP: 0033:0x4665e9 [ 122.500546][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.520791][ T8031] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 122.529487][ T8031] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 122.537742][ T8031] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 122.545850][ T8031] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.554164][ T8031] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 122.562130][ T8031] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2a0100, 0xc0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/25, 0x19}], 0x1, 0x7372, 0x101) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x412800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x31, 0xd9f, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r4}, 0x6, 0x0, 0x6}) mmap(&(0x7f000031c000/0x3000)=nil, 0x3000, 0x800003, 0x12, r3, 0xffffd000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r6, r5, 0x0, 0x80000000003) io_uring_enter(r5, 0x4e8a, 0xa74, 0x1, &(0x7f0000000280)={[0x8001]}, 0x8) 19:06:14 executing program 3 (fault-call:1 fault-nth:64): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xc00e0000}, 0x0) [ 122.590777][ T8031] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 122.599376][ T8031] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 122.620970][ T8030] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 122.630321][ T8030] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:14 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x7, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 122.737948][ T8084] FAULT_INJECTION: forcing a failure. [ 122.737948][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 122.750612][ T8084] CPU: 0 PID: 8084 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 122.759329][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.769422][ T8084] Call Trace: [ 122.772699][ T8084] dump_stack_lvl+0xb7/0x103 [ 122.777307][ T8084] dump_stack+0x11/0x1a [ 122.781457][ T8084] should_fail+0x23c/0x250 [ 122.785888][ T8084] __should_failslab+0x81/0x90 [ 122.790661][ T8084] ? register_for_each_vma+0x372/0x890 [ 122.796260][ T8084] should_failslab+0x5/0x20 [ 122.800792][ T8084] kmem_cache_alloc_trace+0x49/0x310 [ 122.806125][ T8084] ? register_for_each_vma+0x372/0x890 [ 122.811719][ T8084] ? vma_interval_tree_iter_next+0x263/0x280 [ 122.817710][ T8084] register_for_each_vma+0x372/0x890 [ 122.823017][ T8084] uprobe_apply+0x8b/0x260 [ 122.827491][ T8084] ? __uprobe_trace_func+0x430/0x430 [ 122.832843][ T8084] trace_uprobe_register+0x2b6/0x410 [ 122.838358][ T8084] perf_trace_event_init+0xf8/0x790 [ 122.843597][ T8084] perf_uprobe_init+0xf5/0x140 [ 122.848476][ T8084] perf_uprobe_event_init+0xde/0x140 [ 122.853775][ T8084] perf_try_init_event+0x21a/0x400 [ 122.858902][ T8084] perf_event_alloc+0xa60/0x1790 [ 122.863880][ T8084] __se_sys_perf_event_open+0x5c7/0x2740 [ 122.869818][ T8084] ? vfs_write+0x50c/0x770 [ 122.874342][ T8084] __x64_sys_perf_event_open+0x63/0x70 [ 122.879792][ T8084] do_syscall_64+0x3d/0x90 [ 122.884315][ T8084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.890226][ T8084] RIP: 0033:0x4665e9 [ 122.894152][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.913839][ T8084] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 122.922265][ T8084] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 122.930233][ T8084] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xe03f0300}, 0x0) 19:06:14 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x8, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 122.938260][ T8084] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.946227][ T8084] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 122.954272][ T8084] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:14 executing program 3 (fault-call:1 fault-nth:65): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 122.979402][ T8084] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 122.987778][ T8084] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xeffdffff}, 0x0) [ 123.052208][ T8101] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 123.058765][ T8097] selinux_netlink_send: 28 callbacks suppressed [ 123.058780][ T8097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34120 sclass=netlink_route_socket pid=8097 comm=syz-executor.0 [ 123.060584][ T8101] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 123.088665][ T8097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26307 sclass=netlink_route_socket pid=8097 comm=syz-executor.0 [ 123.110446][ T8106] FAULT_INJECTION: forcing a failure. [ 123.110446][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 123.123843][ T8106] CPU: 0 PID: 8106 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 123.132608][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.142737][ T8106] Call Trace: [ 123.146098][ T8106] dump_stack_lvl+0xb7/0x103 [ 123.150703][ T8106] dump_stack+0x11/0x1a [ 123.154940][ T8106] should_fail+0x23c/0x250 [ 123.159564][ T8106] __should_failslab+0x81/0x90 [ 123.164310][ T8106] ? register_for_each_vma+0x372/0x890 [ 123.169939][ T8106] should_failslab+0x5/0x20 [ 123.174757][ T8106] kmem_cache_alloc_trace+0x49/0x310 [ 123.180032][ T8106] ? register_for_each_vma+0x372/0x890 [ 123.185478][ T8106] ? vma_interval_tree_iter_next+0x24c/0x280 [ 123.191501][ T8106] register_for_each_vma+0x372/0x890 [ 123.196783][ T8106] uprobe_apply+0x8b/0x260 19:06:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) [ 123.201481][ T8106] ? __uprobe_trace_func+0x430/0x430 [ 123.206802][ T8106] trace_uprobe_register+0x2b6/0x410 [ 123.212122][ T8106] perf_trace_event_init+0xf8/0x790 [ 123.217405][ T8106] perf_uprobe_init+0xf5/0x140 [ 123.222317][ T8106] perf_uprobe_event_init+0xde/0x140 [ 123.227689][ T8106] perf_try_init_event+0x21a/0x400 [ 123.232853][ T8106] perf_event_alloc+0xa60/0x1790 [ 123.237877][ T8106] __se_sys_perf_event_open+0x5c7/0x2740 [ 123.243515][ T8106] ? vfs_write+0x50c/0x770 [ 123.247992][ T8106] __x64_sys_perf_event_open+0x63/0x70 [ 123.253431][ T8106] do_syscall_64+0x3d/0x90 [ 123.257827][ T8106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.263729][ T8106] RIP: 0033:0x4665e9 [ 123.267624][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.287240][ T8106] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 19:06:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0ae95c28be010100000000000000"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 19:06:14 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x10, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xefffffff}, 0x0) [ 123.296168][ T8106] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 123.304246][ T8106] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 123.312290][ T8106] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.320250][ T8106] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 123.328410][ T8106] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x60, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 123.365544][ T8106] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 123.374256][ T8106] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:14 executing program 3 (fault-call:1 fault-nth:66): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xf0ffffff}, 0x0) [ 123.451285][ T8138] FAULT_INJECTION: forcing a failure. [ 123.451285][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 123.464019][ T8138] CPU: 1 PID: 8138 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 123.472834][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.482887][ T8138] Call Trace: [ 123.486171][ T8138] dump_stack_lvl+0xb7/0x103 [ 123.490768][ T8138] dump_stack+0x11/0x1a [ 123.494945][ T8138] should_fail+0x23c/0x250 [ 123.499359][ T8138] __should_failslab+0x81/0x90 [ 123.504206][ T8138] ? register_for_each_vma+0x372/0x890 [ 123.509684][ T8138] should_failslab+0x5/0x20 [ 123.514194][ T8138] kmem_cache_alloc_trace+0x49/0x310 [ 123.519606][ T8138] ? register_for_each_vma+0x372/0x890 [ 123.525053][ T8138] ? vma_interval_tree_iter_next+0x263/0x280 [ 123.531033][ T8138] register_for_each_vma+0x372/0x890 [ 123.536358][ T8138] uprobe_apply+0x8b/0x260 [ 123.540771][ T8138] ? __uprobe_trace_func+0x430/0x430 [ 123.546084][ T8138] trace_uprobe_register+0x2b6/0x410 [ 123.551373][ T8138] perf_trace_event_init+0xf8/0x790 [ 123.557008][ T8138] perf_uprobe_init+0xf5/0x140 [ 123.561771][ T8138] perf_uprobe_event_init+0xde/0x140 [ 123.567082][ T8138] perf_try_init_event+0x21a/0x400 [ 123.572250][ T8138] perf_event_alloc+0xa60/0x1790 [ 123.577178][ T8138] __se_sys_perf_event_open+0x5c7/0x2740 [ 123.582877][ T8138] ? vfs_write+0x50c/0x770 [ 123.587334][ T8138] __x64_sys_perf_event_open+0x63/0x70 [ 123.592780][ T8138] do_syscall_64+0x3d/0x90 [ 123.597277][ T8138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.603435][ T8138] RIP: 0033:0x4665e9 [ 123.607336][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.627000][ T8138] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.635731][ T8138] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 123.643696][ T8138] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 123.651712][ T8138] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.659758][ T8138] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 123.667737][ T8138] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 123.676707][ T8138] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 123.685258][ T8138] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:15 executing program 3 (fault-call:1 fault-nth:67): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xfeffffff}, 0x0) 19:06:15 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x42, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 123.700623][ T8142] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 123.709002][ T8142] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x41}, 0x10000000}, 0x1c, 0x0}}], 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005340)={@remote, 0x16, r2}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005e80)={'sit0\x00', &(0x7f0000005e00)={'syztnl1\x00', r2, 0x4, 0x4, 0xf7, 0x800, 0x0, @remote, @remote}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000580)={@private0, r2}, 0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005340)={@remote, 0x16, r4}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005e80)={'sit0\x00', &(0x7f0000005e00)={'syztnl1\x00', r4, 0x4, 0x4, 0xf7, 0x800, 0x0, @remote, @remote}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f00000019c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4, @ANYRES32]}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @mcast1, 0x7fff}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="3bf4dda98c7938267781ce0fd03ffec0ce3bc64dfb3fc470608899d687d3d96914c007e2ee7cf1d2292cb949341302c4ccdb7c48d3097c8b5cf2feeaeda5ce155972e061ca27f0a0dc453dfa317c30484855537d94e361d108c4ceafbfce5a2240a36706c3b680303b37944e69732df8d8b060ad06b0d3afd0d7b5e43375fe262196da587e9c27de8ac3575f4083bb96df1db363413747fef421d935be2904e2b6820b156b8f1a108a784928f8a147212f1f42cf650878b439ac6e8396807824aa29b04e8be862fb33affb6fc934797a1ede1acaa0181c7d25ac5cc2e607f9eb2b7c3664539f3ad1e22348adf2", 0xed}], 0x1, &(0x7f0000000340)=[@hoplimit={{0x14, 0x29, 0x34, 0x68c}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff81}}, @dstopts={{0x28, 0x29, 0x37, {0xff, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x32, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x62e}}, @tclass={{0x14, 0x29, 0x43, 0xeec}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}], 0x100}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0xfff, @private1, 0x1}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000480)="3ca59506be51e07d8897bd647f9ddc7afd6335e3031913b12c6daa6039a0d74faabc5ea34bcfa7615d6700674fc2edd3bbf50c6cb4bdeff968d6592cec21a8faa6d7e610390f2f78fe", 0x49}, {&(0x7f0000000500)="bd96790a268584bdd1dade5949126cc489a7d3186a9254ee9434656992e3c844b9918b16c69a8e179ef7ed78d9ef1b2681fa3ec3990ff1978501ad8ad1b5c6fe5cd62e96bad95169dd2f7ee462f3c5099f85a8c9cf68eab8513552a099f6b23f5b011815fb4e5ada618d25", 0x6b}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="eff3a626684f1aca02f19ac4a1116c9942b0ce29be983f167f8285323602facf21236050f5b962ab1308fd948d60ef719488263deb19d85ed0c7fbad9ce876a8b75a20ac8b", 0x45}, {&(0x7f0000000640)="757bab63f1f7b5d9ba2bbf108aa0d4ca2fb269165f1e903ee9b29c81e051b1d4d6423f6a76a1bd62fe6db2cbf38f6820d62b9a5f4755a636641b5fb31cc0335d559934366207d55d356afd4e236cc9720a17f447ae8990c6e0d71d712c493b3e011516ed987be0f2817f8478189905c144053c1e76173d43dfb322f01e192a3f7d82b0cf38309ee117d95c76fd5029df83f6ce640674ef033f8db0a1d045e184edb9f72e8aeb6751c1b4c70c9fcef231056eff0e1d8c32b87fab41c649d9423c5dc1d4498d5aeddec00dd1c0f108683648279ef687871866856d2d048e123879e862a5cde029fbf29710e95dc6a58782befea95f6c89696b49292ced861ebddcc8bc18fd8285bd4588efae0d077d287eaa4052d2bb6f0e6f454c04e332c4a6cb76f1f724cf5856f3eee28559557b2625c01d158c7c46d1518ba7030bfc9d0585441ec53b7da41ec46133fe7dd93f0f3886ea7b5bac3e0032e17fa7a3e3292b1b5388a08c0413092ea25ad480a7104c5451b3428398f8b580c9d12a41d7bbe4d569a662a41fde670030b36f17fc8bcde72e76ea8629651cbf8a1280345d0d89380ffcf597267232867d49b336258e17bb634603099a4f740e24d91f5a618d6327966f01e3d76146c4449672dc546178392ad69ac464b3dce71c83a7e0b2898d6ae4d2f853bd85e4ef951b280655f7ef68f8cdc49893eac9809a61df51477ef6bdd45f97a011ace46b835f247a4861804a0215dbaab6e7cbac382e16165c21482a6f4404f4e32808511f1376c27c71db264dfc232d26ca2778174f337b13b726392dbeb2a3ec6cb866dab1e4ef24d5fbd54c3fcc6223f44cd61e81e08a28779984b3314d6d536218ba5da08f3144b8f45acebc9fffab9551f2e03fdbb4d258e42297901db825565bb4ee7c9d1dd13fdbbb010305aaf9c514cc1c8f678bd830e8238062ad4d8efec2512a8860a3a0277f94500443a421b738125d9abbe08061cc18d179349c857b41f68ea95237f4674fa72cd28e77fa15a52678668790f57fa0f5bcdaa5d2f40295f4c178faa431db691160b237ffc8ac89237c46bcf94c377bdc22effb4f84fa3b8b35626e7f203ab0fc2cd46eb52c44656416c5256e548a9ede0bd75f6905a3c58cba0aef071fc45890520d3a8b7cfc8e8dbf4c1704d5b5ebc388f2ca045622bcbf8800adfa209b39e538d71d1e2c56d7018f069f6b0ee1b1c492653c4ee8e13ad5c5cc8ee70750f543c4060409dc61d25d076184c1f5ea836a4bc5e06e58018940d56699302ff87da540ac1c9afff6a7e65bf18799bad6c51fd9c73f834f188a76ff1b0c40cae7686f0dfcbe5a8b8f30a3d0d12c44cdcc42d21cf09048b72ae5db6c311a62f0cdb61dcc14fccd953bfc0ac8b9ea2af2d83cb84d8f76ae566216d5dae77e841cc266cf6ca661cf3811c2200641ad57b1ba14790e564a5d71fa33066c2f7ce28763f2df2325f8969ef908606454bdcf0c8361466c2db745167309aafa88a17acfccc4c8b4a59cc31de18be20f61eba291ad2e3c634b61f71160eb23a9e7536dfcc41de3904c8b5dee20a357206852f47917580e45d0772fcb11c15b61b481e7cc8f2cb4da6d0ff235b48d7304dbe3eb09507b6587c9fae831e5b2f1707d240033d011d1666ff207387f7aa19009e1ade75632ab63f24f0806b85c82983fe1ac6eb6ac125fa52962789ceea9f8dfa535b8646c1ca05b6911bca34a8d44600370fdc226108fbbf03bde091dc61a48e5edbbd5f04daee9cd2123f1efea8665d6bc6ace933ebc533a70746b2e3365417356b404e5e73119f4f0cdfa63eda867e54d7f314f647d51fa6b14aa0d90a0280ffd43547cc45858c27e11dfef9709b78bb1375b2b8e18faa4b25bbb998110811996f970c180a25a7890c6b2d64d5b0a051d7efbbe8fef9a4a2aa49a84676965e1a0a478a13fd28b9c0f572aabd8b98fe7732e291484e2b385a4733075d8208623d5726a6d388b39d61596fb40477df3e302b062e0cd73c25477e4c072713e8882f9b61e9499c43073492af53f02a13d030248213c6a8380117c5eddb9ec8838aaef8e207b3e779bf41244b271b37587c7ad85ada83122a56445738f0052efc821f85b812c71d66f2a483d684af32db47815e5397a30faca84cc17cbd84adc0eff91922fee6d05fbd78988fee12d4e72823d3e1c73f3e3f0738080fe9e33bed4acb319c1046b550e9ab296f9857ac2bb8a00caf97248d8542557b90eeab750f4e17e897414781e8fa8fb14719174688f053559603f2e270429b0a288d3dd8e0862b7d79274cde639f7bc24d7a1f197e64768039757c565cb213a09608a0f2d775ef3f7906f80b19af99c187cda7060c201f3a1363322dd27fcf4f622dd50a9699674afdf9e4419d4b965d7cfe41c5992f67fbdd30224e64f8e6269cd4c606af4327c19a02f813afab0dc8e20391ba10920777ebad555ac878e2ac6d125758e5972d0fe011330fa1d8d952a268171d013c955c96c5293e1c87763c8b809dafc0e61606b17e4de224ad38a84744d708abdba6d483e414d132f5e4f2676a7da0df4a73aa2ab38144e4c023024ca8ce293c145a97540d29327464a79bcb3bfa0c2a8a845d5bb472032a5754848a8f8701d27b04b4c1db2d0cc58ff1c6642a4f6b5dbe6b93a3f4771471cf5f7ab05757b447456e1e827f6f11fe0a40b6631684219a7e48bbc7f5caf1d2749331af9f793c7b928964f221f887b564d5457b2fdebf27a58fa6363b6d57d56b8c2a6cd6f395aae86146f6e6e8ede63fe5d005c374e813a339bf75f13d4b0825fe58c14a506ef516860a52e241234c09f230d04f85aa2c4df92e2ecf2608f839c24250719a369715b2332decf86f24e9572559d98c0f9520d7f745d0516c45412a15807baab17ff11aa82a782685f34c632683e61d6a934ad488ec37db9e90741a202972a1d61d5a22de84adc5bb9b29276bf251d7cabb5baa12aa2b2a803518e88e106a6ed553bbd8e7e50eb41ebb6728d1420f3d57e1cb9427b3b8bb7cca3e2881b4770f368371925d6ae322b62bb9c75f64a383450f12770a2ec924c00b9933a05ecab2afda3a7af842fc83504427e034104b14887a937b20a639a3e17235161c5e926667af7b0b15aa391dedaa6075a4b7aaafd41bc655ea6e33c54c7d51f2335a14dce35c9a336324f2479a0d1bc68451624d37d4e455ff114aed6ad2e5cb7a0e874591ca3b781c8150fd0888c7793460357c20dffe60b02d122e85babb46d413ab9f152efd2cb537682ec6653b77c6ea56825a04a7b2b4ab128bd620f105552a15902e0c9ab2c0263182a4077310874280db976d3a5a02efb7ad6794748bc9c4097ed90740b840d7c3693717ab45740ebe0a2fbb69c28a6632f0e8bbf40f70261917d93398a0181bc889ee62af208ffc2217ee70f71bcd00fc2807864ebc140832dccf6969a9cb07580b9924a334feec58c6ed2a6e97d6acc4ffadb798ac7ab3a75ce7037f584d0bc3466971740b7a46adfdb4261b1ebf1a115d9facf9eb35fc1f5ef72979d4e859dd55b356ce186559de36676195460b68fff41a0e905d7613da9ec8ca5e49581119d292cfa82b4699ed467d3759d1be47feb8c26414f1e60b53cb1719314567a705f014b5909b5c979883a2c858bca2a674a326ec538439114ac577608ab21596fc45d7d02331e594bfcfbc7bf5c8e18f5c4a8addd9c570f8ecb772ad2f6d87ffd816c250eb99e5a350090409df47fe11393fbe8841b0d5ffa96f8a10d601ed028cb8e4252f1a83563383bb1408119c4ff7571a628cdf5a029e083538a3d5a06ac6a7c330adbabe75dffd882b137c53e621e830b21d2155594b2e1a98f3568ce550d3bb14d079fe89e0ff4ea297a70bf5b74000a79a05cff155d48135b86889923cd7794964494fd98f646e09907403a18e9d514c9a7e67201c8e10a1dc9d98f7ec403841fec46db12863195c458eff91c4fb54d7e5b489d8f044f5f8427f8be765dc5332e9c9a980bb37d6dd6f2ba3ab6c526d66b7d3f561648bd04cfbcbd194fe0ea042b2e7e5ab6e729a6bc679c360746728bd9bad307cea4199f7e4025a327c54d342570e25a6651d97711def9a9a2e6dc18da7bfbd813275380126847f564fff94e9f008ab3c71f36421d38abd0f8e62e9e53a7444a8f6618055d6c847cdd29b6e8d830411daee25657f92b6b558183e4c47cc777ec7e4a8f4d8d35454174f690fec07812003637ae9846b8dccbfd6499faf14409007a1ba22d742afc2c48fa5a2afd829f1f21934558851756975ca445dc805885182b65eddc7a36b7b6bbd17c20481895acff6f9b88f39b33a5df799f7d0fe7988150e1f6698a4928ab2d83e7cd8e3600b27d6b46b0116f189ad44f5795d1e1fc5c8efa26150a2577580f11fb93b8f1d2dd3a7dbed65830734d189080d4090290bb03a274cf8a51e8aed331736c0e8e2371db35788e3c9a25a48eb3ec8f8343d1989717c26c8b67596a09a33236228f4474604e53d90bdc93ae3f966ebf86e3929e5f1f963eed3e911b94566330d171018f468b2dd761eb847a4185d793842f3fd0e9250d284dd1aa69d7eea9f27e1a21adec0e8a2c420c1759d570df1419ced70d972ed9bbf9648805978ca6eceb9a7a6d38b5cde2af8deffca2b9a082f8f223c9ffa4e7cf95df1e0302d9d74fb72c3fe21704e89f143f741ad43edd9df25d6e2a5ee0192bbe5b6989b21a2aed84aecf379044cb20e3fa08831f2d8d616dea36150fc67ea23699093b674be4eeda66df9553d5dabf1c4b5f8f41e526c43a9f63d4a61c87dc9f31bff1121b14a0c150dea34235383827794a04fd887ef1c8562cb3752a94fcb535589b0254e61a2b1ddcdc4c1485995e46a10f2f307a9db462e65bbd1e522395c9f5e28f2a9b99ee043d488689c552a68a75986106e23deaa479cf345f2aac18868fac3f8fb9fc04678aa621c29d1f07477b4d4fb407836e79f235d4408f9d958a017c59cfbe7f15a4819f2dce71f7f3a43481ebc52af99430e509d451ba2b4f330acd2558a279b33910d2ac55fbe1fb0134a087e79e53172f18bd2ca65275d45981e911643c9d15055da4610d7960e49a2767ed4c141c318eae49523372404be027517e7a588ae30d0957a9551e03ba8d3166e0ac2865475f7e0bfa40b155f5d4011b61be056edccf4b624341a57b78d3d69e6bb19823875ad12e84399ec38150257888e4560c28c808a91ebcdba56ccecf2deb5aeab8fc277a6ad6722990bed69eb1212ac3338f863f21d87cf4ab5308170e720fffa49c7fc041ebfa584fa48e3848cad473f0cb0e165405acee67463d2b1e5f2c1e3c3fd5ff21bee42f288760b185f081ea2a13b3ee538427199b7928384112c78f4462a743e1bec30d5f3685bfc9d84ef6fc6b95c02b9401281b17d4ad4c52fceb27a9f309f9f8ba7e49b2a56a0b8e30da1c6e39dc04ccb7d39482ecb35759f079566bed13f5d33bc872c46c9fbef3933800b7acfce7ff201521ce3adcc90a1efd507d07d708fc9025b4e3d990343fb7fcdf918641960fe2dfc6956aefd5593e5bf8cc4af9aa435d6d63d7e25d89b9969f1dd157916273505982bd8ad345a51545c3f75ede18709d5e123e76093678cf49c41fdcbccd3fb13146db1e65e09748effdd2f35ae53e605894dc13fa292987b0c1f57a220376243380c9ef9336d148c63b46f7c28c7f99a9a39c9fd92d7246474a5a1bb24c36437d8e6e2970e0b56b1f9f8cf90eab71d74baf656f0ac86cad607d49a0f0c96a8316b3e9ab1e21d0ba8c", 0x1000}, {&(0x7f0000001640)="65f48bbfad41a1a680eddc0cf8ef8e33992abc95d985912ef3babf96b44895616eb0455c54681e84680c26186f8ffbed8c40c34432bc17f9ee8a841e8dcc319cb5d038b94b6555d9070221ac98b08a8dd9835ef87120b51779171bdd0b130ea9436e3c6158b4201654003a96dc71fe2aef5bb7bdbd51fefe494ad6cdb2d0ac80a1e495e591a462e5db52bffe9f29d101b6876d8fa1199f70dceae2a03590239ee7b70ef106271adc39c79e9db7cbcd1e569e26e3dcd068b3b166dac2ab371bc6a9a73c15e7b5d0ef671b1b2755ee044ea1e0485b3e16726bccc4885cff4371d58689be60", 0xe4}, {&(0x7f0000001740)="0cda910b799eae26cb1be72766829eb87c7d7dd76b52fdfc0ae1dbc4c3d3bb4222f4e8f543aa57f0b7396aa17927f37fccc4e019fa4838c58e55570fecbd60e542b3e43caac0c7fb84b4f2d85ef7ce9057c57bd3b55cd1363ecf4b04d0a36841d7c2c6d9", 0x64}, {&(0x7f00000017c0)="62f1c74ad261d5623903265afe0dd341a49387d13edd4224c620230848f5f9794cebae102610f5dba1d36eaef0b4ed485f121fc297803082be9ebd3dde0ece697ca867a004ab075fde3fafe670bc4e1c31a809b318934384f22fa41ca1df80c6166534f69aedb79b9209b29306fa968316c7c99afc9447b3b3c53c6afc7ae07d8ead281cf89597a53fa4340d3160eb4c4ce267127ea76d7d8c7ca24594d1211f202ea2c53af0a6ae5bcaec72dafb7771a281b0594780fb5eb1b3a5a705872d48771f0d58fff7439caad658c530bb7ff04fb243b8034a1dc39358fa37276144a35477da8c9b8c7a2c8a5523694f5b494cc1092f26ca230e5d", 0xf8}], 0x8}}], 0x2, 0x10) 19:06:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xfffffdef}, 0x0) [ 123.796793][ T8166] FAULT_INJECTION: forcing a failure. [ 123.796793][ T8166] name failslab, interval 1, probability 0, space 0, times 0 [ 123.809469][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 123.818339][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.828510][ T8166] Call Trace: [ 123.831780][ T8166] dump_stack_lvl+0xb7/0x103 [ 123.836445][ T8166] dump_stack+0x11/0x1a [ 123.840601][ T8166] should_fail+0x23c/0x250 [ 123.845054][ T8166] __should_failslab+0x81/0x90 [ 123.849901][ T8166] ? register_for_each_vma+0x372/0x890 [ 123.855341][ T8166] should_failslab+0x5/0x20 [ 123.859931][ T8166] kmem_cache_alloc_trace+0x49/0x310 [ 123.865479][ T8166] ? register_for_each_vma+0x372/0x890 [ 123.871008][ T8166] ? vma_interval_tree_iter_next+0x24c/0x280 [ 123.877056][ T8166] register_for_each_vma+0x372/0x890 [ 123.882327][ T8166] uprobe_apply+0x8b/0x260 [ 123.886787][ T8166] ? __uprobe_trace_func+0x430/0x430 [ 123.892174][ T8166] trace_uprobe_register+0x2b6/0x410 [ 123.897463][ T8166] perf_trace_event_init+0xf8/0x790 [ 123.902708][ T8166] perf_uprobe_init+0xf5/0x140 [ 123.907471][ T8166] perf_uprobe_event_init+0xde/0x140 [ 123.912918][ T8166] perf_try_init_event+0x21a/0x400 [ 123.918098][ T8166] perf_event_alloc+0xa60/0x1790 [ 123.923023][ T8166] __se_sys_perf_event_open+0x5c7/0x2740 [ 123.928734][ T8166] ? vfs_write+0x50c/0x770 [ 123.933141][ T8166] __x64_sys_perf_event_open+0x63/0x70 [ 123.938639][ T8166] do_syscall_64+0x3d/0x90 [ 123.943165][ T8166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.949223][ T8166] RIP: 0033:0x4665e9 [ 123.953104][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.972771][ T8166] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.981192][ T8166] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 123.989594][ T8166] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 123.997545][ T8166] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.005690][ T8166] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 124.013646][ T8166] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 124.056453][ T8166] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 124.064883][ T8166] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xffffff9e}, 0x0) 19:06:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:15 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x60, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:15 executing program 0: set_mempolicy(0x1, &(0x7f0000000080)=0x401, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = mq_open(&(0x7f0000000000)='\x00', 0x80, 0x4, &(0x7f00000000c0)={0x3ff, 0x1, 0x1, 0x7}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001300)={{r2}, 0x0, 0x4, @inherit={0x60, &(0x7f00000012c0)=ANY=[@ANYRES32=r2]}, @name="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"}) set_mempolicy(0x2, &(0x7f0000000040)=0x1f, 0xb2de) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 19:06:15 executing program 3 (fault-call:1 fault-nth:68): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:15 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x64, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 124.260594][ T8197] FAULT_INJECTION: forcing a failure. [ 124.260594][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 124.273275][ T8197] CPU: 1 PID: 8197 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 124.281948][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.292007][ T8197] Call Trace: [ 124.295287][ T8197] dump_stack_lvl+0xb7/0x103 [ 124.299974][ T8197] dump_stack+0x11/0x1a [ 124.304134][ T8197] should_fail+0x23c/0x250 [ 124.308583][ T8197] __should_failslab+0x81/0x90 [ 124.313335][ T8197] ? register_for_each_vma+0x372/0x890 [ 124.318776][ T8197] should_failslab+0x5/0x20 [ 124.323274][ T8197] kmem_cache_alloc_trace+0x49/0x310 [ 124.328565][ T8197] ? register_for_each_vma+0x372/0x890 [ 124.334029][ T8197] ? vma_interval_tree_iter_next+0x263/0x280 [ 124.340016][ T8197] register_for_each_vma+0x372/0x890 [ 124.345282][ T8197] uprobe_apply+0x8b/0x260 [ 124.349690][ T8197] ? __uprobe_trace_func+0x430/0x430 [ 124.354988][ T8197] trace_uprobe_register+0x2b6/0x410 [ 124.360275][ T8197] perf_trace_event_init+0xf8/0x790 [ 124.365545][ T8197] perf_uprobe_init+0xf5/0x140 [ 124.370300][ T8197] perf_uprobe_event_init+0xde/0x140 [ 124.375577][ T8197] perf_try_init_event+0x21a/0x400 [ 124.380890][ T8197] perf_event_alloc+0xa60/0x1790 [ 124.385815][ T8197] __se_sys_perf_event_open+0x5c7/0x2740 [ 124.391522][ T8197] ? vfs_write+0x50c/0x770 [ 124.395921][ T8197] __x64_sys_perf_event_open+0x63/0x70 [ 124.401363][ T8197] do_syscall_64+0x3d/0x90 [ 124.405891][ T8197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.411794][ T8197] RIP: 0033:0x4665e9 [ 124.415747][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.435454][ T8197] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 124.443961][ T8197] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 124.451923][ T8197] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xffffffef}, 0x0) 19:06:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000130000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x801}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) socket$packet(0x11, 0xa, 0x300) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/212, 0xd4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f00000001c0)=""/73, 0x49}], 0x3, 0x1, 0x100) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 124.460178][ T8197] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.468132][ T8197] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 124.476176][ T8197] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:16 executing program 3 (fault-call:1 fault-nth:69): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xfffffff0}, 0x0) 19:06:16 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x204, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 124.503552][ T8197] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 124.511910][ T8197] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 124.533374][ T8198] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 124.541779][ T8198] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 124.594495][ T8229] loop0: detected capacity change from 0 to 131456 [ 124.613726][ T8231] FAULT_INJECTION: forcing a failure. [ 124.613726][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 124.626388][ T8231] CPU: 0 PID: 8231 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 124.635073][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.637671][ T8229] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 11776)! [ 124.645211][ T8231] Call Trace: [ 124.645222][ T8231] dump_stack_lvl+0xb7/0x103 [ 124.645244][ T8231] dump_stack+0x11/0x1a [ 124.655692][ T8229] EXT4-fs (loop0): group descriptors corrupted! [ 124.658914][ T8231] should_fail+0x23c/0x250 [ 124.678413][ T8231] __should_failslab+0x81/0x90 [ 124.683182][ T8231] ? register_for_each_vma+0x372/0x890 [ 124.688652][ T8231] should_failslab+0x5/0x20 [ 124.693316][ T8231] kmem_cache_alloc_trace+0x49/0x310 [ 124.698602][ T8231] ? register_for_each_vma+0x372/0x890 [ 124.704122][ T8231] ? vma_interval_tree_iter_next+0x24c/0x280 [ 124.710154][ T8231] register_for_each_vma+0x372/0x890 [ 124.715644][ T8231] uprobe_apply+0x8b/0x260 [ 124.720072][ T8231] ? __uprobe_trace_func+0x430/0x430 [ 124.725374][ T8231] trace_uprobe_register+0x2b6/0x410 [ 124.730738][ T8231] perf_trace_event_init+0xf8/0x790 [ 124.735924][ T8231] perf_uprobe_init+0xf5/0x140 [ 124.740707][ T8231] perf_uprobe_event_init+0xde/0x140 [ 124.745979][ T8231] perf_try_init_event+0x21a/0x400 [ 124.751168][ T8231] perf_event_alloc+0xa60/0x1790 [ 124.756084][ T8231] __se_sys_perf_event_open+0x5c7/0x2740 [ 124.761776][ T8231] ? vfs_write+0x50c/0x770 [ 124.766177][ T8231] __x64_sys_perf_event_open+0x63/0x70 [ 124.771676][ T8231] do_syscall_64+0x3d/0x90 [ 124.776080][ T8231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.781987][ T8231] RIP: 0033:0x4665e9 [ 124.785926][ T8231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.805548][ T8231] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 124.814059][ T8231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 124.822179][ T8231] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 124.830640][ T8231] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.838615][ T8231] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 124.846710][ T8231] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 124.866064][ T8231] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 124.874455][ T8231] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 124.896221][ T8211] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 124.904728][ T8211] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 124.975028][ T8220] loop0: detected capacity change from 0 to 131456 19:06:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:16 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x25c, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0xfffffffe}, 0x0) 19:06:16 executing program 3 (fault-call:1 fault-nth:70): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:16 executing program 0: r0 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f00000004c0)='\x15\xcc\x10\xddu\xfe\x7f\xcb\f\xc6\xc1^N\xec\x95\xa5\x9a~\x8f\xba[\xaeC(\xbf\xf31\xee\x00\xfc\xd4\xc2\x7f\xb9\x8f\x94k\x85n\x9f\x1e\xf7\xee\xb7\x00\x8bg$?OM+\x9d\x1f\x05\xf4\x8d%\xf6\xb5l\x8f\xaf<\xef\"V\x9f\xde\xf5\xa6\xe8\xa0\x99R}\xa9\x83\xd9\xe2\xfa}\xaf\xf3\xc0\xd0\x81to\xe9k4U1\xea\xa3\xa2F\x01\xf2$\xd8\xea\xe0 I\xa8\xd4\nYp\x9c-P\x90\xea?o\xc4\x17]cW\xd5\xa9Y\x8d\xffp\x9a\n;\xb8\xf1)e\x7f\xc8G\x8dv\xfb\xe3\x03\x10WV\xfa\xed\xb7\xee\x1eW\xc7\xbc\xe3S\x97\x00'/171, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='.vb\xc9V\xb4\xabC\xa3\t\x00\x00\x00\x00\x00\x00\xf7/\x89\x92B\xf0\xeb\x16\xd2\x1c\xef\xde\xc9^k', &(0x7f0000000780)='selinuywlan0eth1+md5sum\x00\xc5V\x16 p\xa9\x9a\x01\xaa@0\xeb\\\xdb\t\x90U\xb1\xf5\x81\xa2\xf4\xb7\x89\xb5s\x17\x87[\x97\xdf5\x87V\xda\xf5\x9aV\x8d{\x92\x94\x1e\x96P\xd7Z\x1d\x1azU\xaa\xb2\xe7\xf1u7\f\xb0\x06\x808\xfc\"\xaaO\xebQ{\xb9\xef\x82\xf1L~\xf5\x8e\xe3\xb0\xd0OO\x11\xde3\x1a>\xd4\\\xda\x9fH\xd7\x8d\xeak\x89\x84S\xd2p\xf3\xc5Ga\xa2\x8a\x91\x86\xf5\x01\xbf@;\x1f\xf1\xdc\x9bi\xc4]\xf9%k\a\xb8\x84\x05\xcaQ+Tcq\x94\x9b`\x15\xfb\xe1\x89\x86\x95\xbf~-\x0e\xdf0\x9c\x03O\x9b\xe5\x93\x9eK<\xdd\xa6X\xf4\xc6\xf9\xa7_s\x90l4M\xcc\xe1\xfc]\x94\x83Q\\\xff\x8c\xb4C\x1b\n\xca?\xdd$}-l\x16%yJ\xffV\xc49\xdf\atR4\xb7\xb0\f\xa1\a,VuZ\x92\xce\x8a\xd8>\x9d\xfdaCg\xcaQ\xbf\x8b\x0e\x109.