id() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 270.710428][T13544] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 270.735846][T13551] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 270.748232][T13554] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3902}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 270.762460][T13551] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(0x0, 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 270.819494][T13561] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 270.834623][T13563] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 270.849065][T13561] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(0x0, 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:08 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3903}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 270.866751][T13566] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 270.944037][T13574] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 270.957638][T13574] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 270.969154][T13572] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.005526][T13578] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.017791][T13581] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(0x0, 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 271.045572][T13581] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.071220][T13586] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.087662][T13588] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.119075][ C0] scsi_io_completion_action: 50 callbacks suppressed [ 271.119111][ C0] sd 0:0:1:0: tag#6147 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.135646][ C0] sd 0:0:1:0: tag#6147 CDB: opcode=0xe5 (vendor) [ 271.136708][T13593] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.141967][ C0] sd 0:0:1:0: tag#6147 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:08 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.162222][ C0] sd 0:0:1:0: tag#6147 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.171283][ C0] sd 0:0:1:0: tag#6147 CDB[20]: ba [ 271.172188][T13595] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.193226][T13593] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.204568][T13597] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.252221][ C0] sd 0:0:1:0: tag#6197 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.262089][ C0] sd 0:0:1:0: tag#6197 CDB: opcode=0xe5 (vendor) [ 271.268444][ C0] sd 0:0:1:0: tag#6197 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.277502][ C0] sd 0:0:1:0: tag#6197 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.286544][ C0] sd 0:0:1:0: tag#6197 CDB[20]: ba 13:12:08 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 271.292984][T13607] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.307746][T13606] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.320958][T13608] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.333037][ C1] sd 0:0:1:0: tag#6158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4303}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.335089][T13611] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.342940][ C1] sd 0:0:1:0: tag#6158 CDB: opcode=0xe5 (vendor) [ 271.360400][ C1] sd 0:0:1:0: tag#6158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.369444][ C1] sd 0:0:1:0: tag#6158 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.378582][ C1] sd 0:0:1:0: tag#6158 CDB[20]: ba [ 271.380869][T13615] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.407582][T13617] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.444769][T13618] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(0x0, 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.447411][ C0] sd 0:0:1:0: tag#6162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.465908][ C0] sd 0:0:1:0: tag#6162 CDB: opcode=0xe5 (vendor) [ 271.468426][T13617] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.472262][ C0] sd 0:0:1:0: tag#6162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.492690][ C0] sd 0:0:1:0: tag#6162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.501736][ C0] sd 0:0:1:0: tag#6162 CDB[20]: ba 13:12:08 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 271.535128][T13625] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.547108][T13627] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.561184][ C0] sd 0:0:1:0: tag#6180 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.564843][T13625] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.571074][ C0] sd 0:0:1:0: tag#6180 CDB: opcode=0xe5 (vendor) [ 271.588559][ C0] sd 0:0:1:0: tag#6180 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.597596][ C0] sd 0:0:1:0: tag#6180 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.606653][ C0] sd 0:0:1:0: tag#6180 CDB[20]: ba [ 271.612332][T13632] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.624612][T13634] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 271.644970][T13635] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.678238][ C0] sd 0:0:1:0: tag#6193 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.688106][ C0] sd 0:0:1:0: tag#6193 CDB: opcode=0xe5 (vendor) [ 271.694471][ C0] sd 0:0:1:0: tag#6193 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.703504][ C0] sd 0:0:1:0: tag#6193 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.712575][ C0] sd 0:0:1:0: tag#6193 CDB[20]: ba 13:12:09 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x90}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 271.786399][T13642] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.806769][T13647] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.807886][ C1] sd 0:0:1:0: tag#6207 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.820025][T13647] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.827831][ C1] sd 0:0:1:0: tag#6207 CDB: opcode=0xe5 (vendor) [ 271.827859][ C1] sd 0:0:1:0: tag#6207 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.827876][ C1] sd 0:0:1:0: tag#6207 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.863564][ C1] sd 0:0:1:0: tag#6207 CDB[20]: ba [ 271.871187][T13654] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x94}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.884775][T13656] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.924700][T13656] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4d02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 271.925378][ C1] sd 0:0:1:0: tag#6201 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 271.939227][T13658] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 271.945916][ C1] sd 0:0:1:0: tag#6201 CDB: opcode=0xe5 (vendor) [ 271.963406][ C1] sd 0:0:1:0: tag#6201 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 271.972448][ C1] sd 0:0:1:0: tag#6201 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 271.981490][ C1] sd 0:0:1:0: tag#6201 CDB[20]: ba 13:12:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.004630][T13661] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.016601][T13663] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.029614][T13664] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xa4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4e01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.046829][ C1] sd 0:0:1:0: tag#6184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.056674][ C1] sd 0:0:1:0: tag#6184 CDB: opcode=0xe5 (vendor) [ 272.063017][ C1] sd 0:0:1:0: tag#6184 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 272.072066][ C1] sd 0:0:1:0: tag#6184 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 272.081100][ C1] sd 0:0:1:0: tag#6184 CDB[20]: ba [ 272.085402][T13670] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 272.099632][T13670] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.113853][T13668] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.128071][T13671] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.175186][ C1] sd 0:0:1:0: tag#6148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.185081][ C1] sd 0:0:1:0: tag#6148 CDB: opcode=0xe5 (vendor) [ 272.191405][ C1] sd 0:0:1:0: tag#6148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 272.200439][ C1] sd 0:0:1:0: tag#6148 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 272.209478][ C1] sd 0:0:1:0: tag#6148 CDB[20]: ba 13:12:09 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.269519][T13679] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.281647][T13681] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.302633][T13679] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xce}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.321282][T13686] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) 13:12:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.374891][T13694] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.388781][T13696] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.405599][T13694] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.423605][T13701] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.454980][T13703] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.468241][T13705] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.480313][T13703] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.505806][T13709] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.605247][T13718] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.617323][T13720] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.629354][T13723] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) [ 272.644854][T13720] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.696227][T13731] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.709616][T13734] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.723195][T13737] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xde}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.735797][T13734] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.794836][T13745] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.806926][T13746] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.820006][T13745] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.838228][T13749] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 272.886529][T13753] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 272.908030][T13753] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) [ 272.933378][T13755] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.995403][T13762] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.007413][T13764] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.026228][T13764] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 