696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:39 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x22, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  187.146008][T15477] loop4: detected capacity change from 0 to 270
[  187.156277][T15479] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xff02
02:21:39 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:39 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xffd7, 0x0, 0x0, 0x0)

[  187.233958][T15491] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x40004
[  187.243884][T15480] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  187.260678][T15498] loop4: detected capacity change from 0 to 270
02:21:39 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:39 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  187.280758][T15502] loop5: detected capacity change from 0 to 264
02:21:39 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:39 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x11000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:39 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)=<r3=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:39 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:39 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x20000, 0x0, 0x0, 0x0)

[  187.456418][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.464507][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  187.476477][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.484611][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  187.528219][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.536281][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  187.562776][T15525] loop5: detected capacity change from 0 to 264
[  187.567628][T15526] loop4: detected capacity change from 0 to 270
02:21:39 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x10e, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  187.578091][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.586171][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:39 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x11000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:40 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  187.632463][T15524] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:40 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:40 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x110, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  187.703614][T15544] loop4: detected capacity change from 0 to 270
[  187.716925][T15547] loop5: detected capacity change from 0 to 264
02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:40 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x40000, 0x0, 0x0, 0x0)

02:21:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280))
sendfile(r2, r1, 0x0, 0x100000002)

[  187.827414][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.835425][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  187.848138][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.856174][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  187.906287][T15561] loop5: detected capacity change from 0 to 264
[  187.917348][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  187.925340][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  187.929488][T15566] loop4: detected capacity change from 0 to 270
[  187.940382][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:40 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x5f8, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  187.950640][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:40 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:40 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  188.060617][T15579] loop4: detected capacity change from 0 to 270
02:21:40 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xff01, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860021000000000000211a0400000000041a7809140b2a3a08000000010000010846494c45302e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6530505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800a800220000000000002200000000000000007809140b2a3a08000000010000010846494c45312e3b3100525205018d4e4d0a010066696c6531505824016da100000000a16d010000000000000100000000000000000000000000000000534c31010008000003746d70001573797a2d696d61676567656e393632343934303438000566696c6530000566696c653054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08000000000000", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:40 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280))
sendfile(r2, r1, 0x0, 0x100000002)

02:21:40 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x50000, 0x0, 0x0, 0x0)

[  188.223603][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.231843][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  188.243789][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.252180][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  188.298293][T15602] loop5: detected capacity change from 0 to 216
[  188.301750][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.312802][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  188.349019][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.357069][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:40 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:40 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x1000000, 0x0, 0x0, 0x0)

[  188.436325][T15616] loop5: detected capacity change from 0 to 208
02:21:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280))
sendfile(r2, r1, 0x0, 0x100000002)

02:21:40 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  188.590793][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.598878][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  188.611318][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.619387][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  188.656743][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  188.664776][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  188.689755][T15633] loop5: detected capacity change from 0 to 200
[  188.691260][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:41 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x2000000, 0x0, 0x0, 0x0)

02:21:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860021000000000000211a0400000000041a7809140b2a3a08000000010000010846494c45302e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6530505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800a800220000000000002200000000000000007809140b2a3a08000000010000010846494c45312e3b3100525205018d4e4d0a010066696c6531505824016da100000000a16d010000000000000100000000000000000000000000000000534c31010008000003746d70001573797a2d696d61676567656e393632343934303438000566696c6530000566696c653054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08000000000000", 0x200, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  188.704048][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  188.814422][T15644] loop5: detected capacity change from 0 to 192
[  188.926481][T15606] loop4: detected capacity change from 0 to 270
02:21:41 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xff0f, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:41 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:41 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:41 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x3000000, 0x0, 0x0, 0x0)

[  189.105602][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.113596][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  189.125636][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.133653][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  189.174177][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.182201][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  189.184969][T15663] loop5: detected capacity change from 0 to 184
02:21:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  189.224696][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.232744][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  189.265336][T15668] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002)

[  189.351519][T15679] loop5: detected capacity change from 0 to 184
02:21:41 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x4000000, 0x0, 0x0, 0x0)

[  189.434794][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.442923][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  189.457539][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.465535][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  189.511539][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.519849][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  189.538403][T15690] loop5: detected capacity change from 0 to 184
[  189.563419][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.571446][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002)

[  189.658040][T15697] loop5: detected capacity change from 0 to 192
[  189.718885][T15667] loop4: detected capacity change from 0 to 270
02:21:42 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfffe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:42 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  189.900958][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.908970][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  189.921346][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.929440][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  189.963506][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.971536][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  189.983471][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  189.991497][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:42 executing program 1:
semget$private(0x0, 0x20000000102, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:42 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x8000000, 0x0, 0x0, 0x0)

02:21:42 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002)

[  190.080111][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.088142][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  190.100947][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.109047][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:42 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  190.149243][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.157281][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  190.172660][T15722] loop5: detected capacity change from 0 to 192
02:21:42 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  190.199913][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.207965][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002)

02:21:42 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:42 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  190.307784][T15735] loop5: detected capacity change from 0 to 192
02:21:42 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  190.459021][T15713] loop4: detected capacity change from 0 to 270
[  190.477363][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.485368][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  190.498157][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.506174][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  190.545320][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.547365][T15754] loop5: detected capacity change from 0 to 192
02:21:42 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2c000, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:42 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:42 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xa000000, 0x0, 0x0, 0x0)

02:21:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002)

02:21:42 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  190.553455][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  190.583096][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.591236][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:42 executing program 1:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:43 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  190.654183][T15770] loop5: detected capacity change from 0 to 192
02:21:43 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:43 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002)

02:21:43 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xc020000, 0x0, 0x0, 0x0)

[  190.804783][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.812825][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  190.825444][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.833461][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  190.885732][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.893858][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  190.918782][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  190.921785][T15791] loop5: detected capacity change from 0 to 192
02:21:43 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  190.926830][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:43 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:43 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x100, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:43 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:43 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:43 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xf000000, 0x0, 0x0, 0x0)

[  191.534402][T15768] loop4: detected capacity change from 0 to 270
02:21:43 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:43 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  191.628671][T15818] loop5: detected capacity change from 0 to 192
[  191.680893][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  191.688949][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  191.702148][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  191.710168][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:44 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x18000000, 0x0, 0x0, 0x0)

02:21:44 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  191.764438][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  191.772484][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  191.790549][T15831] loop5: detected capacity change from 0 to 192
02:21:44 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  191.820021][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  191.828054][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:44 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  191.875010][T15843] loop5: detected capacity change from 0 to 192
[  192.024989][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.033055][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  192.058670][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.066703][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  192.114012][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.122032][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  192.135640][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.143647][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  192.221504][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.229517][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  192.241830][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.249832][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  192.279861][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.287894][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  192.299540][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  192.307598][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:45 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:45 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:45 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:45 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x18020000, 0x0, 0x0, 0x0)

02:21:45 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:45 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:45 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a0802", 0x80, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  192.786366][T15866] loop5: detected capacity change from 0 to 192
02:21:45 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:45 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  192.908066][T15880] loop5: detected capacity change from 0 to 192
02:21:45 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x20000000, 0x0, 0x0, 0x0)

[  192.993121][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  193.001273][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  193.013455][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  193.021488][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  193.073181][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  193.081212][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:45 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  193.117381][T15892] loop5: detected capacity change from 0 to 192
[  193.126193][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  193.134285][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:46 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="ebfe906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:46 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:46 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:46 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:46 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x24000000, 0x0, 0x0, 0x0)

02:21:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:46 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:46 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b22732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:46 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  193.756385][T15917] loop4: detected capacity change from 0 to 270
[  193.766765][T15919] loop5: detected capacity change from 0 to 192
02:21:46 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:46 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:46 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b2c732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:46 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x3c000000, 0x0, 0x0, 0x0)

[  193.871790][T15932] loop5: detected capacity change from 0 to 192
[  193.892684][T15934] loop4: detected capacity change from 0 to 270
[  193.981500][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  193.989526][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.001533][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.009568][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:46 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  194.061306][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.065977][T15947] loop5: detected capacity change from 0 to 192
[  194.069504][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.094881][T15950] loop4: detected capacity change from 0 to 270
[  194.113969][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.122079][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:46 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:46 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:46 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b2e732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  194.227398][T15963] loop5: detected capacity change from 0 to 192
[  194.285165][T15972] loop4: detected capacity change from 0 to 270
[  194.342043][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.350070][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.363267][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.371290][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  194.408808][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.416844][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.432462][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.440510][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  194.520081][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.528158][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.540729][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.548741][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:46 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x41020000, 0x0, 0x0, 0x0)

02:21:46 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:46 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:46 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b2f732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:46 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  194.577719][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.585770][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.597436][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.605404][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  194.651232][T15990] loop5: detected capacity change from 0 to 192
[  194.656281][T15986] loop4: detected capacity change from 0 to 270
02:21:47 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809", 0x60, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:47 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732f66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:47 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x58000000, 0x0, 0x0, 0x0)

[  194.809468][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.817564][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  194.829746][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.837986][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:47 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  194.886124][T16014] loop5: detected capacity change from 0 to 192
[  194.888446][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.894400][T16017] loop4: detected capacity change from 0 to 270
[  194.900447][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:47 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b6673fe66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  194.958328][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  194.966456][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:47 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  195.023220][T16031] loop5: detected capacity change from 0 to 192
02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:47 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:47 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e22617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  195.076602][T16037] loop4: detected capacity change from 0 to 270
02:21:47 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x67e0939d, 0x0, 0x0, 0x0)

02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  195.142456][T16040] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  195.206451][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.214658][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  195.227080][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.235542][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:47 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  195.288975][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.294365][T16062] loop5: detected capacity change from 0 to 192
[  195.297018][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:47 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e2c617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  195.329778][T16065] loop4: detected capacity change from 0 to 270
[  195.350402][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.358427][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  195.398586][T16066] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:47 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:47 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x91ffffff, 0x0, 0x0, 0x0)

02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  195.450289][T16079] loop5: detected capacity change from 0 to 192
02:21:47 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  195.500592][T16083] loop4: detected capacity change from 0 to 270
02:21:47 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:47 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e2e617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:48 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x9d93e067, 0x0, 0x0, 0x0)

[  195.631706][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.639775][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  195.652628][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.660681][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  195.697605][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.705638][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  195.706259][T16102] loop5: detected capacity change from 0 to 192
[  195.726233][T16105] loop4: detected capacity change from 0 to 270
02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:48 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e2f617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  195.754280][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  195.762390][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  195.800157][T16103] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  195.833057][T16119] loop5: detected capacity change from 0 to 192
02:21:48 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:48 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66612200028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  195.860059][T16122] loop4: detected capacity change from 0 to 270
02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:48 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xcbbeffff, 0x0, 0x0, 0x0)

02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:48 executing program 0:
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r1, r0, 0x0, 0x100000002)

[  195.988080][T16139] loop5: detected capacity change from 0 to 192
[  196.068499][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.076725][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  196.088806][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.096821][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d020000000000000200"/72, 0x48, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:48 executing program 0:
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r1, r0, 0x0, 0x100000002)

[  196.144789][T16148] loop5: detected capacity change from 0 to 192
[  196.145385][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.159064][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  196.179926][T16150] loop4: detected capacity change from 0 to 270
02:21:48 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66612c00028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  196.204572][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.212705][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:48 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  196.260436][T16163] loop5: detected capacity change from 0 to 192
[  196.262326][T16156] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d020000000000000200"/72, 0x48, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:48 executing program 0:
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r1, r0, 0x0, 0x100000002)

02:21:48 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617402028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  196.306495][T16171] loop4: detected capacity change from 0 to 270
02:21:48 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xd7ff0000, 0x0, 0x0, 0x0)

02:21:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d020000000000000200"/72, 0x48, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  196.406330][T16183] loop5: detected capacity change from 0 to 192
[  196.461264][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.469367][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  196.482809][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.490919][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  196.535047][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.543100][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  196.549912][T16196] loop4: detected capacity change from 0 to 270
[  196.560992][T16197] loop5: detected capacity change from 0 to 192
[  196.575183][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:48 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:48 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054", 0x4c, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  196.583276][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  196.596206][T16196] FAT-fs (loop4): bogus logical sector size 514
[  196.602542][T16196] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:49 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054", 0x4c, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  196.701361][T16196] loop4: detected capacity change from 0 to 270
[  196.726168][T16196] FAT-fs (loop4): bogus logical sector size 514
[  196.732435][T16196] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:49 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617403028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:49 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xd7ffffff, 0x0, 0x0, 0x0)