\xf86\xacZJ\b\x15\aBP\xc0$', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='MO\x93\xb1\xd2\xden\xa6\xa8\xf1m\x00', &(0x7f0000000640)='!P\x12\x00\xc7\xccy\x02\xb8\xa2\"(\xb2_\xe5\xf5\x13\xa7\xc9\x12*\x96\xb1\x94\x0e\\\xa1s\xa1\x8f#A\xefV~\xd3\xf7\x0e\xce\xbf *C\x1cG\x12\xa53k\x8c\xe4[\xdbh>\xe2\x93\xe8\xe9U\xbb)&\xfax%\xcb\xcb\xe3Wo\x9c\x18\xb2\x9eL\xfd+\xd2\fe\x00fy9(\xb5#\x99v1Y\xf7n\xccYHx@\x05\xfe\x83\xc2;=Orf\xd1\xf2\xe5\x01\xff8\'rw\xeb=w\xa4\xf0\xc4y\xebDG\x03x\xc0\xe1\'gK\x12\xfe\xe8\x80\xe5\xf1\xfdc\x8adSa\x17\x8f\xafO\x90\x8e!f\xae\xa7>\x16\xd1\x87H\xa0\x99\xc3\x11\xd8\x10\x92\x97\x90\xa0\xdd\x19\xa7x\x1a\xd3\xd0e\xee\xd9\x8bP\x96.\x04[f\xc3=\x19m\xcb\x9d;w\r\x95\xb7\xec\xd8\x958K\x02\x95\xc0\xbd\x805c\xa1\xffo\xbcok/\x7fc5\xe9\xc4\a\x97F!\xe0n\x16\xbc\a{\x88\"\xe6VJB\x1b\x817\x81\xc0\xe7\x16\x94\xc6\x12\bT\x87\xf8c\xf9\xcf(\xb0hjZ\x8aW\x83d\x00'/275, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='\x15\xcc\x10\xddu\xfe}\xcb\f\xc6\xc1GN\xec\x95\xa5\x9a~\x8f\xba[\xaeC(\xbf\xf31\xee\x00\xfc\xd4\xc2\x7f\xb9\x8f\x94k\x85n\x9f\x1e\xf7\xee\xb7\x00\x8bG$?OM+\x9d\x1f\x05\xf4\x8d%\xf6\xb5l\x8f\xaf<\xef\"V\x9f\xde\xf5\xa6\xe8\xa0\x99R}\xa9\x83\xd9\xe2\xfa}\xaf\xf3\xc0\xd0\x81to\xe9k4U1\xea\xa3\xa2F\x01\xf2$\xd8\xea0 I\xa0\xd4\nYp\x9c-P\x90\xea?o\xc4\x17]cW\xd5\xa9Y\x8d\xffp\x9a\n;\xb8\xf1)e\x7f\xc8V\xfa\xed\xb7\xee\x1eW\xc7\xbc\xe3S\x97\x00\xe9b\xce\xe4\xb7\xfb&\xee\xcd0\xdc\xaf\x91b0g\xef\xc7\xef\x95\xfbS\xe9\x00\x00\xee\x90Le\xeb\xc6\x1a\'>\b\x18c\xa9\xd9M\xcc\x9f\x02\x00\x00\x00\x00\x00\x00\x00\xd6\xce\a\x1a\xbc\xea', &(0x7f00000002c0)='.v\x01\xe0\x88\xd9\x06\xb6\xa4x\x84\xaaJBkeyring,%\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x15\xcc\x10\xddu\xfe\x7f\xcb\f\xc6\xc1^N\xec\x95\xa5\x9a~\x8f\xba[\xaeC(\xbf\xf31\xee\x00\xfc\xd4\xc2\x7f\xb9\x8f\x94k\x85n\x9f\x1e\xf7\xee\xb7\x00\x8bg$?OM+\x9d\x1f\x05\xf4\x8d%\xf6\xb5l\x8f\xaf<\xef\"V\x9f\xde\xf5\xa6\xe8\xa0\x99R}\xa9\x83\xd9\xe2\xfa}\xaf\xf3\xc0\xd0\x81to\xe9k4U1\xea\xa3\xa2F\x01\xf2$\xd8\xea\xe0 I\xa8\xd4\nYp\x9c-P\x90\xea?o\xc4\x17]cW\xd5\xa9Y\x8d\xffp\x9a\n;\xb8\xf1)e\x7f\xc8G\x8dv\xfb\xe3\x03\x10WV\xfa\xed\xb7\xee\x1eW\xc7\xbc\xe3S\x97\x00', &(0x7f0000000180)="95", 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000580)='+\xa0\xf9\x96\xd3\xc5\x13\x85\x82=\xad\x19r\n\aS\x1f\xa9\xac\xaa\xde\xb0\xb8H\x1ea\xdf3\x19\x18:\x18\xa2F', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='[\'^}/\x00', &(0x7f00000005c0)='.v\x01\xe0\x88\xd9\x06\xb6\xa4x\x84\xaaJBkeyring,%\x00\xc7', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='*/\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='+\xa0\xf9\x96\xd3\xc5\x13\x85\x82=\xad\x19r\n\aS\x1f\xa9\xac\xaa\xde\xb0\xb8H\x1ea\xdf3\x19\x18:\x18\xa2F', 0x0) 19:06:16 executing program 0: set_mempolicy(0x1, &(0x7f0000000080)=0x7, 0x9) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 125.124408][ T8271] FAULT_INJECTION: forcing a failure. [ 125.124408][ T8271] name failslab, interval 1, probability 0, space 0, times 0 [ 125.137071][ T8271] CPU: 0 PID: 8271 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 125.145740][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.155982][ T8271] Call Trace: [ 125.159277][ T8271] dump_stack_lvl+0xb7/0x103 [ 125.163980][ T8271] dump_stack+0x11/0x1a [ 125.168405][ T8271] should_fail+0x23c/0x250 [ 125.172836][ T8271] __should_failslab+0x81/0x90 [ 125.177606][ T8271] ? register_for_each_vma+0x372/0x890 [ 125.183146][ T8271] should_failslab+0x5/0x20 [ 125.187832][ T8271] kmem_cache_alloc_trace+0x49/0x310 [ 125.193102][ T8271] ? register_for_each_vma+0x372/0x890 [ 125.199068][ T8271] ? vma_interval_tree_iter_next+0x263/0x280 [ 125.205214][ T8271] register_for_each_vma+0x372/0x890 [ 125.210488][ T8271] uprobe_apply+0x8b/0x260 [ 125.214990][ T8271] ? __uprobe_trace_func+0x430/0x430 [ 125.220363][ T8271] trace_uprobe_register+0x2b6/0x410 [ 125.225965][ T8271] perf_trace_event_init+0xf8/0x790 [ 125.231241][ T8271] perf_uprobe_init+0xf5/0x140 [ 125.236002][ T8271] perf_uprobe_event_init+0xde/0x140 [ 125.241293][ T8271] perf_try_init_event+0x21a/0x400 [ 125.246541][ T8271] perf_event_alloc+0xa60/0x1790 [ 125.251512][ T8271] __se_sys_perf_event_open+0x5c7/0x2740 [ 125.257143][ T8271] ? vfs_write+0x50c/0x770 [ 125.261578][ T8271] __x64_sys_perf_event_open+0x63/0x70 [ 125.267041][ T8271] do_syscall_64+0x3d/0x90 [ 125.271650][ T8271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 125.278085][ T8271] RIP: 0033:0x4665e9 [ 125.281982][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.301695][ T8271] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.310102][ T8271] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 19:06:16 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x268, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x3) [ 125.318157][ T8271] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 125.326110][ T8271] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.334060][ T8271] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 125.342096][ T8271] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:16 executing program 3 (fault-call:1 fault-nth:71): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 125.378386][ T8271] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 125.386767][ T8271] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 125.413627][ T8275] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x4) 19:06:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(0x0, r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r4 = socket$inet6(0xa, 0x401000000001, 0x0) close(r4) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48810) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x0, 0x4, 0x32, @mcast1, @remote, 0x700, 0x8000, 0xf4, 0x8}}) r5 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r4, r5, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004044) [ 125.422146][ T8275] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 125.485974][ T8310] FAULT_INJECTION: forcing a failure. [ 125.485974][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 125.498758][ T8310] CPU: 0 PID: 8310 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 125.507438][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.517615][ T8310] Call Trace: [ 125.520903][ T8310] dump_stack_lvl+0xb7/0x103 [ 125.525644][ T8310] dump_stack+0x11/0x1a [ 125.529847][ T8310] should_fail+0x23c/0x250 [ 125.534426][ T8310] __should_failslab+0x81/0x90 [ 125.539333][ T8310] ? register_for_each_vma+0x372/0x890 [ 125.544777][ T8310] should_failslab+0x5/0x20 [ 125.549452][ T8310] kmem_cache_alloc_trace+0x49/0x310 [ 125.554742][ T8310] ? register_for_each_vma+0x372/0x890 [ 125.560284][ T8310] ? vma_interval_tree_iter_next+0x24c/0x280 [ 125.566315][ T8310] register_for_each_vma+0x372/0x890 [ 125.571598][ T8310] uprobe_apply+0x8b/0x260 [ 125.576027][ T8310] ? __uprobe_trace_func+0x430/0x430 [ 125.581364][ T8310] trace_uprobe_register+0x2b6/0x410 [ 125.586760][ T8310] perf_trace_event_init+0xf8/0x790 [ 125.592008][ T8310] perf_uprobe_init+0xf5/0x140 [ 125.596793][ T8310] perf_uprobe_event_init+0xde/0x140 [ 125.602113][ T8310] perf_try_init_event+0x21a/0x400 [ 125.607239][ T8310] perf_event_alloc+0xa60/0x1790 [ 125.612243][ T8310] __se_sys_perf_event_open+0x5c7/0x2740 [ 125.618040][ T8310] ? vfs_write+0x50c/0x770 [ 125.622446][ T8310] __x64_sys_perf_event_open+0x63/0x70 [ 125.627948][ T8310] do_syscall_64+0x3d/0x90 [ 125.632516][ T8310] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 125.638606][ T8310] RIP: 0033:0x4665e9 [ 125.642497][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.662213][ T8310] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.670713][ T8310] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 125.678889][ T8310] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 125.687008][ T8310] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.695174][ T8310] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 125.703134][ T8310] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 125.726581][ T8310] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 125.734960][ T8310] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:17 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x402, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x74, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xf) 19:06:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000400)=0x7) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) fcntl$setown(r2, 0x8, r3) ptrace$cont(0x1f, r3, 0xffffffff, 0x5) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 19:06:17 executing program 3 (fault-call:1 fault-nth:72): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x10) [ 126.009512][ T8337] FAULT_INJECTION: forcing a failure. [ 126.009512][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 126.022195][ T8337] CPU: 1 PID: 8337 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 126.030937][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.040991][ T8337] Call Trace: [ 126.044260][ T8337] dump_stack_lvl+0xb7/0x103 [ 126.048841][ T8337] dump_stack+0x11/0x1a [ 126.052991][ T8337] should_fail+0x23c/0x250 [ 126.057421][ T8337] __should_failslab+0x81/0x90 [ 126.062175][ T8337] ? register_for_each_vma+0x372/0x890 [ 126.067617][ T8337] should_failslab+0x5/0x20 [ 126.072132][ T8337] kmem_cache_alloc_trace+0x49/0x310 [ 126.077411][ T8337] ? register_for_each_vma+0x372/0x890 [ 126.082861][ T8337] ? vma_interval_tree_iter_next+0x263/0x280 [ 126.088831][ T8337] register_for_each_vma+0x372/0x890 [ 126.094182][ T8337] uprobe_apply+0x8b/0x260 [ 126.098645][ T8337] ? __uprobe_trace_func+0x430/0x430 [ 126.103921][ T8337] trace_uprobe_register+0x2b6/0x410 [ 126.109209][ T8337] perf_trace_event_init+0xf8/0x790 [ 126.114540][ T8337] perf_uprobe_init+0xf5/0x140 [ 126.119297][ T8337] perf_uprobe_event_init+0xde/0x140 [ 126.124580][ T8337] perf_try_init_event+0x21a/0x400 [ 126.129716][ T8337] perf_event_alloc+0xa60/0x1790 [ 126.134647][ T8337] __se_sys_perf_event_open+0x5c7/0x2740 [ 126.140267][ T8337] ? vfs_write+0x50c/0x770 [ 126.144673][ T8337] __x64_sys_perf_event_open+0x63/0x70 [ 126.150126][ T8337] do_syscall_64+0x3d/0x90 [ 126.154537][ T8337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 126.160439][ T8337] RIP: 0033:0x4665e9 [ 126.164354][ T8337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.184127][ T8337] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 126.192555][ T8337] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 126.200516][ T8337] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x95) 19:06:17 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x406, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x174ac0, 0x101) mmap(&(0x7f00005ed000/0x3000)=nil, 0x3000, 0x4, 0x80010, r0, 0xc94e7000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = gettid() tkill(r1, 0x34) kcmp(r1, 0xffffffffffffffff, 0x0, r0, r0) r2 = socket$nl_audit(0x10, 0x3, 0x9) open(&(0x7f0000000040)='./file0\x00', 0x100000, 0x88) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400"/15], 0x14}}, 0x0) [ 126.208519][ T8337] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.216477][ T8337] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 126.224446][ T8337] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 126.234157][ T8337] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 126.242541][ T8337] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:17 executing program 3 (fault-call:1 fault-nth:73): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:17 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x604, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 126.294442][ T8336] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 126.302839][ T8336] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 126.371753][ T8377] FAULT_INJECTION: forcing a failure. [ 126.371753][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 126.384600][ T8377] CPU: 0 PID: 8377 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 126.393468][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.404539][ T8377] Call Trace: [ 126.407820][ T8377] dump_stack_lvl+0xb7/0x103 [ 126.412685][ T8377] dump_stack+0x11/0x1a [ 126.416859][ T8377] should_fail+0x23c/0x250 [ 126.421605][ T8377] __should_failslab+0x81/0x90 [ 126.426434][ T8377] ? update_ref_ctr+0x28e/0x610 [ 126.431351][ T8377] should_failslab+0x5/0x20 [ 126.435919][ T8377] kmem_cache_alloc_trace+0x49/0x310 [ 126.441586][ T8377] update_ref_ctr+0x28e/0x610 [ 126.446944][ T8377] uprobe_write_opcode+0x34c/0x1050 [ 126.452221][ T8377] ? insn_rip_relative+0xbf/0xe0 [ 126.457238][ T8377] ? arch_uprobe_analyze_insn+0x2d4/0x420 [ 126.463218][ T8377] set_swbp+0x26/0x30 [ 126.467284][ T8377] install_breakpoint+0x3f3/0x4d0 [ 126.472409][ T8377] register_for_each_vma+0x6e7/0x890 [ 126.477772][ T8377] uprobe_apply+0x8b/0x260 [ 126.482240][ T8377] ? __uprobe_trace_func+0x430/0x430 [ 126.487508][ T8377] trace_uprobe_register+0x2b6/0x410 [ 126.493089][ T8377] perf_trace_event_init+0xf8/0x790 [ 126.498501][ T8377] perf_uprobe_init+0xf5/0x140 [ 126.503278][ T8377] perf_uprobe_event_init+0xde/0x140 [ 126.508600][ T8377] perf_try_init_event+0x21a/0x400 [ 126.513755][ T8377] perf_event_alloc+0xa60/0x1790 [ 126.518805][ T8377] __se_sys_perf_event_open+0x5c7/0x2740 [ 126.524554][ T8377] ? vfs_write+0x50c/0x770 [ 126.530141][ T8377] __x64_sys_perf_event_open+0x63/0x70 [ 126.536087][ T8377] do_syscall_64+0x3d/0x90 [ 126.540983][ T8377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 126.546885][ T8377] RIP: 0033:0x4665e9 [ 126.550777][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.570665][ T8377] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 126.579063][ T8377] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 126.587195][ T8377] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 126.595306][ T8377] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.603361][ T8377] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 126.611329][ T8377] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 126.629427][ T8381] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 126.637961][ T8381] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:18 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210) ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005340)={@remote, 0x16, r1}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005e80)={'sit0\x00', &(0x7f0000005e00)={'syztnl1\x00', r1, 0x4, 0x4, 0xf7, 0x800, 0x0, @remote, @remote}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005340)={@remote, 0x16, r2}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005e80)={'sit0\x00', &(0x7f0000005e00)={'syztnl1\x00', r2, 0x4, 0x4, 0xf7, 0x800, 0x0, @remote, @remote}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000006e80)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006ec0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000006fc0)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000007200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000071c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf25170000005400018008000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f310000000014000200776c616e30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="080003000100000008000300d77c890a2400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1040da07736c0a2429ca2c1cbf250000000003", @ANYRES32=0x0, @ANYBLOB="1800018014000200626f6e645f736c6176655f30000000004800018008000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800010014e3608de1e6e5b5a0ffea782cdd2223a136688571d05c47bc336be4bd7dc4bb2c29063d9c0364ee2cef0603e76dc660cee665fe0091e6d773222e91f21cd1c470c04afb6b71d745a7cfe0259cd6ef4e3eacbd35add4fe881eb4898298c3fec954789a4b8f435ff5eb599bee9391184565ff95a7d191f3", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468305f746f5f6261746164760030000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r7, @ANYBLOB="780001800800030007000000080003000100000008000300030000001400020076657468315f746f5f687372000000001400020067656e6576653000000000000000000008000300030000000800030001000000140002007663616e30000000000000000000000008000300169efdd00800030000000000"], 0x194}, 0x1, 0x0, 0x0, 0x41}, 0x24000001) r8 = memfd_create(&(0x7f0000000000)='\xa0\xe5\xe3Y\xa8m\x04\xf6\x0e\x93U\xc5\xb6\t\"\xb5\xdcb!\xaf\x92oz:1r\xd6\x03\x00n', 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="000001000000000002004e240a010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae135ed31a696b65d1e3236ae08d236bbb15ecfd5d3fa121c65f03b3eb4fa1684751e9504130a8b4ace1f78658e7920a9dc8c4d4a526c97f30e4fef469026d90d61bef4792d31fd589819fbd65d5b77e344ee02fc81b"], 0x190) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r8) 19:06:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc0) 19:06:18 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x700, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:18 executing program 3 (fault-call:1 fault-nth:74): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 126.847211][ T8396] FAULT_INJECTION: forcing a failure. [ 126.847211][ T8396] name failslab, interval 1, probability 0, space 0, times 0 [ 126.859949][ T8396] CPU: 1 PID: 8396 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 126.868889][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.878945][ T8396] Call Trace: [ 126.882216][ T8396] dump_stack_lvl+0xb7/0x103 [ 126.886805][ T8396] dump_stack+0x11/0x1a [ 126.890962][ T8396] should_fail+0x23c/0x250 19:06:18 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x4000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 126.895376][ T8396] __should_failslab+0x81/0x90 [ 126.900406][ T8396] ? register_for_each_vma+0x372/0x890 [ 126.905852][ T8396] should_failslab+0x5/0x20 [ 126.910376][ T8396] kmem_cache_alloc_trace+0x49/0x310 [ 126.915676][ T8396] ? register_for_each_vma+0x372/0x890 [ 126.921203][ T8396] ? vma_interval_tree_iter_next+0x263/0x280 [ 126.927196][ T8396] register_for_each_vma+0x372/0x890 [ 126.932475][ T8396] uprobe_apply+0x8b/0x260 [ 126.937250][ T8396] ? __uprobe_trace_func+0x430/0x430 [ 126.942536][ T8396] trace_uprobe_register+0x2b6/0x410 [ 126.947936][ T8396] perf_trace_event_init+0xf8/0x790 [ 126.953957][ T8396] perf_uprobe_init+0xf5/0x140 [ 126.958802][ T8396] perf_uprobe_event_init+0xde/0x140 [ 126.964085][ T8396] perf_try_init_event+0x21a/0x400 [ 126.969286][ T8396] perf_event_alloc+0xa60/0x1790 [ 126.974277][ T8396] __se_sys_perf_event_open+0x5c7/0x2740 [ 126.980514][ T8396] ? vfs_write+0x50c/0x770 [ 126.985032][ T8396] __x64_sys_perf_event_open+0x63/0x70 [ 126.990481][ T8396] do_syscall_64+0x3d/0x90 [ 126.995078][ T8396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 127.001046][ T8396] RIP: 0033:0x4665e9 [ 127.004936][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.024804][ T8396] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 127.033203][ T8396] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 127.041226][ T8396] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 127.049200][ T8396] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 127.057161][ T8396] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 127.065226][ T8396] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 127.082625][ T8396] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x1ee) 19:06:18 executing program 3 (fault-call:1 fault-nth:75): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x300) [ 127.091389][ T8396] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 127.117483][ T8399] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 127.125894][ T8399] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 127.143848][ T8423] netlink: 1328 bytes leftover after parsing attributes in process `syz-executor.1'. 19:06:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 127.189104][ T8433] FAULT_INJECTION: forcing a failure. [ 127.189104][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 127.201773][ T8433] CPU: 0 PID: 8433 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 127.210631][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.220690][ T8433] Call Trace: [ 127.223956][ T8433] dump_stack_lvl+0xb7/0x103 [ 127.228621][ T8433] dump_stack+0x11/0x1a [ 127.232774][ T8433] should_fail+0x23c/0x250 [ 127.237378][ T8433] __should_failslab+0x81/0x90 [ 127.242180][ T8433] ? update_ref_ctr+0x28e/0x610 [ 127.247128][ T8433] should_failslab+0x5/0x20 [ 127.251620][ T8433] kmem_cache_alloc_trace+0x49/0x310 [ 127.256994][ T8433] update_ref_ctr+0x28e/0x610 [ 127.261672][ T8433] uprobe_write_opcode+0x34c/0x1050 [ 127.266907][ T8433] ? insn_rip_relative+0xbf/0xe0 [ 127.271826][ T8433] ? arch_uprobe_analyze_insn+0x2d4/0x420 [ 127.277530][ T8433] set_swbp+0x26/0x30 [ 127.281655][ T8433] install_breakpoint+0x3f3/0x4d0 [ 127.286739][ T8433] register_for_each_vma+0x6e7/0x890 [ 127.292078][ T8433] uprobe_apply+0x8b/0x260 [ 127.296474][ T8433] ? __uprobe_trace_func+0x430/0x430 [ 127.301853][ T8433] trace_uprobe_register+0x2b6/0x410 [ 127.307127][ T8433] perf_trace_event_init+0xf8/0x790 [ 127.312314][ T8433] perf_uprobe_init+0xf5/0x140 [ 127.317080][ T8433] perf_uprobe_event_init+0xde/0x140 [ 127.322454][ T8433] perf_try_init_event+0x21a/0x400 [ 127.327549][ T8433] perf_event_alloc+0xa60/0x1790 [ 127.332527][ T8433] __se_sys_perf_event_open+0x5c7/0x2740 [ 127.338137][ T8433] ? vfs_write+0x50c/0x770 [ 127.342534][ T8433] __x64_sys_perf_event_open+0x63/0x70 [ 127.347987][ T8433] do_syscall_64+0x3d/0x90 [ 127.352384][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 127.358276][ T8433] RIP: 0033:0x4665e9 [ 127.362161][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:06:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xec0) [ 127.381851][ T8433] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 127.390273][ T8433] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 127.398234][ T8433] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 127.406188][ T8433] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 127.414138][ T8433] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 127.422274][ T8433] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 127.490337][ T8444] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 127.498792][ T8444] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 127.524423][ T8451] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 127.532831][ T8451] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:19 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x4200, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:19 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x92, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x66, 0xd9f, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = fork() tkill(r3, 0x26) r4 = memfd_create(&(0x7f0000000080)='\x00\x84\x00\x00', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r5 = accept4(r0, &(0x7f0000003f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000004000)=0x80, 0x800) r6 = geteuid() r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r8, r9) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e00)=[{&(0x7f0000000100)={0x248, 0x3c, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xfd, 0x12, 0x0, 0x1, [@generic="bdec887b8a31b1892f0ccc81f3a0fce0e72b59084f8aac88edd8bf83c5524ae6bb245daf7e5244a05145393659a03a9582c4a7f0ff60e92b2d669a5fffd740317df737ee89ee210e5429507459dd3f0a093d9b3ef2b821ef979c93252324a8cf9fe548a5f8abb24925fb160cd16f0b1555b6c4e3fedcc554c6f9100e6cb4c80f58fe9741e75fca420f8b2de0a8707ee20e9149f156b983485490ff170c1dff78dc2b10028e16705bdc7374a15f1895caee893fc2b1b778e63dad1687d4", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x3, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@remote}, @typed={0xb, 0x17, 0x0, 0x0, @str=':H}{-$\x00'}]}, @generic="d750fbef9070de09a1fe7fdc0e60fe2fcbfd340c2dbac6a7f9d0b3ee285b39c7c9f863719a6c0f4ab4f669a7b3505fb8c17c42bdf3f830b4967735680b93f90b2791e8165de3e82dd3ebd11a4fe1d8bc4cc1203cca92af3f77794267ec48130480bdcca8c126653de92fe1e542b193a79dab97009219d2f5cb7658f59dbc7c62a2b41a0dcc1de25c466a236433228f3ef0b02c33f8b45301add453", @generic="fd0d2cf27e52a5885d9da74f5ed4f66440659100832a3a86d912bd324fbd5bad597931f1792a4e0bc45ba7145f2a6540908200ab85a8a45bd61cf9e72488eb91672d95addc4ae6dea793eec3a176ba298ad92aa88b5a0bca91756e2257140160ece4fffd3d28ccef58a4103acbf7e9ac039a285338386c0b942a1bf40c70ef9f30f17c7722bec2154430908e4f92ccf0ccbf9d4b61a0ed943282432b"]}, 0x248}, {&(0x7f0000000380)={0x10, 0x1b, 0x210, 0x70bd29, 0x25dfdbff}, 0x10}, {&(0x7f00000015c0)={0x1338, 0x16, 0x10, 0x70bd29, 0x25dfdbfe, "", [@nested={0x11ea, 0x7c, 0x0, 0x1, [@generic="b4b3502ba23b1c204632d1a047636e3d602b7de3694e229051e627", @generic="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", @generic="974547f9adec9d2033e0d2cfc95f6938e644f5b203027fcd605701086ea38a5e011b7df3b8b0e0906f6351f64a60792084d449154ea5d5251d614ebade5c5fb4b8009cb2c38ba08a5dbd43fa99ab871913c1fdd4e86aae766ad50360f96b9323d19a810e45c9200599891a5b35db4c001566880dddc76ae53cde55c1cf386c4446a86554d76187e4dec5c452afeea788f4f98ada3c4ca83afe40918c52007d0ea3e1b9af3dff852d17b6599df39dd452aa5c16d31ed92e8f575ccd", @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@local}, @generic="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"]}, @generic="b1c0f4dfddbcc4de684779688c592185aae722705ad53a12b091d953adffd6552f92f1d636a1702409a86f5ab72b014f24d55447c8d643d6c2305e3d344607def6dbe73dba1b4da0139b1434d1", @typed={0x8, 0x87, 0x0, 0x0, @uid}, @typed={0x8, 0x1b, 0x0, 0x0, @fd}, @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@loopback}, @typed={0xd3, 0x64, 0x0, 0x0, @binary="9730d9521d7e6ccf89a6b021ccd38e8af8ae65a90f38ccbbd7228b0966792c13d0c7a04a378ed5fe092326ba4899a046e511febb1e8f86176d32e74b01b7b36aa7e41f009835ab3d7e2ad461d6c1fe42ddd26394e35cea1bc66f51fe43e679a48767e12c19b893979bae56a705710ddbaa963b797e5111cbd7c2d4c0ce272475e4e39247c5230c361693e465606a46c87726e1f55ca6c2eb047cb69a20d45afd19f1b515083ffcf22dfa908b270252a53751176bbff4ad5d23c705c45839266a9ba6bf887578997491edf106914a00"}]}, 0x1338}, {&(0x7f0000002900)={0x14d4, 0x41, 0x100, 0x70bd25, 0x25dfdbfd, "", [@generic="1eabe1bfd866cfa8c7fd7b37268fea943326ce", @nested={0x153, 0x89, 0x0, 0x1, [@generic="c133e0ee3f142bac82f17fbe0873cdda96b7c9f9308ebdc1196492a0ce51131ea1ed350f86780a4f3c81ea7b7c2600ca838b1725746e65508c5f0d0418753e2d323e196246c54d1de243c2d779747ecd373bdcc8d50e9063a88fc87678720f9bc0b3f1a7cb2ee22dc2d0ce71e60472da23445641be48a873213927c52a8b416c1786e8234a89d50daf5f7bb68a1553d3ab750ce25ff1045dd72dd71fcb9f3230ad3413b84d3d0af9fdc76dc7f13736d1902dffa2c8cb9742f018dbed9b0163e23f234b64ebce5a3e80fb417afb59bc409d282eeef8be0e", @generic="d2956ecb5348aa4413f51ec1bb6d02c2165a920fd09eb925d0297d27b75c515ba77c405319c402d6d5c1f7e6a070a4c5b56989834ebac59bd3b0585711d953025d822102ed5fe5975414d10b807e3997d67ede2e7c8edc5d55c4b4e7818cb962c0824ed1a654e731a226ba0af11819603d1a24bf45d55e0c"]}, @nested={0x1265, 0x45, 0x0, 0x1, [@generic="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", @generic="80e122a6d8f04d88bb0565bf73ac49f1928437518be5fd872e507239c6f2150c47b8297b1344a2f5502b9f9ccb0918d4ccfda30f353183f205117ae44733278143fca461baa1296f74b61327004c0f", @generic="aff4541552c2a524b1bd0a9a8f1915a1c906901179d9cf470f3f3bec6a4a934b59b1529dd80fa2cc5b108f25f30ff25b7609ef82d518094a8777b4f517326bc67262dcce7c811e96999e47ad65", @generic="98e94335eb719211817520a5e983074ad388652b6868db40cd1f1c9ff716c3b49cb382edafd2a2cb819429ac5759ca865fb14c5fec05edc85b77616954737a33e762f23b43925875b0eb9045e26255f6a560286146f7b60f1354f22f8cd9e3d3014a03d8a48752df1921756b2620196a37fe98ef8e1cac6f21d25960514577f7083ea525c8c65a176121a4a87539ea0bdf173fe8a6764d92d9241f67869292acedcc4627b2d9580d4eb985ded3d2d4d02e3af7aec92747cfbd35eae1d647434370759b3ef378a05cb18a9401405e43d48ea9d8550b91166822e3fb85eec6c4d6eb0666e0f73c5c8dab6ce7953e967b8db530fe02cd046049d2", @generic="11c2a315d3233123090eb541be78b5a89f1fdf4be14f31b086f3e67c7fa03952d59f81623893096a5f69e39dc418e8be1a6b8959dc9c24d231a832d94ac0fc0ef860b629c5318e35535d02b2b8c6d0ad468b2b83ed3f35d4c2f38814aadb02dd48bc18bea03c3d30f82402583817bc41c016b216cc2179489cf7084ed1fe41130f0cddfbe0a669145f53315db147967c2dc6ea0765249da58f04dae340b7f8ff22df0c663585d9460e1b6586cbbb8d0de4b95e001556bc910c1e55b7ebd35ab92e54b3f676062a4537842cad"]}, @typed={0x8, 0x69, 0x0, 0x0, @fd=r4}, @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="bbc368e62037ead2fd4dd672f2a00e1782921fef6fd2277141bb7370d2b2ecc954105209283984e5af3267fec81345c1b5c1a9527160aa89553af5bbba8ca39c69ebdb148a30e27a01353fad543ddbcd0cc6ff62cc1ef9ea3a", @nested={0x75, 0x6e, 0x0, 0x1, [@generic, @generic="f49b50ff73356b1584c36c307420455504098aca80eb614f06ec460667a598d464d07755b7b35883cb4fc94f0e281b3ec389e3fbab996cd9923dad2d0655194d1b8cd513b0ebefa8fad16a5760e038e7798bced1fcda6277d6b2c65de71f3dc42b79dabeeb1ae6c88d604b192e61185ffd"]}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x9}]}, 0x14d4}], 0x4, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r3, r6, r9}}}], 0x60, 0x4000040}, 0x4800) 19:06:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xf00) 19:06:19 executing program 3 (fault-call:1 fault-nth:76): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 127.726592][ T8462] FAULT_INJECTION: forcing a failure. [ 127.726592][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 127.739281][ T8462] CPU: 1 PID: 8462 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 127.747951][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.758064][ T8462] Call Trace: [ 127.761336][ T8462] dump_stack_lvl+0xb7/0x103 [ 127.766003][ T8462] dump_stack+0x11/0x1a [ 127.770155][ T8462] should_fail+0x23c/0x250 19:06:19 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x5c02, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 127.774568][ T8462] __should_failslab+0x81/0x90 [ 127.779333][ T8462] ? register_for_each_vma+0x372/0x890 [ 127.784786][ T8462] should_failslab+0x5/0x20 [ 127.789309][ T8462] kmem_cache_alloc_trace+0x49/0x310 [ 127.794614][ T8462] ? register_for_each_vma+0x372/0x890 [ 127.800165][ T8462] ? vma_interval_tree_iter_next+0x263/0x280 [ 127.806209][ T8462] register_for_each_vma+0x372/0x890 [ 127.811587][ T8462] uprobe_apply+0x8b/0x260 [ 127.816057][ T8462] ? __uprobe_trace_func+0x430/0x430 [ 127.821351][ T8462] trace_uprobe_register+0x2b6/0x410 [ 127.826680][ T8462] perf_trace_event_init+0xf8/0x790 [ 127.831892][ T8462] perf_uprobe_init+0xf5/0x140 [ 127.836702][ T8462] perf_uprobe_event_init+0xde/0x140 [ 127.841975][ T8462] perf_try_init_event+0x21a/0x400 [ 127.847069][ T8462] perf_event_alloc+0xa60/0x1790 [ 127.852008][ T8462] __se_sys_perf_event_open+0x5c7/0x2740 [ 127.857629][ T8462] ? vfs_write+0x50c/0x770 [ 127.862164][ T8462] __x64_sys_perf_event_open+0x63/0x70 [ 127.867683][ T8462] do_syscall_64+0x3d/0x90 [ 127.872203][ T8462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 127.878086][ T8462] RIP: 0033:0x4665e9 [ 127.882062][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.901648][ T8462] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 127.910041][ T8462] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 127.917994][ T8462] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x9500) [ 127.925945][ T8462] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 127.934101][ T8462] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 127.942053][ T8462] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 127.967795][ T8462] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 127.976169][ T8462] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 127.995688][ T8464] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 128.004160][ T8464] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:19 executing program 3 (fault-call:1 fault-nth:77): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc000) 19:06:19 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x6000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="2a0ecba3d208c334f46bc6cd831769f51b35d84e875c6614f7931b03da577b13bae2c348dd8db5df2c556546f1e8c40e6f1e07254ad86f4d9f08ac1fb3807c8da05c933d0e7189ed72681381df354648e636ce3341a80264956efbb9062136c6f9dbcee7c6b8b4db0ffa30bc514e5f95f0c479e7ffafc133", 0x78}, {&(0x7f0000000200)="ef891ade6285cd63542f0a43af3f42c46c97b748ff9873a0c07369c72a9776e98bd6ece0babdef1f2acd15c0a546d7357f1254677d8e874abeb779570ab7ba3d56a15499c31d07386ae863d61ab6298434a1ac70e8093f5d809b69e783c97c7bb36caa72", 0x64}, {&(0x7f0000000280)="502c3c8cd95b3be7d5946b757fe9d9dcaf99bbb7596836e36dee5ccdff19ab21adc5eca94f1aea0c0fc52149ed3d6604ab6c8bc0a678310f69b1a7a4bce2a7c11ddb2944b84808c4345ae779a7e8adc298b0e91d90528d1719370d8511e72585e575d5a1952a0dc5c0c1d2f6d7520db4b9412029ab199d341ebdc905107b2e3be643cb907ca2291d0498d11ef8bae75548b29e3379d298182db0756dae6bb820f0c89b9820538d7f8068beff4f76bc55149339ff5e0f431f712bee63a08ed4230ec2baee151d", 