273.050361][T13773] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.063408][T13774] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xeb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.098810][T13777] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.134699][T13779] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6f01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) [ 273.146764][T13781] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.160448][T13783] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:10 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xf2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) [ 273.194686][T13785] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.210535][T13785] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.284603][T13790] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.301718][T13798] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.314131][T13796] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xf8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.326934][T13798] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 273.386826][T13806] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.400781][T13806] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.412626][T13807] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7301}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xfe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.431997][T13810] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) 13:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.478867][T13812] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.491254][T13812] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.505572][T13814] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x102}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:10 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:10 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) [ 273.535250][T13817] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.548235][T13819] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.560866][T13822] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.619395][T13828] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.655962][T13832] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7603}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.668387][T13834] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.681000][T13838] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x112}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.721786][T13842] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.734406][T13843] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.747380][T13845] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.759538][T13842] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.807174][T13848] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.818787][T13850] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 273.856481][T13853] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.868559][T13850] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.920992][T13856] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 273.933682][T13856] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x114}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 273.999929][T13865] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.021371][T13866] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.038880][T13875] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x128}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.050354][T13873] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8a03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) [ 274.104771][T13881] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.118840][T13881] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.131641][T13883] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x136}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 274.175881][T13886] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.193606][T13890] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8e01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4d02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 274.231778][T13890] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.243913][T13894] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.269119][T13898] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x140}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.295704][T13902] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.309203][T13902] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.355381][T13908] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.368379][T13910] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.379815][T13913] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x4d33249b1c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x148}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.394799][T13910] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) [ 274.450060][T13916] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.461524][T13919] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9302}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:12:11 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 274.494890][T13916] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.518579][T13920] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x14e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:11 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 274.564808][T13927] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.577820][T13927] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x156}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.617076][T13934] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.640191][T13934] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.652217][T13938] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9408}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.684769][T13938] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.698398][T13941] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x168}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.736442][T13948] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.748347][T13945] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.767682][T13952] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 274.810715][T13959] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.823199][T13957] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.843859][T13959] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:12:12 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x16f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.864961][T13963] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 274.938962][T13971] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.951650][T13971] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 274.966969][T13972] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x172}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 274.993524][T13976] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.023989][T13981] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.039847][T13983] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.078188][T13989] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9408000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 275.091100][T13991] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x178}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xaa01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xa203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.155463][T13995] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.173529][T13995] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xa400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 275.220568][T14003] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.249229][T14004] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xbc02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb803}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x17a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 275.276861][T14004] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.288777][T14009] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xc402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xba01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 275.336899][T14022] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.356155][T14024] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.369887][T14026] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.388627][T14027] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.420924][T14031] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x17c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 275.434847][T14031] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.483110][T14034] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xce00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xbe02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x94}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 275.526838][T14036] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.549181][T14039] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x19c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xd102000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.567991][T14042] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.588365][T14039] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.613378][T14049] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.625262][T14045] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xdc01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xe400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.669006][T14055] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.681436][T14057] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.695935][T14055] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xca02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:13 executing program 2: pipe2$9p(&(0x7f0000000380), 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x7, 0x1, {{0xb, ']/]{\'$%^!