02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054", 0x4c, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  196.760968][T16226] loop5: detected capacity change from 0 to 192
[  196.837676][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.845903][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  196.858070][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.866064][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  196.915467][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.923509][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  196.929512][T16241] loop4: detected capacity change from 0 to 270
[  196.955808][T16245] loop5: detected capacity change from 0 to 192
[  196.979169][T16241] FAT-fs (loop4): bogus logical sector size 515
[  196.980731][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  196.985472][T16241] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  197.000067][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:49 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  197.057300][T16244] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  197.068379][T16241] loop4: detected capacity change from 0 to 270
[  197.077316][T16256] loop5: detected capacity change from 0 to 192
[  197.078021][T16241] FAT-fs (loop4): bogus logical sector size 515
[  197.089826][T16241] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:49 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617404028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:49 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xe8030000, 0x0, 0x0, 0x0)

02:21:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  197.214084][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.222114][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  197.238541][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.246735][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  197.291251][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.299296][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  197.315131][T16278] loop4: detected capacity change from 0 to 270
[  197.322151][T16280] loop5: detected capacity change from 0 to 192
02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  197.340359][T16278] FAT-fs (loop4): bogus logical sector size 516
[  197.346657][T16278] FAT-fs (loop4): Can't find a valid FAT filesystem
[  197.369046][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.377085][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  197.408821][T16278] loop4: detected capacity change from 0 to 270
[  197.415676][T16278] FAT-fs (loop4): bogus logical sector size 516
[  197.421981][T16278] FAT-fs (loop4): Can't find a valid FAT filesystem
[  197.445146][T16290] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a01", 0x4f, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:49 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  197.461090][T16293] loop5: detected capacity change from 0 to 192
02:21:49 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617405028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:49 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a01", 0x4f, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:49 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xf4010000, 0x0, 0x0, 0x0)

[  197.540790][T16301] loop5: detected capacity change from 0 to 192
02:21:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:50 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a01", 0x4f, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  197.624458][T16316] loop4: detected capacity change from 0 to 270
[  197.640268][T16318] loop5: detected capacity change from 0 to 192
[  197.652343][T16316] FAT-fs (loop4): bogus logical sector size 517
[  197.658636][T16316] FAT-fs (loop4): Can't find a valid FAT filesystem
[  197.727545][T16316] loop4: detected capacity change from 0 to 270
[  197.733204][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.735338][T16316] FAT-fs (loop4): bogus logical sector size 517
[  197.741906][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  197.748246][T16316] FAT-fs (loop4): Can't find a valid FAT filesystem
[  197.761846][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:50 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xf5ffffff, 0x0, 0x0, 0x0)

02:21:50 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617406028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  197.773964][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  197.835100][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.839385][T16337] loop4: detected capacity change from 0 to 270
[  197.843121][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  197.865152][T16337] FAT-fs (loop4): bogus logical sector size 518
[  197.871466][T16337] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:50 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  197.886440][T16339] loop5: detected capacity change from 0 to 192
[  197.908846][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  197.916917][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  197.936889][T16337] loop4: detected capacity change from 0 to 270
[  197.944717][T16337] FAT-fs (loop4): bogus logical sector size 518
[  197.951003][T16337] FAT-fs (loop4): Can't find a valid FAT filesystem
[  197.960199][T16341] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  198.030231][T16356] loop5: detected capacity change from 0 to 184
[  198.117334][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.125590][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  198.137514][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.145491][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:50 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:50 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617407028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:50 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xfeffffff, 0x0, 0x0, 0x0)

02:21:50 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  198.182794][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.190943][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  198.202070][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.210140][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:50 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  198.255980][T16367] loop5: detected capacity change from 0 to 184
[  198.268687][T16372] loop4: detected capacity change from 0 to 270
02:21:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  198.306334][T16372] FAT-fs (loop4): bogus logical sector size 519
[  198.312597][T16372] FAT-fs (loop4): Can't find a valid FAT filesystem
[  198.346468][T16369] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  198.377243][T16372] loop4: detected capacity change from 0 to 270
[  198.384969][T16372] FAT-fs (loop4): bogus logical sector size 519
[  198.391258][T16372] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:50 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xff0f0000, 0x0, 0x0, 0x0)

02:21:50 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617408028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  198.435390][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.443433][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  198.455616][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.463624][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:50 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  198.517652][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.525679][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  198.539655][T16393] loop5: detected capacity change from 0 to 184
[  198.547226][T16394] loop4: detected capacity change from 0 to 270
[  198.573170][T16394] FAT-fs (loop4): bogus logical sector size 520
[  198.575119][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.579562][T16394] FAT-fs (loop4): Can't find a valid FAT filesystem
[  198.587564][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:51 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  198.637332][T16394] loop4: detected capacity change from 0 to 270
[  198.644321][T16394] FAT-fs (loop4): bogus logical sector size 520
[  198.650650][T16394] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:51 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617409028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:51 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xffffbecb, 0x0, 0x0, 0x0)

[  198.744490][T16417] loop5: detected capacity change from 0 to 192
[  198.760665][T16420] loop4: detected capacity change from 0 to 270
[  198.774604][T16417] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  198.803562][T16414] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  198.815134][T16420] FAT-fs (loop4): bogus logical sector size 521
[  198.821489][T16420] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  198.885559][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.893674][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  198.897388][T16420] loop4: detected capacity change from 0 to 270
[  198.906758][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.916047][T16420] FAT-fs (loop4): bogus logical sector size 521
[  198.918952][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  198.925150][T16420] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:51 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740a028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  198.976357][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  198.984379][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  199.020782][T16442] loop5: detected capacity change from 0 to 192
[  199.054388][T16442] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:51 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x16a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:51 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xffffff91, 0x0, 0x0, 0x0)

[  199.077603][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.085702][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  199.113505][T16440] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  199.159777][T16455] loop4: detected capacity change from 0 to 270
02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  199.203381][T16455] FAT-fs (loop4): bogus logical sector size 522
[  199.209702][T16455] FAT-fs (loop4): Can't find a valid FAT filesystem
[  199.211056][T16466] loop5: detected capacity change from 0 to 192
[  199.242310][T16455] loop4: detected capacity change from 0 to 270
02:21:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  199.260662][T16455] FAT-fs (loop4): bogus logical sector size 522
[  199.266976][T16455] FAT-fs (loop4): Can't find a valid FAT filesystem
[  199.296786][T16466] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:51 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xffffffd7, 0x0, 0x0, 0x0)

02:21:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:51 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740b028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  199.370469][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.378483][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  199.390778][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.398781][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  199.442665][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.450713][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:51 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[  199.486572][T16487] loop5: detected capacity change from 0 to 192
[  199.489288][T16489] loop4: detected capacity change from 0 to 270
[  199.503114][T16487] isofs_fill_super: root inode is not a directory. Corrupted media?
[  199.514867][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.523010][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:51 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x294}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  199.526354][T16489] FAT-fs (loop4): bogus logical sector size 523
[  199.540305][T16489] FAT-fs (loop4): Can't find a valid FAT filesystem
[  199.569213][T16493] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:52 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740c028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  199.591012][T16489] loop4: detected capacity change from 0 to 270
[  199.613870][T16489] FAT-fs (loop4): bogus logical sector size 523
[  199.620265][T16489] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[  199.675247][T16510] loop5: detected capacity change from 0 to 192
02:21:52 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xfffffff5, 0x0, 0x0, 0x0)

[  199.715776][T16510] isofs_fill_super: root inode is not a directory. Corrupted media?
[  199.728645][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.736691][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  199.759141][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.767170][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  199.812749][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.820798][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  199.839392][T16525] loop4: detected capacity change from 0 to 270
[  199.851578][T16527] loop5: detected capacity change from 0 to 192
02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[  199.863290][T16525] FAT-fs (loop4): bogus logical sector size 524
[  199.869603][T16525] FAT-fs (loop4): Can't find a valid FAT filesystem
[  199.875543][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  199.884403][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  199.905601][T16527] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:52 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  199.927140][T16525] loop4: detected capacity change from 0 to 270
[  199.945012][T16525] FAT-fs (loop4): bogus logical sector size 524
[  199.951334][T16525] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0)

02:21:52 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740d028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0)

[  200.049210][T16551] loop5: detected capacity change from 0 to 192
02:21:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:52 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xfffffffe, 0x0, 0x0, 0x0)

02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0)

[  200.092014][T16551] isofs_fill_super: root inode is not a directory. Corrupted media?
[  200.097084][T16557] loop4: detected capacity change from 0 to 270
[  200.109559][T16557] FAT-fs (loop4): bogus logical sector size 525
[  200.115988][T16557] FAT-fs (loop4): Can't find a valid FAT filesystem
[  200.186983][T16557] loop4: detected capacity change from 0 to 270
[  200.193686][T16557] FAT-fs (loop4): bogus logical sector size 525
[  200.200047][T16557] FAT-fs (loop4): Can't find a valid FAT filesystem
[  200.230830][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  200.238880][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  200.240521][T16570] __nla_validate_parse: 1 callbacks suppressed
[  200.240531][T16570] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  200.251140][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:52 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740e028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  200.273691][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  200.328608][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  200.336708][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  200.345983][T16583] loop4: detected capacity change from 0 to 270
[  200.365373][T16583] FAT-fs (loop4): bogus logical sector size 526
[  200.371699][T16583] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0, 0x0)

[  200.382231][T16585] loop5: detected capacity change from 0 to 192
[  200.390974][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  200.398988][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  200.410886][T16585] isofs_fill_super: root inode is not a directory. Corrupted media?
[  200.420742][T16583] loop4: detected capacity change from 0 to 270
02:21:52 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x340}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0, 0x0)

[  200.448092][T16583] FAT-fs (loop4): bogus logical sector size 526
[  200.454509][T16583] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:52 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740f028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:52 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0, 0x0)

[  200.565945][T16607] loop5: detected capacity change from 0 to 192
[  200.574923][T16607] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:52 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2, 0x0, 0x0)

02:21:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1c0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  200.608281][T16610] loop4: detected capacity change from 0 to 270
[  200.631611][T16610] FAT-fs (loop4): bogus logical sector size 527
[  200.637928][T16610] FAT-fs (loop4): Can't find a valid FAT filesystem
[  200.663180][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  200.671257][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  200.683386][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  200.683491][T16610] loop4: detected capacity change from 0 to 270
[  200.691403][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  200.699377][T16610] FAT-fs (loop4): bogus logical sector size 527
[  200.715196][T16610] FAT-fs (loop4): Can't find a valid FAT filesystem
[  200.752702][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

02:21:53 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617410028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  200.761067][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  200.782012][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  200.790152][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  200.802660][T16626] loop5: detected capacity change from 0 to 192
02:21:53 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  200.863295][T16633] loop4: detected capacity change from 0 to 270
02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

02:21:53 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x3, 0x0, 0x0)

[  200.906389][T16627] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  200.919107][T16633] FAT-fs (loop4): bogus logical sector size 528
[  200.925454][T16633] FAT-fs (loop4): Can't find a valid FAT filesystem
[  200.944164][T16642] loop5: detected capacity change from 0 to 192
02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

02:21:53 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617411028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  200.968078][T16633] loop4: detected capacity change from 0 to 270
[  200.983013][T16633] FAT-fs (loop4): bogus logical sector size 528
[  200.989514][T16633] FAT-fs (loop4): Can't find a valid FAT filesystem
[  200.995239][T16642] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  201.064896][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.073063][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  201.087509][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.095706][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  201.140906][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.149005][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  201.154311][T16662] loop4: detected capacity change from 0 to 270
[  201.176585][T16664] loop5: detected capacity change from 0 to 192
[  201.180105][T16662] FAT-fs (loop4): bogus logical sector size 529
02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