0xc6}], 0x3, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) close(0xffffffffffffffff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) [ 128.014477][ T8487] netlink: 1328 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.095912][ T8500] FAULT_INJECTION: forcing a failure. [ 128.095912][ T8500] name failslab, interval 1, probability 0, space 0, times 0 [ 128.108556][ T8500] CPU: 1 PID: 8500 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 128.117235][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.127352][ T8500] Call Trace: [ 128.130632][ T8500] dump_stack_lvl+0xb7/0x103 [ 128.135236][ T8500] dump_stack+0x11/0x1a [ 128.139398][ T8500] should_fail+0x23c/0x250 [ 128.144303][ T8500] __should_failslab+0x81/0x90 [ 128.149139][ T8500] ? register_for_each_vma+0x372/0x890 [ 128.154733][ T8500] should_failslab+0x5/0x20 [ 128.159227][ T8500] kmem_cache_alloc_trace+0x49/0x310 [ 128.164586][ T8500] ? register_for_each_vma+0x372/0x890 [ 128.170207][ T8500] ? vma_interval_tree_iter_next+0x24c/0x280 [ 128.176231][ T8500] register_for_each_vma+0x372/0x890 [ 128.181516][ T8500] uprobe_apply+0x8b/0x260 [ 128.185962][ T8500] ? __uprobe_trace_func+0x430/0x430 [ 128.191342][ T8500] trace_uprobe_register+0x2b6/0x410 [ 128.196668][ T8500] perf_trace_event_init+0xf8/0x790 [ 128.201887][ T8500] perf_uprobe_init+0xf5/0x140 [ 128.206675][ T8500] perf_uprobe_event_init+0xde/0x140 [ 128.211977][ T8500] perf_try_init_event+0x21a/0x400 [ 128.217070][ T8500] perf_event_alloc+0xa60/0x1790 [ 128.222029][ T8500] __se_sys_perf_event_open+0x5c7/0x2740 [ 128.227645][ T8500] ? vfs_write+0x50c/0x770 [ 128.232057][ T8500] __x64_sys_perf_event_open+0x63/0x70 [ 128.237499][ T8500] do_syscall_64+0x3d/0x90 [ 128.241922][ T8500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 128.247828][ T8500] RIP: 0033:0x4665e9 [ 128.251782][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.271387][ T8500] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 128.279785][ T8500] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 128.287938][ T8500] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 128.295900][ T8500] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 128.303927][ T8500] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 128.311883][ T8500] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 128.354636][ T8500] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 128.363066][ T8500] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:20 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x6400, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:20 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x9, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006700000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f0000000080)) 19:06:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc00e) 19:06:20 executing program 3 (fault-call:1 fault-nth:78): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xee01) [ 128.600853][ T8542] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 128.609361][ T8542] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 128.622832][ T8543] loop0: detected capacity change from 0 to 22 [ 128.632288][ T8540] FAULT_INJECTION: forcing a failure. [ 128.632288][ T8540] name failslab, interval 1, probability 0, space 0, times 0 19:06:20 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x6802, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 128.633514][ T8543] EXT4-fs (loop0): bad geometry: block count 103 exceeds size of device (11 blocks) [ 128.645023][ T8540] CPU: 1 PID: 8540 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 128.663056][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.673112][ T8540] Call Trace: [ 128.676396][ T8540] dump_stack_lvl+0xb7/0x103 [ 128.679664][ T8558] netlink: 1328 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.681048][ T8540] dump_stack+0x11/0x1a [ 128.694725][ T8540] should_fail+0x23c/0x250 [ 128.699321][ T8540] __should_failslab+0x81/0x90 [ 128.704079][ T8540] ? register_for_each_vma+0x372/0x890 [ 128.709515][ T8540] should_failslab+0x5/0x20 [ 128.714174][ T8540] kmem_cache_alloc_trace+0x49/0x310 [ 128.719509][ T8540] ? register_for_each_vma+0x372/0x890 [ 128.725121][ T8540] ? vma_interval_tree_iter_next+0x263/0x280 [ 128.731102][ T8540] register_for_each_vma+0x372/0x890 [ 128.736488][ T8540] uprobe_apply+0x8b/0x260 [ 128.740886][ T8540] ? __uprobe_trace_func+0x430/0x430 [ 128.746264][ T8540] trace_uprobe_register+0x2b6/0x410 [ 128.751536][ T8540] perf_trace_event_init+0xf8/0x790 [ 128.756722][ T8540] perf_uprobe_init+0xf5/0x140 [ 128.761476][ T8540] perf_uprobe_event_init+0xde/0x140 [ 128.767110][ T8540] perf_try_init_event+0x21a/0x400 [ 128.772223][ T8540] perf_event_alloc+0xa60/0x1790 [ 128.777172][ T8540] __se_sys_perf_event_open+0x5c7/0x2740 [ 128.782897][ T8540] ? vfs_write+0x50c/0x770 [ 128.787398][ T8540] __x64_sys_perf_event_open+0x63/0x70 [ 128.792865][ T8540] do_syscall_64+0x3d/0x90 [ 128.797290][ T8540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 128.803346][ T8540] RIP: 0033:0x4665e9 [ 128.807222][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.827057][ T8540] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 128.835546][ T8540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 128.843505][ T8540] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 19:06:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x33fe0) [ 128.851460][ T8540] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 128.859596][ T8540] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 128.867550][ T8540] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 128.885326][ T8540] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0x7}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) socket$packet(0x11, 0x3, 0x300) 19:06:20 executing program 3 (fault-call:1 fault-nth:79): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x40000) [ 128.893692][ T8540] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 128.921244][ T8556] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 128.929788][ T8556] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 129.012903][ T8583] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 129.021468][ T8583] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 129.039113][ T8583] FAULT_INJECTION: forcing a failure. [ 129.039113][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 129.051763][ T8583] CPU: 1 PID: 8583 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 129.060444][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.070496][ T8583] Call Trace: [ 129.073760][ T8583] dump_stack_lvl+0xb7/0x103 [ 129.078368][ T8583] dump_stack+0x11/0x1a [ 129.082710][ T8583] should_fail+0x23c/0x250 [ 129.087226][ T8583] __should_failslab+0x81/0x90 [ 129.091996][ T8583] ? register_for_each_vma+0x372/0x890 [ 129.097475][ T8583] should_failslab+0x5/0x20 [ 129.102003][ T8583] kmem_cache_alloc_trace+0x49/0x310 [ 129.107312][ T8583] ? register_for_each_vma+0x372/0x890 [ 129.112749][ T8583] ? vma_interval_tree_iter_next+0x24c/0x280 [ 129.118710][ T8583] register_for_each_vma+0x372/0x890 [ 129.123989][ T8583] uprobe_apply+0x8b/0x260 [ 129.128388][ T8583] uprobe_perf_close+0x2f8/0x370 [ 129.133423][ T8583] ? uprobe_apply+0x203/0x260 [ 129.138077][ T8583] trace_uprobe_register+0x310/0x410 [ 129.143457][ T8583] perf_trace_event_init+0xf8/0x790 [ 129.148648][ T8583] perf_uprobe_init+0xf5/0x140 [ 129.153392][ T8583] perf_uprobe_event_init+0xde/0x140 [ 129.158750][ T8583] perf_try_init_event+0x21a/0x400 [ 129.163847][ T8583] perf_event_alloc+0xa60/0x1790 [ 129.168763][ T8583] __se_sys_perf_event_open+0x5c7/0x2740 [ 129.174374][ T8583] ? vfs_write+0x50c/0x770 [ 129.178794][ T8583] __x64_sys_perf_event_open+0x63/0x70 [ 129.184395][ T8583] do_syscall_64+0x3d/0x90 [ 129.188794][ T8583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.194758][ T8583] RIP: 0033:0x4665e9 [ 129.198637][ T8583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.218505][ T8583] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 129.227006][ T8583] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 129.234984][ T8583] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 129.242933][ T8583] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 129.250882][ T8583] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 129.258865][ T8583] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4089, 0xff9}, {&(0x7f0000002480)=""/143, 0x8f}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/118, 0x76}], 0x7, 0xd9f, 0xfffffffc) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:20 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x40000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x1000000) 19:06:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ea"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200002, 0x5) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000200)=""/221, 0xdd}], 0x3, 0x7, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10180, 0x111) 19:06:20 executing program 3 (fault-call:1 fault-nth:80): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x1ee0000) 19:06:21 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x80000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 129.455870][ T8602] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 129.464298][ T8602] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x4, 0x1, 0x3, 0x9}, {0x0, 0x3f, 0x4, 0xffffffff}, {0x1ff, 0x1, 0x1, 0x5}, {0x1f, 0x4, 0xde, 0x7}, {0x400, 0x9, 0x7, 0x3}, {0x80, 0x1, 0x4, 0x330}]}) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) clone(0x122100400, &(0x7f00000001c0)="e3cd0df2f5050cdb6ff97f8c2fac5e71ebb75fa70994b92a37aabdc815547157acef9d77db7f0497283a37f0c506c4f23005bd8dba1a7b961faeb70a5312f8fdc8425e22be432cbf9b9f3b4e384faaccf82ca597cd0ecf71f7038bd8ab6661d8492c237cb8d0c218ee4c070c280b5c4c64ad039a4feb3b45cebf65de082dd6c0b2857ffa5ff265fd81823f2949eec014dbf7bcfbabe356cb30fbe2be31bfedaa304f6a4ad61beb6b8bec2a0aec2a52484e6a8f4b368be873c183f4f881d6b64f71e2af8371", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="c4b37970fdb68df2d40910450ee7f544dafb9cc8cfabbd713d54f9ddf5e7fac35259cd875c46e6252d58994123b556994a77fbd7b3f1c962370fd47c50d0acf4d3d6ec3581d70555654bb3e9db82b54f66925a1c1c588d89a04118baebc4abf6f73d9fa3ca2f45dc0b780661ddd4cb091e9f8f") getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 19:06:21 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x400000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 129.518850][ T8605] FAULT_INJECTION: forcing a failure. [ 129.518850][ T8605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.530958][ T8622] netlink: 1236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.532226][ T8605] CPU: 1 PID: 8605 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 129.550827][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.561029][ T8605] Call Trace: [ 129.564311][ T8605] dump_stack_lvl+0xb7/0x103 19:06:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x3000000) [ 129.568906][ T8605] dump_stack+0x11/0x1a [ 129.573061][ T8605] should_fail+0x23c/0x250 [ 129.577516][ T8605] __alloc_pages+0x102/0x320 [ 129.582113][ T8605] alloc_pages_vma+0x513/0x680 [ 129.586889][ T8605] uprobe_write_opcode+0x3e9/0x1050 [ 129.592213][ T8605] ? arch_uprobe_analyze_insn+0x2d4/0x420 [ 129.598068][ T8605] set_swbp+0x26/0x30 [ 129.602040][ T8605] install_breakpoint+0x3f3/0x4d0 [ 129.607100][ T8605] ? ___cache_free+0x3c/0x300 [ 129.611764][ T8605] ? vmacache_find+0x39/0x320 [ 129.616450][ T8605] ? find_vma+0x12/0x100 [ 129.620688][ T8605] ? vmacache_update+0x45/0xa0 [ 129.625431][ T8605] register_for_each_vma+0x6e7/0x890 [ 129.630759][ T8605] uprobe_apply+0x8b/0x260 [ 129.635878][ T8605] ? __uprobe_trace_func+0x430/0x430 [ 129.641226][ T8605] trace_uprobe_register+0x2b6/0x410 [ 129.646498][ T8605] perf_trace_event_init+0xf8/0x790 [ 129.651701][ T8605] perf_uprobe_init+0xf5/0x140 [ 129.656487][ T8605] perf_uprobe_event_init+0xde/0x140 [ 129.661753][ T8605] perf_try_init_event+0x21a/0x400 [ 129.666845][ T8605] perf_event_alloc+0xa60/0x1790 [ 129.671789][ T8605] __se_sys_perf_event_open+0x5c7/0x2740 [ 129.677406][ T8605] ? vfs_write+0x50c/0x770 [ 129.681797][ T8605] __x64_sys_perf_event_open+0x63/0x70 [ 129.687248][ T8605] do_syscall_64+0x3d/0x90 [ 129.691654][ T8605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.697528][ T8605] RIP: 0033:0x4665e9 [ 129.701468][ T8605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.721052][ T8605] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 129.729497][ T8605] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 129.737542][ T8605] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 129.745511][ T8605] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 129.753462][ T8605] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 129.761596][ T8605] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 129.836980][ T25] audit: type=1326 audit(1627239981.349:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 129.865560][ T25] audit: type=1326 audit(1627239981.369:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 129.890371][ T8647] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 129.898770][ T8647] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 129.900727][ T25] audit: type=1326 audit(1627239981.369:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 129.940755][ T25] audit: type=1326 audit(1627239981.369:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=133 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 129.964768][ T25] audit: type=1326 audit(1627239981.369:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 129.971793][ T8656] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 129.990872][ T25] audit: type=1326 audit(1627239981.369:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=56 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 129.997045][ T8656] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 130.032168][ T25] audit: type=1326 audit(1627239981.379:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 130.056863][ T25] audit: type=1326 audit(1627239981.389:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=191 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 130.080839][ T25] audit: type=1326 audit(1627239981.389:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 130.104808][ T25] audit: type=1326 audit(1627239981.389:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8633 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665e9 code=0x7ffc0000 19:06:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x4000000) 19:06:21 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x50651d, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:21 executing program 3 (fault-call:1 fault-nth:81): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:21 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) open(&(0x7f0000000040)='./bus\x00', 0x2aac2, 0x61) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c1042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000001740)=ANY=[], 0xe) fallocate(r2, 0x3, 0x0, 0x9ef5) fallocate(r0, 0x0, 0x0, 0x5) 19:06:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xf000000) 19:06:21 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x600000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 130.297140][ T8662] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 130.305818][ T8662] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 130.364842][ T8670] FAULT_INJECTION: forcing a failure. [ 130.364842][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 130.377563][ T8670] CPU: 0 PID: 8670 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 130.386234][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.396395][ T8670] Call Trace: [ 130.399677][ T8670] dump_stack_lvl+0xb7/0x103 [ 130.404361][ T8670] dump_stack+0x11/0x1a [ 130.408541][ T8670] should_fail+0x23c/0x250 [ 130.412960][ T8670] __should_failslab+0x81/0x90 [ 130.417723][ T8670] ? update_ref_ctr+0x28e/0x610 [ 130.422586][ T8670] should_failslab+0x5/0x20 [ 130.427122][ T8670] kmem_cache_alloc_trace+0x49/0x310 [ 130.432512][ T8670] ? __mod_memcg_lruvec_state+0xa7/0x190 [ 130.438223][ T8670] update_ref_ctr+0x28e/0x610 [ 130.442897][ T8670] uprobe_write_opcode+0x34c/0x1050 [ 130.449185][ T8670] ? arch_uprobe_analyze_insn+0x2d4/0x420 [ 130.454957][ T8670] set_swbp+0x26/0x30 [ 130.458942][ T8670] install_breakpoint+0x3f3/0x4d0 19:06:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x82200, 0x24) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000600)="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", 0x200, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r2, r0, 0x0, 0x8000000000004) [ 130.463946][ T8670] ? ___cache_free+0x3c/0x300 [ 130.468754][ T8670] ? vmacache_find+0x39/0x320 [ 130.473941][ T8670] ? find_vma+0x12/0x100 [ 130.478187][ T8670] ? vmacache_update+0x45/0xa0 [ 130.482938][ T8670] register_for_each_vma+0x6e7/0x890 [ 130.488387][ T8670] uprobe_apply+0x8b/0x260 [ 130.492829][ T8670] ? __uprobe_trace_func+0x430/0x430 [ 130.498112][ T8670] trace_uprobe_register+0x2b6/0x410 [ 130.503675][ T8670] perf_trace_event_init+0xf8/0x790 [ 130.509326][ T8670] perf_uprobe_init+0xf5/0x140 [ 130.514302][ T8670] perf_uprobe_event_init+0xde/0x140 [ 130.519687][ T8670] perf_try_init_event+0x21a/0x400 [ 130.525091][ T8670] perf_event_alloc+0xa60/0x1790 [ 130.530036][ T8670] __se_sys_perf_event_open+0x5c7/0x2740 [ 130.536121][ T8670] ? vfs_write+0x50c/0x770 [ 130.540803][ T8670] __x64_sys_perf_event_open+0x63/0x70 [ 130.546369][ T8670] do_syscall_64+0x3d/0x90 [ 130.550779][ T8670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.556860][ T8670] RIP: 0033:0x4665e9 [ 130.560753][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.581826][ T8670] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.590573][ T8670] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 130.598651][ T8670] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 130.606626][ T8670] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 19:06:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x10000000) [ 130.614610][ T8670] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 130.622655][ T8670] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:22 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x80ffff, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x95000000) [ 130.673613][ T8689] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 130.682023][ T8689] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 130.704897][ T8692] netlink: 1236 bytes leftover after parsing attributes in process `syz-executor.1'. 19:06:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:22 executing program 3 (fault-call:1 fault-nth:82): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x9effffff) 19:06:22 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xa0ff20, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc0000000) 19:06:22 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xc0ff20, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 131.235186][ T8734] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 131.244046][ T8734] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc00e0000) [ 131.288919][ T8735] FAULT_INJECTION: forcing a failure. [ 131.288919][ T8735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.302832][ T8735] CPU: 0 PID: 8735 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 131.309836][ T8757] netlink: 1300 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.312115][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.312128][ T8735] Call Trace: [ 131.312136][ T8735] dump_stack_lvl+0xb7/0x103 [ 131.312158][ T8735] dump_stack+0x11/0x1a [ 131.344059][ T8735] should_fail+0x23c/0x250 [ 131.348494][ T8735] __alloc_pages+0x102/0x320 [ 131.353238][ T8735] alloc_pages_vma+0x513/0x680 [ 131.358201][ T8735] uprobe_write_opcode+0x3e9/0x1050 [ 131.363841][ T8735] ? arch_uprobe_analyze_insn+0x2d4/0x420 [ 131.369675][ T8735] set_swbp+0x26/0x30 [ 131.373720][ T8735] install_breakpoint+0x3f3/0x4d0 [ 131.378914][ T8735] ? ___cache_free+0x3c/0x300 [ 131.383605][ T8735] ? vmacache_find+0x39/0x320 [ 131.388370][ T8735] ? find_vma+0x12/0x100 [ 131.392731][ T8735] ? vmacache_update+0x45/0xa0 [ 131.397536][ T8735] register_for_each_vma+0x6e7/0x890 [ 131.403443][ T8735] uprobe_apply+0x8b/0x260 [ 131.407911][ T8735] ? __uprobe_trace_func+0x430/0x430 [ 131.413241][ T8735] trace_uprobe_register+0x2b6/0x410 [ 131.418692][ T8735] perf_trace_event_init+0xf8/0x790 [ 131.423911][ T8735] perf_uprobe_init+0xf5/0x140 [ 131.428812][ T8735] perf_uprobe_event_init+0xde/0x140 [ 131.434182][ T8735] perf_try_init_event+0x21a/0x400 [ 131.439303][ T8735] perf_event_alloc+0xa60/0x1790 [ 131.444316][ T8735] __se_sys_perf_event_open+0x5c7/0x2740 [ 131.450135][ T8735] ? vfs_write+0x50c/0x770 [ 131.454746][ T8735] __x64_sys_perf_event_open+0x63/0x70 [ 131.460248][ T8735] do_syscall_64+0x3d/0x90 [ 131.464722][ T8735] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.471212][ T8735] RIP: 0033:0x4665e9 [ 131.475221][ T8735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.495058][ T8735] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 131.503460][ T8735] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 131.511926][ T8735] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 131.519989][ T8735] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 131.527982][ T8735] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 131.535960][ T8735] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:23 executing program 0: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffee0000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000ee600003600020008000100000000000400040008000200000000000800020000000028b8000100000000002c00270008000100000000000c000400000000000000000008000100000000000c0005001c000000000000000c00090008"], 0x3}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 19:06:23 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xc0ffff, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:23 executing program 3 (fault-call:1 fault-nth:83): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 131.631850][ T8779] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 131.640274][ T8779] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 131.653820][ T8779] FAULT_INJECTION: forcing a failure. [ 131.653820][ T8779] name failslab, interval 1, probability 0, space 0, times 0 [ 131.666487][ T8779] CPU: 1 PID: 8779 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 131.675227][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.685277][ T8779] Call Trace: [ 131.688554][ T8779] dump_stack_lvl+0xb7/0x103 [ 131.693131][ T8779] dump_stack+0x11/0x1a [ 131.697263][ T8779] should_fail+0x23c/0x250 [ 131.701698][ T8779] __should_failslab+0x81/0x90 [ 131.706497][ T8779] ? register_for_each_vma+0x372/0x890 [ 131.712170][ T8779] should_failslab+0x5/0x20 [ 131.716783][ T8779] kmem_cache_alloc_trace+0x49/0x310 [ 131.722174][ T8779] ? register_for_each_vma+0x372/0x890 [ 131.727770][ T8779] ? vma_interval_tree_iter_next+0x24c/0x280 [ 131.733741][ T8779] register_for_each_vma+0x372/0x890 [ 131.739013][ T8779] uprobe_apply+0x8b/0x260 [ 131.743656][ T8779] uprobe_perf_close+0x2f8/0x370 [ 131.748592][ T8779] ? uprobe_apply+0x203/0x260 [ 131.753261][ T8779] trace_uprobe_register+0x310/0x410 [ 131.758544][ T8779] perf_trace_event_init+0xf8/0x790 [ 131.763913][ T8779] perf_uprobe_init+0xf5/0x140 [ 131.768690][ T8779] perf_uprobe_event_init+0xde/0x140 [ 131.773981][ T8779] perf_try_init_event+0x21a/0x400 [ 131.779074][ T8779] perf_event_alloc+0xa60/0x1790 [ 131.784111][ T8779] __se_sys_perf_event_open+0x5c7/0x2740 [ 131.789913][ T8779] ? vfs_write+0x50c/0x770 [ 131.794400][ T8779] __x64_sys_perf_event_open+0x63/0x70 [ 131.799892][ T8779] do_syscall_64+0x3d/0x90 [ 131.804342][ T8779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.810303][ T8779] RIP: 0033:0x4665e9 [ 131.814217][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.833836][ T8779] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 131.842232][ T8779] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 131.850191][ T8779] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 131.858224][ T8779] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 131.866495][ T8779] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 131.874537][ T8779] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 131.884997][ T8776] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 131.893498][ T8776] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 131.918469][ T8790] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 131.926853][ T8790] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xe03f0300) 19:06:23 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xd0ff20, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:23 executing program 3 (fault-call:1 fault-nth:84): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xeffdffff) 19:06:23 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x1000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 132.105940][ T8801] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 132.114469][ T8801] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xefffffff) [ 132.153522][ T8803] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 132.161997][ T8803] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 132.174736][ T8825] netlink: 1300 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.183777][ T8803] FAULT_INJECTION: forcing a failure. [ 132.183777][ T8803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.197613][ T8803] CPU: 0 PID: 8803 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 132.206395][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.216521][ T8803] Call Trace: [ 132.219801][ T8803] dump_stack_lvl+0xb7/0x103 [ 132.224382][ T8803] dump_stack+0x11/0x1a [ 132.228597][ T8803] should_fail+0x23c/0x250 [ 132.233141][ T8803] __alloc_pages+0x102/0x320 [ 132.237799][ T8803] alloc_pages+0x2e8/0x340 [ 132.242212][ T8803] __get_free_pages+0x8/0x30 [ 132.246781][ T8803] __tlb_remove_page_size+0xf6/0x180 [ 132.252126][ T8803] zap_pte_range+0x752/0xe00 [ 132.256859][ T8803] unmap_page_range+0x2dc/0x3d0 [ 132.261986][ T8803] unmap_single_vma+0x157/0x210 [ 132.266904][ T8803] unmap_vmas+0xc0/0x170 [ 132.271133][ T8803] exit_mmap+0x22d/0x460 [ 132.275493][ T8803] __mmput+0x27/0x1c0 [ 132.279549][ T8803] mmput+0x3d/0x50 [ 132.283256][ T8803] register_for_each_vma+0x665/0x890 [ 132.288525][ T8803] uprobe_apply+0x8b/0x260 [ 132.292941][ T8803] ? __uprobe_trace_func+0x430/0x430 [ 132.298267][ T8803] trace_uprobe_register+0x2b6/0x410 [ 132.303577][ T8803] perf_trace_event_init+0xf8/0x790 [ 132.308765][ T8803] perf_uprobe_init+0xf5/0x140 [ 132.313545][ T8803] perf_uprobe_event_init+0xde/0x140 [ 132.318814][ T8803] perf_try_init_event+0x21a/0x400 [ 132.323919][ T8803] perf_event_alloc+0xa60/0x1790 [ 132.328852][ T8803] __se_sys_perf_event_open+0x5c7/0x2740 [ 132.334466][ T8803] ? vfs_write+0x50c/0x770 [ 132.339038][ T8803] __x64_sys_perf_event_open+0x63/0x70 [ 132.344565][ T8803] do_syscall_64+0x3d/0x90 [ 132.348969][ T8803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.355076][ T8803] RIP: 0033:0x4665e9 [ 132.359070][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.378664][ T8803] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.387063][ T8803] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 132.395062][ T8803] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 132.403034][ T8803] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 132.411242][ T8803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 132.419201][ T8803] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:24 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x2000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xf0ffffff) 19:06:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x7, 0x3, 0x8}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x90002, 0x0) fdatasync(r1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3005c11, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@version_L}, {@privport}, {@noextend}, {@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '%%+//%'}}, {@audit}]}}) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000090, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0xfffffffffffffffe}}, {@sq={'sq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0xffff}}, {@sq={'sq', 0x3d, 0x8}}, {@common=@access_any}, {@common=@uname={'uname', 0x3d, 'rfdno'}}, {@rq={'rq', 0x3d, 0xde8}}, {@common=@version_9p2000}, {@common=@uname={'uname', 0x3d, '/'}}], [{@obj_type={'obj_type', 0x3d, '#/,!'