/*'}, 0xffff}}, 0x18) write$P9_RVERSION(r0, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) close(r1) sendfile(r1, r2, 0x0, 0x2000820102d) 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfc03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1b8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.856523][T14077] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.876686][T14078] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.890490][T14078] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xce00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1ba}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 275.903706][T14082] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.950427][T14091] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 275.969019][T14091] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xce01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x10030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 275.999211][T14093] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.017693][T14096] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.034373][T14099] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 276.055497][T14099] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.131578][ C1] scsi_io_completion_action: 75 callbacks suppressed [ 276.131616][ C1] sd 0:0:1:0: tag#6181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.148164][ C1] sd 0:0:1:0: tag#6181 CDB: opcode=0xe5 (vendor) [ 276.154525][ C1] sd 0:0:1:0: tag#6181 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 276.163544][ C1] sd 0:0:1:0: tag#6181 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:12:13 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x10030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1dc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x10030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 276.168767][ C0] sd 0:0:1:0: tag#6183 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.172575][ C1] sd 0:0:1:0: tag#6181 CDB[20]: ba [ 276.182363][ C0] sd 0:0:1:0: tag#6183 CDB: opcode=0xe5 (vendor) [ 276.193474][T14112] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.193768][ C0] sd 0:0:1:0: tag#6183 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 276.193786][ C0] sd 0:0:1:0: tag#6183 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.193805][ C0] sd 0:0:1:0: tag#6183 CDB[20]: ba 13:12:13 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 276.215304][T14115] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.240102][T14117] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.241000][ C1] sd 0:0:1:0: tag#6184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.261212][ C1] sd 0:0:1:0: tag#6184 CDB: opcode=0xe5 (vendor) [ 276.267560][ C1] sd 0:0:1:0: tag#6184 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 276.276624][ C1] sd 0:0:1:0: tag#6184 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.285666][ C1] sd 0:0:1:0: tag#6184 CDB[20]: ba [ 276.290813][ C1] sd 0:0:1:0: tag#6185 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.300650][ C1] sd 0:0:1:0: tag#6185 CDB: opcode=0xe5 (vendor) [ 276.300765][T14117] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.306983][ C1] sd 0:0:1:0: tag#6185 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 276.307000][ C1] sd 0:0:1:0: tag#6185 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.336201][ C1] sd 0:0:1:0: tag#6185 CDB[20]: ba [ 276.351547][ C0] sd 0:0:1:0: tag#6186 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.361407][ C0] sd 0:0:1:0: tag#6186 CDB: opcode=0xe5 (vendor) [ 276.367762][ C0] sd 0:0:1:0: tag#6186 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1e0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 276.376805][ C0] sd 0:0:1:0: tag#6186 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.385887][ C0] sd 0:0:1:0: tag#6186 CDB[20]: ba [ 276.407156][T14125] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.420985][T14125] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd102}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 276.445665][ C0] sd 0:0:1:0: tag#6197 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.455530][ C0] sd 0:0:1:0: tag#6197 CDB: opcode=0xe5 (vendor) [ 276.461874][ C0] sd 0:0:1:0: tag#6197 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 276.470989][ C0] sd 0:0:1:0: tag#6197 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.480080][ C0] sd 0:0:1:0: tag#6197 CDB[20]: ba [ 276.488725][T14127] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.500777][T14131] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.514728][T14134] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.526300][T14131] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1e6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) close(0xffffffffffffffff) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000820102d) 13:12:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 276.663501][T14137] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.678120][ C1] sd 0:0:1:0: tag#6179 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.687983][ C1] sd 0:0:1:0: tag#6179 CDB: opcode=0xe5 (vendor) [ 276.690211][T14148] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1ea}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 276.694346][ C1] sd 0:0:1:0: tag#6179 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 276.694365][ C1] sd 0:0:1:0: tag#6179 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.694380][ C1] sd 0:0:1:0: tag#6179 CDB[20]: ba [ 276.729758][T14141] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.765580][T14153] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.765795][ C0] sd 0:0:1:0: tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.777694][T14156] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.786631][ C0] sd 0:0:1:0: tag#6192 CDB: opcode=0xe5 (vendor) [ 276.786651][ C0] sd 0:0:1:0: tag#6192 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xde02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 276.786687][ C0] sd 0:0:1:0: tag#6192 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 276.822187][ C0] sd 0:0:1:0: tag#6192 CDB[20]: ba [ 276.827737][T14158] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.854864][T14161] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 276.867825][T14161] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.892561][T14163] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x228}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 276.915903][ C0] sd 0:0:1:0: tag#6176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.918093][T14166] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.925751][ C0] sd 0:0:1:0: tag#6176 CDB: opcode=0xe5 (vendor) [ 276.925771][ C0] sd 0:0:1:0: tag#6176 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 276.952285][ C0] sd 0:0:1:0: tag#6176 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 276.953258][T14168] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.961314][ C0] sd 0:0:1:0: tag#6176 CDB[20]: ba [ 276.982765][T14169] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 276.994522][T14171] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 277.046087][ C1] sd 0:0:1:0: tag#6188 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 277.055931][ C1] sd 0:0:1:0: tag#6188 CDB: opcode=0xe5 (vendor) [ 277.062240][ C1] sd 0:0:1:0: tag#6188 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 277.071399][ C1] sd 0:0:1:0: tag#6188 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 277.080428][ C1] sd 0:0:1:0: tag#6188 CDB[20]: ba 13:12:14 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x234}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 277.087181][T14172] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.113241][T14174] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.127908][T14182] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) close(0xffffffffffffffff) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000820102d) [ 277.171913][T14185] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.206855][T14188] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe603}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x238}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 277.311929][T14197] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.325751][T14197] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.342048][T14200] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:14 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x248}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 277.402476][T14201] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.416254][T14204] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.438392][T14211] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 277.504468][T14219] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.537417][T14220] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 277.549622][T14219] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.582028][T14225] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.616037][T14227] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.629888][T14227] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 2: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x24d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(0x0, 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(0x0, 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 277.785534][T14237] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.798036][T14235] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.814991][T14235] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(0x0, 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x254}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 277.857119][T14248] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.885455][T14254] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:15 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 277.905795][T14254] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x4) close(r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x4) sendfile(r0, r1, 0x0, 0x2000820102d) [ 277.974789][T14264] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 277.988860][T14265] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x270}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 278.040082][T14270] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.061873][T14279] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1dada0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 278.143831][T14287] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 278.196580][T14293] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.208706][T14297] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x272}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 278.240824][T14303] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.324923][T14314] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.364399][T14323] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:15 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x280}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 278.539848][T14347] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.554041][T14347] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:15 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 278.585318][T14357] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.614972][T14359] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x286}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 