[  201.189126][T16662] FAT-fs (loop4): Can't find a valid FAT filesystem
[  201.197379][T16664] isofs_fill_super: root inode is not a directory. Corrupted media?
[  201.208393][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.216488][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:53 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

[  201.277320][T16662] loop4: detected capacity change from 0 to 270
[  201.298631][T16662] FAT-fs (loop4): bogus logical sector size 529
[  201.305077][T16662] FAT-fs (loop4): Can't find a valid FAT filesystem
[  201.321524][T16682] loop5: detected capacity change from 0 to 192
02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

02:21:53 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617412028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:53 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x4, 0x0, 0x0)

02:21:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a0878", 0xe0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  201.350181][T16675] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  201.369620][T16682] isofs_fill_super: root inode is not a directory. Corrupted media?
02:21:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  201.480623][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.489012][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  201.501232][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.509803][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  201.546603][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.554637][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  201.573545][T16704] loop4: detected capacity change from 0 to 270
[  201.576598][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.585415][T16705] loop5: detected capacity change from 0 to 192
02:21:53 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

02:21:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a0878", 0xe0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  201.588081][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  201.605633][T16704] FAT-fs (loop4): bogus logical sector size 530
[  201.611991][T16704] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:54 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617418028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:54 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

[  201.703937][T16703] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  201.730300][T16725] loop4: detected capacity change from 0 to 270
02:21:54 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a0878", 0xe0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

[  201.750915][T16724] loop5: detected capacity change from 0 to 192
[  201.754737][T16725] FAT-fs (loop4): bogus logical sector size 536
[  201.763442][T16725] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:54 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x5, 0x0, 0x0)

02:21:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  201.838364][T16725] loop4: detected capacity change from 0 to 270
[  201.847861][T16725] FAT-fs (loop4): bogus logical sector size 536
[  201.854220][T16725] FAT-fs (loop4): Can't find a valid FAT filesystem
[  201.860201][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.868896][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  201.880775][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.888768][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:54 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617419028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  201.939869][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  201.947911][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  201.978651][T16747] loop5: detected capacity change from 0 to 192
02:21:54 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d010000000000000100", 0x150, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

[  202.004017][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.012111][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:54 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  202.059901][T16754] loop4: detected capacity change from 0 to 270
[  202.068898][T16754] FAT-fs (loop4): bogus logical sector size 537
[  202.075191][T16754] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

[  202.112990][T16748] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  202.116596][T16763] loop5: detected capacity change from 0 to 192
02:21:54 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x150, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:54 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x8, 0x0, 0x0)

[  202.156870][T16754] loop4: detected capacity change from 0 to 270
[  202.166906][T16754] FAT-fs (loop4): bogus logical sector size 537
[  202.173166][T16754] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:54 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617422028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  202.226242][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.234300][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  202.256343][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.264360][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  202.308128][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.316154][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  202.326515][T16782] loop5: detected capacity change from 0 to 192
02:21:54 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d010000000000000100", 0x150, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

[  202.352849][T16785] loop4: detected capacity change from 0 to 270
[  202.383382][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.391426][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  202.413240][T16785] FAT-fs (loop4): bogus logical sector size 546
[  202.419639][T16785] FAT-fs (loop4): Can't find a valid FAT filesystem
[  202.438743][T16790] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:54 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

02:21:54 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617448028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:54 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  202.464572][T16785] loop4: detected capacity change from 0 to 270
[  202.483004][T16785] FAT-fs (loop4): bogus logical sector size 546
[  202.489343][T16785] FAT-fs (loop4): Can't find a valid FAT filesystem
[  202.501028][T16801] loop5: detected capacity change from 0 to 192
02:21:54 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xa, 0x0, 0x0)

02:21:54 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

02:21:54 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  202.605241][T16815] loop5: detected capacity change from 0 to 192
[  202.618336][T16816] loop4: detected capacity change from 0 to 270
[  202.631745][T16816] FAT-fs (loop4): bogus logical sector size 584
[  202.638161][T16816] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  202.676530][T16816] loop4: detected capacity change from 0 to 270
[  202.688684][T16816] FAT-fs (loop4): bogus logical sector size 584
[  202.694002][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.694947][T16816] FAT-fs (loop4): Can't find a valid FAT filesystem
[  202.702958][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:55 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661744c028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  202.722431][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.730457][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  202.783250][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.791273][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:55 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  202.828336][T16837] loop5: detected capacity change from 0 to 192
[  202.832668][T16836] loop4: detected capacity change from 0 to 270
[  202.840934][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  202.848942][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:55 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0)

[  202.873315][T16839] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  202.884863][T16836] FAT-fs (loop4): bogus logical sector size 588
[  202.891179][T16836] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:55 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:55 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

02:21:55 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501", 0x1a4, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  202.948713][T16836] loop4: detected capacity change from 0 to 270
[  202.954326][T16848] loop5: detected capacity change from 0 to 192
[  202.964168][T16836] FAT-fs (loop4): bogus logical sector size 588
[  202.970484][T16836] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:55 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf, 0x0, 0x0)

02:21:55 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617468028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:55 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

02:21:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:55 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:55 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0)

[  203.111906][T16868] loop4: detected capacity change from 0 to 270
[  203.120425][T16870] loop5: detected capacity change from 0 to 192
[  203.127978][T16868] FAT-fs (loop4): bogus logical sector size 616
[  203.134240][T16868] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:55 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x18, 0x0, 0x0)

[  203.187688][T16868] loop4: detected capacity change from 0 to 270
[  203.196014][T16868] FAT-fs (loop4): bogus logical sector size 616
[  203.202285][T16868] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:55 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661746c028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  203.240740][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.248762][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  203.261288][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.269300][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  203.315312][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.324061][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  203.336999][T16889] loop4: detected capacity change from 0 to 270
[  203.346700][T16889] FAT-fs (loop4): bogus logical sector size 620
[  203.351368][T16892] loop5: detected capacity change from 0 to 192
[  203.352997][T16889] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:55 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x24, 0x0, 0x0)

[  203.357320][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.373816][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  203.396744][T16889] loop4: detected capacity change from 0 to 270
[  203.413776][T16889] FAT-fs (loop4): bogus logical sector size 620
[  203.420080][T16889] FAT-fs (loop4): Can't find a valid FAT filesystem
[  203.451417][T16887] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  203.502209][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.510256][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  203.522270][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.530295][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:55 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:55 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:55 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:55 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x3c, 0x0, 0x0)

02:21:55 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617474028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  203.572318][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.580472][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  203.593166][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.601217][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:56 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:56 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x58, 0x0, 0x0)

[  203.660944][T16925] loop4: detected capacity change from 0 to 270
[  203.663142][T16922] loop5: detected capacity change from 0 to 192
[  203.679186][T16925] FAT-fs (loop4): bogus logical sector size 628
[  203.685521][T16925] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617478028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:56 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  203.721262][T16921] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  203.748996][T16925] loop4: detected capacity change from 0 to 270
[  203.757383][T16925] FAT-fs (loop4): bogus logical sector size 628
[  203.763747][T16925] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  203.828134][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.836357][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  203.849250][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.857367][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  203.908401][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.916431][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  203.940639][T16947] loop5: detected capacity change from 0 to 192
[  203.961241][T16951] loop4: detected capacity change from 0 to 270
[  203.973303][T16951] FAT-fs (loop4): bogus logical sector size 632
[  203.979672][T16951] FAT-fs (loop4): Can't find a valid FAT filesystem
[  203.986339][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  203.994336][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:56 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:56 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x196, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:56 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x1f4, 0x0, 0x0)

[  204.005209][T16949] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661747a028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  204.041489][T16951] loop4: detected capacity change from 0 to 270
[  204.055300][T16951] FAT-fs (loop4): bogus logical sector size 632
[  204.061595][T16951] FAT-fs (loop4): Can't find a valid FAT filesystem
[  204.081822][T16967] loop5: detected capacity change from 0 to 192
02:21:56 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x20c, 0x0, 0x0)

02:21:56 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x196, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  204.164460][T16979] loop4: detected capacity change from 0 to 270
[  204.177366][T16979] FAT-fs (loop4): bogus logical sector size 634
[  204.183663][T16979] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  204.216101][T16979] loop4: detected capacity change from 0 to 270
[  204.216748][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.224014][T16979] FAT-fs (loop4): bogus logical sector size 634
[  204.230347][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  204.232411][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.236636][T16979] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174fe028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  204.262563][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:56 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  204.311747][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.319889][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  204.333992][T16994] loop4: detected capacity change from 0 to 270
[  204.349361][T16994] FAT-fs (loop4): bogus logical sector size 766
[  204.351693][T16997] loop5: detected capacity change from 0 to 192
02:21:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000", 0x196, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  204.355672][T16994] FAT-fs (loop4): Can't find a valid FAT filesystem
[  204.377256][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.385400][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  204.405023][T16994] loop4: detected capacity change from 0 to 270
[  204.411959][T16994] FAT-fs (loop4): bogus logical sector size 766
[  204.418250][T16994] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:56 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:56 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x218, 0x0, 0x0)

02:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400038001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  204.478735][T17013] loop5: detected capacity change from 0 to 192
02:21:56 executing program 1:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2)
semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:56 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x241, 0x0, 0x0)

[  204.536806][T17020] loop4: detected capacity change from 0 to 270
[  204.556109][T17020] FAT-fs (loop4): bogus logical sector size 768
[  204.562443][T17020] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400058001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001054649", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  204.602766][T17031] loop5: detected capacity change from 0 to 192
[  204.648367][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.656486][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  204.682855][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:21:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:57 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001054649", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  204.690886][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:57 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x300, 0x0, 0x0)

[  204.745141][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.748276][T17045] loop4: detected capacity change from 0 to 270
[  204.753192][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  204.772997][T17045] FAT-fs (loop4): bogus logical sector size 1280
[  204.775940][T17044] loop5: detected capacity change from 0 to 192
[  204.779375][T17045] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:57 executing program 1 (fault-call:8 fault-nth:0):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  204.804266][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  204.812381][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  204.852270][T17056] FAULT_INJECTION: forcing a failure.
[  204.852270][T17056] name failslab, interval 1, probability 0, space 0, times 0
[  204.865026][T17056] CPU: 0 PID: 17056 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  204.873811][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  204.883854][T17056] Call Trace:
[  204.887227][T17056]  dump_stack_lvl+0xb7/0x103
[  204.891818][T17056]  dump_stack+0x11/0x1a
[  204.895971][T17056]  should_fail+0x23c/0x250
[  204.900385][T17056]  ? iovec_from_user+0x87/0x2d0
[  204.905364][T17056]  __should_failslab+0x81/0x90
[  204.910124][T17056]  should_failslab+0x5/0x20
[  204.914655][T17056]  __kmalloc+0x66/0x340
[  204.918919][T17056]  iovec_from_user+0x87/0x2d0
[  204.923600][T17056]  ? kstrtoull+0x321/0x360
[  204.928003][T17056]  __import_iovec+0x57/0x2c0
[  204.932587][T17056]  ? do_filp_open+0x18a/0x200
[  204.937293][T17056]  ? fsnotify_perm+0x59/0x2e0
[  204.942062][T17056]  ? __fsnotify_parent+0x32f/0x430
[  204.947166][T17056]  import_iovec+0x69/0x80
[  204.951502][T17056]  do_preadv+0x109/0x230
[  204.955829][T17056]  ? __fget_light+0x21b/0x260
[  204.960529][T17056]  ? __cond_resched+0x11/0x40
[  204.965297][T17056]  ? fput+0x2d/0x130
[  204.969196][T17056]  ? ksys_write+0x157/0x180
[  204.973803][T17056]  __x64_sys_preadv+0x54/0x60
[  204.978581][T17056]  do_syscall_64+0x3d/0x90
[  204.983166][T17056]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  204.989059][T17056] RIP: 0033:0x4665e9
02:21:57 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:57 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:57 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x3e8, 0x0, 0x0)

02:21:57 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x500, 0x0, 0x0)