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) getdents64(r1, &(0x7f0000000400)=""/206, 0xce) splice(r0, &(0x7f0000000500)=0x200, r0, &(0x7f0000000540)=0x5, 0x400, 0x0) statfs(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/209) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000006c0)) r2 = dup(r0) r3 = syz_open_procfs(0x0, &(0x7f00000007c0)='auxv\x00') r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x2) ioctl$VT_WAITACTIVE(r4, 0x5607) io_submit(0x0, 0x2, &(0x7f0000001940)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000000800)="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", 0x1000, 0x3, 0x0, 0x2, r3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x3, 0x3, r4, &(0x7f0000001840)="99002d2992aa0e5b247e12fc7814eaa628426578e2692f6f1524f0e1060b730c5e89f2c4a9b17bc7b02ead0a3eac86874a9fe1c6e7b6ac357b9738066f16719bb7606e96a676dec36fe6ebd9dbaed2daf02a45e2e8e563246bee44c69735881d30f32ca1d455a7b95ecfd7f97733d930248c567d8bc89a8b59a7aaa607c537b3f215bb", 0x83, 0x4, 0x0, 0x0, r2}]) unlink(&(0x7f0000001980)='./file0\x00') ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000019c0)=""/33) r5 = open_tree(r1, &(0x7f0000001a80)='./file0\x00', 0x89001) mount$9p_fd(0x0, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40), 0x4, &(0x7f0000001ac0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, 'staff_u'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_role={'subj_role', 0x3d, '\'-'}}]}}) io_submit(0x0, 0x9, &(0x7f0000003780)=[&(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000001bc0)="5bb6e57ffaaf28efcbd7c3a82a8bfd490ef2abd704a245e39efa52695e762f4de7e0db8c72326381a97c65048469b2ad8f0ba9cdb0678f52e392cac87c9da8d6e86033f977c34f8446b3a3b39348662f637a6e04901c34c1a28fa0b78c02c7f88ea49d71699e217ce25c912fdfb7576b38f6bbd5b2aba2525cb77382a556e6eae16b2b2cb6cd09638c1b15219bc9dc3b2e6d928e64d2eab36a1e8c9b126858b7878634dc29cdc7c8f71f57ab4bdadc1445cf4a0bb23047ff213240cd8c32a329368374", 0xc3, 0x0, 0x0, 0x3, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000001d00)="0520e7bf3808db5af524d0e6b47fd957380fc453b590bea2222d5311fbcc441c0a121fcf0cec8a883d7137e705472caef3df2c3838437cfe43d73b99b4f9c3d97a77e8e8a5a9a2bf4186f97519f878863d9fecbd2e60725e12e8ba634f967fabeb285311bb5d728b", 0x68, 0x4, 0x0, 0x5}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x3000, 0xffffffffffffffff, &(0x7f0000001e00)="56d1cd4507db88a7f98ed2fefd07feed472972332ac4ecf01a", 0x19, 0x9}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x7, 0xcb17, 0xffffffffffffffff, &(0x7f0000001ec0)="6455a531e981129817d176098bf01f536d6aa687bed18659e739a806adad7424b55565f798b74996aeb2f889c73e2b8793dfaed1d52620c409cfd9", 0x3b, 0xffffffff00000001}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x5, 0x7c, 0xffffffffffffffff, &(0x7f0000001f80)="545511190cc66dff2b611756e7c88d9dfeb1bf9955b15703c9220f8171cfe880c8a7e297387cdeac3ead937b772aec7d92cbb7a25a01b704c6bcca2a0deead318591466d2e51c19777c446f9ae93a9474e4c64b8b3b15b24d1e94a327ee048e77c7b99cb519e2c77c629fd733c3ff1895f84249a36933ae9ff2bf787f0e909e9c3c84f3cebd4c501f9c0", 0x8a, 0x5, 0x0, 0x1, r5}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000002080)="84b56ac7baff9f138b8b63de89227f55723637e268c063dc3da963cdfbb98af1eadc0353cc3b09742ead63507b671d721a4fe32b4da201956a909772eca71123cc7416c4a1a5fa3be3862420e49e264cfd5772120dfccb3054ca2d863c8982a6064e157d6e88cdd05355f0486022f8ee3a92cdd0b03346a070011f4f2770fb41a94d205d8c17e13b05f580f3e02e43be587fa3ca3ba7db0556b06fb0fc14b0d31e34a3d599d8b7a154fee982a51e0b87c9708bf927fd90b7542e30dbed0a01eed9709e9aa46b5f6207869e540f29a3b24e44", 0xd2, 0x9, 0x0, 0x3}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x54c0, 0xffffffffffffffff, &(0x7f0000002200)="535f3e5a21b1fe4bfde1cf240a839546c48ce301d338576863d96787ad5378a74f74a15d7c77cba381c8bf81ccac603b1866e09923620cfa7f8e72fcd49528ffe2748b8cd2ce59c3dca1634e0aca569379e34d53f4c468101586b41feba38e4cd79f2d3d653f5fd443b27e2037c96a42e113120612e171e53748a99b10c709584532d2c8234de70f8f1e4bbd94a9e17467c2a404f3eb766c0a0a6e6af25fed2ec9bb60c55681d07f23ddb138199726ae5050aae088deb72d10704a3f861b6c1242fa3f037d004ed6362ec56fb9", 0xcd, 0x9, 0x0, 0x2}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x3, 0x4, r2, &(0x7f0000002340)="56197278253ff9a7e00a041ff1ed95d2940bb12a4385d2b82df3465d950078b8c7d53218ea27734d51e4f0367ced2b9c94ca7a45acade65cd10dd9bfaf0c4c9b72f95ede7f34f939b7d4353b8b6dd86a16f44dae3613d845b7cb2d32d023471b4fad4e59fbf18907eb26ad037b85037db9cd5dd2ee9395a9", 0x78, 0x9, 0x0, 0x2}, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x2, 0xffff, 0xffffffffffffffff, &(0x7f0000003640)="17377a32e3ab440d2fb5d290aa6049a2610b6b133bbcbcfb5af0a897260768e1ec2b21773464b84587e243562d851983292b770695ba631a79b3e3958accbbc86f430aeb8880bc25c66a0de9b221ad5e282fdf9d3214fd8bdfe107507434da1124d3848dffc001f1c65d05b5cada7c7fae724168f74ac48ec2b3c55b46be3079048936ee48c1212b9be7237ade51a2889bc9c7fa1c15404b900537e3c84d11f1bfb3251a54a616b2", 0xa8, 0xff, 0x0, 0x1}]) [ 132.516679][ T8845] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 132.525253][ T8845] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 132.579376][ T8857] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 132.587925][ T8857] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:24 executing program 3 (fault-call:1 fault-nth:85): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xfeffffff) 19:06:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00R\x00', 0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl(r4, 0x37, &(0x7f0000000100)="38d5232133c0e5c3267e865b76c062e9484f73a23bc68f98debfebd56b95e68542432b59c1464f93c25820a9907c61706b6ac1036c44bcb0d90d3269f1072010994e5d4e0f514f88f7b5ae7024c4da8995a964962759b18aa689099e4170d5b669a246459c85a814dc19a9809572800b7be415a4fb73e55e73cf48c6154a6a47") setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000000004ffe0, 0x0) 19:06:24 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x2040000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xfffffdef) [ 132.980667][ T8874] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 132.989115][ T8874] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 133.004583][ T8874] FAULT_INJECTION: forcing a failure. [ 133.004583][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 133.017320][ T8874] CPU: 1 PID: 8874 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 133.026001][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.036043][ T8874] Call Trace: [ 133.039370][ T8874] dump_stack_lvl+0xb7/0x103 [ 133.043949][ T8874] dump_stack+0x11/0x1a [ 133.048179][ T8874] should_fail+0x23c/0x250 [ 133.052705][ T8874] __should_failslab+0x81/0x90 [ 133.057469][ T8874] ? register_for_each_vma+0x372/0x890 [ 133.062970][ T8874] should_failslab+0x5/0x20 [ 133.067480][ T8874] kmem_cache_alloc_trace+0x49/0x310 [ 133.072796][ T8874] ? register_for_each_vma+0x372/0x890 [ 133.078261][ T8874] ? vma_interval_tree_iter_next+0x263/0x280 [ 133.084243][ T8874] register_for_each_vma+0x372/0x890 [ 133.089767][ T8874] uprobe_apply+0x8b/0x260 [ 133.094164][ T8874] uprobe_perf_close+0x2f8/0x370 [ 133.099142][ T8874] ? uprobe_apply+0x203/0x260 [ 133.103911][ T8874] trace_uprobe_register+0x310/0x410 [ 133.109183][ T8874] perf_trace_event_init+0xf8/0x790 [ 133.114596][ T8874] perf_uprobe_init+0xf5/0x140 [ 133.119358][ T8874] perf_uprobe_event_init+0xde/0x140 [ 133.124631][ T8874] perf_try_init_event+0x21a/0x400 [ 133.129846][ T8874] perf_event_alloc+0xa60/0x1790 [ 133.134837][ T8874] __se_sys_perf_event_open+0x5c7/0x2740 [ 133.140582][ T8874] ? vfs_write+0x50c/0x770 [ 133.145131][ T8874] __x64_sys_perf_event_open+0x63/0x70 [ 133.150604][ T8874] do_syscall_64+0x3d/0x90 [ 133.155023][ T8874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.160919][ T8874] RIP: 0033:0x4665e9 [ 133.164793][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.184496][ T8874] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 133.192998][ T8874] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 133.200957][ T8874] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 133.208932][ T8874] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 133.216988][ T8874] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 19:06:24 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x4000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:24 executing program 3 (fault-call:1 fault-nth:86): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xffffff9e) [ 133.225301][ T8874] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 133.242457][ T8878] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 133.250937][ T8878] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xffffffef) [ 133.297578][ T8897] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 133.306116][ T8897] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 133.321016][ T8897] FAULT_INJECTION: forcing a failure. [ 133.321016][ T8897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.334435][ T8897] CPU: 0 PID: 8897 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 133.343117][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.353272][ T8897] Call Trace: [ 133.356533][ T8897] dump_stack_lvl+0xb7/0x103 [ 133.361132][ T8897] dump_stack+0x11/0x1a [ 133.365354][ T8897] should_fail+0x23c/0x250 [ 133.369757][ T8897] __alloc_pages+0x102/0x320 [ 133.374344][ T8897] alloc_pages+0x2e8/0x340 [ 133.378899][ T8897] __get_free_pages+0x8/0x30 [ 133.383494][ T8897] __tlb_remove_page_size+0xf6/0x180 [ 133.388825][ T8897] zap_pte_range+0x752/0xe00 [ 133.393497][ T8897] unmap_page_range+0x2dc/0x3d0 [ 133.398367][ T8897] unmap_single_vma+0x157/0x210 [ 133.403209][ T8897] unmap_vmas+0xc0/0x170 [ 133.407467][ T8897] exit_mmap+0x22d/0x460 [ 133.411693][ T8897] __mmput+0x27/0x1c0 [ 133.415829][ T8897] mmput+0x3d/0x50 [ 133.419579][ T8897] register_for_each_vma+0x665/0x890 [ 133.424862][ T8897] uprobe_apply+0x8b/0x260 [ 133.429313][ T8897] ? __uprobe_trace_func+0x430/0x430 [ 133.434618][ T8897] trace_uprobe_register+0x2b6/0x410 [ 133.439889][ T8897] perf_trace_event_init+0xf8/0x790 [ 133.445090][ T8897] perf_uprobe_init+0xf5/0x140 [ 133.449904][ T8897] perf_uprobe_event_init+0xde/0x140 [ 133.455263][ T8897] perf_try_init_event+0x21a/0x400 [ 133.460468][ T8897] perf_event_alloc+0xa60/0x1790 [ 133.465659][ T8897] __se_sys_perf_event_open+0x5c7/0x2740 [ 133.471370][ T8897] ? vfs_write+0x50c/0x770 [ 133.475771][ T8897] __x64_sys_perf_event_open+0x63/0x70 [ 133.481229][ T8897] do_syscall_64+0x3d/0x90 [ 133.485641][ T8897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.491517][ T8897] RIP: 0033:0x4665e9 [ 133.495391][ T8897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.515148][ T8897] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 133.523592][ T8897] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 133.531633][ T8897] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 133.539593][ T8897] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 19:06:25 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x6040000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 133.547608][ T8897] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 133.555622][ T8897] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:25 executing program 3 (fault-call:1 fault-nth:87): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xfffffff0) 19:06:25 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x7000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:25 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c695127062f8de}, 0x40880) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone3(&(0x7f0000000000)={0x70824400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r1], 0x1}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) wait4(0x0, 0x0, 0x0, 0x0) 19:06:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xfffffffe) 19:06:25 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x8000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 133.844590][ T8939] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 133.853014][ T8939] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 133.875579][ T8939] FAULT_INJECTION: forcing a failure. [ 133.875579][ T8939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.889048][ T8939] CPU: 0 PID: 8939 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 133.897721][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.907845][ T8939] Call Trace: [ 133.911208][ T8939] dump_stack_lvl+0xb7/0x103 [ 133.915808][ T8939] dump_stack+0x11/0x1a [ 133.919939][ T8939] should_fail+0x23c/0x250 [ 133.924339][ T8939] __alloc_pages+0x102/0x320 [ 133.928961][ T8939] alloc_pages+0x2e8/0x340 [ 133.933469][ T8939] __get_free_pages+0x8/0x30 [ 133.938160][ T8939] __tlb_remove_page_size+0xf6/0x180 [ 133.943526][ T8939] zap_pte_range+0x752/0xe00 [ 133.948097][ T8939] ? pmd_huge+0x2f/0x40 [ 133.952339][ T8939] ? pagerange_is_ram_callback+0xb6/0xd0 [ 133.957957][ T8939] unmap_page_range+0x2dc/0x3d0 [ 133.962878][ T8939] unmap_single_vma+0x157/0x210 [ 133.967802][ T8939] unmap_vmas+0xc0/0x170 [ 133.972101][ T8939] exit_mmap+0x22d/0x460 [ 133.976326][ T8939] __mmput+0x27/0x1c0 [ 133.980294][ T8939] mmput+0x3d/0x50 [ 133.983994][ T8939] register_for_each_vma+0x665/0x890 [ 133.989314][ T8939] uprobe_apply+0x8b/0x260 [ 133.993805][ T8939] ? __uprobe_trace_func+0x430/0x430 [ 133.999077][ T8939] trace_uprobe_register+0x2b6/0x410 [ 134.004363][ T8939] perf_trace_event_init+0xf8/0x790 [ 134.009568][ T8939] perf_uprobe_init+0xf5/0x140 [ 134.014444][ T8939] perf_uprobe_event_init+0xde/0x140 [ 134.019711][ T8939] perf_try_init_event+0x21a/0x400 [ 134.024805][ T8939] perf_event_alloc+0xa60/0x1790 [ 134.029736][ T8939] __se_sys_perf_event_open+0x5c7/0x2740 [ 134.035419][ T8939] ? vfs_write+0x50c/0x770 [ 134.039818][ T8939] __x64_sys_perf_event_open+0x63/0x70 [ 134.045348][ T8939] do_syscall_64+0x3d/0x90 [ 134.049763][ T8939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.055820][ T8939] RIP: 0033:0x4665e9 [ 134.059692][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.079423][ T8939] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 19:06:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x4000000000000) [ 134.087913][ T8939] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 134.096128][ T8939] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 134.104287][ T8939] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 134.112236][ T8939] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 134.120370][ T8939] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:25 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x10000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:25 executing program 3 (fault-call:1 fault-nth:88): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x100000000000000) [ 134.199363][ T8940] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 134.207769][ T8940] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 134.274898][ T8987] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 134.283331][ T8987] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 134.298250][ T8988] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 134.306659][ T8988] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 134.327044][ T8988] FAULT_INJECTION: forcing a failure. [ 134.327044][ T8988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.340525][ T8988] CPU: 0 PID: 8988 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 134.349252][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.359287][ T8988] Call Trace: [ 134.362570][ T8988] dump_stack_lvl+0xb7/0x103 [ 134.367159][ T8988] dump_stack+0x11/0x1a [ 134.371378][ T8988] should_fail+0x23c/0x250 [ 134.375795][ T8988] __alloc_pages+0x102/0x320 [ 134.380671][ T8988] alloc_pages+0x2e8/0x340 [ 134.385248][ T8988] __get_free_pages+0x8/0x30 [ 134.389836][ T8988] __tlb_remove_page_size+0xf6/0x180 [ 134.395103][ T8988] zap_pte_range+0x752/0xe00 [ 134.399702][ T8988] unmap_page_range+0x2dc/0x3d0 [ 134.404605][ T8988] unmap_single_vma+0x157/0x210 [ 134.409614][ T8988] unmap_vmas+0xc0/0x170 [ 134.413844][ T8988] exit_mmap+0x22d/0x460 [ 134.418155][ T8988] __mmput+0x27/0x1c0 [ 134.422143][ T8988] mmput+0x3d/0x50 [ 134.425839][ T8988] register_for_each_vma+0x665/0x890 [ 134.431106][ T8988] uprobe_apply+0x8b/0x260 [ 134.435747][ T8988] ? __uprobe_trace_func+0x430/0x430 [ 134.441145][ T8988] trace_uprobe_register+0x2b6/0x410 [ 134.446498][ T8988] perf_trace_event_init+0xf8/0x790 [ 134.451688][ T8988] perf_uprobe_init+0xf5/0x140 [ 134.456438][ T8988] perf_uprobe_event_init+0xde/0x140 [ 134.461707][ T8988] perf_try_init_event+0x21a/0x400 [ 134.466803][ T8988] perf_event_alloc+0xa60/0x1790 [ 134.471801][ T8988] __se_sys_perf_event_open+0x5c7/0x2740 [ 134.477602][ T8988] ? vfs_write+0x50c/0x770 [ 134.482131][ T8988] __x64_sys_perf_event_open+0x63/0x70 [ 134.487567][ T8988] do_syscall_64+0x3d/0x90 [ 134.491977][ T8988] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.497865][ T8988] RIP: 0033:0x4665e9 [ 134.501778][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.521379][ T8988] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.529788][ T8988] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 134.537745][ T8988] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 134.545809][ T8988] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 134.553876][ T8988] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 134.561918][ T8988] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x1ee000000000000) 19:06:26 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x1d655000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:26 executing program 3 (fault-call:1 fault-nth:89): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x300000000000000) 19:06:26 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x20ffa000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 134.709867][ T9012] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 134.718434][ T9017] loop0: detected capacity change from 0 to 4096 [ 134.718373][ T9012] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 134.751340][ T9012] FAULT_INJECTION: forcing a failure. 19:06:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 134.751340][ T9012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.752474][ T9017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.764617][ T9012] CPU: 0 PID: 9012 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 134.764636][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.764645][ T9012] Call Trace: [ 134.764651][ T9012] dump_stack_lvl+0xb7/0x103 [ 134.802330][ T9012] dump_stack+0x11/0x1a [ 134.806494][ T9012] should_fail+0x23c/0x250 [ 134.811145][ T9012] __alloc_pages+0x102/0x320 [ 134.815886][ T9012] alloc_pages+0x2e8/0x340 [ 134.820305][ T9012] __get_free_pages+0x8/0x30 [ 134.825073][ T9012] __tlb_remove_page_size+0xf6/0x180 [ 134.830471][ T9012] zap_pte_range+0x752/0xe00 [ 134.835322][ T9012] ? pmd_huge+0x2f/0x40 [ 134.839476][ T9012] ? pagerange_is_ram_callback+0xb6/0xd0 [ 134.845097][ T9012] ? walk_system_ram_range+0x278/0x2b0 [ 134.850721][ T9012] unmap_page_range+0x2dc/0x3d0 [ 134.855663][ T9012] unmap_single_vma+0x157/0x210 [ 134.860507][ T9012] unmap_vmas+0xc0/0x170 [ 134.864818][ T9012] exit_mmap+0x22d/0x460 [ 134.869262][ T9012] __mmput+0x27/0x1c0 [ 134.873350][ T9012] mmput+0x3d/0x50 [ 134.877060][ T9012] register_for_each_vma+0x665/0x890 [ 134.882353][ T9012] uprobe_apply+0x8b/0x260 [ 134.886786][ T9012] ? __uprobe_trace_func+0x430/0x430 [ 134.892215][ T9012] trace_uprobe_register+0x2b6/0x410 [ 134.897608][ T9012] perf_trace_event_init+0xf8/0x790 [ 134.902892][ T9012] perf_uprobe_init+0xf5/0x140 [ 134.907705][ T9012] perf_uprobe_event_init+0xde/0x140 [ 134.913173][ T9012] perf_try_init_event+0x21a/0x400 [ 134.918288][ T9012] perf_event_alloc+0xa60/0x1790 [ 134.923229][ T9012] __se_sys_perf_event_open+0x5c7/0x2740 [ 134.928850][ T9012] ? vfs_write+0x50c/0x770 [ 134.933298][ T9012] __x64_sys_perf_event_open+0x63/0x70 [ 134.938782][ T9012] do_syscall_64+0x3d/0x90 [ 134.943184][ T9012] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.949117][ T9012] RIP: 0033:0x4665e9 [ 134.953002][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.972833][ T9012] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.981388][ T9012] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 134.989362][ T9012] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 134.997412][ T9012] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.005405][ T9012] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 135.013368][ T9012] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 135.042760][ T9016] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:26 executing program 3 (fault-call:1 fault-nth:90): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:26 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x20ffc000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x400000000000000) [ 135.051150][ T9016] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 135.123172][ T9050] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 135.131636][ T9050] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 135.165003][ T9047] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 135.173475][ T9047] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 135.199595][ T9047] FAULT_INJECTION: forcing a failure. [ 135.199595][ T9047] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.213132][ T9047] CPU: 0 PID: 9047 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 135.221849][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.231906][ T9047] Call Trace: [ 135.235230][ T9047] dump_stack_lvl+0xb7/0x103 [ 135.240094][ T9047] dump_stack+0x11/0x1a [ 135.244330][ T9047] should_fail+0x23c/0x250 [ 135.248841][ T9047] __alloc_pages+0x102/0x320 [ 135.253427][ T9047] alloc_pages+0x2e8/0x340 [ 135.257838][ T9047] __get_free_pages+0x8/0x30 [ 135.262443][ T9047] __tlb_remove_page_size+0xf6/0x180 [ 135.267765][ T9047] zap_pte_range+0x752/0xe00 [ 135.272353][ T9047] unmap_page_range+0x2dc/0x3d0 [ 135.277314][ T9047] unmap_single_vma+0x157/0x210 [ 135.282323][ T9047] unmap_vmas+0xc0/0x170 [ 135.286572][ T9047] exit_mmap+0x22d/0x460 [ 135.290813][ T9047] __mmput+0x27/0x1c0 [ 135.294795][ T9047] mmput+0x3d/0x50 [ 135.298607][ T9047] register_for_each_vma+0x665/0x890 [ 135.303926][ T9047] uprobe_apply+0x8b/0x260 [ 135.308518][ T9047] ? __uprobe_trace_func+0x430/0x430 [ 135.313891][ T9047] trace_uprobe_register+0x2b6/0x410 [ 135.319197][ T9047] perf_trace_event_init+0xf8/0x790 [ 135.324389][ T9047] perf_uprobe_init+0xf5/0x140 [ 135.329185][ T9047] perf_uprobe_event_init+0xde/0x140 [ 135.334461][ T9047] perf_try_init_event+0x21a/0x400 [ 135.339618][ T9047] perf_event_alloc+0xa60/0x1790 [ 135.344680][ T9047] __se_sys_perf_event_open+0x5c7/0x2740 [ 135.350490][ T9047] ? vfs_write+0x50c/0x770 [ 135.355146][ T9047] __x64_sys_perf_event_open+0x63/0x70 [ 135.360714][ T9047] do_syscall_64+0x3d/0x90 [ 135.365243][ T9047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.371129][ T9047] RIP: 0033:0x4665e9 [ 135.375181][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.395175][ T9047] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.403740][ T9047] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 135.411796][ T9047] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 135.419755][ T9047] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.427790][ T9047] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 135.436049][ T9047] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 135.484604][ T9071] loop0: detected capacity change from 0 to 4096 [ 135.494648][ T9071] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:06:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xf00000000000000) 19:06:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:27 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x20ffd000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:27 executing program 3 (fault-call:1 fault-nth:91): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x1000000000000000) 19:06:27 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x40000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 135.608446][ T9084] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 135.616885][ T9084] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 135.661202][ T9084] FAULT_INJECTION: forcing a failure. [ 135.661202][ T9084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.675120][ T9084] CPU: 1 PID: 9084 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 135.683905][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.694060][ T9084] Call Trace: [ 135.697425][ T9084] dump_stack_lvl+0xb7/0x103 [ 135.702102][ T9084] dump_stack+0x11/0x1a [ 135.706257][ T9084] should_fail+0x23c/0x250 [ 135.710710][ T9084] __alloc_pages+0x102/0x320 [ 135.715580][ T9084] alloc_pages+0x2e8/0x340 [ 135.720034][ T9084] __get_free_pages+0x8/0x30 [ 135.724677][ T9084] __tlb_remove_page_size+0xf6/0x180 [ 135.730103][ T9084] zap_pte_range+0x752/0xe00 [ 135.734677][ T9084] ? finish_task_switch+0xce/0x290 [ 135.739771][ T9084] unmap_page_range+0x2dc/0x3d0 [ 135.744613][ T9084] unmap_single_vma+0x157/0x210 [ 135.749466][ T9084] unmap_vmas+0xc0/0x170 [ 135.753697][ T9084] exit_mmap+0x22d/0x460 [ 135.757933][ T9084] __mmput+0x27/0x1c0 [ 135.761896][ T9084] mmput+0x3d/0x50 [ 135.765619][ T9084] register_for_each_vma+0x665/0x890 [ 135.770886][ T9084] uprobe_apply+0x8b/0x260 [ 135.775295][ T9084] ? __uprobe_trace_func+0x430/0x430 [ 135.780586][ T9084] trace_uprobe_register+0x2b6/0x410 [ 135.785960][ T9084] perf_trace_event_init+0xf8/0x790 [ 135.792028][ T9084] perf_uprobe_init+0xf5/0x140 [ 135.796806][ T9084] perf_uprobe_event_init+0xde/0x140 [ 135.802289][ T9084] perf_try_init_event+0x21a/0x400 [ 135.807486][ T9084] perf_event_alloc+0xa60/0x1790 [ 135.812448][ T9084] __se_sys_perf_event_open+0x5c7/0x2740 [ 135.818097][ T9084] ? vfs_write+0x50c/0x770 [ 135.822508][ T9084] __x64_sys_perf_event_open+0x63/0x70 [ 135.827963][ T9084] do_syscall_64+0x3d/0x90 [ 135.832362][ T9084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.838358][ T9084] RIP: 0033:0x4665e9 [ 135.842271][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.862279][ T9084] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.870696][ T9084] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 135.878657][ T9084] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 135.886754][ T9084] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.894955][ T9084] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 135.903208][ T9084] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:27 executing program 3 (fault-call:1 fault-nth:92): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 135.923725][ T9088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 135.932122][ T9088] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:27 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x42000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x8000000000000000) [ 135.971887][ T9106] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 135.980266][ T9106] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 135.982481][ T9112] loop0: detected capacity change from 0 to 4096 [ 135.999114][ T9111] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.007501][ T9111] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 136.024327][ T9111] FAULT_INJECTION: forcing a failure. [ 136.024327][ T9111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.027202][ T9112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.037990][ T9111] CPU: 0 PID: 9111 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 136.058160][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.068644][ T9111] Call Trace: [ 136.071927][ T9111] dump_stack_lvl+0xb7/0x103 [ 136.076621][ T9111] dump_stack+0x11/0x1a [ 136.080854][ T9111] should_fail+0x23c/0x250 [ 136.085348][ T9111] __alloc_pages+0x102/0x320 [ 136.090076][ T9111] alloc_pages+0x2e8/0x340 [ 136.095056][ T9111] __get_free_pages+0x8/0x30 [ 136.100197][ T9111] __tlb_remove_page_size+0xf6/0x180 [ 136.105653][ T9111] zap_pte_range+0x752/0xe00 [ 136.110246][ T9111] unmap_page_range+0x2dc/0x3d0 [ 136.115110][ T9111] unmap_single_vma+0x157/0x210 [ 136.120312][ T9111] unmap_vmas+0xc0/0x170 [ 136.124895][ T9111] exit_mmap+0x22d/0x460 [ 136.129251][ T9111] __mmput+0x27/0x1c0 [ 136.133382][ T9111] mmput+0x3d/0x50 [ 136.137183][ T9111] register_for_each_vma+0x665/0x890 [ 136.142470][ T9111] uprobe_apply+0x8b/0x260 [ 136.147097][ T9111] ? __uprobe_trace_func+0x430/0x430 [ 136.152529][ T9111] trace_uprobe_register+0x2b6/0x410 [ 136.157894][ T9111] perf_trace_event_init+0xf8/0x790 [ 136.163080][ T9111] perf_uprobe_init+0xf5/0x140 [ 136.167827][ T9111] perf_uprobe_event_init+0xde/0x140 [ 136.173151][ T9111] perf_try_init_event+0x21a/0x400 [ 136.178278][ T9111] perf_event_alloc+0xa60/0x1790 [ 136.183304][ T9111] __se_sys_perf_event_open+0x5c7/0x2740 [ 136.188935][ T9111] ? vfs_write+0x50c/0x770 [ 136.193336][ T9111] __x64_sys_perf_event_open+0x63/0x70 [ 136.199104][ T9111] do_syscall_64+0x3d/0x90 [ 136.203700][ T9111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.209591][ T9111] RIP: 0033:0x4665e9 [ 136.213708][ T9111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.233436][ T9111] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 136.242252][ T9111] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 136.250336][ T9111] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 136.258395][ T9111] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 136.266563][ T9111] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 136.274589][ T9111] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 136.329959][ T9125] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.338454][ T9125] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 136.380721][ T9139] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.389158][ T9139] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:27 executing program 3 (fault-call:1 fault-nth:93): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:27 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x5c020000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x9500000000000000) 19:06:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x9effffff00000000) [ 136.475111][ T9153] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.484036][ T9153] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc000000000000000) 19:06:28 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x64000000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 136.527046][ T9157] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.535431][ T9157] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 136.559724][ T9157] FAULT_INJECTION: forcing a failure. [ 136.559724][ T9157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.573198][ T9157] CPU: 1 PID: 9157 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 136.581907][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.592153][ T9157] Call Trace: [ 136.595468][ T9157] dump_stack_lvl+0xb7/0x103 [ 136.600154][ T9157] dump_stack+0x11/0x1a [ 136.604388][ T9157] should_fail+0x23c/0x250 [ 136.608832][ T9157] __alloc_pages+0x102/0x320 [ 136.613578][ T9157] alloc_pages+0x2e8/0x340 [ 136.618195][ T9157] __get_free_pages+0x8/0x30 [ 136.622819][ T9157] __tlb_remove_page_size+0xf6/0x180 [ 136.628147][ T9157] zap_pte_range+0x752/0xe00 [ 136.632841][ T9157] ? finish_task_switch+0xce/0x290 [ 136.637956][ T9157] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 136.643527][ T9157] unmap_page_range+0x2dc/0x3d0 [ 136.648432][ T9157] unmap_single_vma+0x157/0x210 [ 136.653392][ T9157] unmap_vmas+0xc0/0x170 [ 136.657935][ T9157] exit_mmap+0x22d/0x460 [ 136.662177][ T9157] __mmput+0x27/0x1c0 [ 136.666196][ T9157] mmput+0x3d/0x50 [ 136.670148][ T9157] register_for_each_vma+0x665/0x890 [ 136.675417][ T9157] uprobe_apply+0x8b/0x260 [ 136.679813][ T9157] ? __uprobe_trace_func+0x430/0x430 [ 136.685186][ T9157] trace_uprobe_register+0x2b6/0x410 [ 136.690525][ T9157] perf_trace_event_init+0xf8/0x790 [ 136.697027][ T9157] perf_uprobe_init+0xf5/0x140 [ 136.701809][ T9157] perf_uprobe_event_init+0xde/0x140 [ 136.707077][ T9157] perf_try_init_event+0x21a/0x400 [ 136.712258][ T9157] perf_event_alloc+0xa60/0x1790 [ 136.717310][ T9157] __se_sys_perf_event_open+0x5c7/0x2740 [ 136.722927][ T9157] ? vfs_write+0x50c/0x770 [ 136.727630][ T9157] __x64_sys_perf_event_open+0x63/0x70 [ 136.733191][ T9157] do_syscall_64+0x3d/0x90 [ 136.738038][ T9157] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.744131][ T9157] RIP: 0033:0x4665e9 [ 136.748281][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.768330][ T9157] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 19:06:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 136.776848][ T9157] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 136.784987][ T9157] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 136.793156][ T9157] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 136.801794][ T9157] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 136.809897][ T9157] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc00e000000000000) 19:06:28 executing program 3 (fault-call:1 fault-nth:94): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 136.888277][ T9190] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.897284][ T9190] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 136.912619][ T9192] loop0: detected capacity change from 0 to 4096 [ 136.922716][ T9192] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.935742][ T9196] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 136.944221][ T9196] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 136.958021][ T9196] FAULT_INJECTION: forcing a failure. [ 136.958021][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 136.970973][ T9196] CPU: 1 PID: 9196 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 136.979925][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.989998][ T9196] Call Trace: [ 136.993284][ T9196] dump_stack_lvl+0xb7/0x103 [ 136.997980][ T9196] dump_stack+0x11/0x1a [ 137.002127][ T9196] should_fail+0x23c/0x250 [ 137.006533][ T9196] __should_failslab+0x81/0x90 [ 137.011278][ T9196] ? register_for_each_vma+0x372/0x890 [ 137.016719][ T9196] should_failslab+0x5/0x20 [ 137.021273][ T9196] kmem_cache_alloc_trace+0x49/0x310 [ 137.026628][ T9196] ? register_for_each_vma+0x372/0x890 [ 137.032254][ T9196] ? vma_interval_tree_iter_next+0x24c/0x280 [ 137.038247][ T9196] register_for_each_vma+0x372/0x890 [ 137.043521][ T9196] uprobe_apply+0x8b/0x260 [ 137.047991][ T9196] uprobe_perf_close+0x2f8/0x370 [ 137.053089][ T9196] ? uprobe_apply+0x203/0x260 [ 137.057807][ T9196] trace_uprobe_register+0x310/0x410 [ 137.063210][ T9196] perf_trace_event_init+0xf8/0x790 [ 137.068511][ T9196] perf_uprobe_init+0xf5/0x140 [ 137.073757][ T9196] perf_uprobe_event_init+0xde/0x140 [ 137.079091][ T9196] perf_try_init_event+0x21a/0x400 [ 137.084193][ T9196] perf_event_alloc+0xa60/0x1790 [ 137.089229][ T9196] __se_sys_perf_event_open+0x5c7/0x2740 [ 137.095104][ T9196] ? vfs_write+0x50c/0x770 [ 137.099513][ T9196] __x64_sys_perf_event_open+0x63/0x70 [ 137.105177][ T9196] do_syscall_64+0x3d/0x90 [ 137.109676][ T9196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.115580][ T9196] RIP: 0033:0x4665e9 [ 137.119461][ T9196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.139303][ T9196] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 137.147821][ T9196] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 137.156091][ T9196] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 137.164269][ T9196] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 137.172457][ T9196] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 137.180505][ T9196] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 137.196992][ T9204] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 137.205626][ T9204] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xe03f030000000000) 19:06:28 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x68020000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:28 executing program 3 (fault-call:1 