278.634600][T14362] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.665849][T14362] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf0ff1f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:16 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 278.697398][T14368] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 278.774977][T14384] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.787042][T14382] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 278.813724][T14384] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:16 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x296}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:16 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 279.101625][T14435] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.129218][T14439] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.144366][T14439] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1004000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 279.175896][T14447] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2a8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 279.224871][T14457] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.241053][T14457] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 279.283048][T14461] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.325567][T14470] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.356023][T14472] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.386772][T14472] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2bc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:16 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:16 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:16 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 279.633218][T14514] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.645107][T14516] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.666085][T14514] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 279.687158][T14524] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2c4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 279.746150][T14529] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.760930][T14529] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2bc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 279.807967][T14539] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.845529][T14546] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.872310][T14543] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.892333][T14548] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 279.918102][T14543] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:17 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2c9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2bc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 280.006837][T14565] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.043161][T14568] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = accept4$phonet_pipe(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) sendfile(r3, 0xffffffffffffffff, 0x0, 0x401) sendfile(r1, r2, 0x0, 0x80000001) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='#@$$+*.&--*,\x00', &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff) close(r0) accept4(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, &(0x7f0000000240)=0x80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x10000000, 0xfff, 0x0, 0x9, 0x3, 0x1000, 0x4, 0x6}, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x20008201029) [ 280.056048][T14570] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.078374][T14579] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.091742][T14568] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2ca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 280.176684][T14595] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.200313][T14599] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 280.220004][T14599] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) [ 280.287344][T14611] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2cc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:17 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) close(r0) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:17 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 280.406487][T14627] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.446639][T14628] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.459151][T14640] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:17 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 280.493546][T14628] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.568295][T14654] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2d4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 280.611102][T14654] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.645421][T14665] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.666979][T14668] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.704951][T14672] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2e6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 280.720126][T14672] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) 13:12:18 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 280.798054][T14683] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.826040][T14688] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2ec}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x2000820102d) [ 280.867810][T14692] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.881266][T14692] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 280.908885][T14698] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.931739][T14703] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 280.982441][T14709] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 280.997228][T14712] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.061169][T14718] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.076656][T14723] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.088456][T14724] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.105913][T14723] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.136720][ C0] scsi_io_completion_action: 52 callbacks suppressed [ 281.136749][ C0] sd 0:0:1:0: tag#6184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.153277][ C0] sd 0:0:1:0: tag#6184 CDB: opcode=0xe5 (vendor) 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.159754][ C0] sd 0:0:1:0: tag#6184 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.168827][ C0] sd 0:0:1:0: tag#6184 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.177868][ C0] sd 0:0:1:0: tag#6184 CDB[20]: ba [ 281.228202][T14735] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.251512][T14737] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) 13:12:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:18 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x2000820102d) 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x308}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.341819][T14746] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.355682][T14750] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.363886][ C1] sd 0:0:1:0: tag#6191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.371076][ C0] sd 0:0:1:0: tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.376707][ C1] sd 0:0:1:0: tag#6191 CDB: opcode=0xe5 (vendor) [ 281.386495][ C0] sd 0:0:1:0: tag#6192 CDB: opcode=0xe5 (vendor) [ 281.392817][ C1] sd 0:0:1:0: tag#6191 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.399117][ C0] sd 0:0:1:0: tag#6192 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.408114][ C1] sd 0:0:1:0: tag#6191 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.408132][ C1] sd 0:0:1:0: tag#6191 CDB[20]: ba [ 281.431306][ C0] sd 0:0:1:0: tag#6192 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:12:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.440369][ C0] sd 0:0:1:0: tag#6192 CDB[20]: ba [ 281.456355][T14746] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.490553][T14762] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.525913][T14768] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x310}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.541242][T14768] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.564060][ C0] sd 0:0:1:0: tag#6174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.574096][ C0] sd 0:0:1:0: tag#6174 CDB: opcode=0xe5 (vendor) [ 281.580431][ C0] sd 0:0:1:0: tag#6174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 281.589494][ C0] sd 0:0:1:0: tag#6174 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.598553][ C0] sd 0:0:1:0: tag#6174 CDB[20]: ba [ 281.620059][T14773] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.673368][ C0] sd 0:0:1:0: tag#6198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.681857][ C1] sd 0:0:1:0: tag#6199 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.683229][ C0] sd 0:0:1:0: tag#6198 CDB: opcode=0xe5 (vendor) [ 281.693046][ C1] sd 0:0:1:0: tag#6199 CDB: opcode=0xe5 (vendor) [ 281.699367][ C0] sd 0:0:1:0: tag#6198 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.705674][ C1] sd 0:0:1:0: tag#6199 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:19 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) [ 281.714675][ C0] sd 0:0:1:0: tag#6198 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.723675][ C1] sd 0:0:1:0: tag#6199 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.732674][ C0] sd 0:0:1:0: tag#6198 CDB[20]: ba [ 281.741671][ C1] sd 0:0:1:0: tag#6199 CDB[20]: ba [ 281.751311][T14777] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.769158][T14785] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.784527][T14777] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.831577][ C0] sd 0:0:1:0: tag#6178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.841433][ C0] sd 0:0:1:0: tag#6178 CDB: opcode=0xe5 (vendor) [ 281.847793][ C0] sd 0:0:1:0: tag#6178 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.856853][ C0] sd 0:0:1:0: tag#6178 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.866042][ C0] sd 0:0:1:0: tag#6178 CDB[20]: ba 13:12:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) 13:12:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x31a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.882779][T14794] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 281.904565][T14794] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 281.929813][T14800] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 281.977211][T14804] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.000414][T14810] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.031973][T14810] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.046929][ C0] sd 0:0:1:0: tag#6188 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 282.056774][ C0] sd 0:0:1:0: tag#6188 CDB: opcode=0xe5 (vendor) [ 282.063108][ C0] sd 0:0:1:0: tag#6188 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 282.064114][ C1] sd 0:0:1:0: tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:12:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x35c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) [ 282.072142][ C0] sd 0:0:1:0: tag#6188 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 282.081942][ C1] sd 0:0:1:0: tag#6192 CDB: opcode=0xe5 (vendor) [ 282.090944][ C0] sd 0:0:1:0: tag#6188 CDB[20]: ba [ 282.097694][ C1] sd 0:0:1:0: tag#6192 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 282.111797][ C1] sd 0:0:1:0: tag#6192 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 282.120869][ C1] sd 0:0:1:0: tag#6192 CDB[20]: ba [ 282.165667][ C1] sd 0:0:1:0: tag#6194 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 282.175519][ C1] sd 0:0:1:0: tag#6194 CDB: opcode=0xe5 (vendor) [ 282.181952][ C1] sd 0:0:1:0: tag#6194 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 282.191004][ C1] sd 0:0:1:0: tag#6194 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 282.200036][ C1] sd 0:0:1:0: tag#6194 CDB[20]: ba 13:12:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) [ 282.213506][T14820] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.236238][T14821] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.251250][T14841] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 282.283746][T14842] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x37a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 282.366455][T14852] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.395595][T14855] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 282.407571][T14858] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.424505][T14855] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3a2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2000820102d) 13:12:19 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 282.585385][T14877] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) 13:12:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3c0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 282.625082][T14883] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.636889][T14886] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.663091][T14892] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 282.715906][T14899] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.756670][T14904] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.774482][T14906] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3ce}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x13000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 282.804971][T14906] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1a010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 282.894379][T14917] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.911597][T14917] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 282.929295][T14925] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:20 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) 13:12:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1a030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 282.994626][T14934] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.007087][T14926] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.029842][T14934] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.087213][T14946] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.099683][T14946] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.122420][T14950] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) 13:12:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1e000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.160207][T14951] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3fc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1e030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 283.214847][T14959] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.231084][T14959] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x894, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.297592][T14972] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.327776][T14975] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 283.341681][T14975] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.367574][T14980] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:20 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) 13:12:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ffff000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:20 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.508335][T15000] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.521947][T15000] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) close(r0) 13:12:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.673112][ T24] audit: type=1400 audit(1638277941.034:224): avc: denied { tracepoint } for pid=15019 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 283.673310][T15020] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.710474][T15025] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.723493][T15025] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.756847][T15020] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000820102d) 13:12:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 283.827570][T15041] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.845892][T15041] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.906802][T15053] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.929581][T15055] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 283.948215][T15059] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 283.982241][T15062] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x80000001) 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x23000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:21 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x0) 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 284.219171][T15097] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.239611][T15095] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x24000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 284.275113][T15095] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.288858][T15104] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 284.399732][T15116] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.413614][T15117] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.430037][T15116] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 284.443712][T15125] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:21 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 284.512103][T15131] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.524630][T15131] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 13:12:22 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x803}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 284.576757][T15138] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.589663][T15138] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x39020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 284.713014][T15165] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.731399][T15165] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 284.840167][T15182] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 284.858481][T15187] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 1: pipe2$9p(&(0x7f0000000380), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) close(r0) sendfile(r0, r1, 0x0, 0x0) 13:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r2, 0x89f1, 0x0) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r5, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r0}, 0x0, 0x0, @unused=[0xf0, 0x6ac, 0x2, 0x4], @devid=r5}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) 13:12:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x39030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 285.071877][T15220] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.084516][T15227] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 285.194610][T15241] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.208856][T15241] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 285.333193][T15252] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.347660][T15252] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x41000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 285.452909][T15268] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.467472][T15270] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x43030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 285.687412][T15295] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.702415][T15295] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) 13:12:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x44010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1a03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 285.814112][T15313] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.845591][T15313] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:23 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) [ 285.917356][T15322] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.940286][T15329] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 285.985359][T15334] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.006070][T15334] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4b000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 286.112329][T15343] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 286.162048][T15343] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.187720][T15352] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.200541][ C1] scsi_io_completion_action: 71 callbacks suppressed [ 286.200604][ C1] sd 0:0:1:0: tag#6196 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.217145][ C1] sd 0:0:1:0: tag#6196 CDB: opcode=0xe5 (vendor) [ 286.223470][ C1] sd 0:0:1:0: tag#6196 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.227426][T15356] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.232510][ C1] sd 0:0:1:0: tag#6196 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.252719][ C1] sd 0:0:1:0: tag#6196 CDB[20]: ba [ 286.279157][ C1] sd 0:0:1:0: tag#6198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.289021][ C1] sd 0:0:1:0: tag#6198 CDB: opcode=0xe5 (vendor) [ 286.295386][ C1] sd 0:0:1:0: tag#6198 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.304530][ C1] sd 0:0:1:0: tag#6198 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.313571][ C1] sd 0:0:1:0: tag#6198 CDB[20]: ba 13:12:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) 