[  204.992946][T17056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  205.012637][T17056] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  205.021044][T17056] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  205.029016][T17056] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  205.037640][T17056] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  205.045624][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.053602][T17056] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  205.065517][T17045] loop4: detected capacity change from 0 to 270
[  205.077737][T17045] FAT-fs (loop4): bogus logical sector size 1280
[  205.084119][T17045] FAT-fs (loop4): Can't find a valid FAT filesystem
02:21:57 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400068001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:57 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xa00, 0x0, 0x0)

02:21:57 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052", 0x1a1, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  205.108392][T17078] loop5: detected capacity change from 0 to 192
02:21:57 executing program 1 (fault-call:8 fault-nth:1):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  205.207443][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  205.215643][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  205.228020][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  205.236026][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  205.285401][T17089] loop5: detected capacity change from 0 to 192
[  205.293975][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  205.302018][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  205.323253][T17092] loop4: detected capacity change from 0 to 270
[  205.340437][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  205.348943][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  205.355280][T17095] FAULT_INJECTION: forcing a failure.
[  205.355280][T17095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.361994][T17092] FAT-fs (loop4): bogus logical sector size 1536
[  205.373011][T17095] CPU: 1 PID: 17095 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  205.379352][T17092] FAT-fs (loop4): Can't find a valid FAT filesystem
[  205.388083][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  205.388094][T17095] Call Trace:
[  205.388101][T17095]  dump_stack_lvl+0xb7/0x103
[  205.412726][T17095]  dump_stack+0x11/0x1a
[  205.416993][T17095]  should_fail+0x23c/0x250
[  205.421459][T17095]  should_fail_usercopy+0x16/0x20
[  205.426488][T17095]  _copy_from_user+0x1c/0xd0
[  205.431065][T17095]  iovec_from_user+0xc4/0x2d0
[  205.435739][T17095]  __import_iovec+0x57/0x2c0
[  205.440467][T17095]  ? do_filp_open+0x18a/0x200
[  205.445131][T17095]  ? fsnotify_perm+0x59/0x2e0
[  205.449882][T17095]  ? __fsnotify_parent+0x32f/0x430
[  205.455064][T17095]  import_iovec+0x69/0x80
[  205.459482][T17095]  do_preadv+0x109/0x230
[  205.463710][T17095]  ? __fget_light+0x21b/0x260
[  205.468386][T17095]  ? __cond_resched+0x11/0x40
[  205.473044][T17095]  ? fput+0x2d/0x130
[  205.476931][T17095]  ? ksys_write+0x157/0x180
[  205.481434][T17095]  __x64_sys_preadv+0x54/0x60
[  205.486096][T17095]  do_syscall_64+0x3d/0x90
[  205.490497][T17095]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  205.496401][T17095] RIP: 0033:0x4665e9
[  205.500282][T17095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  205.520053][T17095] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  205.528465][T17095] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  205.536436][T17095] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  205.544465][T17095] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  205.552426][T17095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.560387][T17095] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
02:21:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:57 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19e, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:57 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xc02, 0x0, 0x0)

02:21:57 executing program 1 (fault-call:8 fault-nth:2):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:57 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:57 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400078001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  205.690001][T17113] loop5: detected capacity change from 0 to 192
[  205.696830][T17111] loop4: detected capacity change from 0 to 270
[  205.705801][T17114] FAULT_INJECTION: forcing a failure.
[  205.705801][T17114] name failslab, interval 1, probability 0, space 0, times 0
[  205.718459][T17114] CPU: 0 PID: 17114 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  205.727293][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  205.737332][T17114] Call Trace:
[  205.740596][T17114]  dump_stack_lvl+0xb7/0x103
[  205.745214][T17114]  dump_stack+0x11/0x1a
[  205.749353][T17114]  should_fail+0x23c/0x250
[  205.753752][T17114]  __should_failslab+0x81/0x90
[  205.758497][T17114]  should_failslab+0x5/0x20
[  205.762980][T17114]  kmem_cache_alloc_node_trace+0x58/0x2e0
[  205.768767][T17114]  ? __kmalloc_node+0x30/0x40
[  205.773433][T17114]  __kmalloc_node+0x30/0x40
[  205.777960][T17114]  kvmalloc_node+0x81/0xf0
[  205.782375][T17114]  seq_read_iter+0x145/0x930
[  205.786950][T17114]  ? selinux_file_permission+0x22e/0x530
[  205.792605][T17114]  do_iter_readv_writev+0x2e8/0x360
[  205.797789][T17114]  do_iter_read+0x109/0x4b0
[  205.802330][T17114]  do_preadv+0x13b/0x230
[  205.806596][T17114]  ? __fget_light+0x21b/0x260
[  205.811344][T17114]  ? __cond_resched+0x11/0x40
[  205.816060][T17114]  ? fput+0x2d/0x130
[  205.819939][T17114]  ? ksys_write+0x157/0x180
[  205.824424][T17114]  __x64_sys_preadv+0x54/0x60
[  205.829095][T17114]  do_syscall_64+0x3d/0x90
[  205.833496][T17114]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  205.839373][T17114] RIP: 0033:0x4665e9
[  205.843244][T17114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  205.862938][T17114] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  205.871373][T17114] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  205.879412][T17114] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
02:21:58 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19e, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  205.887474][T17114] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  205.895425][T17114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.903426][T17114] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  205.928337][T17111] FAT-fs (loop4): bogus logical sector size 1792
02:21:58 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf00, 0x0, 0x0)

02:21:58 executing program 1 (fault-call:8 fault-nth:3):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  205.934717][T17111] FAT-fs (loop4): Can't find a valid FAT filesystem
[  205.943535][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  205.951675][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  205.964519][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  205.972577][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  205.975679][T17111] loop4: detected capacity change from 0 to 270
[  205.992953][T17111] FAT-fs (loop4): bogus logical sector size 1792
[  205.999322][T17111] FAT-fs (loop4): Can't find a valid FAT filesystem
[  206.024073][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  206.032102][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:21:58 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174010e8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:58 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x1800, 0x0, 0x0)

[  206.057770][T17133] loop5: detected capacity change from 0 to 192
[  206.070341][T17130] FAULT_INJECTION: forcing a failure.
[  206.070341][T17130] name failslab, interval 1, probability 0, space 0, times 0
[  206.083075][T17130] CPU: 1 PID: 17130 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  206.091835][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.101904][T17130] Call Trace:
[  206.102707][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  206.105175][T17130]  dump_stack_lvl+0xb7/0x103
[  206.105196][T17130]  dump_stack+0x11/0x1a
[  206.113172][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  206.117742][T17130]  should_fail+0x23c/0x250
[  206.117767][T17130]  __should_failslab+0x81/0x90
[  206.142056][T17130]  ? cgroup_show_path+0x67/0x240
[  206.147075][T17130]  should_failslab+0x5/0x20
[  206.151680][T17130]  kmem_cache_alloc_trace+0x49/0x310
[  206.156955][T17130]  ? cgroup_finalize_control+0xb90/0xb90
[  206.162603][T17130]  cgroup_show_path+0x67/0x240
[  206.167351][T17130]  ? cgroup_finalize_control+0xb90/0xb90
[  206.172981][T17130]  kernfs_sop_show_path+0xa1/0xd0
[  206.178013][T17130]  ? kernfs_sop_show_options+0xb0/0xb0
[  206.183454][T17130]  show_mountinfo+0xfc/0x4e0
[  206.188027][T17130]  m_show+0x34/0x40
[  206.191815][T17130]  seq_read_iter+0x60b/0x930
[  206.196492][T17130]  do_iter_readv_writev+0x2e8/0x360
[  206.201753][T17130]  do_iter_read+0x109/0x4b0
[  206.206256][T17130]  do_preadv+0x13b/0x230
[  206.210492][T17130]  ? __fget_light+0x21b/0x260
[  206.215145][T17130]  ? __cond_resched+0x11/0x40
[  206.219923][T17130]  ? fput+0x2d/0x130
[  206.223807][T17130]  ? ksys_write+0x157/0x180
[  206.228291][T17130]  __x64_sys_preadv+0x54/0x60
[  206.232956][T17130]  do_syscall_64+0x3d/0x90
[  206.237414][T17130]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  206.243302][T17130] RIP: 0033:0x4665e9
[  206.247174][T17130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  206.267006][T17130] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  206.275414][T17130] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  206.283364][T17130] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  206.291328][T17130] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  206.299297][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.307256][T17130] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  206.317045][T17129] __nla_validate_parse: 1 callbacks suppressed
[  206.317059][T17129] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  206.340890][T17143] loop4: detected capacity change from 0 to 270
02:21:58 executing program 1 (fault-call:8 fault-nth:4):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  206.373718][T17143] FAT-fs (loop4): bogus logical sector size 3585
[  206.380119][T17143] FAT-fs (loop4): Can't find a valid FAT filesystem
[  206.426338][T17152] FAULT_INJECTION: forcing a failure.
[  206.426338][T17152] name failslab, interval 1, probability 0, space 0, times 0
[  206.438998][T17152] CPU: 0 PID: 17152 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  206.447761][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.457808][T17152] Call Trace:
[  206.461085][T17152]  dump_stack_lvl+0xb7/0x103
[  206.465747][T17152]  dump_stack+0x11/0x1a
[  206.470392][T17152]  should_fail+0x23c/0x250
02:21:58 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:58 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:58 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x1802, 0x0, 0x0)

02:21:58 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000f8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:58 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19e, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  206.474796][T17152]  __should_failslab+0x81/0x90
[  206.479568][T17152]  ? cgroup_show_path+0x67/0x240
[  206.484576][T17152]  should_failslab+0x5/0x20
[  206.489079][T17152]  kmem_cache_alloc_trace+0x49/0x310
[  206.494389][T17152]  ? cgroup_finalize_control+0xb90/0xb90
[  206.500049][T17152]  cgroup_show_path+0x67/0x240
[  206.504831][T17152]  ? cgroup_finalize_control+0xb90/0xb90
[  206.510541][T17152]  kernfs_sop_show_path+0xa1/0xd0
[  206.515664][T17152]  ? kernfs_sop_show_options+0xb0/0xb0
[  206.521291][T17152]  show_mountinfo+0xfc/0x4e0
[  206.525959][T17152]  m_show+0x34/0x40
[  206.529888][T17152]  seq_read_iter+0x60b/0x930
[  206.534479][T17152]  do_iter_readv_writev+0x2e8/0x360
[  206.539715][T17152]  do_iter_read+0x109/0x4b0
[  206.544339][T17152]  do_preadv+0x13b/0x230
[  206.548663][T17152]  ? __fget_light+0x21b/0x260
[  206.553331][T17152]  ? __cond_resched+0x11/0x40
[  206.558006][T17152]  ? fput+0x2d/0x130
[  206.561913][T17152]  ? ksys_write+0x157/0x180
[  206.566581][T17152]  __x64_sys_preadv+0x54/0x60
[  206.571266][T17152]  do_syscall_64+0x3d/0x90
02:21:58 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000, 0x0, 0x0)

[  206.575726][T17152]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  206.581636][T17152] RIP: 0033:0x4665e9
[  206.582072][T17158] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  206.585521][T17152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  206.585540][T17152] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2400, 0x0, 0x0)

02:21:59 executing program 1 (fault-call:8 fault-nth:5):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  206.585558][T17152] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  206.585569][T17152] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  206.639235][T17152] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  206.647209][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.655223][T17152] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
02:21:59 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617401108001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x3c00, 0x0, 0x0)