fault-nth:95): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x12, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xeffdffff00000000) [ 137.359867][ T9225] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 137.368460][ T9225] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 137.390881][ T9226] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:28 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xfeffffff, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xefffffff00000000) [ 137.399281][ T9226] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 137.417470][ T9226] FAULT_INJECTION: forcing a failure. [ 137.417470][ T9226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.430971][ T9226] CPU: 0 PID: 9226 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 137.439700][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.450097][ T9226] Call Trace: [ 137.453444][ T9226] dump_stack_lvl+0xb7/0x103 [ 137.458021][ T9226] dump_stack+0x11/0x1a [ 137.462178][ T9226] should_fail+0x23c/0x250 [ 137.466736][ T9226] __alloc_pages+0x102/0x320 [ 137.471306][ T9226] alloc_pages+0x2e8/0x340 [ 137.476313][ T9226] __get_free_pages+0x8/0x30 [ 137.481100][ T9226] __tlb_remove_page_size+0xf6/0x180 [ 137.486811][ T9226] zap_pte_range+0x752/0xe00 [ 137.491403][ T9226] unmap_page_range+0x2dc/0x3d0 [ 137.496316][ T9226] unmap_single_vma+0x157/0x210 [ 137.501154][ T9226] unmap_vmas+0xc0/0x170 [ 137.505382][ T9226] exit_mmap+0x22d/0x460 [ 137.509625][ T9226] __mmput+0x27/0x1c0 [ 137.513621][ T9226] mmput+0x3d/0x50 [ 137.517323][ T9226] register_for_each_vma+0x665/0x890 [ 137.523486][ T9226] uprobe_apply+0x8b/0x260 [ 137.527882][ T9226] ? __uprobe_trace_func+0x430/0x430 [ 137.533153][ T9226] trace_uprobe_register+0x2b6/0x410 [ 137.538424][ T9226] perf_trace_event_init+0xf8/0x790 [ 137.543649][ T9226] perf_uprobe_init+0xf5/0x140 [ 137.548394][ T9226] perf_uprobe_event_init+0xde/0x140 [ 137.553667][ T9226] perf_try_init_event+0x21a/0x400 [ 137.558777][ T9226] perf_event_alloc+0xa60/0x1790 [ 137.563712][ T9226] __se_sys_perf_event_open+0x5c7/0x2740 [ 137.569378][ T9226] ? vfs_write+0x50c/0x770 [ 137.573792][ T9226] __x64_sys_perf_event_open+0x63/0x70 [ 137.579345][ T9226] do_syscall_64+0x3d/0x90 [ 137.583801][ T9226] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.589815][ T9226] RIP: 0033:0x4665e9 [ 137.593692][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.613650][ T9226] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 137.622058][ T9226] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 137.630028][ T9226] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 137.638002][ T9226] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 137.645953][ T9226] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 19:06:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 137.653903][ T9226] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:29 executing program 3 (fault-call:1 fault-nth:96): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xf0ffffff00000000) [ 137.706586][ T9244] loop0: detected capacity change from 0 to 4096 [ 137.722270][ T9248] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 137.730646][ T9248] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 137.768062][ T9244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.783812][ T9254] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 137.792332][ T9254] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 137.809588][ T9254] FAULT_INJECTION: forcing a failure. [ 137.809588][ T9254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.822844][ T9254] CPU: 0 PID: 9254 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 137.831562][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.841603][ T9254] Call Trace: [ 137.844883][ T9254] dump_stack_lvl+0xb7/0x103 [ 137.849591][ T9254] dump_stack+0x11/0x1a [ 137.853739][ T9254] should_fail+0x23c/0x250 [ 137.858151][ T9254] __alloc_pages+0x102/0x320 [ 137.862801][ T9254] alloc_pages+0x2e8/0x340 [ 137.867230][ T9254] __get_free_pages+0x8/0x30 [ 137.871844][ T9254] __tlb_remove_page_size+0xf6/0x180 [ 137.877172][ T9254] zap_pte_range+0x752/0xe00 [ 137.881756][ T9254] unmap_page_range+0x2dc/0x3d0 [ 137.886660][ T9254] unmap_single_vma+0x157/0x210 [ 137.891494][ T9254] unmap_vmas+0xc0/0x170 [ 137.895794][ T9254] exit_mmap+0x22d/0x460 [ 137.900018][ T9254] __mmput+0x27/0x1c0 [ 137.904243][ T9254] mmput+0x3d/0x50 [ 137.907951][ T9254] register_for_each_vma+0x665/0x890 [ 137.913217][ T9254] uprobe_apply+0x8b/0x260 [ 137.917679][ T9254] ? __uprobe_trace_func+0x430/0x430 [ 137.923169][ T9254] trace_uprobe_register+0x2b6/0x410 [ 137.928450][ T9254] perf_trace_event_init+0xf8/0x790 [ 137.933675][ T9254] perf_uprobe_init+0xf5/0x140 [ 137.938435][ T9254] perf_uprobe_event_init+0xde/0x140 [ 137.943701][ T9254] perf_try_init_event+0x21a/0x400 [ 137.949171][ T9254] perf_event_alloc+0xa60/0x1790 [ 137.954087][ T9254] __se_sys_perf_event_open+0x5c7/0x2740 [ 137.959699][ T9254] ? vfs_write+0x50c/0x770 [ 137.964223][ T9254] __x64_sys_perf_event_open+0x63/0x70 [ 137.969699][ T9254] do_syscall_64+0x3d/0x90 [ 137.974294][ T9254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.980235][ T9254] RIP: 0033:0x4665e9 [ 137.984120][ T9254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.003977][ T9254] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 138.012523][ T9254] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 138.020572][ T9254] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 138.028535][ T9254] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.036493][ T9254] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 138.044524][ T9254] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:29 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xffff8000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xfeffffff00000000) 19:06:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x25, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:29 executing program 3 (fault-call:1 fault-nth:97): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xffffffff00000000) [ 138.192020][ T9282] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 138.196823][ T9283] loop0: detected capacity change from 0 to 4096 [ 138.200538][ T9282] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 138.228110][ T9282] FAULT_INJECTION: forcing a failure. [ 138.228110][ T9282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.228832][ T9283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.241385][ T9282] CPU: 1 PID: 9282 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 138.260956][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.271004][ T9282] Call Trace: [ 138.274277][ T9282] dump_stack_lvl+0xb7/0x103 [ 138.278948][ T9282] dump_stack+0x11/0x1a [ 138.283121][ T9282] should_fail+0x23c/0x250 [ 138.287549][ T9282] __alloc_pages+0x102/0x320 19:06:29 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xffffc000, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 138.292161][ T9282] alloc_pages+0x2e8/0x340 [ 138.296584][ T9282] __get_free_pages+0x8/0x30 [ 138.301338][ T9282] __tlb_remove_page_size+0xf6/0x180 [ 138.307038][ T9282] zap_pte_range+0x752/0xe00 [ 138.311702][ T9282] unmap_page_range+0x2dc/0x3d0 [ 138.316560][ T9282] unmap_single_vma+0x157/0x210 [ 138.321475][ T9282] unmap_vmas+0xc0/0x170 [ 138.325733][ T9282] exit_mmap+0x22d/0x460 [ 138.329964][ T9282] __mmput+0x27/0x1c0 [ 138.333947][ T9282] mmput+0x3d/0x50 [ 138.337648][ T9282] register_for_each_vma+0x665/0x890 [ 138.343613][ T9282] uprobe_apply+0x8b/0x260 [ 138.348102][ T9282] ? __uprobe_trace_func+0x430/0x430 [ 138.353381][ T9282] trace_uprobe_register+0x2b6/0x410 [ 138.358767][ T9282] perf_trace_event_init+0xf8/0x790 [ 138.364068][ T9282] perf_uprobe_init+0xf5/0x140 [ 138.368853][ T9282] perf_uprobe_event_init+0xde/0x140 [ 138.374324][ T9282] perf_try_init_event+0x21a/0x400 [ 138.379422][ T9282] perf_event_alloc+0xa60/0x1790 [ 138.384342][ T9282] __se_sys_perf_event_open+0x5c7/0x2740 [ 138.389991][ T9282] ? vfs_write+0x50c/0x770 [ 138.394416][ T9282] __x64_sys_perf_event_open+0x63/0x70 [ 138.399861][ T9282] do_syscall_64+0x3d/0x90 [ 138.404351][ T9282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.410243][ T9282] RIP: 0033:0x4665e9 [ 138.414114][ T9282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.433732][ T9282] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 138.442312][ T9282] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 138.450339][ T9282] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 138.458370][ T9282] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.466353][ T9282] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 138.474397][ T9282] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000543000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) 19:06:30 executing program 3 (fault-call:1 fault-nth:98): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 138.493303][ T9287] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 138.501697][ T9287] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffff8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1a7ca1dbd4936e8281688ad02c167081110080c6bd8b295967c3e0d0c71236dabb2cb5cd4ea1896ef3afa5ffdfbedf6275e59af4a08dcf6ed47b3189293766d2af1ac2077073935f3fce053f52d224c0205ef40d72e2a84abac5edab968e794280731c4de88962", 0x67, 0x100000000}], 0x24410, &(0x7f0000000180)={[{'$)'}, {}, {':#'}], [{@appraise}, {@obj_type={'obj_type', 0x3d, '!'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '-'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) [ 138.562929][ T9318] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 138.571470][ T9318] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 138.580540][ T9320] loop0: detected capacity change from 0 to 4096 [ 138.607907][ T9321] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 138.615315][ T9320] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.616327][ T9321] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 138.640033][ T9330] loop5: detected capacity change from 0 to 264192 [ 138.650706][ T9321] FAULT_INJECTION: forcing a failure. [ 138.650706][ T9321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.664222][ T9321] CPU: 1 PID: 9321 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 138.673099][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.683315][ T9321] Call Trace: [ 138.686594][ T9321] dump_stack_lvl+0xb7/0x103 [ 138.691165][ T9321] dump_stack+0x11/0x1a [ 138.695299][ T9321] should_fail+0x23c/0x250 [ 138.699707][ T9321] __alloc_pages+0x102/0x320 [ 138.704277][ T9321] alloc_pages+0x2e8/0x340 [ 138.708705][ T9321] __get_free_pages+0x8/0x30 [ 138.713277][ T9321] __tlb_remove_page_size+0xf6/0x180 [ 138.718562][ T9321] zap_pte_range+0x752/0xe00 [ 138.723345][ T9321] unmap_page_range+0x2dc/0x3d0 [ 138.728183][ T9321] unmap_single_vma+0x157/0x210 [ 138.733105][ T9321] unmap_vmas+0xc0/0x170 [ 138.737363][ T9321] exit_mmap+0x22d/0x460 [ 138.741597][ T9321] __mmput+0x27/0x1c0 [ 138.749475][ T9321] mmput+0x3d/0x50 [ 138.753245][ T9321] register_for_each_vma+0x665/0x890 [ 138.758536][ T9321] uprobe_apply+0x8b/0x260 [ 138.762948][ T9321] ? __uprobe_trace_func+0x430/0x430 [ 138.768216][ T9321] trace_uprobe_register+0x2b6/0x410 [ 138.773528][ T9321] perf_trace_event_init+0xf8/0x790 [ 138.778725][ T9321] perf_uprobe_init+0xf5/0x140 [ 138.783577][ T9321] perf_uprobe_event_init+0xde/0x140 [ 138.788908][ T9321] perf_try_init_event+0x21a/0x400 [ 138.794006][ T9321] perf_event_alloc+0xa60/0x1790 [ 138.798932][ T9321] __se_sys_perf_event_open+0x5c7/0x2740 [ 138.804699][ T9321] ? vfs_write+0x50c/0x770 [ 138.809138][ T9321] __x64_sys_perf_event_open+0x63/0x70 [ 138.814789][ T9321] do_syscall_64+0x3d/0x90 [ 138.819193][ T9321] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.825109][ T9321] RIP: 0033:0x4665e9 [ 138.828978][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.848848][ T9321] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 138.857256][ T9321] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 138.865226][ T9321] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 138.873257][ T9321] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.881384][ T9321] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 138.889418][ T9321] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 [ 138.924903][ T9336] loop5: detected capacity change from 0 to 264192 19:06:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x27, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:30 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:30 executing program 3 (fault-call:1 fault-nth:99): openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x1, 0x0) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000040)="0584956ca6879f0f", 0x8}, {&(0x7f0000000080)="a4000a8a54c715ae97c36a1ae1864680bbc79ed9b483eb745b157d845c88ce1b6db55dced5b3efeec1c5c6e928446ccbe6456eedd323b9656015d721673327c3d3176e8cfb62a0ad71c5d940a89c23e7de111b3fe00b3ef8dbd4dfc0f7602361aea5deb3bb8fc3637157a1a375e4ac2b2101", 0x72}, {&(0x7f0000000100)="407fef308df1949e9548d636a23bf303eeb556189170fee52a8105e8f1e9aac865fadf33a308e003a18a4ed80c4937e5ad260bf3328cb9fd374fe260ad701e8cee983154ed5cf20ace7f9042b44294330260e22bf83eb87551f595d59792b89cd9059c389b8ac31894", 0x69}, {&(0x7f0000000180)="b233ef279fffe762b7c9f8d23275533a3cb2de2b5ab8f9801bb1b8880e3f081198525d69174e9b021b42b4c08fc39a9a77ae430bef9f509a0e7d14134ffde09ff959f639ffbb6e4fd8dfb699bfef6346b205fb5be57ca971ec05560bd61da444f231dd01e486c22ef1d8daaa6c03c624464a36ac074fcbc5e421420e94ca8fb1480c87489998c6d601010b06debf9c85bf89d32b193a57296b5fb7f1ac4cc7a7c2dd0c7bd7c30158ba5d1eab0e165ad6b668f87e2d481c19f96138101b043c319dbf374c52d3ed8fd9a3e79ee30400347300eac5b41cfa8625bcb6f06409fefd23b4e0921f4dd700592daec52f8fa0ef36c1", 0xf2}, {&(0x7f0000000900)="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", 0xdb}, {&(0x7f0000000380)="428a4bafc26f9a9b48c245b2a51327bc7988178e5228c8329a9d8f2a00350b1e21120f7d64f1eecb430e05c5422a29c5a32b3265ac181788ffc7f47c67f29caee03cdee547b0244e12aa99c22db3a8b2c5ce9f6984ddcd0abca9f2eacb16f3ebe9c8f56550bc0eedf4a1a95c8ed93633df2ac3b71c469f8636f626bfbb7dc5f1708ceb7217eff9502f7b0ba5f739756817b55fc26b9684c282b21c4526a790", 0x9f}, {&(0x7f0000000800)="b7442d47e96676a8bcdb04eaeb2c5031217c0eab6a52773c84792075030000001250f50c451252c635b37fb1465bc0c6a25eccba0b1f1d83383fde56dee84302c479e82246615e1902bc253ef3b195b7f76a15ef0a86305599f630bc7bef6baaeaa09e0336489e9fc4b42c5ad42639db5022b1c47aa079075eca712ee653d6b3e041fab1dfbadee66437eddd4196f5e4136838c2109ada5a69dc7cab22a7f2eb484b5f0e5128a40303261a262ae900b42abe7717ed9cf68c8da4a26ebeea98c33216aace362d9e6d67e2c9268f4193be7ec5a8ef0d80f7850a884bf6bf7e6ad41d834198", 0xda}, {&(0x7f0000000540)="ad0f2c466bd0bf1be575ca6c2fb1a1f806f0213093b6625f199b199c7516c4511efc8d07afd6881bdfd20cd0c31a85f36cb5f43d18600f6c0b7f9183537e04c7b50ddc5428631f916be361606f86750cfa2bc81977872da84700050b3c39c029fcd31f7a6feabc0a48e9276e2cf1a5e000a707145aabc68aaf1528859a4ae877d6360faa6020a6d7846f0ffd60", 0x13}, {&(0x7f0000000600)="79b122917ad19d06fe9db2251b044e1bdf5a48ce2b7637220f757234b0aeff8d6d6ddeaffd314f3adb185619714d9d8e71bc31082b981486616dac44db21bf107ec6cda52a3f9919265da7e75073f7c66d734c63eddd5986e18577", 0x80}], 0x9, 0x0) setresuid(0xee01, 0x0, 0xee01) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() sendmsg$netlink(r2, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) 19:06:30 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 139.078026][ T9355] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 139.080337][ T9357] loop0: detected capacity change from 0 to 4096 [ 139.086417][ T9355] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 139.105569][ T9357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:06:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 139.167504][ T9358] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 139.175916][ T9358] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 139.191556][ T9358] FAULT_INJECTION: forcing a failure. [ 139.191556][ T9358] name failslab, interval 1, probability 0, space 0, times 0 [ 139.204295][ T9358] CPU: 1 PID: 9358 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 139.212974][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.223041][ T9358] Call Trace: [ 139.226322][ T9358] dump_stack_lvl+0xb7/0x103 [ 139.230929][ T9358] dump_stack+0x11/0x1a [ 139.235099][ T9358] should_fail+0x23c/0x250 [ 139.239530][ T9358] __should_failslab+0x81/0x90 [ 139.244309][ T9358] ? register_for_each_vma+0x372/0x890 [ 139.249829][ T9358] should_failslab+0x5/0x20 [ 139.254341][ T9358] kmem_cache_alloc_trace+0x49/0x310 [ 139.259669][ T9358] ? register_for_each_vma+0x372/0x890 [ 139.265132][ T9358] ? vma_interval_tree_iter_next+0x24c/0x280 [ 139.271124][ T9358] register_for_each_vma+0x372/0x890 [ 139.276447][ T9358] uprobe_apply+0x8b/0x260 [ 139.280872][ T9358] uprobe_perf_close+0x2f8/0x370 [ 139.285818][ T9358] ? uprobe_apply+0x203/0x260 [ 139.290544][ T9358] trace_uprobe_register+0x310/0x410 [ 139.295834][ T9358] perf_trace_event_init+0xf8/0x790 [ 139.301031][ T9358] perf_uprobe_init+0xf5/0x140 [ 139.305820][ T9358] perf_uprobe_event_init+0xde/0x140 [ 139.311182][ T9358] perf_try_init_event+0x21a/0x400 19:06:30 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x2, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001440)={0x2, [{}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r3, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {r3}, {0x0, r2}, {}, {r3, r2}, {r3, r2}, {}, {}, {0x0, r2}, {}, {}, {r3, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {}, {}, {}, {r3}, {}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {r3}, {0x0, r2}, {}, {r3, r2}, {0x0, r2}, {r3}, {}, {r3}, {}, {r3}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {r3, r2}, {r3}, {}, {}, {}, {}, {}, {r3}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {r3}, {}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {r3}, {}, {}, {}, {}, {r3}, {0x0, r2}, {0x0, r2}, {}, {r3}, {0x0, r2}, {r3, r2}, {r3, r2}, {r3, r2}, {0x0, r2}, {}, {r3}, {r3}, {}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {}, {r3}, {r3, r2}, {0x0, r2}, {}, {}, {}, {}, {r3}, {}, {r3}, {0x0, r2}, {r3, r2}, {}, {}, {}, {r3}, {r3}, {r3}, {}, {r3}, {}, {}, {0x0, r2}, {r3}, {r3}, {}, {}, {}, {0x0, 0x0}, {}, {}, {r3}, {}, {}, {0x0, r2}, {0x0, r2}, {r3, r2}, {}, {}, {0x0, r2}, {}, {}, {r3}, {r3}, {0x0, r2}, {r3}, {0x0, r2}, {r3, r2}, {}, {}, {}, {r3}, {}, {r3}, {}, {r3}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r2}, {0x0, r2}, {}, {}, {r3}, {r3}, {0x0, r2}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r2}, {r3, r2}, {}, {r3}, {0x0, r2}, {r3}, {}, {}, {}, {r3, r2}, {r3}, {}, {r3}, {r3}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}, {}, {r3}, {0x0, r2}, {0x0, r2}, {}, {r3}, {0x0, r2}, {}, {}, {r3, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r3}, {r3, r2}, {0x0, r2}, {}, {0x0, r2}, {r3}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r3}], 0x7f, "ba0ca5dc600d83"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057840)={0x7ead6fb6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "33cbc6b6087bd2"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000140)={r6, 0x4}) setresuid(0xee01, 0x0, 0xee01) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="4d27208440642bd4c24ccd8b1afb6e9405010358c0b9ab9cf05b1a1fe8bd255b51bde570e2df215d6bd211dd414ebe2f8ed9d91ebaea2b95bddc88c855ee263d2d73843e76ec3b886519c04d79a49584d9a15a210cbe9527a42eefcd43375d4ecd28ab8040dfbbc2c4466f5d11f8d6168f67a3958af6cef613a74b1c4f704dd580ee5337c5f2ccf339cdeff17f6459e6d23e4f5afa5e1921ec60a17a30061fbc0ad4864f8e37faafdd0872ffd67dc645d595ae254eab68ed24c62e998cac8198c50438943def1fdcbd8b2049be40e9fd4fd33e5e54dd2d24103fb354908d3953d18f0aac0ca3ce74eeb2d767a214fa1c24309b7d22dca550f712f36b6ca1ff44") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = gettid() sendmsg$netlink(r7, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20}, 0x0) [ 139.316314][ T9358] perf_event_alloc+0xa60/0x1790 [ 139.321264][ T9358] __se_sys_perf_event_open+0x5c7/0x2740 [ 139.326989][ T9358] ? vfs_write+0x50c/0x770 [ 139.331400][ T9358] __x64_sys_perf_event_open+0x63/0x70 [ 139.337089][ T9358] do_syscall_64+0x3d/0x90 [ 139.341511][ T9358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 139.347478][ T9358] RIP: 0033:0x4665e9 [ 139.351360][ T9358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.371142][ T9358] RSP: 002b:00007f67b1a56188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 139.379555][ T9358] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 139.387523][ T9358] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 139.395601][ T9358] RBP: 00007f67b1a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 139.403745][ T9358] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000003 [ 139.411709][ T9358] R13: 00007ffced32080f R14: 00007f67b1a56300 R15: 0000000000022000 19:06:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 139.486436][ T9402] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 139.494839][ T9402] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 139.502043][ T9404] loop0: detected capacity change from 0 to 4096 [ 139.516319][ T9404] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.546042][ T9403] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 139.554634][ T9403] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 139.585149][ T9413] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 139.593643][ T9413] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:31 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x4, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0x1, @multicast2, 0x4e22, 0x3, 'lblc\x00', 0x18, 0xffffff19, 0x3f}, 0x2c) 19:06:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_evm(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@ng={0x4, 0xe, "67c2365312704563c1da586af5a679fb2dea4d"}, 0x15, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 139.983267][ T9425] loop0: detected capacity change from 0 to 4096 [ 139.991389][ T9429] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 139.999761][ T9429] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 140.022264][ T9425] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:06:31 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x7, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) eventfd(0x4) getsockname(r0, &(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000ec0)=0x80) sendmmsg$unix(r0, &(0x7f0000000f80)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000000c0)="5bb7900c2ff59c3c6470a3f348221f828350afc3e25adf77e6417ac53ce27fcf7a77064285aca309b6198c4e16e1f0eebb0dc564cf19e65aa3b7c5878bc50044d87f8bd4c651425631f32d24a56089599ac8f101bd8a935e8395de0acb37e9f3736a0e55dfcc102838dd82837e38e56ec64975b0061c8a5798717c52537f8571be31976e0e97f71d38c64603487454af74b2ebfc1529eae000c88e60ee686ff60b448384fca8dbc6d98914ded465a23e7feb6135d66bc83968b443", 0xbb}, {&(0x7f0000000180)="ae8613e071183324268ecc106bce8e71105b766ae4dbfa41997691cca229039e97f569da9c414997e32d25dd8e7dda458fbebaef61421ef84b8adf6d21bbfa3417184898345c407df8fb8d48671d16c0676b8bf8a3d82c089d48321c2f60849c6f1f12eaf39bec659e28a79a0792b24143be39913c995652fbf526b5f5e928ebabf348ef751d1150b1f1d29459b83ea8732018b6fd609a31417eef767fefd290eedd899a352a22cc1bb8431f9ca489e540e4c51f046eb4fb25898e7f43a98592ae8c13d13f7d96c98b7f9ef68a3ee839d178b82c212fb367cadc05b8595e332e83d29e", 0xe3}, {&(0x7f0000000280)="40f5acd2afb12c7cd65495c0c3a59c53cba5a1051aa04a6136bff4bad150c3020b3b03c3fc8f2a82fa80bca45779f60d4f287cfce300e6076966d8f6b211bb88edc0ccbacad1a1da38e52fc3c57a4aa3eb18253499d929307d9f118492e8b41b665802b7fb48a8922aeb4a77f5a8a078160b9325041514b3d4d6ab85ce223f0f37b1b0b3c1b748d28ac063a80e04ba25ff21fb9c4298696328", 0x99}, {&(0x7f0000000340)="ef5bbb83c31e53350df760297e7716aef32259a4664f8d67f3aad3c67d3863cfd8a8c32c56376ea5ef9369c811f113712e395d1885024301fabee4d98708b5ba5ccb628a1b5804dba31bce598b76816999d8350f967d242e37637d1504e87ea9f74301e881f6bdfbcf33ddfebebc871e9b90033323d3542f688ebbf7b3bf48092bd2fb7c1fdccdd9e29c", 0x8a}, {&(0x7f0000000400)="1c2eba044701c91e96929c3478e17d027ff27ad5efe704a54646b5c32a042e7cbe154ca89e0dd0b2d8a1cd8358328f42a7dc3b0749ff464cc7deffbdadb7fe951fdd9070f31d8b862f916b6b3e241c76d8725e5766c0d49d3c9a60356fe4a324e53122f0b2fd3a51d127417f64e04b7122b5cc82ab4604bce34f207ad11644a8b73cf47a509dd97b0ea832a32eb25a5d95905e46287e9a215e4a", 0x9a}, {&(0x7f00000004c0)="c7e986e4a3efc77c81f035f480a0c21ef4ee648111265c22d5497e242aea9b0150961acac6ef4c9965b9dd164e2a919805f645366ac9590ff6465f486ef6c3901bbbbd78099660f5a49c1ac275ad714e23b08fac9a11b8d1ba26", 0x5a}, {&(0x7f0000000540)="974f053344ddf3a30e292f41b07744655c592546aa5b49a8428b43c49793a9153092bfb7c9b7d3f7aaa6f71e9a6b6f234c6d1c88375dff90b44e1f374dc65eab517eafd408e4d868a0e0a39dcbebedccf8a0070feebe89daaee033f528c68af28efa96c11e9d327ccad74e740ffc1a397e601c774d09fddbe433ab3bebfb1d8bf213213e1931a1e57b46cc4f", 0x8c}, {&(0x7f0000000600)="17e8faa40194e3b93ccedc2f6b04317ec6a47b4bc1dd46a80c8506e6a095a5b5834f30c30e9cbf316a7111078cb9a2e6a841570af17eaec729202b1747d46b7ac06d83056479145455b54a081c28d8314c5c22f1c1836d5be45eebb3b35c96ecaf61a1965698f42147e13f2322fbd388676440db1635a2a31ec84a15ea40284340875633dfba4d92ae00da8bba5c097b200977277ed120dcb2411bc1535a14b7d84c9410d4bcb1357defeea8df9f91296af27f4b1b47f4e41e2c4452525a211a8e13df3aa788c72de29372db1fbca7b9c7ae95c4d0a90aec44def6e2fd14be592627", 0xe2}, {&(0x7f0000000700)="c49e8fad52babf52195643cffca8644bf30b1f", 0x13}], 0x9, 0x0, 0x0, 0x10}, {&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000001740)="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", 0x16d}, {&(0x7f0000000980)="4c6eed69bf1f4e965a29aebc916212ff88c5f381dda5a060218f6f2adfb823817c2651e4c8a5be05693283dfb260d6b7580bbe75d6366170305cd686075ff93dfb16", 0x42}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x50}, {&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="44c15999729e64814c0aed8f865bcec8ba38fb6c4c1828cb125b3fbe7e29620db8d795d76a5d50bf25a3dad7da2a75cb58deeb6c03d15db7cc5ce3206503b5c94f70d0820830d68488769ccde861ca6efda2a4176f410525b1b4956997fbcb3d03e2616bd188402b2e6103aad96a03edaca079beb0149d85d68b69b348d498c76753bbe69250f98a4f4218377d549759ce1f53d98d1654baa59519a2d9e4eb8d14d7a51b442454e8fc4c6f6d12ee56c2369d5beeeba431b85b7e55f1180ad636ea03a2baeb666dd99d", 0xc9}, {&(0x7f0000000c80)="649766a9bceb4fb55de291ab1b8c4fcbb7a4fbd8c541421934129e22187868183e1679021c17dc5c834c6f7c1b3b9e27f1e60c81ed4e8cbb70a6279c29085fe8b13743dc30c08860598a260bbc2c20d9af3e3d10bf0f74b76e77ee5c2ef8389243f635ec69e099aa098f1ab1", 0x6c}, {&(0x7f0000000d00)="c682c1564072055f352c9ea06a9d24dbb7b23b46b50d8c2390b4", 0x1a}], 0x3, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r0, r0, r2]}}], 0x70}], 0x3, 0x40000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() sendmsg$netlink(r3, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) 19:06:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 140.066826][ T9443] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 140.075495][ T9443] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 140.124983][ T9454] loop0: detected capacity change from 0 to 4096 [ 140.178259][ T9454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.205990][ T9465] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 140.214539][ T9465] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 140.229248][ T9476] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 140.237641][ T9476] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000e26a, 0x0) 19:06:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:32 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x8, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:32 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x10, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 140.850828][ T9490] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 140.859233][ T9490] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 140.869479][ T9493] loop0: detected capacity change from 0 to 4096 19:06:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee01) statx(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r5) sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) mmap(&(0x7f00007d2000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r0, 0xb73d5000) [ 140.898866][ T9493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.917208][ T9511] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 140.925640][ T9511] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:32 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x42, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 141.120091][ T9542] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 141.128476][ T9542] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 141.160162][ T9547] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 141.168668][ T9547] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 141.271101][ T9553] loop0: detected capacity change from 0 to 4096 [ 141.282156][ T9553] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:06:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000e26a, 0x0) 19:06:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1fe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r1, &(0x7f0000000140)=0xac5f, r0, &(0x7f0000000180)=0x8001, 0x4, 0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setresuid(0xee01, r2, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) gettid() setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x4000) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r6, r7) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x2f, &(0x7f000000d700)=[@rights={{0x0, 0x1, 0x1, [r8, r3]}}], 0x20}, 0x0) 19:06:33 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x60, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:33 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x64, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 141.726987][ T9573] loop0: detected capacity change from 0 to 4096 [ 141.734795][ T9574] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 141.743315][ T9574] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x92200, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0xd9, 0x4}, 0x18) r2 = dup2(0xffffffffffffffff, r0) r3 = syz_io_uring_complete(0x0) move_mount(r3, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4010, r0, 0x8bd5d000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0x3, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = gettid() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$netlink(r4, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r7}}}], 0x20}, 0x0) [ 141.767445][ T9573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.813149][ T9591] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 141.821583][ T9591] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 141.843853][ T9592] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 141.852248][ T9592] ref_ctr increment failed for inode: 0x361f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:33 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x204, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 141.957041][ T9610] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 141.965462][ T9610] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 142.004190][ T9615] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.012682][ T9615] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 142.029580][ T9623] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.037977][ T9623] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000e26a, 0x0) 19:06:34 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x25c, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 142.579508][ T9638] loop0: detected capacity change from 0 to 4096 [ 142.589504][ T9642] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.597898][ T9642] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:34 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x268, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 142.623275][ T9638] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.640382][ T9654] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.648989][ T9654] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket(0x1, 0x4, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) 19:06:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 142.684629][ T9660] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.693254][ T9660] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:34 