13:12:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 286.327484][ C0] sd 0:0:1:0: tag#6203 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.337353][ C0] sd 0:0:1:0: tag#6203 CDB: opcode=0xe5 (vendor) [ 286.343708][ C0] sd 0:0:1:0: tag#6203 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.352758][ C0] sd 0:0:1:0: tag#6203 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.361820][ C0] sd 0:0:1:0: tag#6203 CDB[20]: ba [ 286.402145][T15375] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.404386][ C1] sd 0:0:1:0: tag#6195 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.423373][ C1] sd 0:0:1:0: tag#6195 CDB: opcode=0xe5 (vendor) [ 286.429742][ C1] sd 0:0:1:0: tag#6195 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.438788][ C1] sd 0:0:1:0: tag#6195 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:12:23 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 286.447873][ C1] sd 0:0:1:0: tag#6195 CDB[20]: ba [ 286.453398][T15376] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.466951][T15384] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.477310][ C1] sd 0:0:1:0: tag#6197 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.488055][ C1] sd 0:0:1:0: tag#6197 CDB: opcode=0xe5 (vendor) 13:12:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4d020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 286.494417][ C1] sd 0:0:1:0: tag#6197 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.496297][T15376] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.503438][ C1] sd 0:0:1:0: tag#6197 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.503458][ C1] sd 0:0:1:0: tag#6197 CDB[20]: ba [ 286.540448][T15390] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.557684][T15394] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.570313][T15395] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.582413][ C1] sd 0:0:1:0: tag#6199 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.592276][ C1] sd 0:0:1:0: tag#6199 CDB: opcode=0xe5 (vendor) [ 286.598625][ C1] sd 0:0:1:0: tag#6199 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:23 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 286.599636][ C0] sd 0:0:1:0: tag#6200 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.607662][ C1] sd 0:0:1:0: tag#6199 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.617462][ C0] sd 0:0:1:0: tag#6200 CDB: opcode=0xe5 (vendor) [ 286.626466][ C1] sd 0:0:1:0: tag#6199 CDB[20]: ba [ 286.632781][ C0] sd 0:0:1:0: tag#6200 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.647157][ C0] sd 0:0:1:0: tag#6200 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.656221][ C0] sd 0:0:1:0: tag#6200 CDB[20]: ba [ 286.661777][T15394] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.709917][ C0] sd 0:0:1:0: tag#6147 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.719770][ C0] sd 0:0:1:0: tag#6147 CDB: opcode=0xe5 (vendor) [ 286.726139][ C0] sd 0:0:1:0: tag#6147 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.735269][ C0] sd 0:0:1:0: tag#6147 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.744341][ C0] sd 0:0:1:0: tag#6147 CDB[20]: ba 13:12:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4e010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 286.870201][ C0] sd 0:0:1:0: tag#6174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.880241][ C0] sd 0:0:1:0: tag#6174 CDB: opcode=0xe5 (vendor) [ 286.886603][ C0] sd 0:0:1:0: tag#6174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.887620][ C1] sd 0:0:1:0: tag#6184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 286.895647][ C0] sd 0:0:1:0: tag#6174 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.905436][ C1] sd 0:0:1:0: tag#6184 CDB: opcode=0xe5 (vendor) [ 286.914454][ C0] sd 0:0:1:0: tag#6174 CDB[20]: ba [ 286.920758][ C1] sd 0:0:1:0: tag#6184 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 286.933354][T15419] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.934892][ C1] sd 0:0:1:0: tag#6184 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 286.949437][T15419] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 286.955087][ C1] sd 0:0:1:0: tag#6184 CDB[20]: ba 13:12:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) 13:12:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 287.075693][T15437] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.103442][T15443] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x50020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 287.209197][T15457] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.230010][T15457] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:24 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x52030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3601}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 287.435720][T15481] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.448716][T15481] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:24 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x58010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 287.566553][T15494] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.591165][T15494] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.634575][T15504] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.671983][T15504] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.694828][T15511] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.719883][T15515] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:25 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) [ 287.921581][T15537] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.936494][T15537] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 287.948555][T15540] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 287.980839][T15548] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 13:12:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 288.062094][T15557] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.081168][T15560] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 288.199860][T15570] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.232888][T15575] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x0, 0x1, {0x100000001, @struct={0x5}, 0x0, 0x80000001, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, @usage, 0x2, 0x2, [0x4, 0x8b57, 0x5, 0x0, 0x8000, 0x185e]}, {0x3, @struct={0x6, 0xffffffff}, r4, 0x7ff, 0x101, 0x800, 0x2, 0x1, 0x400, @struct={0x2, 0x6cc4}, 0x2, 0x7e, [0x0, 0x0, 0x101, 0x7fffffff, 0x8, 0x8e]}, {0x9, @usage, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x9, 0x40, 0x82, @struct={0x8}, 0x2, 0x9, [0x2, 0x1, 0x6, 0x8, 0xa821, 0x101]}, {0xffffffffffffa8d1, 0x8001, 0x4}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 13:12:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 288.252541][T15575] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.275936][T15579] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.340431][T15585] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.364577][T15585] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6f010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x80000001) [ 288.464003][T15598] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.482118][T15601] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:25 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x70020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 288.653225][T15623] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.666978][T15623] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x72030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 288.766800][T15633] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.783588][T15639] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x73010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4d02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 288.908424][T15651] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 288.922801][T15651] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 288.987335][T15655] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.021205][T15655] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4e01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 289.157943][T15681] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.175658][T15683] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5601}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x76030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5c03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 289.313274][T15702] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.330583][T15702] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 289.498127][T15724] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.511396][T15724] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x82000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:26 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) 13:12:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x82010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 289.618178][T15738] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.633769][T15738] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x88000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 289.690641][T15750] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.711596][T15750] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.795534][T15764] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.811220][T15764] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:27 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8a030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 289.937501][T15778] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 289.949917][T15778] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:27 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6e00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:27 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 290.027726][T15793] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 290.058812][T15793] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:27 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6f01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8e010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:47 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 310.393129][T16081] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.394205][ C0] scsi_io_completion_action: 52 callbacks suppressed [ 310.394251][ C0] sd 0:0:1:0: tag#6198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 310.407467][T16081] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.411101][ C0] sd 0:0:1:0: tag#6198 CDB: opcode=0xe5 (vendor) 13:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x92020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 