[  206.705601][T17170] loop4: detected capacity change from 0 to 270
[  206.724883][T17170] FAT-fs (loop4): bogus logical sector size 3840
[  206.731293][T17170] FAT-fs (loop4): Can't find a valid FAT filesystem
[  206.798909][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  206.807038][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  206.819204][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  206.827430][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:21:59 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  206.865729][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  206.873776][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  206.882930][T17182] loop5: detected capacity change from 0 to 192
[  206.898231][T17186] loop4: detected capacity change from 0 to 270
[  206.908043][T17184] FAULT_INJECTION: forcing a failure.
[  206.908043][T17184] name failslab, interval 1, probability 0, space 0, times 0
[  206.916838][T17186] FAT-fs (loop4): bogus logical sector size 4097
[  206.920669][T17184] CPU: 0 PID: 17184 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  206.926997][T17186] FAT-fs (loop4): Can't find a valid FAT filesystem
[  206.935702][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.935715][T17184] Call Trace:
[  206.935721][T17184]  dump_stack_lvl+0xb7/0x103
[  206.942874][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  206.952429][T17184]  dump_stack+0x11/0x1a
[  206.952450][T17184]  should_fail+0x23c/0x250
[  206.955744][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  206.960296][T17184]  __should_failslab+0x81/0x90
[  206.992688][T17184]  ? cgroup_show_path+0x67/0x240
[  206.997707][T17184]  should_failslab+0x5/0x20
[  207.002213][T17184]  kmem_cache_alloc_trace+0x49/0x310
[  207.007526][T17184]  ? cgroup_finalize_control+0xb90/0xb90
[  207.013161][T17184]  cgroup_show_path+0x67/0x240
[  207.017923][T17184]  ? cgroup_finalize_control+0xb90/0xb90
[  207.023548][T17184]  kernfs_sop_show_path+0xa1/0xd0
[  207.028583][T17184]  ? kernfs_sop_show_options+0xb0/0xb0
[  207.034223][T17184]  show_mountinfo+0xfc/0x4e0
[  207.038817][T17184]  m_show+0x34/0x40
[  207.042651][T17184]  seq_read_iter+0x60b/0x930
[  207.047352][T17184]  do_iter_readv_writev+0x2e8/0x360
[  207.052547][T17184]  do_iter_read+0x109/0x4b0
[  207.057134][T17184]  do_preadv+0x13b/0x230
[  207.057631][T17194] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  207.061365][T17184]  ? __fget_light+0x21b/0x260
[  207.061385][T17184]  ? __cond_resched+0x11/0x40
[  207.080048][T17184]  ? fput+0x2d/0x130
[  207.083981][T17184]  ? ksys_write+0x157/0x180
[  207.088524][T17184]  __x64_sys_preadv+0x54/0x60
[  207.093186][T17184]  do_syscall_64+0x3d/0x90
[  207.097588][T17184]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  207.103662][T17184] RIP: 0033:0x4665e9
02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x4102, 0x0, 0x0)

[  207.107543][T17184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  207.127287][T17184] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  207.135725][T17184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  207.143707][T17184] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  207.151677][T17184] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
02:21:59 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:59 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x5800, 0x0, 0x0)

[  207.159645][T17184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.167612][T17184] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  207.199952][T17186] loop4: detected capacity change from 0 to 270
02:21:59 executing program 1 (fault-call:8 fault-nth:6):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xd7ff, 0x0, 0x0)

[  207.224582][T17186] FAT-fs (loop4): bogus logical sector size 4097
[  207.230947][T17186] FAT-fs (loop4): Can't find a valid FAT filesystem
[  207.284897][T17211] FAULT_INJECTION: forcing a failure.
[  207.284897][T17211] name failslab, interval 1, probability 0, space 0, times 0
[  207.297571][T17211] CPU: 1 PID: 17211 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  207.299737][T17212] loop5: detected capacity change from 0 to 192
[  207.306436][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  207.306450][T17211] Call Trace:
[  207.306457][T17211]  dump_stack_lvl+0xb7/0x103
[  207.330733][T17211]  dump_stack+0x11/0x1a
[  207.334986][T17211]  should_fail+0x23c/0x250
[  207.339429][T17211]  __should_failslab+0x81/0x90
[  207.344244][T17211]  ? cgroup_show_path+0x67/0x240
[  207.349178][T17211]  should_failslab+0x5/0x20
[  207.353848][T17211]  kmem_cache_alloc_trace+0x49/0x310
[  207.359160][T17211]  ? cgroup_finalize_control+0xb90/0xb90
[  207.364795][T17211]  cgroup_show_path+0x67/0x240
[  207.369583][T17211]  ? cgroup_finalize_control+0xb90/0xb90
[  207.375205][T17211]  kernfs_sop_show_path+0xa1/0xd0
[  207.380281][T17211]  ? kernfs_sop_show_options+0xb0/0xb0
[  207.385728][T17211]  show_mountinfo+0xfc/0x4e0
[  207.390302][T17211]  m_show+0x34/0x40
[  207.394090][T17211]  seq_read_iter+0x60b/0x930
[  207.398668][T17211]  do_iter_readv_writev+0x2e8/0x360
[  207.403875][T17211]  do_iter_read+0x109/0x4b0
[  207.408458][T17211]  do_preadv+0x13b/0x230
[  207.412757][T17211]  ? __fget_light+0x21b/0x260
[  207.417504][T17211]  ? __cond_resched+0x11/0x40
[  207.422211][T17211]  ? fput+0x2d/0x130
[  207.426089][T17211]  ? ksys_write+0x157/0x180
[  207.430578][T17211]  __x64_sys_preadv+0x54/0x60
[  207.435389][T17211]  do_syscall_64+0x3d/0x90
[  207.439799][T17211]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  207.445720][T17211] RIP: 0033:0x4665e9
[  207.449608][T17211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  207.469203][T17211] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  207.477617][T17211] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
02:21:59 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400228001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:21:59 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xe803, 0x0, 0x0)

02:21:59 executing program 1 (fault-call:8 fault-nth:7):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  207.485906][T17211] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  207.494302][T17211] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  207.502325][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.510282][T17211] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
02:21:59 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:21:59 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf401, 0x0, 0x0)

[  207.606560][T17232] loop5: detected capacity change from 0 to 192
[  207.623535][T17235] loop4: detected capacity change from 0 to 270
[  207.649019][T17235] FAT-fs (loop4): bogus logical sector size 8704
[  207.654700][T17236] FAULT_INJECTION: forcing a failure.
[  207.654700][T17236] name failslab, interval 1, probability 0, space 0, times 0
[  207.655393][T17235] FAT-fs (loop4): Can't find a valid FAT filesystem
[  207.667977][T17236] CPU: 1 PID: 17236 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  207.683307][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  207.693434][T17236] Call Trace:
[  207.696718][T17236]  dump_stack_lvl+0xb7/0x103
[  207.701302][T17236]  dump_stack+0x11/0x1a
[  207.705459][T17236]  should_fail+0x23c/0x250
[  207.709993][T17236]  __should_failslab+0x81/0x90
[  207.714769][T17236]  ? cgroup_show_path+0x67/0x240
[  207.719695][T17236]  should_failslab+0x5/0x20
[  207.724184][T17236]  kmem_cache_alloc_trace+0x49/0x310
[  207.729633][T17236]  ? cgroup_finalize_control+0xb90/0xb90
[  207.735250][T17236]  cgroup_show_path+0x67/0x240
[  207.740004][T17236]  ? cgroup_finalize_control+0xb90/0xb90
[  207.745624][T17236]  kernfs_sop_show_path+0xa1/0xd0
[  207.750636][T17236]  ? kernfs_sop_show_options+0xb0/0xb0
[  207.756080][T17236]  show_mountinfo+0xfc/0x4e0
[  207.760668][T17236]  m_show+0x34/0x40
[  207.764487][T17236]  seq_read_iter+0x60b/0x930
[  207.769117][T17236]  do_iter_readv_writev+0x2e8/0x360
[  207.774301][T17236]  do_iter_read+0x109/0x4b0
[  207.778786][T17236]  do_preadv+0x13b/0x230
[  207.783093][T17236]  ? __fget_light+0x21b/0x260
[  207.787754][T17236]  ? __cond_resched+0x11/0x40
[  207.792414][T17236]  ? kcsan_setup_watchpoint+0x231/0x3e0
[  207.798150][T17236]  __x64_sys_preadv+0x54/0x60
[  207.802839][T17236]  do_syscall_64+0x3d/0x90
[  207.807279][T17236]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  207.813180][T17236] RIP: 0033:0x4665e9
[  207.817233][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  207.836832][T17236] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
02:22:00 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  207.845233][T17236] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  207.853192][T17236] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  207.861287][T17236] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  207.869274][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.877226][T17236] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
02:22:00 executing program 1 (fault-call:8 fault-nth:8):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  207.908216][T17235] loop4: detected capacity change from 0 to 270
[  207.916599][T17235] FAT-fs (loop4): bogus logical sector size 8704
[  207.919366][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  207.923021][T17235] FAT-fs (loop4): Can't find a valid FAT filesystem
[  207.931102][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  207.933285][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  207.956856][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  208.003741][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  208.011875][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  208.018461][T17251] loop5: detected capacity change from 0 to 192
[  208.037258][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  208.045273][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  208.059536][T17254] FAULT_INJECTION: forcing a failure.
[  208.059536][T17254] name failslab, interval 1, probability 0, space 0, times 0
[  208.072207][T17254] CPU: 0 PID: 17254 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  208.081076][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  208.091127][T17254] Call Trace:
[  208.094413][T17254]  dump_stack_lvl+0xb7/0x103
[  208.096494][T17252] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  208.099069][T17254]  dump_stack+0x11/0x1a
[  208.099089][T17254]  should_fail+0x23c/0x250
[  208.116956][T17254]  __should_failslab+0x81/0x90
[  208.121709][T17254]  ? cgroup_show_path+0x67/0x240
[  208.126682][T17254]  should_failslab+0x5/0x20
[  208.131188][T17254]  kmem_cache_alloc_trace+0x49/0x310
[  208.136478][T17254]  ? cgroup_finalize_control+0xb90/0xb90
[  208.142238][T17254]  cgroup_show_path+0x67/0x240
[  208.147006][T17254]  ? cgroup_finalize_control+0xb90/0xb90
[  208.152641][T17254]  kernfs_sop_show_path+0xa1/0xd0
[  208.157667][T17254]  ? kernfs_sop_show_options+0xb0/0xb0
[  208.163218][T17254]  show_mountinfo+0xfc/0x4e0
[  208.167919][T17254]  m_show+0x34/0x40
[  208.171750][T17254]  seq_read_iter+0x60b/0x930
[  208.176340][T17254]  do_iter_readv_writev+0x2e8/0x360
[  208.181537][T17254]  do_iter_read+0x109/0x4b0
[  208.186218][T17254]  do_preadv+0x13b/0x230
[  208.190457][T17254]  ? __fget_light+0x21b/0x260
[  208.195123][T17254]  ? __cond_resched+0x11/0x40
[  208.199819][T17254]  ? fput+0x2d/0x130
[  208.203789][T17254]  ? ksys_write+0x157/0x180
[  208.208397][T17254]  __x64_sys_preadv+0x54/0x60
[  208.213085][T17254]  do_syscall_64+0x3d/0x90
[  208.217487][T17254]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  208.223376][T17254] RIP: 0033:0x4665e9
[  208.227335][T17254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
02:22:00 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c45", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:00 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400408001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:00 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xff0f, 0x0, 0x0)

02:22:00 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:00 executing program 1 (fault-call:8 fault-nth:9):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:00 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000800"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  208.247020][T17254] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  208.255434][T17254] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  208.263408][T17254] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  208.271371][T17254] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  208.279345][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.287401][T17254] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  208.362736][T17273] FAULT_INJECTION: forcing a failure.
[  208.362736][T17273] name failslab, interval 1, probability 0, space 0, times 0
[  208.373286][T17275] loop5: detected capacity change from 0 to 192
[  208.375424][T17273] CPU: 0 PID: 17273 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  208.390413][T17273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  208.400460][T17273] Call Trace:
[  208.403726][T17273]  dump_stack_lvl+0xb7/0x103
[  208.408387][T17273]  dump_stack+0x11/0x1a
[  208.412525][T17273]  should_fail+0x23c/0x250
[  208.416932][T17273]  __should_failslab+0x81/0x90
[  208.421680][T17273]  ? cgroup_show_path+0x67/0x240
[  208.426648][T17273]  should_failslab+0x5/0x20
[  208.431136][T17273]  kmem_cache_alloc_trace+0x49/0x310
[  208.436422][T17273]  ? cgroup_finalize_control+0xb90/0xb90
[  208.442179][T17273]  cgroup_show_path+0x67/0x240
[  208.447086][T17273]  ? cgroup_finalize_control+0xb90/0xb90
[  208.452708][T17273]  kernfs_sop_show_path+0xa1/0xd0
[  208.457808][T17273]  ? kernfs_sop_show_options+0xb0/0xb0
[  208.463381][T17273]  show_mountinfo+0xfc/0x4e0
[  208.468040][T17273]  m_show+0x34/0x40
[  208.471849][T17273]  seq_read_iter+0x60b/0x930
[  208.476423][T17273]  do_iter_readv_writev+0x2e8/0x360
[  208.481700][T17273]  do_iter_read+0x109/0x4b0
[  208.486220][T17273]  do_preadv+0x13b/0x230
[  208.490453][T17273]  ? __fget_light+0x21b/0x260
[  208.495131][T17273]  ? __cond_resched+0x11/0x40
[  208.499857][T17273]  ? fput+0x2d/0x130
[  208.503885][T17273]  ? ksys_write+0x157/0x180
[  208.508383][T17273]  __x64_sys_preadv+0x54/0x60
[  208.513052][T17273]  do_syscall_64+0x3d/0x90
[  208.517459][T17273]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  208.523358][T17273] RIP: 0033:0x4665e9
[  208.527315][T17273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  208.547119][T17273] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  208.555620][T17273] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  208.563574][T17273] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  208.571533][T17273] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  208.579501][T17273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  208.587612][T17273] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  208.604298][T17271] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
02:22:01 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:01 executing program 1 (fault-call:8 fault-nth:10):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:01 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xffd7, 0x0, 0x0)