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x402, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:34 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 142.835210][ T9676] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.843739][ T9676] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 142.944408][ T9694] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.952974][ T9694] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 142.968330][ T9696] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 142.976772][ T9696] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e26a, 0x0) 19:06:34 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x406, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) chown(&(0x7f0000000000)='./control\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6100) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000002b80)={{}, {}, [{0x2, 0x1}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x0, 0xee01}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}], {}, [{0x8, 0x6}, {0x8, 0x5}, {0x8, 0x6, r2}], {0x10, 0x3}, {0x20, 0x5}}, 0x8c, 0x3) r3 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) splice(r0, &(0x7f0000000040)=0x20000000, r4, &(0x7f0000000080)=0x963, 0xa03, 0x0) 19:06:34 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e26a, 0x0) [ 143.445328][ T9709] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.453907][ T9709] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e26a, 0x0) 19:06:35 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x604, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 143.487880][ T9714] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.496402][ T9714] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:35 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x700, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:35 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e26a, 0x0) [ 143.545363][ T9727] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.553743][ T9727] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:35 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e26a, 0x0) 19:06:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 143.630450][ T9750] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.638859][ T9750] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:35 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e26a, 0x0) [ 143.697935][ T9760] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.706434][ T9760] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 143.758140][ T9769] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.766542][ T9769] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 143.789233][ T9772] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 143.797865][ T9772] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:35 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x4000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:35 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)={'L-', 0x7}, 0x16, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ffff00000000000000001f00000061fb6b12832791c76eecaf94b20a47a49d9ae2ae4cf4be0c4fcb5028e7a352a7bc7a3e94dd803baae7bba1a9e71101840714faf178fc3dd3962e1a33560bdd71693d4ae5dee67ab2"], 0x14}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x97, 0x1f}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x73, 0x2a, [@dsss={0x3, 0x1, 0xb}, @chsw_timing={0x68, 0x4, {0xfffe, 0x8}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x14, @device_b, 0x1ff, @device_b, 0x6, 0x4, @device_a, 0x8}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x5, 0x0, {0x81, 0x3, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x8255, 0x3}}, @random={0x0, 0x19, "f7585b3a44224624660fe485d52a7b8d053b0d39c2e75cce11"}, @cf={0x4, 0x6, {0x7, 0x5, 0x0, 0x1}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x404c084) r4 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) 19:06:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) syz_io_uring_setup(0x4297, &(0x7f0000000040)={0x0, 0x36e0, 0x10, 0x0, 0x293}, &(0x7f0000629000/0x1000)=nil, &(0x7f00004df000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f00006d8000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x200000f, 0x11, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}}, 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) syz_io_uring_submit(r3, r7, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r9, 0xff, {0x0, r10}, 0x5, 0xf, 0x0, {0x0, 0x0, r1}}, 0x9) 19:06:35 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x4200, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 144.321287][ T9788] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 144.329946][ T9788] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 144.393880][ T9797] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 144.402296][ T9797] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:36 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x5c02, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0xc2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r1, 0xc0045878) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) syz_io_uring_setup(0xa9c, &(0x7f0000000040)={0x0, 0x3005, 0x4, 0x3, 0x132, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00004ec000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = syz_io_uring_setup(0x220c, &(0x7f00000001c0), &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x80, &(0x7f00000002c0)=[r3, r0, r0, r4, r0, r5, r0, r6], 0x8, 0x0, 0x1}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r10 = gettid() sendmsg$netlink(r9, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r10}}}], 0x20}, 0x0) [ 144.532279][ T9831] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 144.541363][ T9831] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 144.571211][ T9832] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:36 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x6000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) splice(r0, &(0x7f0000000080)=0x9, r0, &(0x7f00000000c0)=0x1, 0x4, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) signalfd(r1, &(0x7f0000000040)={[0x7fff]}, 0x8) [ 144.579740][ T9832] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 144.607366][ T9839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 144.615841][ T9839] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:36 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x6400, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) r3 = socket(0x1d, 0x80000, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee01) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee01) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0xee01) setresuid(r4, r6, r8) 19:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x1}, {0x6}, 0x49, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="623898dbbae0873fc0d10b8521962341254b9dbf39c8c63caf3fe537fa4e38dc25e5a23d8a2caaec1918f26e799f4183bed9f896585f8be005eb020cefdba6ff2577750a703ef7e6c8421b07b8e1d5607c5a06b0508f4fe3741c71a90bb3f6ddacb89914ce4d43996ce14ad93ef839fd8ff2ff4c6ddceafc7f1579a9b9d6e011a94f994b33480e5156be6bbe48fc22423ff1ed90f3f6bb538df162c3d3e7dfdd7a1c6d5eb543387ae94c3e724df2e9567739f251799e95c3979efbe87d3afd0df9d16050e6d39e80b51031e2c7d4aaa3cc11f21f67feef29db94280986d1f0bfc8022c6cc7be1c73d0c86099c1ca31e7e76e27872afcac7b3a469173d5f8cb9580ec3fde2aa9570fb7892e099b49da8a2ca420943d1b29f6e09f1ed155543246ce3ac9803d2b30edc2b8d795172a0d2a66b606fce40679702d2dea6bf591f2af281c59d998d432dd6e38764c2dda0c86cd1b1479004340c765e8e4d683bfad2c6e1fbc1ddc16388a62544e39355e1a4c44c3a7dd3964f8652bca5ed53e29cdb7f3159f2664f815270691ab6601fc4ad9afb206588e4fcdeec484983761217eb2d54e06a72d25", 0x1a6, 0x0, &(0x7f0000000500)={0x2, 0x56, {0x0, 0xc, 0x6, "bf6bfb44c536", 0x43, "64283e4624c162be5144d4511cc8b773bf7e95eb5754197af6b47acd228400da99f6edd7024b8142dac6109326fbcb6561d374179865a843ad666fe0eafd76dffebcbc"}, 0xc9, "9ae6a452611220f941add48a730a872ccb541809857058e521aafda95746e47eca7d78967fe8834bbe32b418f2fc66c1c8439931e7392bd3983c0bac0b6e92b184a9ac516c963ef1dff2caa10dad8371cba11895b62567f568dc27b001ebd0d491530c93266fbe65f7ce5987830098706e066ca700d3780cdff5e6a253e7c9478c48876d3a4032e7003209e350127d1d38d77480ad8c90ecabf786efd91b13089e9a41a7fc6f5025bc769685359630e08b51183681fa0cdbff57377d0840c8f1900070fc9d17b4ded9"}, 0x12b}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = memfd_create(&(0x7f0000000040)='\x00', 0x4) r4 = syz_open_pts(0xffffffffffffffff, 0x4c00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "c365356a1e7eadefd4c7404e6ffb350e"}, 0x11, 0x3) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0480) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x38) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r2, r8}}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r4, r5, r0, r0, r6]}}, @cred={{0xffffffffffffff90, 0x1, 0x2, {r7, r8}}}], 0x70}, 0x0) [ 145.189357][ T9870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 145.192093][ T9875] loop0: detected capacity change from 0 to 4096 [ 145.197775][ T9870] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:36 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x6802, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xda1, 0x2f) setresuid(0xee01, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) [ 145.267130][ T9872] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 145.275948][ T9872] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:36 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24054085) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r1, 0xec4d7000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0x0, 0xee01) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r3 = gettid() sendmsg$netlink(r2, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) 19:06:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 145.344064][ T9899] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 145.352477][ T9899] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 145.416372][ T9902] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 145.424897][ T9902] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 145.444564][ T9917] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 145.453454][ T9917] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 145.485047][ T9921] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 145.493539][ T9921] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:37 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:37 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x40000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) setresuid(r2, 0x0, 0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() sendmsg$netlink(r3, &(0x7f000000d740)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d700)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) 19:06:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:37 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x80000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 146.080318][ T9933] loop0: detected capacity change from 0 to 4096 [ 146.109583][ T9947] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 146.118029][ T9947] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 146.162529][ T9946] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 146.170976][ T9946] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:37 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x400000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:37 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x50651d, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 146.274067][ T9967] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 146.282459][ T9967] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:37 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x600000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 146.351372][ T9968] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 146.359767][ T9968] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 146.476035][ T9991] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 146.484969][ T9991] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 146.511123][ T9999] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 146.519681][ T9999] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:38 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x80ffff, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 146.990102][T10015] loop0: detected capacity change from 0 to 4096 [ 146.990326][T10016] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.005579][T10016] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 147.022917][T10018] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:38 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xa0ff20, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 147.031661][T10018] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:38 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xc0ff20, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 147.133067][T10033] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.141464][T10033] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 147.208200][T10034] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.216645][T10034] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:38 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xc0ffff, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 147.322457][T10053] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.330918][T10053] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 147.353814][T10060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 147.362886][T10060] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 147.498740][T10072] loop0: detected capacity change from 0 to 4096 19:06:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:39 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xd0ff20, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:39 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x1000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 147.864750][T10088] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.873349][T10088] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 147.895097][T10098] loop0: detected capacity change from 0 to 4096 19:06:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:39 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x2000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 147.920106][T10093] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.928613][T10093] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 147.949421][T10102] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 147.957916][T10102] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 148.025627][T10118] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.034055][T10118] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:39 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x2040000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 148.081003][T10128] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.090010][T10128] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 148.137148][T10133] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.145557][T10133] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 148.160219][T10134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.168657][T10134] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 148.266332][T10134] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.274721][T10134] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 148.302452][T10147] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.310848][T10147] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 148.346995][T10150] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.355399][T10150] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:40 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x4000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 148.740933][T10162] loop0: detected capacity change from 0 to 4096 [ 148.747836][T10164] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.756226][T10164] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 148.771928][T10163] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:40 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x6040000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 148.780305][T10163] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x25, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 148.819708][T10174] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.828116][T10174] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:40 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x7000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 148.906228][T10191] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.914620][T10191] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:40 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x8000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 148.962465][T10194] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 148.970862][T10194] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.076034][T10209] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.084435][T10209] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 149.126175][T10211] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.134593][T10211] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.256789][T10222] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.265271][T10222] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.286439][T10225] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.294833][T10225] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:41 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x10000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x13, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 149.621967][T10237] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.628953][T10240] loop0: detected capacity change from 0 to 68 [ 149.630552][T10237] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.655930][T10240] EXT4-fs (loop0): bad geometry: block count 512 exceeds size of device (8 blocks) 19:06:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:41 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x1d655000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 149.666312][T10238] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.674716][T10238] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.726912][T10255] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.735322][T10255] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.760754][T10258] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x25, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 149.769194][T10258] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:41 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x20ffa000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 149.853550][T10270] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 149.861923][T10270] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 149.887455][T10284] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:41 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x20ffc000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 149.895844][T10284] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x27, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 150.015267][T10296] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.023678][T10296] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 150.086095][T10299] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.094488][T10299] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x20ffd000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x48, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x40000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 150.522790][T10313] loop0: detected capacity change from 0 to 68 [ 150.529601][T10312] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.537981][T10312] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 150.538076][T10313] EXT4-fs (loop0): bad geometry: block count 512 exceeds size of device (8 blocks) 19:06:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x60, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x42000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 150.583942][T10315] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.592362][T10315] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x5c020000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 150.700371][T10340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.708834][T10340] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x64000000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 150.778471][T10344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.786883][T10344] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 150.898696][T10366] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 150.907250][T10366] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 150.996288][T10378] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.004679][T10378] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 151.019636][T10377] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.028165][T10377] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x68020000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x101d, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:42 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xfeffffff, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 151.397986][T10393] loop0: detected capacity change from 0 to 68 [ 151.414306][T10395] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.422795][T10395] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 151.435316][T10393] EXT4-fs (loop0): bad geometry: block count 512 exceeds size of device (8 blocks) 19:06:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x74, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:43 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xffff8000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 151.447569][T10397] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.456006][T10397] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:43 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xffffc000, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 151.537098][T10422] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.545605][T10422] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x68, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 151.622483][T10427] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.630887][T10427] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:43 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xfffffffe, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 151.738108][T10447] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.746510][T10447] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 151.783463][T10456] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.791955][T10456] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 151.806851][T10457] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 151.815254][T10457] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:43 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000340)={0x3, &(0x7f00000000c0)=[{0x3ff, 0xa9, &(0x7f0000000000)="a7b36c8172ea7554f81a6781a3c28c4f7d9c907797fda4ba3afbec954d05661ab6f990213b6fc0e5f3c0449d329ef0f72d67db62fe8229b91e866793de22b6f09ab52d2201243b7953c52bf59a0dea9102f29fea7935405d2732f8e1e9e17a0867962cd1dbad03cb310c66e4eeceb0b48543a4defd7cd304bf94a57fd30d392f1dc468756e148d63267fb2f8b6c9d70d37a22639d284f3b120c497d25e6a118a573e78d0885b613264", 0x0, 0x1}, {0x4, 0xfe, &(0x7f0000000240)="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", 0x1, 0x1}, {0x9, 0xfe, &(0x7f0000000480)="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", 0x0, 0x1}]}) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 152.290217][T10474] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.298698][T10474] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 152.313669][T10479] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.322049][T10479] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x74, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:43 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x5, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 152.346584][T10476] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.355237][T10476] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 152.421805][T10492] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.430257][T10492] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 152.453444][T10502] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:44 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 19:06:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 152.461952][T10502] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 152.482125][T10503] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.490598][T10503] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 152.556085][T10510] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.564494][T10510] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 152.578087][T10515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.586493][T10515] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 152.615971][T10516] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.624447][T10516] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 152.700956][T10523] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 152.709446][T10523] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 153.173758][T10535] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.182183][T10535] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 153.195425][T10537] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.203800][T10537] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 153.261477][T10544] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.270005][T10544] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 153.304475][T10545] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.312891][T10545] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:44 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x9, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x39d}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '(@:\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4518}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x10) 19:06:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 153.402137][T10552] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.410638][T10552] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 153.460661][T10559] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.469128][T10559] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 153.495095][T10561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:45 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x5) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r1, r2, r3, r4], 0x4) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 153.503478][T10561] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 153.575499][T10575] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.583908][T10575] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 153.669599][T10588] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.678103][T10588] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 153.713733][T10589] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 153.722115][T10589] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/snmp\x00') r1 = io_uring_setup(0x7c3, &(0x7f0000000280)={0x0, 0x1003561, 0x4, 0x0, 0xed, 0x0, r0}) r2 = socket(0x23, 0x0, 0x20000000) syz_io_uring_setup(0x12ea5, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000200)) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000300)=0x4, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x505040, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 19:06:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:45 executing program 2: r0 = io_uring_setup(0x26b6, &(0x7f0000000400)={0x0, 0x1003562, 0x8, 0xffffffff}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 154.064973][T10603] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.073458][T10603] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 154.081563][T10608] loop0: detected capacity change from 0 to 4096 [ 154.122805][T10608] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 154.134899][T10608] EXT4-fs (loop0): get root inode failed [ 154.140559][T10608] EXT4-fs (loop0): mount failed [ 154.150515][T10607] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.158979][T10607] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:45 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) r2 = io_uring_setup(0x2166, &(0x7f0000000000)={0x0, 0x4f08, 0x20, 0x3, 0x101}) io_uring_enter(r2, 0x7453, 0x5c77, 0x0, &(0x7f0000000080)={[0x200]}, 0x8) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005340)={@remote, 0x16, r3}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005e80)={'sit0\x00', &(0x7f0000005e00)={'syztnl1\x00', r3, 0x4, 0x4, 0xf7, 0x800, 0x0, @remote, @remote}}) recvfrom$packet(r1, &(0x7f0000000240)=""/154, 0x9a, 0x10001, &(0x7f00000000c0)={0x11, 0xf7, r3, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c010}, 0x8000) 19:06:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:45 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001700)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/179, 0xb3}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x9) socket(0x0, 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) preadv(r2, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/103, 0x67}, {&(0x7f0000001840)=""/149, 0x95}, {&(0x7f0000001900)=""/67, 0x43}], 0x3, 0x5, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_io_uring_setup(0x6d12, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x400, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 154.323215][T10642] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.331633][T10642] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 154.346538][T10646] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.355041][T10646] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 154.388028][T10648] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.396713][T10648] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:45 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1) [ 154.525207][T10666] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.533750][T10666] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:46 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:46 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x3, 0x1, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2, r3, r4, r5, r0], 0x5) 19:06:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 154.933914][T10686] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 154.942646][T10686] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 154.961548][T10689] loop0: detected capacity change from 0 to 4096 19:06:46 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000240)={0x8, 'veth1_macvtap\x00', {'gre0\x00'}, 0x2}) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000000)=""/212, &(0x7f0000000100)=0xd4) [ 154.988434][T10689] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 155.000979][T10689] EXT4-fs (loop0): get root inode failed [ 155.006644][T10689] EXT4-fs (loop0): mount failed [ 155.014022][T10687] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.022412][T10687] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:46 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) io_uring_setup(0x1802, &(0x7f0000000000)={0x0, 0x649a, 0x4, 0x0, 0xbf, 0x0, r0}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000340)=""/117, 0x75}], 0x4) [ 155.171719][T10715] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.180254][T10715] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 155.272791][T10717] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.281557][T10717] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:46 executing program 2: r0 = io_uring_setup(0x7c0, &(0x7f0000000400)={0x0, 0x1003561, 0x20, 0x0, 0xfffffffd}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0], 0x1) socket(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x400000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000100)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x101342, 