310.411134][ C0] sd 0:0:1:0: tag#6198 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 310.447839][ C0] sd 0:0:1:0: tag#6198 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 310.456897][ C0] sd 0:0:1:0: tag#6198 CDB[20]: ba 13:12:47 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 310.483269][T16094] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.500677][T16096] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.517447][ C0] sd 0:0:1:0: tag#6199 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 310.527304][ C0] sd 0:0:1:0: tag#6199 CDB: opcode=0xe5 (vendor) [ 310.533786][ C0] sd 0:0:1:0: tag#6199 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x93000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 310.542838][ C0] sd 0:0:1:0: tag#6199 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 310.552005][ C0] sd 0:0:1:0: tag#6199 CDB[20]: ba 13:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x93020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 310.588465][T16104] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.603843][T16104] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.653799][ C0] sd 0:0:1:0: tag#6148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 310.663977][ C0] sd 0:0:1:0: tag#6148 CDB: opcode=0xe5 (vendor) [ 310.670326][ C0] sd 0:0:1:0: tag#6148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 310.679384][ C0] sd 0:0:1:0: tag#6148 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 310.688451][ C0] sd 0:0:1:0: tag#6148 CDB[20]: ba [ 310.737872][T16114] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.741028][ C0] sd 0:0:1:0: tag#6205 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 310.758928][ C0] sd 0:0:1:0: tag#6205 CDB: opcode=0xe5 (vendor) [ 310.765277][ C0] sd 0:0:1:0: tag#6205 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 310.773935][T16114] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.774326][ C0] sd 0:0:1:0: tag#6205 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 310.794538][ C0] sd 0:0:1:0: tag#6205 CDB[20]: ba 13:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:48 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x94000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 310.954892][T16139] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.967919][T16139] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 310.985878][ C1] sd 0:0:1:0: tag#6201 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 310.995732][ C1] sd 0:0:1:0: tag#6201 CDB: opcode=0xe5 (vendor) [ 311.002068][ C1] sd 0:0:1:0: tag#6201 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 311.011149][ C1] sd 0:0:1:0: tag#6201 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 311.020190][ C1] sd 0:0:1:0: tag#6201 CDB[20]: ba 13:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x94080000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:48 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.053245][ C1] sd 0:0:1:0: tag#6204 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 311.063207][ C1] sd 0:0:1:0: tag#6204 CDB: opcode=0xe5 (vendor) [ 311.069566][ C1] sd 0:0:1:0: tag#6204 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 311.078620][ C1] sd 0:0:1:0: tag#6204 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 311.087676][ C1] sd 0:0:1:0: tag#6204 CDB[20]: ba [ 311.110015][ C1] sd 0:0:1:0: tag#6149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 311.119913][ C1] sd 0:0:1:0: tag#6149 CDB: opcode=0xe5 (vendor) [ 311.126286][ C1] sd 0:0:1:0: tag#6149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 311.135328][ C1] sd 0:0:1:0: tag#6149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 311.144375][ C1] sd 0:0:1:0: tag#6149 CDB[20]: ba [ 311.155280][T16173] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.156674][ C1] sd 0:0:1:0: tag#6151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 311.169055][T16173] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.176626][ C1] sd 0:0:1:0: tag#6151 CDB: opcode=0xe5 (vendor) [ 311.176651][ C1] sd 0:0:1:0: tag#6151 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x96000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:48 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.203152][ C1] sd 0:0:1:0: tag#6151 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 311.212197][ C1] sd 0:0:1:0: tag#6151 CDB[20]: ba 13:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7a01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.282997][T16182] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.296069][T16182] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.322255][ C1] sd 0:0:1:0: tag#6163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 311.332121][ C1] sd 0:0:1:0: tag#6163 CDB: opcode=0xe5 (vendor) [ 311.338698][ C1] sd 0:0:1:0: tag#6163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 311.347741][ C1] sd 0:0:1:0: tag#6163 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 311.356871][ C1] sd 0:0:1:0: tag#6163 CDB[20]: ba 13:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7a03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.373983][ C0] sd 0:0:1:0: tag#6165 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 311.383823][ C0] sd 0:0:1:0: tag#6165 CDB: opcode=0xe5 (vendor) [ 311.390195][ C0] sd 0:0:1:0: tag#6165 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 311.399600][ C0] sd 0:0:1:0: tag#6165 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 311.408681][ C0] sd 0:0:1:0: tag#6165 CDB[20]: ba 13:12:48 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 311.477329][T16204] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.498693][T16207] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0ad1d00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7e00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.654605][T16226] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.669278][T16226] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.734878][T16242] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.748320][T16245] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x8002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.846684][T16254] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 311.890298][T16260] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.902196][T16257] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 311.917336][T16260] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xaa010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x8602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 312.053056][T16285] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.065717][T16285] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.078607][T16284] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb8030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x8c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xba010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 312.093969][T16289] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.118111][T16294] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.130557][T16294] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x9000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 312.215459][T16304] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.236002][T16304] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xbe020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x9400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x9602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x9c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 312.446249][T16343] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.470872][T16347] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xa203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc4020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 312.581114][T16364] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.621830][T16369] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.638501][T16369] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.651194][T16375] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xca020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xa400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) ioctl$PIO_CMAP(r1, 0x89f1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 312.722429][T16384] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.738907][T16388] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xce000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 312.769257][T16393] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.792699][T16397] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.805332][T16398] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xce010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 312.823316][T16397] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xa802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xb801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 312.891198][T16407] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 312.921831][T16407] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 312.994756][T16419] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.016203][T16424] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.096878][T16431] ================================================================== [ 313.104979][T16431] BUG: KCSAN: data-race in ext4_mark_iloc_dirty / ext4_mark_iloc_dirty [ 313.113227][T16431] [ 313.115547][T16431] write to 0xffff88813b45ae68 of 4 bytes by task 16411 on cpu 0: [ 313.123259][T16431] ext4_mark_iloc_dirty+0x789/0x890 [ 313.128460][T16431] ext4_orphan_del+0x593/0x730 [ 313.133222][T16431] ext4_file_write_iter+0x1134/0x1200 [ 313.138593][T16431] do_iter_readv_writev+0x2de/0x380 [ 313.144054][T16431] do_iter_write+0x192/0x5c0 [ 313.148651][T16431] vfs_iter_write+0x4c/0x70 [ 313.153162][T16431] iter_file_splice_write+0x43a/0x790 [ 313.158533][T16431] direct_splice_actor+0x80/0xa0 [ 313.163470][T16431] splice_direct_to_actor+0x345/0x650 [ 313.168841][T16431] do_splice_direct+0x106/0x190 [ 313.173692][T16431] do_sendfile+0x675/0xc40 [ 313.178106][T16431] __x64_sys_sendfile64+0x102/0x140 [ 313.183328][T16431] do_syscall_64+0x44/0xd0 [ 313.187741][T16431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 313.193637][T16431] [ 313.195951][T16431] write to 0xffff88813b45ae68 of 4 bytes by task 16431 on cpu 1: [ 313.203661][T16431] ext4_mark_iloc_dirty+0x789/0x890 [ 313.208867][T16431] __ext4_mark_inode_dirty+0x4ec/0x5f0 [ 313.214326][T16431] ext4_file_write_iter+0x106e/0x1200 [ 313.219702][T16431] do_iter_readv_writev+0x2de/0x380 [ 313.224908][T16431] do_iter_write+0x192/0x5c0 [ 313.229503][T16431] vfs_iter_write+0x4c/0x70 [ 313.234022][T16431] iter_file_splice_write+0x43a/0x790 [ 313.239399][T16431] direct_splice_actor+0x80/0xa0 [ 313.244374][T16431] splice_direct_to_actor+0x345/0x650 [ 313.249774][T16431] do_splice_direct+0x106/0x190 [ 313.254660][T16431] do_sendfile+0x675/0xc40 [ 313.259072][T16431] __x64_sys_sendfile64+0x102/0x140 [ 313.264272][T16431] do_syscall_64+0x44/0xd0 [ 313.268687][T16431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 313.274587][T16431] [ 313.276904][T16431] value changed: 0x00003e0a -> 0x00003e0b [ 313.282615][T16431] [ 313.284931][T16431] Reported by Kernel Concurrency Sanitizer on: 13:12:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, "74dcd3c355026f3ba822eabcec1e64b396833a"}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xba01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 313.291070][T16431] CPU: 1 PID: 16431 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0 [ 313.299825][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.309876][T16431] ================================================================== [ 313.336876][T16470] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 313.350420][T16470] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd1020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xbc02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 313.461598][T16486] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.477931][T16486] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xc003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd2020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:50 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xde020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 313.584153][T16500] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.598392][T16500] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.610318][T16504] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe0020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 313.671741][T16516] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.683598][T16517] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.703974][T16516] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xc402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 313.767140][T16527] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.801965][T16529] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 313.816345][T16534] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.855153][T16532] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xc800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe4030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xc902}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 313.977616][T16555] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 313.992460][T16555] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xca02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe6030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xcc02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 314.093646][T16568] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.108724][T16568] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xce00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf8010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 314.246163][T16591] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.259730][T16591] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xce03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c9b24334d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 314.311148][T16599] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.327711][T16599] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 314.406637][T16612] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.419383][T16612] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfeffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 13:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 314.538365][T16630] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.557468][T16630] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 314.642637][T16643] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.658126][T16643] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 314.723766][T16652] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.746070][T16655] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.809086][T16663] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.822910][T16663] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xd402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:52 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xdc01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xde00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 314.940373][T16673] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 314.956969][T16677] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 315.020692][T16689] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.039232][T16689] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.081844][T16693] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.096494][T16694] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 315.131628][T16699] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.146239][T16699] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.169630][T16701] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.190221][T16702] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe601}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) 13:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000001000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 315.287364][T16706] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.303522][T16706] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.318310][T16710] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.380610][T16717] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.394194][T16720] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.407359][T16720] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.410162][ C0] scsi_io_completion_action: 61 callbacks suppressed 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b2d720000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 315.410187][ C0] sd 0:0:1:0: tag#6181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 315.435070][ C0] sd 0:0:1:0: tag#6181 CDB: opcode=0xe5 (vendor) [ 315.441402][ C0] sd 0:0:1:0: tag#6181 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 315.450551][ C0] sd 0:0:1:0: tag#6181 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 315.459628][ C0] sd 0:0:1:0: tag#6181 CDB[20]: ba 13:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 315.485916][T16729] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.505676][T16732] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.521572][T16729] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 13:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 315.525243][ C0] sd 0:0:1:0: tag#6206 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 315.538116][T16735] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.542610][ C0] sd 0:0:1:0: tag#6206 CDB: opcode=0xe5 (vendor) [ 315.560236][ C0] sd 0:0:1:0: tag#6206 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 315.569282][ C0] sd 0:0:1:0: tag#6206 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 315.578335][ C0] sd 0:0:1:0: tag#6206 CDB[20]: ba 13:12:52 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5a38cef3ff4efb5f30540156698689ded114931221974fbf8c507eac8f0f6fb81a7626637f48a7091d2841481241d7de8175d21018ceb7be20bb203d555c35658dbdd16af68e5cb865b0837bec5f19f946dd40961627a5a7f544df", 0xe5}, {&(0x7f0000000740)="1347a36a5ff1", 0x6}, {&(0x7f0000000780)="0a83d756ef245cd3978d328bbeb7975e127fb7668790cbbb7305acdd84062874c9b34791", 0x24}, {&(0x7f00000007c0)="a2070ad469a2e0ec9bae3ddeef321e85f7272239a21cbff2b84427d40ccaa15c8e03b54adffd891f1cdcc4e8eaa3405d63650a552e3deef1a174f7a5852d241bd2fcc5473ca666745612214d77817aee3a56afba6d690087ed121a48dd81a6b471902559bb6148de7a701e8f7ebf165ad45d2fea", 0x74}], 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1cdfb357010d000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}], 0x1, 0x80) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 315.602705][T16741] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.625091][T16741] ref_ctr_offset mismatch. inode: 0x46f offset: 0x0 ref_ctr_offset(old): 0xf200 ref_ctr_offset(new): 0x4 [ 315.634808][ C0] sd 0:0:1:0: tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 315.646291][ C0] sd 0:0:1:0: tag#6192 CDB: opcode=0xe5 (vendor) 13:12:53 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000001) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) [ 315.652617][ C0] sd 0:0:1:0: tag#6192 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 315.661672][ C0] sd 0:0:1:0: tag#6192 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 315.670743][ C0] sd 0:0:1:0: tag#6192 CDB[20]: ba [ 315.692377][ C1] sd 0:0:1:0: tag#6149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 315.702257][ C1] sd 0:0:1:0: tag#6149 CDB: opcode=0xe5 (vendor) [ 315.708598][ C1] sd 0:0:1:0: tag#6149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 315.717732][ C1] sd 0:0:1:0: tag#6149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 315.726762][ C1] sd 0:0:1:0: tag#6149 CDB[20]: ba [ 315.735686][ C0] sd 0:0:1:0: tag#6152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 315.745544][ C0] sd 0:0:1:0: tag#6152 CDB: opcode=0xe5 (vendor) 13:12:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:12:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xe800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init() sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:53 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="e9216fb0f2d6632b9a2d1a948bde6eed5e1bd4e19965cafb8b0ee115b1d65d0dccd22ee50da41da6de588c6d03c0b0aceb9e40bcf2f4266d795d74341a8c26f2d14e9d58c2b018dc1809a9f80f7b0929bcc387245a387e22728c691430606387eee6ae9b5755544de6d2ec75041a0f2a28199faf2c26bac912222c4dfe24589027950538ed1bc7e26216dc445da2fc062bcb7f19aae695fb07f6078d2d58d60f28293a4a7e40a16745a4f225219ab8235cdb9489827e85c8dea730d2cdb4f3670671abdb683ce80294e7514f", 0xcc}, {&(0x7f0000000540)="e9ddcccb9f80a4c224700285c817301fe3fc789fd6c8609d6545496712cc64bdaef3331140ca43b63d67f53fa0bb184449d85a73569f3268bbddb292760f86c5e3b7e741ea434f3f25293acf4002b737f9abd879d1778c52da2d6dd728070827c8a6264d4969834f0054ad7aef889d63d925e3bc0a9fdb6c451c43a9dd0b094adf488f6336a7b02d4c50b0032bf7adc3ca40737ab98aea4b70a8ad4733c12952f3acbc8d9db351968a8e46e7d9e8f794c537fe61825f7d1d7002ea472e79012a5b30a87864e45f1133", 0xc9}, {&(0x7f0000000640)="8790a8c374db005b2a041a6aee10627fdbbdd5454950c405a804f1d36b3c23e04bdddb0020b9c6edc40d2a2634a65597fb281d872679f6f2a27a69a902d817bf73e5339485cb95c6df6d2307a85c3c2accf27987b3ff6ee56746e53a9878595305607b8f2d1f2eb710b781db0a84f902b6342596638f0d2a7b39475cb8e29fac48660168f048a83170cd5