[  208.605071][T17277] loop4: detected capacity change from 0 to 270
[  208.643980][T17277] FAT-fs (loop4): bogus logical sector size 16384
[  208.650491][T17277] FAT-fs (loop4): Can't find a valid FAT filesystem
02:22:01 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000800"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  208.731292][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  208.739347][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  208.751883][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  208.754202][T17277] loop4: detected capacity change from 0 to 270
[  208.759903][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:01 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617405f88001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  208.767091][T17277] FAT-fs (loop4): bogus logical sector size 16384
[  208.783561][T17277] FAT-fs (loop4): Can't find a valid FAT filesystem
[  208.806063][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  208.814083][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  208.848988][T17299] loop5: detected capacity change from 0 to 192
[  208.856470][T17301] FAULT_INJECTION: forcing a failure.
[  208.856470][T17301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.869689][T17301] CPU: 1 PID: 17301 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  208.878558][T17301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  208.886035][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  208.888622][T17301] Call Trace:
[  208.888631][T17301]  dump_stack_lvl+0xb7/0x103
[  208.896624][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  208.899877][T17301]  dump_stack+0x11/0x1a
[  208.919575][T17301]  should_fail+0x23c/0x250
[  208.924047][T17301]  should_fail_usercopy+0x16/0x20
[  208.929073][T17301]  _copy_to_iter+0x131/0xbc0
[  208.933661][T17301]  ? check_stack_object+0x61/0x70
[  208.938698][T17301]  ? __virt_addr_valid+0x15a/0x1a0
[  208.943838][T17301]  ? __check_object_size+0x253/0x310
02:22:01 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x20000, 0x0, 0x0)

02:22:01 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  208.949149][T17301]  seq_read_iter+0x7f2/0x930
[  208.953835][T17301]  do_iter_readv_writev+0x2e8/0x360
[  208.959031][T17301]  do_iter_read+0x109/0x4b0
[  208.963540][T17301]  do_preadv+0x13b/0x230
[  208.967788][T17301]  ? __fget_light+0x21b/0x260
[  208.972468][T17301]  ? __cond_resched+0x11/0x40
[  208.977140][T17301]  ? fput+0x2d/0x130
[  208.981043][T17301]  ? ksys_write+0x157/0x180
[  208.985545][T17301]  __x64_sys_preadv+0x54/0x60
[  208.990362][T17301]  do_syscall_64+0x3d/0x90
[  208.994784][T17301]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  208.997337][T17312] loop4: detected capacity change from 0 to 270
[  209.000674][T17301] RIP: 0033:0x4665e9
[  209.000690][T17301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  209.010807][T17312] FAT-fs (loop4): bogus logical sector size 63493
[  209.030401][T17301] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
02:22:01 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x40000, 0x0, 0x0)

[  209.030426][T17301] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  209.030437][T17301] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  209.030447][T17301] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  209.030458][T17301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.030467][T17301] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  209.042314][T17297] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
02:22:01 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:01 executing program 1 (fault-call:8 fault-nth:11):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:01 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x50000, 0x0, 0x0)

[  209.045384][T17312] FAT-fs (loop4): Can't find a valid FAT filesystem
[  209.146501][T17312] loop4: detected capacity change from 0 to 270
[  209.147403][T17328] FAULT_INJECTION: forcing a failure.
[  209.147403][T17328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.160458][T17312] FAT-fs (loop4): bogus logical sector size 63493
[  209.165846][T17328] CPU: 1 PID: 17328 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  209.172215][T17312] FAT-fs (loop4): Can't find a valid FAT filesystem
[  209.180949][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  209.180962][T17328] Call Trace:
[  209.180968][T17328]  dump_stack_lvl+0xb7/0x103
[  209.205465][T17328]  dump_stack+0x11/0x1a
[  209.209621][T17328]  should_fail+0x23c/0x250
[  209.214054][T17328]  should_fail_usercopy+0x16/0x20
[  209.219093][T17328]  _copy_to_iter+0x131/0xbc0
[  209.223685][T17328]  ? check_stack_object+0x61/0x70
[  209.228703][T17328]  ? __virt_addr_valid+0x15a/0x1a0
[  209.233866][T17328]  ? __check_object_size+0x253/0x310
[  209.239192][T17328]  seq_read_iter+0x7f2/0x930
[  209.243771][T17328]  do_iter_readv_writev+0x2e8/0x360
[  209.248957][T17328]  do_iter_read+0x109/0x4b0
[  209.253444][T17328]  do_preadv+0x13b/0x230
[  209.257720][T17328]  ? __fget_light+0x21b/0x260
[  209.262501][T17328]  ? __cond_resched+0x11/0x40
[  209.267262][T17328]  ? fput+0x2d/0x130
[  209.271141][T17328]  ? ksys_write+0x157/0x180
[  209.275627][T17328]  __x64_sys_preadv+0x54/0x60
[  209.280292][T17328]  do_syscall_64+0x3d/0x90
[  209.284706][T17328]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  209.290604][T17328] RIP: 0033:0x4665e9
[  209.294490][T17328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  209.314391][T17328] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  209.322795][T17328] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  209.330752][T17328] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  209.338864][T17328] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
02:22:01 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x1000000, 0x0, 0x0)

02:22:01 executing program 1 (fault-call:8 fault-nth:12):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  209.346830][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.354781][T17328] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  209.385877][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:22:01 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174fffe8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  209.393909][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  209.406603][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  209.414625][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  209.450950][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  209.458986][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  209.482989][T17339] FAULT_INJECTION: forcing a failure.
[  209.482989][T17339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.489169][T17338] loop5: detected capacity change from 0 to 192
[  209.496055][T17339] CPU: 1 PID: 17339 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  209.509155][T17338] isofs_fill_super: root inode is not a directory. Corrupted media?
[  209.511087][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  209.511100][T17339] Call Trace:
[  209.511107][T17339]  dump_stack_lvl+0xb7/0x103
[  209.511127][T17339]  dump_stack+0x11/0x1a
[  209.519392][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  209.529121][T17339]  should_fail+0x23c/0x250
[  209.529147][T17339]  should_fail_usercopy+0x16/0x20
[  209.532415][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  209.536975][T17339]  _copy_to_iter+0x131/0xbc0
[  209.567135][T17348] loop4: detected capacity change from 0 to 270
[  209.569651][T17339]  ? check_stack_object+0x61/0x70
[  209.582845][T17348] FAT-fs (loop4): bogus logical sector size 65279
[  209.585479][T17339]  ? __virt_addr_valid+0x15a/0x1a0
02:22:01 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000000, 0x0, 0x0)

[  209.585505][T17339]  ? __check_object_size+0x253/0x310
[  209.592001][T17348] FAT-fs (loop4): Can't find a valid FAT filesystem
[  209.597083][T17339]  seq_read_iter+0x7f2/0x930
[  209.597110][T17339]  do_iter_readv_writev+0x2e8/0x360
[  209.597130][T17339]  do_iter_read+0x109/0x4b0
[  209.623228][T17339]  do_preadv+0x13b/0x230
[  209.627535][T17339]  ? __fget_light+0x21b/0x260
[  209.632255][T17339]  ? __cond_resched+0x11/0x40
[  209.636925][T17339]  ? fput+0x2d/0x130
[  209.640816][T17339]  ? ksys_write+0x157/0x180
[  209.645376][T17339]  __x64_sys_preadv+0x54/0x60
[  209.650055][T17339]  do_syscall_64+0x3d/0x90
[  209.654537][T17339]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  209.660461][T17339] RIP: 0033:0x4665e9
[  209.664364][T17339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  209.684040][T17339] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  209.692460][T17339] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
02:22:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000800"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:02 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x3000000, 0x0, 0x0)

02:22:02 executing program 1 (fault-call:8 fault-nth:13):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  209.700521][T17339] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  209.708477][T17339] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  209.716436][T17339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.724387][T17339] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  209.777898][T17348] loop4: detected capacity change from 0 to 270
[  209.794391][T17362] FAULT_INJECTION: forcing a failure.
[  209.794391][T17362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.801343][T17348] FAT-fs (loop4): bogus logical sector size 65279
[  209.807484][T17362] CPU: 1 PID: 17362 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  209.807505][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  209.807515][T17362] Call Trace:
[  209.807522][T17362]  dump_stack_lvl+0xb7/0x103
[  209.813940][T17348] FAT-fs (loop4): Can't find a valid FAT filesystem
[  209.822658][T17362]  dump_stack+0x11/0x1a
[  209.851219][T17362]  should_fail+0x23c/0x250
[  209.855639][T17362]  should_fail_usercopy+0x16/0x20
[  209.860724][T17362]  _copy_to_iter+0x131/0xbc0
[  209.865404][T17362]  ? check_stack_object+0x61/0x70
[  209.870438][T17362]  ? __virt_addr_valid+0x15a/0x1a0
[  209.875564][T17362]  ? __check_object_size+0x253/0x310
[  209.880864][T17362]  seq_read_iter+0x7f2/0x930
[  209.885450][T17362]  do_iter_readv_writev+0x2e8/0x360
[  209.890647][T17362]  do_iter_read+0x109/0x4b0
[  209.895149][T17362]  do_preadv+0x13b/0x230
[  209.899422][T17362]  ? __fget_light+0x21b/0x260
[  209.904101][T17362]  ? __cond_resched+0x11/0x40
[  209.908791][T17362]  ? fput+0x2d/0x130
[  209.912751][T17362]  ? ksys_write+0x157/0x180
[  209.917264][T17362]  __x64_sys_preadv+0x54/0x60
[  209.921964][T17362]  do_syscall_64+0x3d/0x90
02:22:02 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:02 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  209.926824][T17362]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  209.932761][T17362] RIP: 0033:0x4665e9
[  209.936634][T17362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  209.956381][T17362] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  209.964828][T17362] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
02:22:02 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x4000000, 0x0, 0x0)

[  209.972869][T17362] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  209.980835][T17362] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  209.988849][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.996820][T17362] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  210.000066][T17374] loop5: detected capacity change from 0 to 192
[  210.013854][T17367] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
02:22:02 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x8000000, 0x0, 0x0)

02:22:02 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400038001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:02 executing program 1 (fault-call:8 fault-nth:14):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:02 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  210.023613][T17374] isofs_fill_super: root inode is not a directory. Corrupted media?
02:22:02 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xa000000, 0x0, 0x0)

[  210.131644][T17389] loop4: detected capacity change from 0 to 270
[  210.138842][T17392] loop5: detected capacity change from 0 to 192
[  210.148480][T17389] FAT-fs (loop4): bogus logical sector size 768
[  210.154770][T17389] FAT-fs (loop4): Can't find a valid FAT filesystem
[  210.167492][T17392] isofs_fill_super: root inode is not a directory. Corrupted media?
[  210.183056][T17395] FAULT_INJECTION: forcing a failure.
[  210.183056][T17395] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  210.196775][T17395] CPU: 1 PID: 17395 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  210.205516][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  210.215712][T17395] Call Trace:
[  210.218999][T17395]  dump_stack_lvl+0xb7/0x103
[  210.223568][T17395]  dump_stack+0x11/0x1a
[  210.227766][T17395]  should_fail+0x23c/0x250
[  210.232216][T17395]  __alloc_pages+0x102/0x320
[  210.236870][T17395]  alloc_pages_vma+0x513/0x680
[  210.241691][T17395]  ? __brelse+0x2c/0x50
[  210.245839][T17395]  ? xas_load+0x284/0x2a0
[  210.250155][T17395]  ? mark_page_accessed+0x1e3/0x550
[  210.255417][T17395]  wp_page_copy+0x121/0x10c0
[  210.260078][T17395]  ? put_dec_trunc8+0x10e/0x130
[  210.264924][T17395]  ? should_fail+0x2a/0x250
[  210.269482][T17395]  do_wp_page+0x5a8/0xba0
[  210.273797][T17395]  handle_mm_fault+0xb11/0x1a50
[  210.278742][T17395]  do_user_addr_fault+0x609/0xbe0
[  210.283821][T17395]  exc_page_fault+0x91/0x220
[  210.288464][T17395]  asm_exc_page_fault+0x1e/0x30
[  210.293307][T17395] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  210.299911][T17395] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  210.319556][T17395] RSP: 0018:ffffc900034abba0 EFLAGS: 00010202
[  210.325610][T17395] RAX: ffff8881351f1a60 RBX: ffff888132328177 RCX: 0000000000000e7d
[  210.333571][T17395] RDX: 0000000000000e7d RSI: ffff888132328177 RDI: 0000000020001380
[  210.341522][T17395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001ffffffffffff
[  210.349473][T17395] R10: 0001888132328ff3 R11: ffff8881351f1080 R12: 0000000000000e7d
[  210.357479][T17395] R13: 0000000000000177 R14: ffff88812cc55038 R15: 0000000020001380
[  210.365482][T17395]  _copy_to_iter+0x1a5/0xbc0
[  210.370131][T17395]  ? check_stack_object+0x61/0x70
[  210.375144][T17395]  ? __virt_addr_valid+0x15a/0x1a0
[  210.380317][T17395]  ? __check_object_size+0x253/0x310
[  210.385660][T17395]  seq_read_iter+0x7f2/0x930
[  210.390243][T17395]  do_iter_readv_writev+0x2e8/0x360
[  210.395548][T17395]  do_iter_read+0x109/0x4b0
[  210.400207][T17395]  do_preadv+0x13b/0x230
[  210.404472][T17395]  ? __fget_light+0x21b/0x260
[  210.409130][T17395]  ? __cond_resched+0x11/0x40
[  210.413799][T17395]  ? fput+0x2d/0x130
[  210.417757][T17395]  ? ksys_write+0x157/0x180
[  210.422335][T17395]  __x64_sys_preadv+0x54/0x60
[  210.427114][T17395]  do_syscall_64+0x3d/0x90
[  210.431578][T17395]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  210.437486][T17395] RIP: 0033:0x4665e9
[  210.441365][T17395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  210.460952][T17395] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  210.469358][T17395] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
02:22:02 executing program 1 (fault-call:8 fault-nth:15):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  210.477325][T17395] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  210.485325][T17395] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  210.493355][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  210.501309][T17395] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  210.525191][T17389] loop4: detected capacity change from 0 to 270
[  210.533997][T17389] FAT-fs (loop4): bogus logical sector size 768
[  210.540321][T17389] FAT-fs (loop4): Can't find a valid FAT filesystem
[  210.555027][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  210.563559][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  210.576690][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  210.584754][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:02 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:02 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400048001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:03 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xc020000, 0x0, 0x0)

[  210.677959][T17408] FAULT_INJECTION: forcing a failure.
[  210.677959][T17408] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  210.691422][T17408] CPU: 1 PID: 17408 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  210.700169][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  210.710405][T17408] Call Trace:
[  210.713743][T17408]  dump_stack_lvl+0xb7/0x103
[  210.718314][T17408]  dump_stack+0x11/0x1a
[  210.722503][T17408]  should_fail+0x23c/0x250
[  210.726918][T17408]  __alloc_pages+0x102/0x320
[  210.731510][T17408]  alloc_pages_vma+0x513/0x680
[  210.736261][T17408]  do_anonymous_page+0x16e/0x8a0
[  210.741360][T17408]  ? do_wp_page+0x5a8/0xba0
[  210.745840][T17408]  handle_mm_fault+0x98f/0x1a50
[  210.750709][T17408]  ? finish_task_switch+0xce/0x290
[  210.755946][T17408]  do_user_addr_fault+0x609/0xbe0
[  210.760970][T17408]  exc_page_fault+0x91/0x220
[  210.765547][T17408]  asm_exc_page_fault+0x1e/0x30
[  210.770468][T17408] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  210.777075][T17408] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  210.796747][T17408] RSP: 0018:ffffc900024c3ba0 EFLAGS: 00010202
[  210.802834][T17408] RAX: ffff888109036aa0 RBX: ffff888132328177 RCX: 00000000000001fd
[  210.810928][T17408] RDX: 0000000000000e7d RSI: ffff888132328df7 RDI: 0000000020002000
[  210.818909][T17408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001ffffffffffff
[  210.826871][T17408] R10: 0001888132328ff3 R11: ffff8881090360c0 R12: 0000000000000e7d
[  210.834905][T17408] R13: 0000000000000177 R14: ffff88812cc55038 R15: 0000000020001380
[  210.842960][T17408]  _copy_to_iter+0x1a5/0xbc0
[  210.847582][T17408]  ? check_stack_object+0x61/0x70
[  210.852588][T17408]  ? __virt_addr_valid+0x15a/0x1a0
[  210.857693][T17408]  ? __check_object_size+0x253/0x310
[  210.862983][T17408]  seq_read_iter+0x7f2/0x930
[  210.867613][T17408]  do_iter_readv_writev+0x2e8/0x360
[  210.872819][T17408]  do_iter_read+0x109/0x4b0
[  210.877316][T17408]  do_preadv+0x13b/0x230
[  210.881549][T17408]  ? __fget_light+0x21b/0x260
[  210.886202][T17408]  ? __cond_resched+0x11/0x40
[  210.890943][T17408]  ? fput+0x2d/0x130
[  210.894842][T17408]  ? ksys_write+0x157/0x180
[  210.899322][T17408]  __x64_sys_preadv+0x54/0x60
[  210.903990][T17408]  do_syscall_64+0x3d/0x90
[  210.908387][T17408]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  210.914285][T17408] RIP: 0033:0x4665e9
[  210.918212][T17408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  210.938070][T17408] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  210.946523][T17408] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  210.954573][T17408] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003
[  210.962536][T17408] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  210.970489][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  210.978452][T17408] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  210.989338][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  210.997378][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  211.008882][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.016898][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:03 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:03 executing program 1 (fault-call:8 fault-nth:16):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:03 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf000000, 0x0, 0x0)

02:22:03 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  211.062777][T17417] loop5: detected capacity change from 0 to 192
[  211.074785][T17418] loop4: detected capacity change from 0 to 270
02:22:03 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400058001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  211.128627][T17415] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.161568][T17435] loop5: detected capacity change from 0 to 192
[  211.168257][T17431] FAULT_INJECTION: forcing a failure.
02:22:03 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x18000000, 0x0, 0x0)

[  211.168257][T17431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  211.181529][T17431] CPU: 1 PID: 17431 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0
[  211.190405][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  211.200538][T17431] Call Trace:
[  211.203881][T17431]  dump_stack_lvl+0xb7/0x103
[  211.208468][T17431]  dump_stack+0x11/0x1a
[  211.212672][T17431]  should_fail+0x23c/0x250
[  211.217108][T17431]  should_fail_usercopy+0x16/0x20
[  211.222178][T17431]  _copy_to_user+0x1c/0x90
[  211.226652][T17431]  simple_read_from_buffer+0xab/0x120
[  211.232019][T17431]  proc_fail_nth_read+0xf6/0x140
[  211.237037][T17431]  ? rw_verify_area+0x136/0x250
[  211.241871][T17431]  ? proc_fault_inject_write+0x200/0x200
[  211.247508][T17431]  vfs_read+0x154/0x5d0
[  211.251658][T17431]  ? __fget_light+0x21b/0x260
[  211.256355][T17431]  ? __cond_resched+0x11/0x40
[  211.261049][T17431]  ksys_read+0xce/0x180
[  211.265191][T17431]  __x64_sys_read+0x3e/0x50
[  211.269779][T17431]  do_syscall_64+0x3d/0x90
[  211.274182][T17431]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  211.280087][T17431] RIP: 0033:0x41936c
[  211.284082][T17431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  211.303698][T17431] RSP: 002b:00007fd903d84170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  211.312093][T17431] RAX: ffffffffffffffda RBX: 0000000000000ff4 RCX: 000000000041936c
[  211.320114][T17431] RDX: 000000000000000f RSI: 00007fd903d841e0 RDI: 0000000000000004
02:22:03 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  211.328081][T17431] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000
[  211.336075][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  211.344032][T17431] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000
[  211.362439][T17435] isofs_fill_super: root inode is not a directory. Corrupted media?
02:22:03 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  211.383517][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.391551][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  211.404077][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.412155][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  211.474558][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.482563][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  211.501178][T17449] loop4: detected capacity change from 0 to 270
[  211.517594][T17449] FAT-fs (loop4): bogus logical sector size 1280
02:22:03 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:03 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2e}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:03 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x18020000, 0x0, 0x0)

[  211.520585][T17450] loop5: detected capacity change from 0 to 192
[  211.523988][T17449] FAT-fs (loop4): Can't find a valid FAT filesystem
[  211.524954][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.544962][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  211.548077][T17450] isofs_fill_super: root inode is not a directory. Corrupted media?
02:22:03 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:03 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x20000000, 0x0, 0x0)

02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0xff4}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:04 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:04 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x24000000, 0x0, 0x0)

[  211.612678][T17449] loop4: detected capacity change from 0 to 270
[  211.636086][T17449] FAT-fs (loop4): bogus logical sector size 1280
[  211.642458][T17449] FAT-fs (loop4): Can't find a valid FAT filesystem
02:22:04 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400068001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2000006a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  211.686369][T17476] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:22:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  211.779151][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.787181][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  211.799774][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.807762][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  211.848734][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.856782][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  211.875495][T17494] loop4: detected capacity change from 0 to 270
[  211.888250][T17496] loop5: detected capacity change from 0 to 192
02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x7ffff000}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:04 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x3c000000, 0x0, 0x0)

[  211.898705][T17494] FAT-fs (loop4): bogus logical sector size 1536
[  211.905084][T17494] FAT-fs (loop4): Can't find a valid FAT filesystem
[  211.923209][T17496] isofs_fill_super: root inode is not a directory. Corrupted media?
[  211.931504][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  211.939586][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  211.944315][T17493] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.978419][T17494] loop4: detected capacity change from 0 to 270
[  211.988829][T17494] FAT-fs (loop4): bogus logical sector size 1536
02:22:04 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:04 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  211.995219][T17494] FAT-fs (loop4): Can't find a valid FAT filesystem
02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xfca}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:04 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400078001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:04 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x41020000, 0x0, 0x0)

02:22:04 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  212.055550][T17520] loop5: detected capacity change from 0 to 192
[  212.076590][T17520] isofs_fill_super: root inode is not a directory. Corrupted media?
02:22:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  212.129356][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.137560][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  212.150059][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.158075][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  212.209675][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.217731][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  212.232842][T17535] loop4: detected capacity change from 0 to 270
[  212.249847][T17540] loop5: detected capacity change from 0 to 192
02:22:04 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x58000000, 0x0, 0x0)

02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x2000091b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:04 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  212.260532][T17535] FAT-fs (loop4): bogus logical sector size 1792
[  212.267027][T17535] FAT-fs (loop4): Can't find a valid FAT filesystem
[  212.276621][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.284719][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  212.296325][T17540] isofs_fill_super: root inode is not a directory. Corrupted media?
02:22:04 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  212.338528][T17539] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  212.350225][T17535] loop4: detected capacity change from 0 to 270
[  212.367218][T17535] FAT-fs (loop4): bogus logical sector size 1792
[  212.373634][T17535] FAT-fs (loop4): Can't find a valid FAT filesystem
02:22:04 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x67e0939d, 0x0, 0x0)

02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x7fffefd6}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:04 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000f8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  212.399093][T17559] loop5: detected capacity change from 0 to 192
[  212.419338][T17559] isofs_fill_super: root inode is not a directory. Corrupted media?
02:22:04 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200"/208, 0xd0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:04 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x91ffffff, 0x0, 0x0)

02:22:04 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400228001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:04 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf6f}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  212.520005][T17579] loop4: detected capacity change from 0 to 270
[  212.531784][T17579] FAT-fs (loop4): bogus logical sector size 3840
[  212.538313][T17579] FAT-fs (loop4): Can't find a valid FAT filesystem
[  212.540619][T17580] loop5: detected capacity change from 0 to 192
02:22:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:04 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200"/208, 0xd0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  212.625551][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.633991][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  212.646087][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.654073][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:05 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x9d93e067, 0x0, 0x0)

[  212.698698][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.706739][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  212.719555][T17594] loop4: detected capacity change from 0 to 270
[  212.730293][T17596] loop5: detected capacity change from 0 to 192
[  212.734004][T17594] FAT-fs (loop4): bogus logical sector size 8704
02:22:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200"/208, 0xd0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  212.742918][T17594] FAT-fs (loop4): Can't find a valid FAT filesystem
[  212.749953][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  212.757962][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  212.818495][T17601] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  212.819597][T17594] loop4: detected capacity change from 0 to 270
[  212.834164][T17611] loop5: detected capacity change from 0 to 192
02:22:05 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:05 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x200008b2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

02:22:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e63", 0x138, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:05 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xcbbeffff, 0x0, 0x0)

[  212.877746][T17594] FAT-fs (loop4): bogus logical sector size 8704
[  212.884305][T17594] FAT-fs (loop4): Can't find a valid FAT filesystem
02:22:05 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400fe8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:05 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xd7ff0000, 0x0, 0x0)

02:22:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x138, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:05 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x7fffef7b}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  212.933570][T17626] loop5: detected capacity change from 0 to 192
[  213.044096][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.052194][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  213.064626][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.072683][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:05 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  213.110282][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.118307][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  213.143161][T17646] loop4: detected capacity change from 0 to 270
[  213.144821][T17645] loop5: detected capacity change from 0 to 192
02:22:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x138, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:05 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xe7d}], 0xc7, 0x0, 0x0)

[  213.152497][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.163677][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  213.170340][T17646] FAT-fs (loop4): bogus logical sector size 65024
[  213.181156][T17646] FAT-fs (loop4): Can't find a valid FAT filesystem
02:22:05 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xd7ffffff, 0x0, 0x0)

02:22:05 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  213.248116][T17660] loop5: detected capacity change from 0 to 192
[  213.262238][T17646] loop4: detected capacity change from 0 to 270
02:22:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x16c, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:05 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc2e}], 0xc7, 0x0, 0x0)

02:22:05 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xe8030000, 0x0, 0x0)

[  213.294973][T17646] FAT-fs (loop4): bogus logical sector size 65024
[  213.295006][T17655] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  213.301460][T17646] FAT-fs (loop4): Can't find a valid FAT filesystem
[  213.383405][T17646] ==================================================================
[  213.391494][T17646] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lrus_cpu
[  213.399287][T17646] 
[  213.401597][T17646] write to 0xffff888237d42f10 of 8 bytes by task 17655 on cpu 1:
[  213.409291][T17646]  invalidate_bh_lrus_cpu+0xad/0xe0
[  213.414495][T17646]  lru_add_drain_cpu+0x243/0x270
[  213.419422][T17646]  __pagevec_release+0x57/0xa0
[  213.424196][T17646]  __filemap_fdatawait_range+0x141/0x1b0
[  213.429814][T17646]  filemap_write_and_wait_range+0x264/0x390
[  213.435797][T17646]  __iomap_dio_rw+0x4cd/0xa60
[  213.440471][T17646]  iomap_dio_rw+0x30/0x70
[  213.444789][T17646]  ext4_file_read_iter+0x21a/0x290
[  213.449909][T17646]  generic_file_splice_read+0x22a/0x310
[  213.455530][T17646]  splice_direct_to_actor+0x2aa/0x650
[  213.460886][T17646]  do_splice_direct+0xf5/0x170
[  213.465635][T17646]  do_sendfile+0x773/0xda0
[  213.470034][T17646]  __x64_sys_sendfile64+0xf2/0x130
[  213.475127][T17646]  do_syscall_64+0x3d/0x90
[  213.479539][T17646]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  213.485419][T17646] 
[  213.487727][T17646] read to 0xffff888237d42f10 of 8 bytes by task 17646 on cpu 0:
[  213.495343][T17646]  has_bh_in_lru+0x31/0x1c0
[  213.499836][T17646]  smp_call_function_many_cond+0x226/0x620
[  213.505627][T17646]  on_each_cpu_cond_mask+0x31/0x40
[  213.510725][T17646]  invalidate_bh_lrus+0x26/0x30
[  213.515570][T17646]  invalidate_bdev+0x4b/0x70
[  213.520152][T17646]  __loop_clr_fd+0x566/0x8f0
[  213.524730][T17646]  lo_ioctl+0xa48/0x1340
[  213.529047][T17646]  blkdev_ioctl+0x1d0/0x3c0
[  213.533537][T17646]  block_ioctl+0x6d/0x80
[  213.537763][T17646]  __se_sys_ioctl+0xcb/0x140
[  213.542332][T17646]  __x64_sys_ioctl+0x3f/0x50
[  213.546917][T17646]  do_syscall_64+0x3d/0x90
[  213.551318][T17646]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  213.557199][T17646] 
[  213.559506][T17646] value changed: 0xffff888106a33888 -> 0x0000000000000000
[  213.566598][T17646] 
[  213.568902][T17646] Reported by Kernel Concurrency Sanitizer on:
[  213.575027][T17646] CPU: 0 PID: 17646 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0
02:22:05 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028002000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:05 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  213.583787][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  213.593843][T17646] ==================================================================
[  213.629711][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.637925][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  213.650212][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.658230][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:06 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a0878", 0x16c, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:06 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0x20010fb6}], 0xc7, 0x0, 0x0)

[  213.700703][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.705543][T17686] loop5: detected capacity change from 0 to 192
[  213.708859][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  213.736694][T17691] loop4: detected capacity change from 0 to 270
02:22:06 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028003000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf4010000, 0x0, 0x0)

[  213.768678][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  213.776761][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:06 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf5ffffff, 0x0, 0x0)

02:22:06 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028004000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  213.837548][T17706] loop4: detected capacity change from 0 to 270
[  213.849001][T17694] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  213.853480][T17709] loop5: detected capacity change from 0 to 192
02:22:06 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x16c, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:06 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0x7fffee89}], 0xc7, 0x0, 0x0)

02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xfeffffff, 0x0, 0x0)

02:22:06 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x8, 0x0, 0x0)

[  214.002521][T17732] loop4: detected capacity change from 0 to 270
02:22:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:06 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028005000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  214.066381][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.074504][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  214.087227][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.095325][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:06 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800740018000000000000180008", 0x186, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  214.135684][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.143712][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  214.150023][T17743] loop5: detected capacity change from 0 to 192
[  214.171486][T17749] loop4: detected capacity change from 0 to 270
02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xff0f0000, 0x0, 0x0)

02:22:06 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0)

[  214.189931][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.198037][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:06 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff07}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:06 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028006000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xffffbecb, 0x0, 0x0)

[  214.272548][T17764] loop5: detected capacity change from 0 to 192
[  214.279711][T17752] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  214.309026][T17771] loop4: detected capacity change from 0 to 270
02:22:06 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x186, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:06 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028007000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:06 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x2, 0x0)

02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xffffff91, 0x0, 0x0)

[  214.420501][T17787] loop5: detected capacity change from 0 to 192
[  214.445314][T17791] loop4: detected capacity change from 0 to 270
02:22:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:06 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x186, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:06 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x3, 0x0)

02:22:06 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028008000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:06 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xffffffd7, 0x0, 0x0)

[  214.519288][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.527433][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  214.540023][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.548155][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  214.599325][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.607444][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  214.648076][T17812] loop5: detected capacity change from 0 to 192
[  214.655739][T17813] loop4: detected capacity change from 0 to 270
[  214.658741][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.670219][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:07 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x934e0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:07 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08", 0x193, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:07 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028009000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:07 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xfffffff5, 0x0, 0x0)

02:22:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x4, 0x0)

[  214.709933][T17809] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
02:22:07 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x193, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:07 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xfffffffe, 0x0, 0x0)

[  214.775644][T17829] loop5: detected capacity change from 0 to 192
[  214.783624][T17830] loop4: detected capacity change from 0 to 270
02:22:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:07 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800a000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x5, 0x0)

02:22:07 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x28372fcea0, 0x0, 0x0)

[  214.895014][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.903039][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  214.915466][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.923465][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:07 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000000000000, 0x0, 0x0)

[  214.966951][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  214.975000][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  214.993417][T17852] loop5: detected capacity change from 0 to 192
[  214.999926][T17856] loop4: detected capacity change from 0 to 270
[  215.029749][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.037792][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:07 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x193, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:07 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800b000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:07 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x6, 0x0)

[  215.087490][T17859] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  215.124097][T17875] loop5: detected capacity change from 0 to 192
02:22:07 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19a, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  215.133511][T17876] loop4: detected capacity change from 0 to 270
02:22:07 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800c000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x7, 0x0)

[  215.209066][T17886] loop5: detected capacity change from 0 to 192
02:22:07 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19a, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:07 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x4000000000000, 0x0, 0x0)

02:22:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[  215.265515][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.273538][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  215.285709][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.293733][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  215.339530][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.347594][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  215.367537][T17896] loop4: detected capacity change from 0 to 270
[  215.371094][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
02:22:07 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800d000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

[  215.381867][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x8, 0x0)

02:22:07 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b2ae8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:07 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001", 0x19a, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

[  215.428581][T17906] loop5: detected capacity change from 0 to 192
02:22:07 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800f000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:07 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x9, 0x0)

[  215.501499][T17918] loop4: detected capacity change from 0 to 270
02:22:07 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x5000000000000, 0x0, 0x0)

[  215.568238][T17908] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'.
[  215.633151][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.641185][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  215.653257][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.661396][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  215.695883][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.703935][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  215.707650][T17932] loop4: detected capacity change from 0 to 270
[  215.726587][T17935] loop5: detected capacity change from 0 to 192
02:22:08 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028010000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:08 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:08 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xa, 0x0)

[  215.745365][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.753480][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:08 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xb, 0x0)

02:22:08 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x100000000000000, 0x0, 0x0)

[  215.901847][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.909986][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  215.922285][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.930382][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
[  215.972428][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  215.980453][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
02:22:08 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xc, 0x0)

[  216.021449][T17961] loop4: detected capacity change from 0 to 270
[  216.022700][T17962] loop5: detected capacity change from 0 to 192
[  216.046078][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  216.054177][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:08 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:08 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028011000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:08 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

02:22:08 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd, 0x0)

[  216.155317][T17977] loop4: detected capacity change from 0 to 270
[  216.170286][T17979] loop5: detected capacity change from 0 to 192
02:22:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:08 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028014000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:08 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x200000000000000, 0x0, 0x0)

02:22:08 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xe, 0x0)

[  216.298023][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  216.306056][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  216.318405][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  216.326447][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700))
name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000)

02:22:08 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028022000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]})

02:22:08 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x10, 0x0)

[  216.380330][T17999] loop4: detected capacity change from 0 to 270
[  216.384355][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  216.394659][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e
[  216.411290][T18006] loop5: detected capacity change from 0 to 192
[  216.467919][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1
[  216.476102][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7
02:22:08 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

02:22:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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