0x0) close(r3) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x2}, 0x16, 0x0) 19:06:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 155.392077][T10738] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.400515][T10738] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 155.414348][T10740] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.422920][T10740] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 155.462587][T10744] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.471082][T10744] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:47 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f00006d8000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x200000f, 0x11, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}}, 0x2) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb}, 0xec) 19:06:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 155.802454][T10767] loop0: detected capacity change from 0 to 4096 [ 155.809287][T10766] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.817762][T10766] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 155.841326][T10767] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 155.853442][T10767] EXT4-fs (loop0): get root inode failed [ 155.859102][T10767] EXT4-fs (loop0): mount failed [ 155.891834][T10768] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.900248][T10768] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 155.956608][T10781] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 155.965003][T10781] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 156.056600][T10788] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.065151][T10788] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:47 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee01) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r6, r7) sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="ea589a7619ed49397c369b0bc71508e35e8b031be53901f5c379ccfbdeef217bf5df55c96f8fff5f16c955e1aa6a3832dc02a183", 0x34}, {&(0x7f0000000240)="f3d288ddca204fbc079259a0575593433af5228a97acf6ba9deb2a52a28fd786fa034b240559d3af5b2dbed72000d0cda62ea98eba48b280a499ee86494a64f9fe8a9039e438b02fdff0c2a11fb6c136482a91b93d51e2586488f0d29bd0e385ffc3395938737563ddbcb463be989fd5ccc9dd3e78cb91cb2932128c9318b238497711d8cdeb7f955760db18f9ce0499ef54151c2a11cf0a8d904c9275515f7196a3a4f7c2814b4d1be49ab7aba217aff6b3dc08296c839fb071011110e873be2ce5e44c3f6b9abc2236c47a698c8a279bf58c9f66464cb458675160a011d454e30943212f", 0xe5}], 0x2, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r7}}}], 0x20, 0x8000000}, 0x2000c000) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:47 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f, 0xffffffff}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 156.133484][T10792] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.141875][T10792] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {0x0, 0x0, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:47 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x341a83, 0x89) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/112, 0x70}, {&(0x7f0000000680)=""/180, 0xb4}], 0x9, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000800)='./file0\x00', 0x5, 0x4, &(0x7f0000001a00)=[{&(0x7f0000001b80)="574f5d4492270d54f6139df5d5a8abdf1f67b3eb8442874d213ee73b2c61e47e00d44af9573f2b7e7176910e495443bd72d444789f2adb2f2505c44f8a197926549ca1e05b5f874bffc28cbd8c9bb0dc1d2fa1c5ee16fdd613812d68a43d6db6ede87e2d9d5cb54a281d29b8494bd1a06870001a69fd700f4bef865ef31bd1bba3bd42d971b1b68c9f9a85f865f3702128d9402557ed6c4a210ccfce6583f0b7", 0xa0, 0x8001}, {&(0x7f00000008c0)="1ae02a84562af438d72ff62e99de6049e6ee6fb5c02572a0e31c451893ee5de32ce2645c7a9c530c4c4b32c3b4de8c35d5935ace5a3110585c6ceee301430dcc6a8a1098dfb8a7322585fe7b5a", 0x4d, 0x7fffffff}, {&(0x7f0000000940)="152310d7fc70c06c8f3449b137717a73ec21eb81862f943a971bd90d1ac5511e59563012efe572c73f9f5c1a00d7f827596ffbf70f2ce644d8b643c9285d226f165eea4a7e51075c8262a7478bbd9b0b6e046368e2ed77c557f956a6a62dc8142055de67df7275a1701114841b732ea6626e9101963f5d068e8b138342cc848d036845831d8d11eaa562300487c4c0ff3bc5dc0eb20dacd59f36f0d5f9ae59aab869", 0xa2, 0x6}, {&(0x7f0000000a00)="58342eafb1ca8c7d4806e30ba595b28d9935074fa2cc3d945712860c03c2abe1cdaad575b76c52d281e6d337df2a6a9489499bfdbfa88c78433c3d2c17481a47394f5bfbfefef54dc9bc4d146188f825e47b6f54b118fc4765ef414cfccc7135f8b170b662baaa93d65289f7ff58c5744cb450b569e89424f1997a2dd390dde4d5c58c824520d02043ef9db05af4313d6efb6ba6762fc5e417f10f59b7917aa6c9563acadd3b6f5e95da3af9615d72cce8325c4b218e2edb8749dd7fdf6584ab94315eeba44e66715c42d308d52d457b9c8168ad1792aefdb2ccd594be4db2fda2290859ea7763ac6b1c3108602f5e0ce3496b30e9a93e000f0fd666f2392b4716c8ff1f4ef2161d8cae5e629074efdae61d83b8c92bf0e119e9e63e6a2ce0b25025f294ea53a85bc3f9d775220098bf62fb127ab2252340baff147094947493b2b202e4489049f5e94356a72987576637c0ae4e17cfbac3ead4f03031f60c463fc5a5f3abdc0c351f95e56fe5da2dba1be7202577882d4a77f298a18aedb5a8a02e18ac2f053ba1713dcb3de1b21c13ba691f5add7730287cafdd80b19d02fda8f80b03852fd7f8099cf08ab45ec35adb9e4dd9bd8051936e6dd6abbaceeca7159969cdc6947a50c709cf0c131afda084a14b243cc3a7bda26f32b97a9c6de4d8b7813fa53eec1ef9a9db017a022668406b51667c5a8dc297b69a8210bcb2c1b32bd528cbf418436378f2c3deb890249dbd6f2de762136bfbf48dd0d831e400ee6b39f7e76f8d5f721a80259c71ba6cc6d467bf18785610a0471765860da5fbef6682d73bb260e81cc9b2211d6934ab8488acb03df349b2daacaaef66df69b09a65706019a44c02cacee095c6e484a67b461448bfe9706447a6a1e93190bcfb65f15cd792ca5aae304b2a77cbf5823ff23c2cd755bc7e7eddaf6ae385fcfa556315641d59d2c5f9e4cac33e09aac2e778174dbc1b82763ce74be8ec572594bb0b4b54b093671427e6f864d6037f42395b664fd2b55bb96ce94237a39cf1ffd265112491440ce4eaac401f8caeabdadbe0435df86f6b22031008039393f4a9efbe7b352fa1ebb9239cd2affbe082899bf31077f6b7fad0a08c41f7d12963632456fca8147b4ed470aecffd63fd1dad80825718508a966c3f2c48af3e734e6f5c95cf2d52367c25c22cd14f7795e41a89455b976c807ab270f8f22fa55b49b04a7483a7faa35410d560380f3a6356b950ce1e1e398c0a8565ecb00d4bc1a696d4cc6edaff9b6744335d1f1bc4eaca501ef6776c0ffcb50a15ad44bbbe0c408834f1f42175689fb267c23456936bdd62311612647ced1396afced4faf53516f002ac1e0af89828b795d2cdbacdc785e0b0a32c71cc38c0b28b197e99eec4b928e36774127fd8f1fd2ba9b57f1856b804b93b856b01087534609a89c1d12ab0a982d4eb46e32746632c9f0093b8f2574f848d0b54f3b0f37f2890737d69cacc299f345cdd3e8b324a98a95c4d0aec2603e7c6a120e4d7230b77dfe08977006a0285380497be8f76b466e9084a29419ab7b0c8e735a9adc43ebc78c7545f3448a6ceb41b83636199bd16e8eab60d5deb6d4d07e3b08f5db6c00ccaee09e86c4856a8bc071505a8196af8806cd6a9bd7c135ca8342df378f278e47b7584a2d28fc63f85794ea7c15d9e26de6066d92740ec0cbc9da55f68b1528c146c24bd73d48efc9686727e203915607eae69c0d9b9bd6c49c066cae1098cff3b74b6ec5e838045a2ff030396936fe2d643f665e346f81a1f944c683b5670dbda14980515500e67cfa0a3c5d3cd6f182b5ec8cb7bed97219a21a862669e834b7788ecebde86125ad0e2bbe85ac41a6520f54980e80c058505842f9399459f34dae000eafbebf869f9ea3265f0bb0db8b7ff6d3723da46e2c896fc0629b27ac46eed9cde1eea89752bfe17d79566e7da8e27c334e2bee399de2b123b5d31394a57dfbcdf71c110c449aff72bde32266edcc752060519c9d8ffd458a09b155996412fab49f82cd8a82bd686646f9db5a5b6caed1987ec190b9a1ce5cf2174cd96190d05c122d88a6090649848b37887b3c523a788132c245d1bb5bffe88a69e01108bf92b676f8d89da23c00231253dea1e5739a0b7aea177bd0e0f00b8a0a81d27920102a66c7be90e4009b407edbe320f31a803e37781247a341c90d9697d3eed2653fde16bef433fa41a418a1e3356183255b370be36b68741aff4a90d5033e3bae30e3a10ef6dfa18030884977149e95af956a300a534ee64eb3bdb251ca84178d098e7cc5d1ace0f7a244c8cde1ac402a58e356d6e178180f1c7ca158e784e0c918d010c5d18f6bb699e6ea8cae3a7a4eaa90574a9d6656a94cf4feaa9064f653f5271089f01dc9692e716507b439f8b59ece4afdda19061803428ad5a2d6c0a2a21622dbacd271e804668df8ab681d01b63ad9026914340f3f6fe738551a2ce0b13d06ad4e06530ba6818f29e1f6ee635b6a77bcc36bd081738f4a90ab85fa3fa0c307eee27f00cb5d15d57c7867d8e6c294292793787b39f71655a7ad29f34ef1bd8727418abecb23cc9eecafbec57e72cb79ed83904a66ffb4a161e6fcace1fb436f104d8b58a44458718ef2777da20c755322b0f0246813f5ef4724c5d81600ea7b16875d4912abf084b3e47060a434c867feef73c7671e0c2d0d856a2b1ee831448c83ffa3d684c8ce47aaf6d978d7a990792639c254e03e30ddca5c3a78fe595fedea2c198cf858a5da26005bd9c622cb8ea6897d99dbb9a9115ea303b6978d66d25099fa738169a1088e8552f3f0cdf45c699f9395ade78a229e1963daf8c24bd5470413b6cd12825e26119f4d5112d9943d4b5bdd0567e7289df4f19302de38024f80c446c86d5a94fc1834cbd81f8498a8944d5dcd7452beee19483508e02ccf3099b20fc53eaec0d40f646bc0247fccf8fcd6beb3be368f0da87e5824e9c4427b25dc4a8a02187003dc7046fd762d868c1e7c58bfde5303517ba79dcc634d01c39500bfb882d1d27827d0585438628d6e2aaf021032986892b6e590825b876c32e9c56b7fbfef626f088f8645e424bfe4f80a9321159dc185e6951a6c78b89758c7b9f2ed39b5557c6ffbdfe32e63a32cd07add4abaaa705e4d9d656832e8ad2b87811fdea4878acdaedd6c99fe64585a789906e032b2989d6f5e7bd40193d5dbd5463d7c9864385d08680e6b501cd94badad60abbbcd12b32c758464719cd9b1f6b48a5e7a6fab5286ba90514ddc021b4598d7894342fd7bbccad6e1fafb317b1a8c41c45b6cfe16fb1b0e6fd1f285e37498f16fbc76f3eaf0f025a8d6d1cdd34c087d3032e81885fc1bc9c2aca687be5ba74fd9c4a2c3f60e0c1109f5551ff58ce9d96e855acb6b3a526a21e59ad08a4edef7c60e2a7efc6b76d205db5fa4081cf5c2debf2f38275835586bfc490afc7d40b5201121d66f1bfa8ac9b504724b4dac5eeb92a49048f388919fbf9b69977d3fcde8cc80da1b5475fcca5e44eb0075e316cddf6e9ef0bef1c22dc031d810f2fe9f2c0ba20cf4f8bdb5adee7af847fe5f2dcfae7a5d8f66e82615748aba0fae2a366bbd763e8497815667bb3df6f5553aa5b95185e3231f063bb7300043532f909043f79bce5e664d521dc8203c9c05b91a312a5bc182ceb0bba4e65764c11ea03a295e7e0b077ad603c0abb7398a072b6613e20aad157a3e5138727b0f193f191de5276b861d778f2ea7faaee60882926fad3469aedc2ad9e4209e9dfda442eaa74dc14438d4b37f6b5a5eb4cb7a4c4e943664defe8e50c7370685a858a0eecba981053e3ce095b05a42204ec430c8c7cac7488135a2df52e7f0f74b8090b7965c3d4e96060bf0814504ecb15f0e982ce850baaef901fbacda352ceba315af7803596637f155d65f742db53c64b1d65e6e5f1b7e1115747f03a9d2ae5fe0529170336d7000342481449ede0bd381c9a117601102e29e70677474cb6e6ac76022755063c1d420c0746e7eafdd2bdae44f7f34db72596d2bd2d74072108aa5351ca94cf3c2e930d14a84cd48bc233a174c2cc29d86cb136f894153ed84f2d73767d711d104cdd98b0e92d2c55c2d05ddc9679854d2be1cd807e07c740cca2ba15a1bb2e021e55b9701bbdf2bc009083084aef2babf6b33ffb1df3d4cd4a840133dbe40ad68c9ff8e76700dd8438ba4a96c0bec792db428fc5f8306e8b80d1fd808a19f7a0c8733bee06cdd4607411d7a8104e1881a01306e6ab33a9fcd4b9ddd9ff2f68b399b6478cdb2a594d0e3c00b7256c2789e5f598b2ebb7066b028d1f29b8e8f70e1dd2d000f48c8ae44e99d9cb18d12d7fdc8f3ccb621042a37a340b19789d3e0fb2e37147d31d2c9b67ed0ba86f044cef2b2931292a23ea077fe2ec9736b8ae6e867521ae170b5bb6a68790452ec57c741525028f75ff947f2cbd1644db7da38cc0b52a4c5e10c91d48a5811ed2128a7b437dcdfc6b5d2d318bf5c966e0d5f241321245a2a25a89cb0a8cfe4cb9b460eb1b4b41c52a69226809117a86aadfd60b5c6e619f3728ae4866ebf6b7951904b5a8e442defbee288d76cbabdb7413347ff4b3ba82af77da5cec08fa247b5d60918d8a20d9310fb6b33bb83f821dec635c0feb4afc9b501ff6b3787ec61c667d589c7fc3bbfc4385ded71d29bb5035bf0a57ee519e560ebcf2ae0f1a9cd52c710b684ac8ff7f040043ed5a133f8eecbb8ee09b98501cb1dc589363b7da9e84472ea0d19e3fea25ebe7ccc1e58cdd0567cc04898e296b0576b0529d47d37d276f8f7fdebc12e9b53641b5abb1a749649d7c78576e17d963e052b7485727bbdd8dd1b6a7bca194aac7afcabea8a873d84fa8be4f8514e4565b00ee393ac1592d8d18d705cf7216aa7b91765dddc8e188f18f7f295fe912fef5e59baa863c52d3b843bc9266f6b57500fe76da627429b22a519241942c0b2843ea5ed3a74254f9606060c134398977b8a6ffa61d9ce0a9607ee747fa3c9723ccb743bec08a71489759104ee668f0701e6a7ab5ab59aa273c09f795672abcd9c8bd9821b3ea7a17c89b4ce7b349cec4993cc3ac8fa4b5cdcc397ea339cfcc53657454c503238ea76d5ba1e7814384c5adb012713cb60a0738e1e4e85e796a4373fa23cd790af8048f4dc19d3b7ae17171793e72c600bb75358c6250deb19e739984db8f76c97877e4790cb523d0271b065a86c361d0c5faed40b528ef8fbfc0462e9dd66717acc0c87bd2f079b037ce5ddae2dad17079089b148df9b4e77e7261221906a30c8d5dfd06b481b9d5e9a67e21a3b1ef61baf56078f9e7dfc4077e9348a3f7f83486b42e6ece5f3e00893859cee027398818473b9273a563d6931342c233fdf2d75041957bc9280d25a6b98bd6c9be446b6a4854f3c772ed1e909eb88555716c4073afdce5ed3a736218e4673f8944fd27fdaf96bc4f076963c1a8218644bed10a01155e5ac39f7d6ade8307a12d9447200ff1047d47ece41d94a4bc61289037591c875fd561a7a35abdef214a174d89c940b80fe73c123b92889d632088590e9c2c2c809ed72b4f5eb69eb787dfeecf05b63305c415a4063f8103749abd3e9e00550d298d115367d9b5aaa713f08262451d148ccc046119e4b6ae7fb0772aae4e98e8981bf34a0c9d9db4b416cdcbadec702bda765e22989238caf8366afad9ab3f48c71720b588736fcf2d5e074b9f6c0dd65cecbe54732256e43947081ae893b6a65f139843187a800fa5b81f11c5d35f41d014a528121f249b9f27814ffb", 0x1000, 0x2}], 0x2e000, &(0x7f0000001a80)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0xfffffffffffffff9}}, {@nodots}, {@fat=@flush}, {@dots}], [{@dont_hash}, {@measure}, {@pcr={'pcr', 0x3d, 0x8}}, {@fowner_lt={'fowner<', 0xee01}}, {@obj_role={'obj_role', 0x3d, '\'%+-($!\')&\xca'}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x63, 0x39, 0x31, 0x0, 0x33, 0x64, 0x36], 0x2d, [0x33, 0x34, 0x65, 0x64], 0x2d, [0x62, 0xf3d03c69d59a11ce, 0x31, 0x62], 0x2d, [0x65, 0x39, 0x61, 0x57], 0x2d, [0x34, 0x33, 0x34, 0x61, 0x0, 0x35, 0x65, 0x33]}}}, {@obj_type={'obj_type', 0x3d, '['}}]}) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0) syz_io_uring_setup(0x4668, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 156.219209][T10802] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.227606][T10802] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 156.307944][T10807] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.316367][T10807] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 156.375931][T10814] loop2: detected capacity change from 0 to 264192 [ 156.386791][T10822] loop0: detected capacity change from 0 to 4096 [ 156.398895][T10822] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 156.410961][T10822] EXT4-fs (loop0): get root inode failed [ 156.416649][T10822] EXT4-fs (loop0): mount failed 19:06:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x12, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f, 0x0, 0x0, 0x0, r0}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000080)={0x20000002}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_virt_wifi\x00'}) 19:06:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {0x0, 0x0, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 156.669494][T10842] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.677968][T10842] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 156.692521][T10840] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.700988][T10840] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:48 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 19:06:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 156.727752][T10848] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.736241][T10848] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 156.757872][T10857] loop0: detected capacity change from 0 to 4096 [ 156.770948][T10857] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 156.783001][T10857] EXT4-fs (loop0): get root inode failed [ 156.788637][T10857] EXT4-fs (loop0): mount failed 19:06:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 156.840388][T10868] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.848884][T10868] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x25, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:48 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) r1 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) socketpair(0x11, 0x4, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r4, &(0x7f0000001840)={&(0x7f0000000300)=@un=@file={0x0, './file0/file0\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)="c35904912ad33347f7582a90ccb3240e3703c9a94ac5b078d2ca50d3598b95a2d64abfc50a1bb36bdfda7f1cffabd2", 0x2f}, {&(0x7f0000001900)="5ba42b2b0d974e389f7f831e51c5c4f56ca2a08b444145185dbfdce709ed057250b3ae594e0d790c9b12fd9a08f93f1a701ba0ad6e9aa05216a34266d856b19dcdae759190c6fda2f6754a57682153028eb9c48e0389c34812d4a2df3a2a4869382b5a253440692118b19f1500cc9838f1d595d4ea4af0c3eec9e94ce55ab8ce54d6af40b797adbd502a71231c638812ad6699a699627774e3ce831948f53779dccc5320f297684b1b0a230c9bef36ef1cb3f4a2fe394e53e9083a49ab85a9c8c0d39abf4cf002adb20c85582fb91ce5df21bdcbdee836afd9c11d298cef40be1425731ecca41c4270e1e0f7d3b0ff405f872fc0", 0xf4}, {&(0x7f0000000580)="af3193201929b85b1101a6e53c22cfaa73858c16eef437bc8ab6097c95d38999d7244b695b6abb5db9a28856d290b4da923d601eb9aac4335d525bc2edb77bb5e2ccffc1e84b7d162e01e56ca11656a3aea0a3e466223342f7e2298de505dd0a804b421fd8289816fc429c4c80321edf8e5d83fd34eb73a7f2cc00c05f2ad73310df7c578e9026620e59bbdc4a15b2e710783488736948804deb7045840fe1a349b5126e766bd20dd15225d3cc4304102e5d44f4a30d957d076638025dd8a13d9743854c3059976576adb11cbe868c55fc9d53e3141aac748254f2856486144263e5d4a6435ebc6528e2db3ad50ef490b8c4976d6e26e02d09c0d9fb38f3406d6af5ad9e1d52d9b8bd5d55e3e114dd6fb07b52f6d18a7d4481e1b6edab81e65f5f5aa61821d8c4a60d4f51f536d7bc70ca921607c58a2e14614bcc5c8a19880d05230a1342c7e2c7fc069d217365894506b5268a568b21c7d5f30c011f0cf53123cb9f4fb78daf279e9b0d549b7d5316a900cf60719ded8d829ee22891c178373d4e3a6b0622f0e5f7a57b5a0f6ca4e4ce23dd165f88cf41d22af9684be5b605feb4bb9a60c91ae64efc6102d64b0c8399bf006ad698bed59c8a16b3d756074d2203ff242ecd55ffb532c05d379d41c25549e29a4dfdf1d0574c42850608764f43c587a0c86ed27ac95904333cfb33d2928e57f8c2a6e6ce128f7b81d3388669738647b1b6635d5a09d614f9eecf5c8b887518ba3a0c88c9d57052f8e11b623158b8b69ca257334505557c753a9c8494126cdffe47dbf5a9852f0d1cd31f0e6b4a8caf4093b5cbed2887beeb282e36ca7de70401e7f3c6222683365ecbeb1f397699d63fb30fe633c97cd94823efb768b7afe18e43ee4939dea718a32824162a3af4692acb2cfaa7300bf4b5b8459c0a759d6cf316ca554e38536868118a2286b1cee4c662dd9efe42b8969a7ea28865a5a29821bd940c11c877894607b4558dcedcded8936eafba1739d696e6f53695aaa600340fa17548cbb6f21f880ed152a1d2a0712b7460002912298d9bb9f087c8774efb0911ef20653a9f89421e9e7d87a5fcce6395b4b721376248c5d848b4c6b87beabe4be064c042d871d18f0cf4cf0ec24913d172ff76868d107e6e705ecfac9bcab64eccb699f7dbe0fb4edee77ae612225c04401d8b6069e22bc7b0c630e2fa1d6674e2d5ae0282f6de689ba0bf2b862154c0ac83807c671872a95ad0b4c990a8c931536815806984ca0a4f16c35dc80366079457882f9d4f7be495e1bd51fb2fb4fa405bf2fd677ece4052a22d7fb1afbaf8925155d674dcce9bcf283cd7593a5184a574f24ebab6a774d3ac3045f14faf6cbcaaacd6cc24c35acafe8d9e3d4f7581fc3158f96167585e2c74e4e511075600876ced4710018c2cf3a0757fe800f9fbb5332a227b747251beee3b8412afc523f73d1dc63c75d44fa1383c8710d266216a514137eb399fcc256bb7c6dda9b8144a9696819f100e1351623db2a9104704a1ca4cb90c9319f5beb324564c643989c8960f9e2a18db2f207175d1ded5c943d352ac07e23d1bb131244d7893b181c3ceecabc2fc70c63bf42416d8e5c02edd8981f4d2744833d5dab3886a6532fffd7659bd91f5a3204e9f6183a25b0fde5bb11986954b716e8950e06e6d918ee47fe769e3b0e88fad050bd08a318198a2801ab9d58b3440c7eed446c212160d4938b76ff0cb97dea65edc8a5b12d3353ef8a69a52c479f449da8504f3f7c8087c6f282c3d4dae1aadf568a11250d828d1ac4ec0bf56af218caeb3a46e59454ade98f9f8ecc0bdfa16fbb76491d4a5cf44d134c0b5a70d432a29dc70151a5fa44115dc818a18ced12ed562d012b7fbec4b2e5c164c89a1271fe065f334de23d484a704cadc7547a74d097c862b7352557528aa2ed1af276d367aaca817719f416b7efaf48a0e50a7156366f7dcc86352fd61288e2e8433ce00d22fc332d821f892a1dd000881e3f2b6a334aa6023351c81ccb410509971f1f2ff35194896c5b8141e793d7af07877391e4f80c2688af703c654956c65a7c7f849a6cafb1053d6584e049a353ca3a7e921be880f52bae03e9da002ef5a4f61e9f575a0e723153a3dd3502fcaf014f4d9dfbb4255ef267d03bdcb1a2aa4cc7d5aff979621c300922064fea39634327ebc5cd7ef7bc89397ce840ceb46a677646ee9a7e7aa8324553c007ce19682cbd09ef4286a0e526ad5253d47357beb7f26305b4946b524be51edd29a4a5e5d8b2d541280db721ddf1dcf3ada2eed58eab9f90bf8b80a3d2217796d66c7f40d25fcbcd7b2e93028430663d5cf3c2c7547ef733bcf1dbeba711c6747f8bf10cd9442e151356d76dce868fc336c29b91415fde874575901ad886ea64963c3af7ab14d201370aaea276b8ffbe77025445c2d93286a429cf8561a0cbbd1b3005868d66d02ed6ebca2e0d082b3e1d0f86da985d77dc4d546f37585baddb4f65e5ee4fe70af8857f8424333f396eeecd7c51661827e29c029b0e67e0bfdea27aecb12347a8366d022c8a25ba2133a1dd42fcb74f96c91a3990191d5ddd086f3fdb6dd841dc34b7403f97eb8624ee29bcfa6107615aa23f81b61d75be6444d6a84822a052c1c99fd5b978d4c90fe3c0600a10d7f18dc07b6ef34b868bdb6c932c6efaa5200b4b0708a8db00d66e8ad2d1b6e02514f259948c8038fcc851c3f565a54fa4776c5d60be1d5b9a7bc4ac45e4548b2f5b42247446a4b99b06c1001fe489e00bc620664fb83cc5302fd9650783473d6e7e7c8cdbb881c8a69d60ef5dbfa33950343f78f621f645ca9176ee360e1848b36d64032b1a194c4d9622490e2d87a519c3c7bb26f356a2892068691c547f8d0d6f06fe5a2a08e08fb47110f2b67c83e8d9aa1cdaa82923bde81d25280931472d92dc32930cb321c78b4f117d55211d3725e1b2b1ab2ecbb71137b7153e257063f6d1339eb5b270eb8f5359e1265bfba054ff566664e0b88545ea4106894294fa7602cb4301e1f97206cf4fce02a8ed48c3c74b3f731b7c8503741c2b5786d670fc0ea5c981a0db1064967658fc49d3ad2ef434e03571a6e65f2c26374d145d32178d20e1dc106940b948fe40fbca2d4e049c7a322b7872ab780a7ea30eca188bab56eff1d06c1ee6a7c6bfc176d4298d2a4bf7bb6ebb06090ccacde3107707b84777fc7ac20d9d678105e66a270af19cd1828769f277d7d2dd69690b99bed904e84b0d30b70e2f2963850e95574c1a91ef603e0908dc7fa97f72f823570c3f6d1b604e46aa3d9ac4799528552d8fbebdfdc1a31e6d3ac029f2c96c21043fc96aaef23f0720d2872764fc872cfb1c75676eef66b322e9f5b024fe32276d77b203c8379b590163589935148cbbf33a65dca2bc6fcd6f8c17a3a33a712d00ff503cdf8cd174cf8c38da620bd34c06b56f185d30c5e609198c514542c023435d514507d133c6a652f7555aa402de8f7fb4b003d11d06ab44f522509d1233fb0ca21ecbc517d92576ff0e86d4ad9b12097f3896f66de8aaab7ce55532a9918866f93e7f83d0743ba7b7de5ac0c02388602b8f2494e8ba982d98193c2d4bdabeb23a4cdf0606ce0eac02dea3dd795d9589ca9f255e9ac56d7c3e5f02c88c81ec84ba990e6c4be68ac1730d1a5ed0a7d6805c739c9456604ceff82c3b57db267d66431c1200ecbd27a988665c4bc789a8b9499d226a19226dc36ba79fce18eb9c8829d46e6d4980bc1369aa3135e0f8a3e1509bade5024382251140a66a3c95ed3a6808b8d54f7c808153a2f2c4b7c65e1e26761e923e7ca39b435a0219111171872965f980cf7ba87a051bb49f23e68f3efda6445e4798b75ee83d3f9baa9c11147a3ac2df141ef894c6fbe1a06b14dcd84565d616f48af4a1fbf272930ff521e88a7b474cbfef9975cbd18bcb8b95eb6c042832a46415f5d29e06fa81080d47d5a2330c5586b4caf17e41523a7e37a4ec003ee94948224681578ae912808817ae1565f615406b318c62e615c29a03560601e4e4f617baa180da8fd7d831f12ede48a3fb890f287dea47793221b202316f0324aea96aef250f8c55cfc547614881be21d83f9ad0309cfccf2c9e637027a71a09449c66426d2bbcd92d295937f4d34e7bfbfc3bac711cf98ad5debf6a15abe865da5bf3acb750bb467c5ee5bbf61788d5784da96f5f2ab2a84699361c2de6ee88455033e2559e3a2a09f6c6915e4142c5ddefb7490c0fe81d51cc579dd686f11ce732ac83ab10486a2662cd7c042d0524f2b79bb4172d7c5dfe55ef06aa9100d7ac0d22b90915d701144bfecee33cb10bf9766b1a78ed37e8aafd5f878d0c95a614195c31f9b013ceee746e6944470adbf3f1226da9358fde5f86ada29186e6bc5c640dfb16ae61c818cf54226a5f447168c57a5352595f2550980bba515a5d7d48d433a74605f383967e0c70c46bbbe22aa567699b37de20334912ecfb0310e3707305085c7efc0f97b9204ff4d24028658082e103e038d737fdd12fc85156eb10426c789c694934d2b0f53cd058c80a66c7092b563fb7179243d89e754fa4ab3f91701722bac242766f74c29447cb4ce59ee0eff5bf486b6ffaef6672bedcf0bae023397e1d409e879e5234c83e9fa9f236bf3d04feb33b3ede391b9a3aa323c731243f5f6a878e671f67608dd3f6fa587b88cb331e218ba048228e0de0d2f55a311f1269512a67845589709c07376885383844d6b0bc056f59893b3199bce0f2e88c271f9537f2715f7bcf8b1bf22df91c539760d28ffd9394553f8e7e777725dcdb7025e06059b65895439ff38d59d2cf890e98b45755be04b5a16cc49a953b62d7adfae2b2c732b3c13a9b107916f8c0ee3684bf5511c231cc864606b7252e8d3b3471ee6000af79ef000e10f552741f7ada52e3e27b6694b3369bd37d66a3d1a63e2ae29586dcd9b5111023618ceaca61a0a42f79fee0e9dfac79ae411fe95bd14e1bb2986584b922d44dc12ac8ece69c945667a8266d470877d0b0a46a05e5e3669dc0453f9a149a3f2313001b716090736a0212ce27ad2b85577c6c4c5a9c5dde696d382b7266d980cf40b6b0d5118a1b22417e8c33dbe350079d142e9b21bbe3551f2ad2682cc59d6846beaf988eac93548bf33648505626609be3ae3b1bd55cbd37e394399263486c3f7a60fd90e7546d5dd91b5705e0224035a9a1732f0182cebc8345ca2c6df9f867a09e966dd070e37ac1024de05652c171ccc57b06bbf4e4f6876dd1165426d58a882feaa8d09d9dc103c098bb34305a6b9e3e26b7c6c0d0466778f9631587a257b5a80c1b3b31660902c8cfefc6b0243106d20fefd2be1f902f11a81139c48eb9c6b6a07c3ce53e4499d05365e8fb35a4ac4b1b495f290dafac8ae76273d8d0a8cb0b210f0149a644d7d77362a30f7ed7ce4fbce177c33e3c54992dac6fbfdd12c941db4b7c539da1d8982651d14c4fac316191084af83872eff62a9610bb9e973706654a6ec0e2185a59b0a1485fc80b7a75d0cccdfbfddc1a6a45bfc0e3fa57864c19b3e7186adec383ec6c1061294f34d4a20cb340b597c56d60d0868c29879e2ed9bb73d8437ac1e29f4357af93a55893771284e0162b7d3261c9afe17eb3afb5e1de9e2cd764e41b022655e2a55d01bdfcc619068dfe2aba293dfed423d7c5610dbfb65f7537ac258dbf04725c4cfcf11ad3c9362428c0457c912a51c09d480f92ee16577d64b1f14374a78fdb45eef533eba0aec39e45394a3265e71c2af7105a8613a21ce", 0x1000}], 0x3, &(0x7f0000001580)=[{0xd8, 0x107, 0xffffffff, "c3bdbb4b12883c332d064a90a2e822be2a82b4572fd48d96e2e22a29dac99981636075d5159361f1d7a752e483daca16fd0a94d3d230df17c33013cfc58b0fc912747e47e5ad07b72d826ebe66140280e105693e0d877925075a30a45f1d5ecefb1dff019e62c17e5922413f94954308e193db63950959ed8f76e4d2a1f64e0cff64244e11213b5d97c0951c592b7f0007d5261ead1c72b5b54bb091dad756eb2122fcdff4ee42a7654571971c009504f09dd8938900f42751c088d600000000000000"}, {0x60, 0x10e, 0xfffffffc, "ca0e53b1e25d2f3ebd39d62c3065ed2fb5e04d2831797ab8d1a5365d99e04794e7fd76eddf48e72b042aa692dc81146f3f88469146635224b6762060b7a2808b3353f049ba487d8b7f43"}, {0xb0, 0x107, 0x4, "366acc1d79334d4c32eda91c7dca0066ab34a446bb3b10c6b80afb0fbee9a374e324bfda25741790ecb57115a4f533117e3cd6e247e5462a9d7de6711122b19a86f2c54db3ff25e4b20a7cc023c8bf331811231144058722a4e8f5a0fdf2550441b73bf6670f141c80ddb57c4a8db60c825bdd01fb3a58663a77553abfa68039e7b9ec8df963a284ee589cdd6980156f46ffc0234d0100000000000000"}, {0x50, 0x119, 0x2bbe, "785efddeb1cb9a9ab4ca2328042a5d3db6ad82e179ce7d5b462af83534491a47bba60321fe4b96d7a40da1c11629fa71af74c9a91881be352a698080b6"}, {0x88, 0x3a, 0x7f, "e88545310ef435e3cdbf574812ccee9a9453c494542bf345a067e030d480e3cad1d722a18bedf79556621e950ad29216096aada10168b49739a5c0f8b2b38c0a83c99962b099929de931d2dcff3eae49d1fb7ea22024f9a17268fa82cc527408f305dcc461bc5ecf17609ab9c89ddeb1fa6f11189cebed"}], 0x2c0}, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000009363658abc33781024cbe802070800000000000108000540000000007a30000000000c00034000000100"/58], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) creat(&(0x7f0000000080)='./file0\x00', 0x80) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(r4, &(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @empty}, 0x2, 0x3}}, 0x80) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x38) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000002c0)=r6) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000200)) dup(r0) [ 156.967648][T10883] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 156.976087][T10883] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 157.026076][T10888] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.034460][T10888] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:48 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003564, 0x1f}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x840) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4003c3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[r1, 0xffffffffffffffff, r2, r3, r0, r0, r0]}, 0x7) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 157.093992][T10889] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.102584][T10889] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 157.195908][T10900] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.204305][T10900] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 157.251729][T10905] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.260110][T10905] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x27, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {0x0, 0x0, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 157.549842][T10918] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.558360][T10918] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 157.574166][T10920] loop0: detected capacity change from 0 to 4096 19:06:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 157.596144][T10920] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 157.608235][T10920] EXT4-fs (loop0): get root inode failed [ 157.613908][T10920] EXT4-fs (loop0): mount failed [ 157.625329][T10917] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.633817][T10917] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 157.717770][T10932] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.726178][T10932] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 157.783961][T10933] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.792630][T10933] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 157.884314][T10937] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.892795][T10937] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 157.929832][T10941] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.938285][T10941] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:49 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000001740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/26, 0x1a}, {&(0x7f0000001800)}], 0x2, &(0x7f0000001880)=""/35, 0x23}, 0x4d}], 0x1, 0x16040, &(0x7f0000001900)) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x20, 0xe0, 0x7f, 0x3f, 0x0, 0xe3, 0x32050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000300)}, 0x12000, 0x126e5a27, 0x1, 0x8, 0x80, 0x446, 0x5, 0x0, 0xa7b5, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r6 = perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x40, 0x0, 0x7f, 0x12, 0x0, 0x2, 0x440c9, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000005c0), 0xd}, 0x4, 0x4, 0x0, 0x2, 0x0, 0xe00, 0x1e2, 0x0, 0x3, 0x0, 0x3f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x100) io_submit(0x0, 0x6, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000000000)="2c4c3c4fd53512827b02b09b529ed34af29d543a18150eff9b596ac7ca233d03a0821ec933de837a60586055033069c5de5920fb5c02c9c855a0b55084ed05a4441b08a5af21cfe41f17c40cdd620a396c8ba9d659c83debbe24bb8a307bd8dfc4fbe23d98cb39e0f5afe405b42f93473eb010922ac4b87ee6cd303ca00756fb8267d8256b168c0d9c8d82ef1078abfd5dca0a796f73cfbec1fb76a5ef0ad3246a126e6980718d535719286abd4f694985a4ea0b596ca1c091b6ef72eb581d85", 0xc0, 0x3, 0x0, 0x2, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x675f, r0, &(0x7f0000000240)="9837d81083361ee2ebdf0e1ec0361e41cc68921a05645b9a5328bc1dff8029afa61038af75922274bc68452620c4bf5398c10c439c0f50092e428c5c144899e6420c6f8d08c1889be0fab8b3b8aa97b9c1efbd8846bace4f3c05ab2951f7ed0ffaefd498e5ce1220959b98e26d2ab15b779d58f88d4343de06595979628db265a6ee150e442ec3de253e4d99f1db9a364549b413c3797f719e35113c20e4902900337d6753230920925c7bf45b833fd6de", 0xb1, 0x7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000480)="eefca1b96a8ee10044189898b3e0d93073607c270398b589e6d1438a27061eae86ba8d40c8edeb90a45a1c6f6898a48916a29ec0eab1c0f82ef2ce888aa864aecdcc94425b1ac17f93d7515f5b5b570e01cd235896540188132079495a00b9582dd56d0311f675b8cfc20ec12502326cd47626ed8137d5f1cc4a1f2d944ddac64ad49cf0f9f255337465df9383e0f4cf185bc938d02cb74bffc3a0165e2529dd7ef211441da0fe6ef5e59b539280f0d5f2c3208f25", 0xb5, 0x1, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xfff9, r0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000680)="3eba43140cfe50a3e4231cf2cf9e8be6eaa72e7ea7f355d0873ddc906017f135130885a90b87b4c5df923b952f34e32257044decbfd2058810c16c123cd9d8366ea20390de45483cee0c6a72bbb8a3512d5ac82bf6ed0c184f40eede6acdedeac96bec03a71c1fade040697bf2702529e4967a2f2a6f9557d51a15de1f008abd982206a36447c20e3375cf0facfa5b862060b49bf0270de1c58f3998ffdd1959f2290e958b2b509881ba746a416a533a463b4ae8938ebc5c0737c9c0509b0b14a1a77c9c47b5e5", 0xc7, 0x6, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x1f, r0, &(0x7f00000007c0)="68d246779d29af71471dbaa38ae1482be33a37582cabea53cc340ec845f11576b974f056d07c9ea6207abe3d3a6f01f1765e4c87369684ed5be0d2a57351811b63aa84bff51c97", 0x47, 0x8aae, 0x0, 0x0, r7}]) [ 157.987688][T10942] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 157.996274][T10942] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600), 0x0, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 158.087507][T10951] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.096012][T10951] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 158.179611][T10960] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.188161][T10960] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 158.231479][T10962] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.239856][T10962] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 158.259295][T10966] loop0: detected capacity change from 0 to 4096 [ 158.270468][T10967] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.278915][T10967] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 158.312327][T10966] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 158.324428][T10966] EXT4-fs (loop0): get root inode failed [ 158.330077][T10966] EXT4-fs (loop0): mount failed 19:06:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 158.482596][T10980] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.491012][T10980] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 158.574569][T10986] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.583063][T10986] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 158.630797][T10991] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.639270][T10991] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 158.748087][T10998] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.756519][T10998] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 158.814098][T11000] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.822501][T11000] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600), 0x0, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 158.868130][T11001] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 158.876538][T11001] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:50 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) socket(0x9, 0x3, 0xde) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x6a7b, &(0x7f0000000000)={0x0, 0xf1ba, 0xe, 0x3, 0xb1, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000007, 0x12, r0, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r1, 0x0, &(0x7f0000000240)="4aea68e77f6724cac6cac4c86ed38a113af8370cb2c2501eca8978a97e4e031bd6a79dbaa2b660157c08a3f41a50acd52c92732527e0af54c3b9ca02ae4f11ae4901e28e2648070bd3df1850626cf096c079444b44c309064cec5240b5ab39697fe86361caa84ecfaedf4dc78aac9e56a9212396045adad40f25ad3a9b63d2f380c6c589a3a5fbf27ee915e6e9c44edb0cb8a4bc4e931f4561c0a7ec8a68bc912870e7087e3a6dbdc5d76bc00e0056dc1cb5d18a92", 0xb5, 0x2000}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x5) 19:06:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 159.003833][T11013] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.012244][T11013] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 159.031057][T11017] loop0: detected capacity change from 0 to 4096 19:06:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:50 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000000)={0x0, 0x5577, 0x20, 0x0, 0x3}) socket(0x0, 0x4, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 159.050741][T11024] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.059187][T11024] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 159.101053][T11017] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 159.113192][T11017] EXT4-fs (loop0): get root inode failed [ 159.118824][T11017] EXT4-fs (loop0): mount failed [ 159.142012][T11035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.150383][T11035] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 159.212906][T11036] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.221483][T11036] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:50 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x2}) socket(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 19:06:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:50 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x7784, &(0x7f0000000400), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r4 = eventfd(0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r1, 0x342, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="56080d573dc7caf3", 0x41}], 0x1) r5 = io_uring_setup(0x409, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r6 = socket(0x0, 0x0, 0x0) r7 = accept4$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x180800) bind(r7, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x80) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 159.349321][T11057] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.357727][T11057] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600), 0x0, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 159.416639][T11056] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.425076][T11056] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:51 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind(r1, &(0x7f00000000c0)=@in={0x2, 0x4e20, @remote}, 0x80) [ 159.467625][T11067] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.476136][T11067] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 159.549944][T11084] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.558417][T11084] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 159.569474][T11086] loop0: detected capacity change from 0 to 4096 19:06:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 159.588342][T11086] EXT4-fs error (device loop0): ext4_fill_super:4956: inode #2: comm syz-executor.0: iget: root inode unallocated [ 159.600501][T11086] EXT4-fs (loop0): get root inode failed [ 159.606186][T11086] EXT4-fs (loop0): mount failed 19:06:51 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x69b1, 0x1f, 0x0, 0x0, 0x0, r0}) socket(0x0, 0x0, 0x0) [ 159.648803][T11100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.657304][T11100] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 159.722601][T11102] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 159.731225][T11102] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 159.768490][ T43] ================================================================== [ 159.776764][ T43] BUG: KCSAN: data-race in io_ring_exit_work / io_sq_thread [ 159.784232][ T43] [ 159.786546][ T43] write to 0xffff8881093a00f8 of 8 bytes by task 11114 on cpu 0: [ 159.794254][ T43] io_sq_thread+0xaab/0xba0 [ 159.798757][ T43] ret_from_fork+0x1f/0x30 [ 159.803180][ T43] [ 159.805494][ T43] read to 0xffff8881093a00f8 of 8 bytes by task 43 on cpu 1: [ 159.812847][ T43] io_ring_exit_work+0xa5/0x1350 [ 159.817780][ T43] process_one_work+0x3e9/0x8f0 [ 159.822639][ T43] worker_thread+0x636/0xae0 [ 159.827438][ T43] kthread+0x262/0x280 [ 159.831544][ T43] ret_from_fork+0x1f/0x30 [ 159.836045][ T43] [ 159.838361][ T43] value changed: 0xffff88810792d0c0 -> 0x0000000000000000 [ 159.845458][ T43] [ 159.847777][ T43] Reported by Kernel Concurrency Sanitizer on: [ 159.853899][ T43] CPU: 1 PID: 43 Comm: kworker/u4:2 Not tainted 5.14.0-rc2-syzkaller #0 19:06:51 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/169, 0xa9}], 0x1) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = epoll_create(0x6) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffffffd, 0x9, &(0x7f0000000940)=[{&(0x7f0000000280)="3eb6a3867cc0694d281e82229a12108b3f149be9ade74a1d80c0685c794cc210ed53943b98485565ce6a272b2409d3e1203a48c62b36da7351c34bca21f5e30a2d370b3e80ad1682b744116a0b39dba2fdaf185274b1171e46be37ec49d1c9c34c16754622a58887e1647cfdfa62493bb8774b5c9cf114f58644148ec5", 0x7d}, {&(0x7f0000000300)="daa9fe355203e0b8b0f1a3872b84b7cfa7b147bdae258132939809a3cf02493ebca3a20f8af9e440e325f48e1290e80a4da06b66714eb45bc1a390987727ca3b75c2622e2ac618a4c4feb882c82dbda5c332c6d41e3e9e14bfddd0af14e39b8d9c8f7f9f27690518beb9215ff215db8081cfa04aa8891e303060b7df9d8a8013d668bdf3d3ed8df9d1c3e96dd41bd358570752833fd6fca6309ee3668232", 0x9e, 0x7}, {&(0x7f0000000480)="52ca21628682cefae8b540b649d45f60ddb98c87026942ed99384e99e068807c5e9898f65f0d447783c9ce761f818e004e3907c87e1beec603e91031307a597a3684ec431660d4e8a9779ddfde1712f7ff95db486745eb880d1c95b5606d68e9f4eab8585a0587a2af91eccb47337acc24454c4169d8", 0x76, 0x3ff}, {&(0x7f0000000500)="4b9d24561c09126bcd2bbc0747db613bc6bc2f7e1a4b535b9f76f5ce6c7fd691b0769bd1b6e97bc85d6f64b997f5b45193dad2162dfb7d670e056149c4a031979398073570139c24af51bdb10863126db18834daaae0db1b87831d30a62437e9b217f8810b1d9f762af09ce1ac5d44b35e9863c527a8edc18157bb6f1ad14bbc132ee89fdb7ce1d382480a015fbebf5ccda5fb9d59fd2abd9cc2c5c7936dd2181ccf662dbafee3629a9088988d524598489ec39b7363dd4cfb1a09468ee06daaad8370d319d9095a0361ed96f8", 0xcd, 0x101}, {&(0x7f00000003c0)="274d277ce5", 0x5, 0xffffffffffff7fff}, {&(0x7f0000000600)="1c486626d1d447cb90d4be2c35be0bad3b6533beadee1299e2caeabede8f51861c0cd6e60742fc99ab54688b828a6d27e6cc5e814372dfadcf62429f43ba29e063860cd2ebd392c081745dd6c40560979060561cf90e3f63962b065474928308d083a9ebc5d408fa0b5edfbc15cb9bce7ab66b27f9907955aa739c6795c917009f6feeab708e6ad0128aa9376672ba249cb5169df42c12a30f8c6e7a773c27c4df2ab5ef3efc7ea1e0a569fbb243a87dac2bf6b71dd5a790de5ee7c6d3bdba577a5c1cd27843479734b87ba23a00978e72de81ec1ba35f014a461985d698955e5dd0b267", 0xe4, 0x4800000000}, {&(0x7f0000000700)="2aa172fd408b8dfde5b129ddc2c44de404f485bcd32136dcbd9c59ba93a4c336aab2bd4e5e35ff5f1f6d283311501cc4cdb56bbb80dcb6887b64321b70ca38f8e658cfa10bd2dad018742c1405cf9e106ece8488bab508f9e051bec5e15941351e0290264f0f1aef8188f32de95e52c07d5dba9d170205ade6da869610f82b9ac1d4ece007729a72ad683e1cd8a97de16be7a5e0e58497e400d754b6e53a599613e36254fa0f65a13e", 0xa9}, {&(0x7f00000007c0)="3729a3a065138602adc408576020484c8d6923424638ba5087c11fd278380103e7b3bb1ad0da4874cede0ba34c0f6ffaae689a3395e39fefa8ea6bce1d6a929abc0cb42de8087288fc50bd45fea4b1e89cc03d4b1e5109223d8d31989e77db6949061d53d1c2d497ff4570e83a906949825ef1af7970e4fca4510a2cd3af742a6464b1a0b0f9c688f7acbf6ecb59efe060411849087cf6c0ce0a44a0c61d4ea8cbff31d9fc0e34c76610f07a0f1eb2300ea8d3abd5e132ed09c68601ab5e776cef031fd88c75e0ee374c19c7ec159311cc2b", 0xd2}, {&(0x7f00000008c0)="cfd6bbeb48f0f9b7ee7add6f47149384642c084f93cd723e67c70ac4ada6b7f8847d13c0f447e961cdfa3934fe7c5e0479002532cfba04f6810c9541105a345eb494dacf953aa7ec32fe8f5981cd7db2344ecc9eb52e7286f8d3d8ed23887e3fb4a53911ae07092241532e5979fcf67854d10554e1a86a4485fd9e9ba05f49b3", 0x80, 0x2}], 0x40004, &(0x7f0000000a40)={[{@data_writeback}], [{@hash}, {@pcr={'pcr', 0x3d, 0x5}}]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000a80)={{r2}, "00642603d9d84ecb4be928433b85c2a775ea74c1f2d690229d146ae8f9f7058751308876bf9ee9fb6f4a69211ceba84d47c778493efd72658a0c19798fedb33e5d02b7259364a7cd0cbef08962811aa56f94221fad517e0e8bd5005c5f802a1809da60c637e719fb875f2b58f29b2c1cb8c7bc13bbeafccb91be92519b5b196223759bd6d31b87274660a85c827388113ab99c16501a97f87bbc7bc2272b65bc57397d83ec6cd206fc2ff26fc8a76b2c8a4f56aebc76421a86a4acf8979da6273016b9b4439613f61eddd4b042d96eb9984ab91c7402021887e3922943209f329826082ef8810d7eca87aa63a3f7bf6afbc5a95834a2e6a1bc5e16c8c0b2e510049c11d2cee2832392fdae884a3271df3ffa128f9e0c6e326b3a9112af0aa22d3a10a780761fbe99942510baa53ef5aa393acc48b30abd3a059288f653b5892028b1117f6792ce343a220b5fe9782744a8a685151743dd18b1086241938f54ca1999f887d14e0277d514ccad1bcd4c8408ea3aa1df81ef95f2472e359d92624a6a6193bc4594e60aff5925a242166a3814538443aa7ef16959346a6ee3841ee789a7a99f3529a60cd96af3c8dbef187b4f6806a81c0c3da8b5f0f0722b19273a02453a9e9fb52d30946314f40c2b220b5439654c81b5d47bbe28a18257fad2f336ac0aad645d63cf13c01790a5a1251932be59d8e8fc788f8b60c9bbbdd75674ffd6953e92db8e18a04bb898953e651a5ed13ac60140687bf76bebd211c9722584790cc196a72faf869a940b0ea682f7fe3f658828e163449633c1b019eff26ec6284a2de81c0ccbca0c3368642ab7234947c3d931b0dc5614e4619b83b94828a8cfaa5eee650f2801d94c9ec65637c9b58d5bea5e61709f8b3ffcc5a521549db49060f93fc87d5fe05c684a2145dfa911e3abd1b9b7fa711719d2b590f555c73bcc7918a7514cfd2749bdcdeffd298d7bacc756f0b33832e1dac6534805072156af2f3d903608c408e049e20e5835e001bf59f5889c81bfef26b4af4f268d4580ef0f396809dc1bdc668524f5df0c0cadd2c25bc8fb56df8c8f823fbc0b5e7c53b0414645bb0375bf7ecf91622804e0c3558551b5d5f515bd4c4350353c65953118857e5d14378659cc1b2eac7f820b6f3e9580c499c0b69318c3d82baed81a1e076d5e0a365f2ecc419665a8d859ee336f807fcfcebdc82ae1d4f41a4a3bbbbf5b1a92bbb4d36f54c26cabcef5988822bb5e486b5c977b6393ecfba8698371da5c0ed10a1dfb04c59cf9a2049bcc8ed781d91304fd0382f16953bb00aa65085b2362126388ec34932379bc2db83afd6ec0e1905b856afd05898b515c44c74327743398a5f32a0d47ae88e22095890f0b91510ebf7fccfb0c3616e67571a2a042947c9f8a6fa7811814c9f6c6ba5ea2990433bab85972365046d568a814c795b35771f8846f082f4a80575e2ed487ade559595e528264b866aff1fbaa8a630725fef42507e3058a78d140507b5847b9ce966507333190f5affa4f72287e73b8b77aecfadd2769d477aaa8697a51c80bd877df565b83c6eb8e95fd543dff4d59c4c8ae135a5ee75d14e2796a327f659a8cfa211bd3232fcbda3f957e74401a1d012f7cf5f09a0c1d15f89efaa22b6181b03fe536b36e619138864c1292f60992b622aec23011c8cd8f24d1b8e6b8ceaf501ffc94c23fdf0018f4befd7576e0e3cc181ed0f56bad6bd7522851a7930e7dd1825f91fa1592b64c44742d0375323ea06b8b91d63cdead577581372c551ab484ed65365785e0be9bebc959ec1b82996f121cdb0c04569a800d13c566d2a142427aad62abbda2ea0a10d3a06335f6dd5d1497e9945b476c99af920053e06a64c67ff47dc188a2f5b02d819076099dc7a9ded0cd11104d6c5c341f4452358a208b7ad5b4f53307f563fae96574d8cd1bbb1abe25115ef885695e26607d41df10ae4a1a63e85074a4aa5832afa6981596b212797e300aaa8898f66d41fdf64b8a5b97af408eb051a035d9d0caa87a467f881e9eef6d129d2ed3ceecf5ebece43d0136a27e90eddaf2af6318ec0222738d0a6bb1b74896ae33c3859f8cf20eff039e2b608a2d8de611fec44dd0bb2a05e8d9df5369aef51a575246e678c8cf040ac07a7f908ed9bfcf16ab3181e2915e76d8e700c9be43b973e114a7f7122618f05951a2786076025c240b5f6f092e16c9b675135355d6cae99892f2f435ed45016eae225768615654a3af950771f681acf9431e7fec680abb097a24474ad5ab36ccdc99882683479db2319dc85919ca3e77fc725a24fe635176bb58183afb85b275147810a875175e345b59d1eae048050fa36f2247eedaec76eaa9ad07ed52e42d1719adb0c1005983e76896bf70af030447918d68f884c84ade424a1b70851ff76875f97234fe2cc3d02329f43845a906b04afcdd784beed528cd4b6b68bc00882c8784db78628973580314cc0c2b01321b20502539aafc099dbeeffc1cacb528be1606d8108752de9f59786fd262ba2d6f3cafa156a64ef4e8631739b041ae95d47bc2089d44d268a0121d6df20ae509782198e40ee1daaf4c5d070318abe74b16070d68e88c172e0dc0f66a682ce66dfa40f894470eaec924e7c15d8cab059a5f797504cd27a5a6d3d41062cd6e1b49e9b7a58c7d1ec8abc5f7049bfb5c0cb9255f1e17c6e86e614a5cbc4d30d9e2c70dfd0d6cefe2b10ec75badb255450f85032031abeae38b19f77b1fb6a5b5fbc3fde42abefe2d5c8ea32bbbcb4a913a7ddafb87c16feee8c33444b622e88c4039b58d87576bb9688aea30a16bd449f3f42013324d511cf54707d874e381fe6e1301abb88f8501fa7fe099010b18968698e15caf0176dae0d5d967676a429c34d4c6ae8419753e5b21ca944464540f63f1cfeecd9d7b4956b20dd4663aad3e4c1a478cc359b7d10758082c042b6df6a9116a034e25ca1fe09efc1d1932080085c79f7fb603823fde5d158688c66e72ec61ec8acfd153172459fba6c953bb0283ec9a2838b8bd4109ba4ecae6377bbec86cec62171b8eda42d30b350033b1c41382cc78b4f4e2b08101543e91a993314891e964666ec2448560a3cecca333023e53a3820d99b5a5ed063e3ec5f562db81d85c850bae059cdf8e2c6c85d496880837f0351f8524c164a31c4d7eb2a79b0255b2c635fd6fcaeec3e4bb1b81b4da589763435b21283e92e0f0b5e06136652c862dae5c798fdf85e1e8775972ba1b9bcd2a6fc5a8863f25bf172382d8f061939c49c021b818a1022b45f4897daafe15133bcccc45e8691e7e805840cef6aec678a1cb673bbc4144605b1cf911566e28c432ba2888d0c6287d5dec1935debe2944dda658c68bd51e7db78ef65a2828a05c9d9c2b2578a20b0dbc13e07a956a9757675d30d5fc90a9a9cc6c38d94161c7418d844626fd69898e31123818de990f2989dae09c81fade8ec14ba9f9d67a9e42d2e1f8ae7d700eaa48652c584e389c9dcc1886dac15a4cc0da4ea192637d256b90011289cdcd47a58530078031a3412d960e4de66d9323aeffd89aae8c8a620f53bf3224df20d8b51e916d70c7c35f5bb795ee4505b458895b106c85163128296b586c5aa6ec6d280da343a303f49976c9b23035966e025903ce466b65319b4929d1188d72802cec5ce65f5ec69ef236276e1a1d62ddb12656f43cc1cd65c2c824595aed3db7c025fa5d2712a8dd070a21e1bc9e62b19c02e4c5575cd21292eff262bfcd05e7f6e912fbf24a6a8c1a6f4a6b39a66fce5518e1224d8eb8e184dee42bb7e8a704e8b1d6d197a5cfea723144dcaa1045dd0786ab4a4441196460aea93fde63dc6057f3154911176cc2db8bcca1b34cc5a2c9095011b9e85ad12537c604d1441bca149b8bc1861c502cea11cda81ca1640fa153db8663b84444260ea64b032f97ef9477ed91822ee0d51c4b73ba2ef56964817c84eb35a073051602dec42fa3ebf2ba96c82105cf61980a84af770672f7867a99949278d92b0b2b89abe83755f6fb121ea78281ed0667864d0f5ece8757604311a8776813381f3555798390425cf4bda1db36557226f9ebef7780d2eaccc298a89c53cfe12d43aa3279e78a42de8770b325679d47bd65afdcaf141ad86f07123cdd9b799d487fa0563b16b021108e4dd57121f1433d7f5a26aa4b677329eb6543cdcfe2ee14f7afa4ec6c647ad76e5b6573c58022ff42a83e5401066a38fbde0e810ba43a400c1e7827f7c72cefd0af861c318c4f52f2298d94f7daced4c573e007c39ac87d186e779513ce1a0aee9dd265139e4252546db0e986e8842a767d55c3968b58a87f17ee2d6c68ab65770ec9e2b14384d90fa3e31b649ff0fd38b395e569b3694d86039a85c100d4403f2cffca9c13a97d6d39c198f9cfa5e819aa12f741310d786977d90c4283aea7301662a315e82fd7977beceb67c895f7b47e19b248bc6ca44f235647e4db79d63aeba64cdff7d2d6c7ba73e4a91c20b1e0e174816bd2037858afd9adc7a28c589cf36f223cfa403b3ab6c8c4553412ffc1b4a4c9ade3bfa8ff477f800539a42aea1060a1f5e18acb1b02d186a80bc72c73703f2aca21523592329ba014cf0b512fe4f00a74550fc75a7c69e4619e36fb44e990a969bf4430d7d10db84bdf81d3bc7649b19f6969b2f049b253402313f71274491daa55b8a6b30216f0c7eac4e5816a929fd5aef81b840ae48fe1b92d4d2f805fdb9b999e55fe4669e7eca9baba12d43f566b8604963797d042a26264e3e19207852e5557eda37cdf0c9c2966947c9197a3797011e294b5ea943b37ec1329ac9b4dd8b65b34ee9a59b11a0bb488b14b473ab7171d04aed3d2cd4e56d20050d48039c5b923de0151665c1bfe131bc3ff88f60359d96afea6bf387c4ff9ed9cad9be78a50325f7090304b55989007bd6390db1f200ab893eebfff53ef0566c393adb470d60fce764d7cb810ebe94f9c2796a7c812dfb7e56ee2afbbed3e13646cc28c83129d8f67b1b77f9482afc4481a5bb29aacfcc48bfe7c5920bf096d38004419948e7e616294361fb8bbfb815377e80e9dcd54fb4ef25717f63223c0c390ec9d440fee0439fd32dc570ea8fefcb59c9067ebeb917f8cdb60c2bb7d7f2ef3db03f033041d04af2de310bd6d5381b4f71b2471a7ab5a536566f42153dc12d1552e2ed11991fa83e357fce79d6422f28e4c905c906bd8d1b6bd500a09ed3c4730b0ee2065a308495994ce2296122c509e1c4c6e369118c3e95f2bc1e72dc5d5f7ca2710d242e2d8b301bb2af72904fe50b1cfb927cada5d7b9814ea8f4585d615d8978bc459dcea35a3dbccc53f5269df8dab43add689e93226d4309cca3010a80179cb8a3767be1caa514845da07d48eff86c44dd84530760db4a7827179ede308955a55fc0b0a7e8192c4e9f37e99a139fb1f5a9a64331ade2b80e76ff293a1b330ef03e62de9936ce6028353a5b39b61f353d74981a2e1937a8d09ede88d5f0650ac1bc3628c442640448e39f678a57b6d5ae6f467b6026d0724b57fc8cad1a170dc185aae71432d51b906d546a5702add26ed9d9bde13c4102a35cce481cd2ae62fb28fb142b9a2660bc51bc17b9d9c37f3b79c3ad88bfcf6330578a433d5cd71a45cda0df7d08588925663be5d79703b39f366f7cd6cee39a83d20d6a04b29682aee1565330e95a3c9734191cc10cdf0b490732daeb884f9aecc1613d2a3a446cf21af27ef454e25e84c5fcab907ac5b523689de26f799f94b35e188a2"}) [ 159.862204][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.872326][ T43] Workqueue: events_unbound io_ring_exit_work [ 159.878492][ T43] ================================================================== [ 159.948749][T11121] loop2: detected capacity change from 0 to 264192 [ 160.012682][T11130] loop2: detected capacity change from 0 to 264192 19:06:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:51 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) 19:06:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f0000000000000400800000", 0x1f, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:51 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000040)=""/211, 0xd3}], 0x2, 0x1ff, 0x3ff) [ 160.224346][T11147] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.232750][T11147] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 160.245650][T11148] loop0: detected capacity change from 0 to 4096 [ 160.277399][T11148] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.289663][T11148] EXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #2: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc 19:06:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 160.334566][T11150] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.343027][T11150] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:51 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="45044a", 0x3) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x0, @multicast2}}) 19:06:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f0000000000000400800000", 0x1f, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 160.380820][T11174] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.389520][T11174] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 160.401457][T11166] EXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #2: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc 19:06:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 160.456367][T11175] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.464764][T11175] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 160.519770][T11189] loop0: detected capacity change from 0 to 4096 [ 160.522405][T11187] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.535199][T11187] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 160.551313][T11189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.571081][T11189] EXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #2: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 160.616789][T11189] EXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #2: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc 19:06:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f0000000000000400800000", 0x1f, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 160.667184][T11199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.675588][T11199] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 160.748761][T11202] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 160.757257][T11202] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 160.806913][T11207] loop0: detected capacity change from 0 to 4096 [ 160.847515][T11207] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.881226][T11207] EXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #2: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 160.922119][T11207] EXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #2: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc 19:06:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400", 0x2e, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 161.076048][T11225] loop0: detected capacity change from 0 to 4096 [ 161.088326][T11226] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.096755][T11226] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 161.111881][T11225] EXT4-fs error (device loop0): ext4_ext_check_inode:459: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.130124][T11225] EXT4-fs (loop0): get root inode failed [ 161.135738][T11225] EXT4-fs (loop0): mount failed [ 161.142578][T11228] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.150965][T11228] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 161.259036][T11238] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.267502][T11238] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:52 executing program 2: r0 = io_uring_setup(0x7913, &(0x7f0000000400)={0x0, 0x1003561, 0x8}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 161.303405][T11239] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.311811][T11239] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 161.392863][T11252] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.401302][T11252] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:52 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)="af2be7cf9117cb84acc0fd2639e491ce0deff1c06c2c0ffc84d0616b23eb846f05da6dd5e9ef78b16ff5c3be01eaf0a3140cb0815ccc", 0x36}, {&(0x7f0000000240)="aa805568b4c11307bd126b154e05d04f0f5c1e8dff0648c8d0459d6920eea15328358fff7f41eb7d41d5d2f4f4c199475782b690a8b2f272590ac91ad03ac2d33c4924aa7ecd5260db0ad25fc595abc876dc851e3790fd1eaafc408eebf6e012667c78003674fc906def6bc2416c0fa6a7590ad0e4aa644c19cc57629195f654161882803d3a5555491afb9babdb85368a8e49093297044befb7f499132bb55c76e7e9051fb570d3e7c67e8e433a4f9a8593355461680e30edaa", 0xba}, {&(0x7f0000000300)="fef347eb0d8eac6e4773d70e4251f749bd0ea2cf88f4345833548de8ce696d1ae2c6fa9b5573d5f6ccabad5da80341e92ce7298fe7522fc0b7f4684f4c8b7ca21a8ba27b536612f3c406a2775a2ca44256889a5333eb97074bbdd9c3604db420395390b165428b06420d07a42c017bc06eeab7b681fe69fbb40d94f69c169049bd0fe41de4ad934560deeb6c51ce6f0316e3e4ea98f9eec355fc6076d8530dd617a50c72b1f0f009e6e94767d7a60e3c883ef208744030ada83ed8a41a60b705772aab354b71ebace693dcc4a9bd5762ca6b3287324b89f0079a4aa3edb3dd55112e86c7947abf9bdf5b7ebe43", 0xed}], 0x3, &(0x7f00000004c0)=[{0x28, 0x1, 0xd2, "f1a091a893afeafa3fc1ba82d4ec5629fc89d5ded0"}, {0xa0, 0x10d, 0x1, "b653f315726b820ea573b0b9aa79e3f0659694ef80e61a376759488e79c02d59db80ce6084af8c10c5fe081544c2bd2a9a76bdd42bedda52e667d51ed868e942266a9ad4a2b3098de788c1abb13efbe9c193f26580a5e6148ed89e271dd550fcf864992d8abdf2ba1822a5eaed6abae701cc850609fa2c04a8dbe69884e875ea9bedae9b7a9fd08d653f00ad"}, {0xb8, 0x10c, 0x1, "66b568903ef0f651aeb98d0540c7fcdedc67289874bf72992680ad760f54789fbf822eecdb1a9d9f58ece68ec48e92249da87cabddc95642677654754c787300d9a4634cb2b15099fd067afed1fb98d6efce3461e6909d9a77b1b381b4e2fdb73a5744050fa565e7210522805e1a6ad5241468955cb5f3d2949fa6b1ee9ff0f8a10d9def7ce350afc4d2a75a2fa71a3642911f505f6743ea9314205a0f129bd34a12a4fb5269"}, {0x70, 0x0, 0xa02, "741344654b3ff8857761e491b155d916dbbd1ade06cbe4b72a000c48479f826902ad94f3c882aea5fca5835a72e681a26b5165a1e2d309348d492821949da8570eeed95c8a8bec44c892f1f1033a24c151d708f96db1201ac0970edb663718"}, {0xa0, 0x118, 0x9, "800135e69693e826016f747f2d1c1dc40658118884dd67dc80217b7c8ac43eb4fdc7a475098841759aa11f52a3de4fa883228f190d4c55533dbc9839e065dd210d0e84d6c8f74374929438dc731bcb1339ba5928636fa2b5f0bc8bf9c3e6aee0d7c0e5d607ab47b31e4cbc8e1c388c598f44b01f7f69a117af17c2ac2d8315b7fb258382ee2b787a79fd4e87aea906"}], 0x290}, 0x24000000) r0 = io_uring_setup(0x87c3, &(0x7f0000000400)={0x0, 0x1003561, 0x10}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x100) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xb2}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 161.445134][T11260] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.453644][T11260] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 161.525873][T11261] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.534305][T11261] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400", 0x2e, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 161.591332][T11272] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.599765][T11272] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 161.657243][T11279] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.665696][T11279] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 161.677550][T11281] loop0: detected capacity change from 0 to 4096 [ 161.688941][T11280] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.697333][T11280] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 161.719056][T11281] EXT4-fs error (device loop0): ext4_ext_check_inode:459: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.737356][T11281] EXT4-fs (loop0): get root inode failed [ 161.743011][T11281] EXT4-fs (loop0): mount failed 19:06:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:53 executing program 2: io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0xfffffffd}, &(0x7f00004be000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0xca}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000040)) 19:06:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x74, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 161.959983][T11301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 161.968364][T11301] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.003465][T11303] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.011845][T11303] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400", 0x2e, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) 19:06:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 162.056993][T11306] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.065480][T11306] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 162.160417][T11317] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.163336][T11318] loop0: detected capacity change from 0 to 4096 [ 162.168793][T11317] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.188311][T11318] EXT4-fs error (device loop0): ext4_ext_check_inode:459: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) 19:06:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 162.206881][T11318] EXT4-fs (loop0): get root inode failed [ 162.212541][T11318] EXT4-fs (loop0): mount failed [ 162.255969][T11325] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.264554][T11325] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.301272][T11330] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.309653][T11330] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.341444][T11331] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 19:06:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 162.350055][T11331] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 162.423283][T11338] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.432493][T11338] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.451052][T11339] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.459498][T11339] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af3010004000000000000000000", 0x36, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 162.511324][T11344] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.519817][T11344] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.563682][T11343] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.572112][T11343] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 [ 162.633256][T11352] loop0: detected capacity change from 0 to 4096 [ 162.650192][T11352] EXT4-fs error (device loop0): ext4_ext_check_inode:459: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 162.668470][T11352] EXT4-fs (loop0): get root inode failed [ 162.674352][T11352] EXT4-fs (loop0): mount failed 19:06:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:54 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = io_uring_setup(0x77ef, &(0x7f0000000000)={0x0, 0x5348, 0x0, 0x1, 0x37, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r0, r3, r1], 0x3) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240)=@v1={0x1000000, [{0x5, 0x4}]}, 0xc, 0x2) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 162.892165][T11371] ref_ctr_offset mismatch. inode: 0x361f offset: 0x310 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x2 [ 162.917350][T11373] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 162.925747][T11373] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x4 of mm: 0x0000000090e04ba9 19:06:54 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x10002, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) [ 162.995548][T11378] ref_ctr going negative. vaddr: 0x20000002, curr val: -26636, delta: 1 [ 163.004117][T11378] ref_ctr increment failed for inode: 0x361f offset: 0x310 ref_ctr_offset: 0x2 of mm: 0x0000000090e04ba9 19:06:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 163.049296][T11373] ref_ctr_offset mismatch. inode: 0x361f offset: 0x310 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 19:06:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:54 executing program 2: r0 = io_uring_setup(0x7c3, &(0x7f0000000400)={0x0, 0x1003561, 0x1f}) r1 = socket(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) bind(r1, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f00006d8000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x200000f, 0x11, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}}, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(r3, r7, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x6, &(0x7f00000000c0)={r9, r10+10000000}, 0x1, 0x0, 0x1}, 0x2a0a) 19:06:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af3010004000000000000000000", 0x36, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) [ 163.160740][T11404] ref_ctr_offset mismatch. inode: 0x361f offset: 0x310 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 19:06:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 163.272649][T11421] ref_ctr_offset mismatch. inode: 0x361f offset: 0x310 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x4 [ 163.317575][T11424] ref_ctr_offset mismatch. inode: 0x361f offset: 0x310 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x6 [ 163.331769][T11427] loop0: detected capacity change from 0 to 4096 [ 163.354708][T11430] ref_ctr_offset mismatch. inode: 0x361f offset: 0x310 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x6 [ 163.366454][T11427] EXT4-fs error (device loop0): ext4_ext_check_inode:459: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 163.384983][T11427] EXT4-fs (loop0): get root inode failed [ 163.390645][T11427] EXT4-fs (loop0): mount failed 19:06:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) 19:06:55 executing program 2: r0 = io_uring_setup(0x6868, &(0x7f0000000400)={0x0, 0x1003561, 0x1f, 0x0, 0x2000000}) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x2ea5, &(0x7f0000000140)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 19:06:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x13, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x310}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff